b88b Privacy Policy

1.1 Registration and Account Data

When you create a b88b account, we collect the following information:

• Full legal name (as it appears on your National Identity Card)
• Date of birth (for mandatory age verification)
• Residential address in Bangladesh (district and division)
• Mobile number (used for account verification and SMS notifications)
• Email address (used for account communications and recovery)
• Chosen username and encrypted account password
• Preferred language setting

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer process, which is required before processing your first withdrawal, we collect:

• A scanned copy or clear photograph of your Bangladesh National Identity Card (NID) or passport
• A recent selfie photograph to confirm identity match with the submitted ID document
• Confirmation of payment method ownership (e.g., that your bKash or Nagad account is registered in your own name)
• Any additional documentation requested during enhanced due diligence, such as proof of source of funds for high-value withdrawals

1.3 Transaction and Payment Data

When you make deposits or withdrawals, we collect:

• Mobile Financial Service (MFS) account numbers associated with bKash, Nagad, Rocket, or Upay transactions
• Bank account details where bank transfers are used (Dutch-Bangla Bank, City Bank, BRAC Bank, etc.)
• Masked card numbers (first six and last four digits only) for Visa and Mastercard transactions
• Transaction reference numbers, amounts in BDT, timestamps, and transaction status records
• Deposit and withdrawal history maintained for the lifetime of your account and for a minimum of five years following account closure

b88b does not collect or store full card numbers, CVV codes, bKash PINs, or Nagad mPINs. These are handled exclusively by the respective payment processors.

1.4 Gameplay and Betting Data

We maintain comprehensive records of your activity on the b88b platform, including:

• All sports bets placed, including market, stake, odds, selection, and outcome
• All casino game sessions, including game title, provider, bet amount, and result
• Bonus offers claimed, wagering progress, and promotion participation history
• Session timestamps, duration, and activity patterns

This data is used for account management, responsible gaming monitoring, dispute resolution, and regulatory compliance. It is not used to profile you for advertising purposes.

1.5 Technical and Device Data

When you access b88b via a browser or mobile device, we automatically collect certain technical information:

• IP address (used for geolocation verification and fraud prevention)
• Device type, operating system, and browser version
• Pages visited, features used, and navigation paths within the platform
• Session start and end times
• Referral source (e.g., which link brought you to b88b.app)

1.6 Communications Data

When you contact our support team — whether via live chat, email, or WhatsApp — we retain a record of the communication, including the content of messages, the date and time of contact, the subject matter, and the resolution or outcome. This record is maintained for quality assurance, training, and dispute resolution purposes.

2.1 Responsible Gaming Monitoring

b88b uses gameplay data, session duration records, and betting pattern analysis to identify players who may be displaying signs of problem gambling behaviour. Where such patterns are identified, our responsible gaming team may make contact to offer support tools such as deposit limits, session time controls, or cool-off periods. This processing is carried out in the genuine interest of player welfare and forms part of our duty of care obligations.

2.2 Personalisation

With your consent, b88b may use your game and betting history to personalise the content displayed to you on the platform — for example, surfacing cricket betting markets during BPL season or highlighting slot titles from game providers whose games you have enjoyed previously. Personalisation is not used for advertising to third-party platforms. You may opt out of personalisation at any time via your account settings.

2.3 Marketing Communications

b88b will only send you promotional emails, SMS messages, or WhatsApp notifications if you have given explicit consent to receive them. Marketing communications may include information about new game releases, seasonal promotions (such as Eid offers or BPL season bonuses), deposit match offers, and tournament announcements. You may withdraw your consent to marketing communications at any time without any negative effect on your account standing.

3.1 Contract Performance

The majority of our data processing activities are necessary to fulfil the contract between you and b88b — namely, the provision of online casino and sports betting services in accordance with our Terms & Conditions. This includes creating and managing your account, processing your deposits and withdrawals, settling your bets, and providing customer support. Without processing data on this basis, we could not deliver our services to you.

3.2 Legal Obligation

Certain processing activities are required by applicable law and cannot be avoided regardless of your preferences. These include age verification and KYC procedures, the retention of financial transaction records for anti-money laundering purposes, responding to lawful requests from courts or law enforcement agencies, and implementing self-exclusion orders as directed by the player.

3.3 Legitimate Interests

b88b processes some data on the basis of legitimate interests, where the processing is necessary to operate a safe, fair, and commercially viable platform. This includes fraud detection and prevention, security monitoring, platform analytics to improve user experience, and responsible gaming intervention where player welfare concerns are identified. Players retain the right to object to processing based on legitimate interests.

3.4 Consent

Where processing is based on consent — specifically, marketing communications and personalisation features — you retain the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal was made.

4.1 Payment Processors

To process your deposits and withdrawals, b88b shares the minimum necessary payment information with our payment processing partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard. These partners receive only the data required to complete the specific transaction and are not permitted to use your data for any other purpose. All payment processor partners are required to maintain appropriate data security standards.

4.2 Game Providers

Casino games and instant games on b88b are provided by third-party game studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, and Spribe. When you launch a game from one of these providers, a unique player session token is passed to the game provider's system to enable the game to run. This token does not include your name, NID number, or payment details. Game providers may also receive aggregated, anonymised gameplay statistics for game performance analysis.

4.3 Identity Verification Services

b88b uses third-party identity verification technology to assist with KYC document review. Where automated document verification tools are used, your NID photograph and selfie image may be processed by a certified identity verification service provider. These providers operate under strict data processing agreements and are prohibited from retaining or reusing your identity documents for any purpose other than the specific verification task.

4.4 Legal and Regulatory Disclosure

b88b may be required to disclose personal data to law enforcement agencies, courts, or regulatory bodies where we are legally compelled to do so. In such cases, b88b will disclose only the specific data required by the lawful request and will notify the affected player where permitted to do so by applicable law.

4.5 Business Transfers

In the event that b88b undergoes a business merger, acquisition, or asset sale, player personal data held at the time of the transaction may form part of the transferred assets. In such circumstances, b88b will provide advance notice to registered players and will ensure that the acquiring entity is bound by equivalent data protection obligations as those described in this Privacy Policy.

5.1 Essential Cookies

Essential cookies are strictly necessary for the b88b platform to function. They enable core features such as user authentication (keeping you logged in during a session), security token validation, and language preference storage. Essential cookies cannot be disabled without causing the platform to malfunction. They do not collect personal data beyond what is required for the specific technical function they serve.

5.2 Analytics and Performance Cookies

With your consent, b88b uses analytics cookies to understand how players navigate the platform — which pages are visited most frequently, how long players spend on particular sections, and which features generate the highest engagement. This data is collected in aggregate form and is used exclusively to improve platform design and performance. Analytics cookies are set only after you have accepted non-essential cookies via our cookie consent mechanism.

5.3 Session and Security Tokens

When you log in to b88b, a session token is stored in a secure HTTP-only cookie. This token identifies your authenticated session and expires automatically when you log out or after a defined period of inactivity. Session tokens are cryptographically signed and cannot be forged or reused by third parties.

5.4 Managing Your Cookie Preferences

You may manage your cookie preferences at any time through your browser settings. Most modern browsers allow you to view, block, or delete cookies on a per-site basis. Please note that blocking essential cookies will prevent you from logging in and using b88b's services. Blocking analytics cookies will not affect your ability to use the platform but will prevent b88b from receiving aggregated usage data about your sessions.

For detailed guidance on managing cookies in your specific browser, refer to your browser's help documentation. Instructions are available for Chrome, Firefox, Samsung Internet (widely used in Bangladesh), and all other major mobile browsers.

6.1 Active Account Data

While your b88b account is active, we retain all data categories described in Section 1 of this Privacy Policy. This is necessary to provide the service, manage your account, honour your bonus history, and maintain your responsible gaming profile.

6.2 Post-Closure Retention

Following account closure — whether initiated by you or by b88b — we retain the following data for the specified periods:

• Transaction records (deposit and withdrawal history): Minimum five years from the date of the last transaction, in accordance with anti-money laundering record-keeping requirements.
• KYC and identity verification documents: Minimum five years from account closure, retained to satisfy our legal obligations and to prevent fraudulent re-registration.
• Betting and gameplay history: Minimum two years from account closure, retained for dispute resolution purposes.
• Communications records (support tickets, emails): Minimum two years from the date of the relevant communication.
• Self-exclusion records: Retained indefinitely to prevent a self-excluded player from circumventing their own exclusion by re-registering.
• Marketing consent records: Retained for the duration of the account and for two years following account closure, to evidence the basis on which marketing communications were sent.

6.3 Deletion Following Retention Period

When a retention period expires, b88b securely deletes or anonymises the relevant personal data so that it can no longer be attributed to an identifiable individual. Anonymised or aggregated data that can no longer identify any individual may be retained indefinitely for statistical and platform improvement purposes without restriction.

8.1 Right to Access

You have the right to request a copy of the personal data that b88b holds about you. Upon receipt of a verified access request, b88b will provide a structured summary of your personal data within 30 days. The summary will include all data categories described in Section 1, excluding data that is subject to legal privilege or that relates to an active fraud investigation where disclosure would compromise the investigation.

8.2 Right to Rectification

If you believe that any personal data b88b holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For most account details — such as your email address, mobile number, or residential address — you can update these directly from your account settings. For name corrections or date of birth corrections, you will be required to submit supporting identity documentation.

8.3 Right to Erasure

You may request that b88b delete your personal data under certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no overriding legal basis for continued processing. Please note that this right is not absolute: b88b is required by law to retain certain financial and identity records for a minimum period following account closure, as described in Section 6. These legally mandated records cannot be erased on request prior to the expiry of the applicable retention period.

8.4 Right to Restrict Processing

You have the right to request that b88b restrict the processing of your personal data in certain circumstances — for instance, while an inaccuracy you have flagged is being investigated, or while we are considering your objection to processing based on legitimate interests. During a restriction, b88b may continue to store your data but will not actively process it for the purposes you have contested.

8.5 Right to Data Portability

Where b88b processes your personal data on the basis of your consent or on the basis of a contract, you have the right to receive a copy of that data in a structured, commonly used, machine-readable format (such as CSV or JSON). This right applies to data you have actively provided — such as account registration details and transaction history — rather than data derived or inferred from your activity.

8.6 Right to Object

You have the right to object to b88b processing your personal data where that processing is based on legitimate interests. If you raise an objection, b88b will review whether our legitimate interests override your rights and freedoms in the specific circumstances of your objection. You also have an unconditional right to object to processing for direct marketing purposes at any time.

8 .7 Response Timeframe

b88b will acknowledge all privacy rights requests within 72 hours of receipt and will provide a substantive response within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days and will notify you of the extension and the reason for it before the initial 30-day period expires.

9.1 Underage Registration

If b88b becomes aware — through KYC review, a third-party report, or any other means — that an account has been registered by or on behalf of an individual under the age of 18, we will take the following immediate steps:

• Suspend the account and freeze all associated funds pending review
• Conduct an urgent identity verification review
• Where underage registration is confirmed, permanently close the account
• Return any net deposited funds (minus any winnings derived from the use of the platform) to the payment method used for deposit
• Delete all personal data associated with the underage account as promptly as our legal obligations permit

9.2 Reporting an Underage Account

If you believe that a person under the age of 18 has registered an account on b88b — including if you are a parent or guardian who has discovered that a minor in your care has accessed the platform — please contact us immediately at [email protected] with the subject line "Underage Account Report". We treat all such reports with the utmost urgency and will respond within 24 hours.

10.1 Notification of Material Changes

Where a revision to this Privacy Policy constitutes a material change — meaning it significantly affects the way your personal data is collected, used, or shared — b88b will notify registered players by email to their registered address at least seven calendar days before the revised policy takes effect. The notification will summarise the key changes and provide a link to the full updated document on b88b.app.

10.2 Continued Use as Acceptance

Your continued use of the b88b platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any revision to this Privacy Policy, you should cease using the platform and may request account closure in accordance with our Terms & Conditions.

10.3 Version Date

The effective date displayed in the hero section of this page reflects the date on which the current version of this Privacy Policy came into force. We recommend checking this page periodically, particularly before providing new categories of personal data — for example, before submitting KYC documents for the first time or before participating in a new promotional programme.

11.1 Contact Channels

• Email: [email protected] — for privacy rights requests, data queries, and formal complaints. Response within 2 to 6 hours Bangladesh Standard Time (BST, UTC+6).
• Live Chat: Available 24 hours a day, 7 days a week via the b88b platform when logged in to your account. Suitable for general privacy questions and account-level data queries.
• WhatsApp: +880 1700-000000 — available during extended support hours for general enquiries.

For formal privacy rights requests — such as access requests, erasure requests, or portability requests — we strongly recommend using email, as this provides a written record and enables us to conduct identity verification securely before processing your request.

11.2 Privacy Complaints

If you are dissatisfied with b88b's response to a privacy enquiry or rights request, you may escalate your complaint to our senior compliance team by replying to the email thread of your original request and requesting escalation. Escalated privacy complaints will receive a final written response within ten business days of escalation.

11.3 Governing Language

This Privacy Policy is published in English, which is the governing language of this document. In the event of any discrepancy between the English version and any translation that may be provided for informational purposes, the English version shall prevail. All formal communications regarding privacy rights should be submitted in English to ensure accurate processing by our compliance team.