bba88 Privacy
Policy
Your privacy matters to us. This Privacy Policy explains exactly what personal data bba88 collects, why we collect it, how we use and protect it, and what rights you hold as a player based in Bangladesh.
Our Privacy Commitments
bba88 is committed to handling your personal information with care, transparency, and respect. The six commitments below summarise the most important aspects of how we treat your data. The full details follow in the sections below — we encourage you to read the complete policy.
We Protect Your Data
All personal data held by bba88 is stored on secure servers protected by 256-bit SSL encryption. Access to your data is restricted to authorised bba88 personnel who require it to carry out their duties. We do not store unnecessary copies of sensitive information.
We Do Not Sell Your Data
bba88 does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. Your information is used solely for the purposes described in this Privacy Policy and will not be passed to commercial third parties for their own marketing use.
You Control Your Data
You have the right to access, correct, and request deletion of the personal data bba88 holds about you. You can also object to certain types of processing and request a portable copy of your data. All such requests are handled promptly and free of charge.
Payment Data is Secure
bba88 does not store full card numbers, bKash PINs, Nagad PINs, or Rocket wallet credentials on our servers. Payment transactions are handled by PCI-DSS compliant payment processors. We store only the minimum payment reference data required for transaction reconciliation and dispute resolution.
You Choose Your Marketing
We will only send you promotional emails, SMS messages, or push notifications if you have opted in to receive them. You can withdraw your marketing consent at any time by adjusting your account notification settings or contacting our support team at [email protected].
Clear Retention Limits
We do not keep your personal data longer than necessary. Retention periods are set according to the purpose for which the data was collected and any applicable legal obligations. When data is no longer needed, it is securely deleted or anonymised in accordance with our data retention schedule.
Data We Collect
bba88 collects personal data from you in several ways: directly when you register an account, when you contact our support team, and when you use the platform; automatically through cookies and similar tracking technologies when you browse our site; and from third parties such as payment processors and identity verification services where necessary.
The categories of personal data we may collect include:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, national ID number, passport number, photograph | At registration and during KYC verification |
| Contact Data | Email address, mobile phone number, residential address (Dhaka, Chittagong, Sylhet, or elsewhere in Bangladesh) | At registration and account updates |
| Financial Data | bKash number, Nagad number, Rocket number, Upay number, Visa/Mastercard last four digits, Dutch-Bangla Bank account reference | When you add a payment method or make a transaction |
| Transaction Data | Deposit amounts, withdrawal amounts, bet history, game history, bonus usage, account balance history — all in BDT (৳) | Each time you use the platform financially |
| Technical Data | IP address, browser type and version, device type, operating system, screen resolution, time zone (Bangladesh Standard Time, UTC+6) | Automatically on each visit |
| Usage Data | Pages visited, features used, session duration, click patterns, game preferences, search queries within the platform | Automatically during your session |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | When you contact bba88 support |
| Responsible Gaming Data | Deposit limits set, self-exclusion requests, time-out periods, responsible gaming assessment responses | When you use responsible gaming tools |
How We Use Your Data
bba88 uses the personal data it collects for specific, lawful purposes only. We do not use your data in any way that is incompatible with the purpose for which it was originally collected. The primary purposes for which we use your personal data are set out below.
Account Management. We use your identity and contact data to create and maintain your bba88 account, to authenticate your identity when you use bba88 Login, to communicate important account updates, and to ensure only you can access your account.
Service Delivery. We use your transaction and usage data to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and card networks; to settle bets and casino game outcomes; to apply bonuses and promotional credits; and to provide a personalised game recommendation experience based on your play history.
Identity Verification and Fraud Prevention. We use your identity data and financial data to comply with Know Your Customer (KYC) obligations, to detect and prevent fraud, money laundering, and underage gambling, and to investigate suspicious account activity. This processing is essential to the lawful operation of the bba88 platform.
Customer Support. We use your communications data, identity data, and transaction data to respond to support queries, resolve disputes, and improve the quality of our customer service. Support interactions may be recorded and reviewed for training and quality assurance purposes.
Responsible Gaming. We use your transaction data, usage data, and responsible gaming data to monitor for indicators of problem gambling behaviour, to enforce deposit limits and self-exclusion periods you have set, and to provide appropriate support or intervention where required.
Marketing Communications. Where you have given explicit consent, we use your contact data to send you promotional offers, bonus notifications, and news about new games or features on bba88. You can withdraw this consent at any time. We do not send unsolicited marketing communications.
Platform Improvement. We use aggregated, anonymised usage data and technical data to analyse platform performance, identify bugs, improve the user experience, and develop new features. This data cannot be used to identify individual players.
Legal Compliance. We use and retain personal data as required to comply with applicable laws and regulations, to respond to lawful requests from authorities, and to establish, exercise, or defend legal claims.
Legal Basis for Processing
bba88 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:
- Contract Performance. Processing is necessary to perform the contract we have with you — namely, to operate your bba88 account, process your bets, handle deposits and withdrawals, and deliver the services you have registered to use.
- Legal Obligation. Processing is required to comply with applicable laws and regulations, including anti-money laundering obligations, age verification requirements, and data retention mandates.
- Legitimate Interests. Processing is necessary for bba88's legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and improving our services — provided those interests are not overridden by your rights and interests.
- Consent. For marketing communications and non-essential cookies, we rely on your explicit, freely given, and informed consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Data Sharing & Disclosure
bba88 does not sell your personal data. We may share your data with the following categories of third parties, strictly for the purposes described and subject to appropriate data protection safeguards:
Payment Processors. To process your deposits and withdrawals, we share the minimum necessary payment reference data with our partner payment processors — including the operators of bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Dutch-Bangla Bank payment integrations. These processors are contractually bound to use your data solely for payment processing and are prohibited from using it for any other purpose.
Identity Verification Providers. To fulfil our KYC obligations, we may share your identity data with specialist identity verification service providers. These providers verify the authenticity of documents and cross-check information against official databases. They are engaged under strict data processing agreements.
Game Software Providers. Casino games, live dealer tables, and slot titles available on bba88 are supplied by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised or pseudonymised session data necessary to deliver their games. They do not receive your full identity data.
Fraud Prevention and Security Services. We may share technical data and transaction data with fraud detection and cybersecurity service providers to protect the platform and our players from fraudulent activity, unauthorised access, and abuse.
Law Enforcement and Regulatory Authorities. Where required by applicable law or valid legal process, we may disclose your personal data to law enforcement agencies, regulatory bodies, or courts. We will notify you of such disclosure where we are legally permitted to do so.
Business Transfers. In the event of a merger, acquisition, or sale of all or part of the bba88 business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any changes to the applicable privacy policy before the transfer takes effect.
Data Retention
bba88 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected or as required by applicable law. The table below summarises our standard retention periods by data category.
| Data Category | Retention Period | Reason |
|---|---|---|
| Identity & KYC Data | 5 years after account closure | Anti-money laundering legal obligations |
| Transaction Records | 5 years after transaction date | Financial regulatory requirements and dispute resolution |
| Account Data | Duration of account + 2 years post-closure | Contract performance and legal claims |
| Support Communications | 2 years from last interaction | Quality assurance and dispute resolution |
| Marketing Consent Records | 3 years from consent withdrawal | Proof of lawful marketing basis |
| Technical & Usage Data | 13 months (anonymised after 30 days) | Platform security and performance improvement |
| Self-Exclusion Records | Permanent (unless player requests review) | Responsible gaming obligations and player protection |
Upon expiry of the applicable retention period, personal data is securely and permanently deleted or irreversibly anonymised. Anonymised data — which cannot be used to identify any individual — may be retained indefinitely for aggregate statistical analysis. Where retention periods are extended due to a legal dispute or regulatory investigation, we will notify you where practicable.
Your Privacy Rights
As a bba88 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact our privacy team at [email protected]. We will respond to all rights requests within 30 days and will not charge a fee unless your request is manifestly unfounded or excessive.
Right of Access
Request a copy of all personal data bba88 holds about you, along with information about how it is used and with whom it is shared.
Right to Rectification
Request correction of any inaccurate or incomplete personal data we hold about you. You may also update some information directly through your account settings.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to legal retention obligations.
Right to Restriction
Request that we restrict processing of your data in certain circumstances — for example, while the accuracy of data is being verified or while an objection is being assessed.
Right to Portability
Request a structured, machine-readable copy of personal data you have provided to us, where processing is based on consent or contract performance.
Right to Object
Object to processing of your personal data based on our legitimate interests, or object to direct marketing at any time — including profiling related to direct marketing.
Right to Withdraw Consent
Where processing is based on your consent (e.g., marketing communications, non-essential cookies), withdraw that consent at any time without affecting the lawfulness of prior processing.
Rights re Automated Decisions
Where we make automated decisions that significantly affect you (e.g., fraud flagging), request human review of that decision and an explanation of the logic involved.
Data Security
bba88 takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, alteration, or disclosure.
Encryption. All data transmitted between your browser or device and the bba88 platform is encrypted using TLS 1.3 (Transport Layer Security). Data stored on our servers is encrypted at rest using AES-256 encryption. Payment data processed through bKash, Nagad, Rocket, Upay, and card networks is handled by PCI-DSS Level 1 certified processors.
Access Controls. Access to personal data within bba88's systems is restricted on a need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and receive regular data protection training. Administrative access to production systems requires multi-factor authentication and is logged and audited.
Monitoring and Incident Response. bba88 operates continuous security monitoring to detect unusual activity, potential intrusions, and data anomalies. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify affected players promptly and take immediate steps to contain and remediate the breach.
Your Responsibilities. You play an important role in keeping your data secure. You are responsible for maintaining the confidentiality of your bba88 Login credentials. Choose a strong, unique password. Never share your password with anyone — bba88 will never ask for your password via email, chat, or telephone. If you suspect your account has been compromised, contact our support team immediately at [email protected].
No Absolute Guarantee. While bba88 employs industry-standard security practices, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security of your data; however, we are committed to protecting it to the highest practicable standard and to responding swiftly to any security incidents.
Changes to This Policy
bba88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. The effective date at the top of this page will always indicate when the current version came into force.
Where we make a material change to this Privacy Policy — meaning a change that significantly affects how we collect, use, or share your personal data — we will notify you by email to the address registered with your account and display a prominent notice on the bba88 platform at least seven (7) days before the change takes effect. For non-material changes such as typographical corrections or minor clarifications, no advance notice will be given and changes will take effect immediately upon publication.
We encourage you to review this Privacy Policy periodically. Your continued use of bba88 after the effective date of any revised policy constitutes your acknowledgement of the changes. If you disagree with any change, you may close your account and withdraw your remaining balance before the new policy takes effect by contacting us at [email protected].
Contact Us About Privacy
If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have a concern about how bba88 has handled your personal data, please contact our privacy team using the details below. We are committed to resolving all privacy queries fairly, promptly, and in plain English.
Privacy Contact: [email protected]
Response Time: We aim to acknowledge all privacy requests within 48 hours and to resolve them fully within 30 calendar days. Complex requests may take longer, in which case we will keep you informed of progress.
Support Hours: 24 hours a day, 7 days a week, including Bangladeshi public holidays (Eid, Pohela Boishakh, Victory Day, Independence Day).
When contacting us about a privacy matter, please include your registered email address and a brief description of your query or request. This helps us locate your records promptly and respond accurately. Do not include your password or full payment account numbers in any correspondence.
Questions? We Have Answers
Review our FAQ for quick answers about your account and data, explore the bba88 Casino, or visit our Responsible Gaming page to learn about your player protection tools. 18+ only.