Your Privacy Matters at 88bf — How We Handle Your Data

1 Who We Are

88bf is an online casino and sports betting platform accessible at https://88bf.im, offering a comprehensive range of gambling services to players in Bangladesh, including live casino games, slots, crash games, and sports betting markets covering cricket (BPL, IPL, T20 World Cup), football, kabaddi, and more.

For the purposes of this Privacy Policy, "88bf", "we", "us", and "our" refer to the operator of the 88bf platform. "You" and "your" refer to any individual who visits, registers on, or otherwise uses the 88bf platform in any capacity.

This Privacy Policy applies to all personal data collected, processed, and stored by 88bf in connection with your use of the platform. It should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy, both of which are published on 88bf.im.

2 Data We Collect

88bf collects the following categories of personal data from players. In each case, the purpose for which the data is used is described in Section 4 of this Policy.

We do not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data for identification purposes, or health data, unless you voluntarily provide health-related information in the context of a responsible gaming self-exclusion request (e.g., describing a gambling-related problem). Such information is handled with heightened care and used solely to administer your responsible gaming request.

3 How We Collect Your Data

88bf collects personal data through the following channels:

• Direct Submission: Data you provide directly when registering an account, completing a deposit or withdrawal request, submitting KYC documents, contacting customer support, or participating in a promotional survey or competition.
• Automated Technologies: Data collected automatically when you interact with the 88bf platform, including through cookies, web beacons, server logs, and similar tracking technologies. This includes your IP address, device identifiers, and browsing behaviour on the site. See Section 6 for more detail on cookies.
• Payment Providers: When you initiate a deposit or withdrawal, 88bf receives transaction confirmation data from your payment provider (e.g., bKash, Nagad, Rocket, Upay). This data is used solely to verify the transaction and credit or debit your account accordingly.
• Identity Verification Partners: In cases where enhanced age or identity verification is required, 88bf may use a regulated third-party verification service that cross-references your submitted identity documents against authoritative data sources.
• Game Providers: Game studios integrated into the 88bf platform (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may share aggregated game session and outcome data with 88bf for the purposes of account management, dispute resolution, and platform integrity monitoring.

4 How We Use Your Data

88bf uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your 88bf player account, including processing login requests, managing your balance, and communicating account-related notifications.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other approved payment methods, and to verify that transactions have been completed correctly and attributed to the correct account.
• Age and Identity Verification (KYC): To verify that you meet the minimum age requirement of 21 years, to confirm your identity, and to ensure that your payment method is registered in your own name, in compliance with our anti-money-laundering obligations.
• Platform Personalisation: To customise your experience on 88bf, including displaying your preferred language settings, remembering your betting preferences, and surfacing promotions or game recommendations that are relevant to your interests and play history.
• Promotions and Bonuses: To assess your eligibility for promotional offers, to credit bonus amounts to your account, and to track wagering requirements in relation to active bonuses.
• Customer Support: To respond to your queries, resolve disputes, and provide ongoing assistance via our support team. Support interactions are logged to maintain a service history and improve our support quality.
• Fraud Prevention and Security: To detect and prevent fraudulent activity, account compromise, multi-accounting, bonus abuse, money laundering, and other prohibited activities. Technical data and usage patterns are analysed to identify anomalous behaviour that may indicate a security or integrity risk.
• Responsible Gaming: To monitor patterns of play that may indicate problem gambling behaviour, to administer self-exclusion and deposit limit requests, and to comply with our responsible gaming obligations.
• Legal Compliance: To comply with applicable legal and regulatory obligations, including responding to lawful requests from competent authorities.
• Platform Improvement: To analyse aggregated usage data, identify bugs and performance issues, and guide the ongoing development of new features and services on the 88bf platform.
• Marketing Communications: To send you promotional emails and notifications about new games, seasonal offers (e.g., Eid promotions, BPL season offers, Pohela Boishakh bonuses), and platform updates, where you have provided consent to receive such communications. You may unsubscribe from marketing communications at any time by contacting [email protected].

5 Legal Basis for Processing

88bf processes your personal data on the following legal bases:

• Contractual Necessity: Processing that is necessary to perform the contract between you and 88bf — specifically, providing you with access to the platform, processing your bets and financial transactions, managing your account, and delivering customer support.
• Legal Obligation: Processing that is required to comply with applicable legal obligations, including age verification, anti-money-laundering checks, and responses to lawful requests from law enforcement or regulatory authorities.
• Legitimate Interests: Processing that is necessary for 88bf's legitimate business interests, where those interests are not overridden by your data protection rights. This includes fraud detection, security monitoring, platform analytics, and service improvement activities.
• Consent: Processing that is based on your freely given, specific, informed, and unambiguous consent. This applies primarily to marketing communications and the use of non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Cookies and Tracking Technologies

88bf uses cookies and similar tracking technologies to improve your experience on the platform, analyse usage patterns, and support fraud prevention and security monitoring. A cookie is a small text file stored on your device by your browser when you visit a website.

We use the following categories of cookies on the 88bf platform:

• Strictly Necessary Cookies: These cookies are essential for the platform to function correctly. They enable core features such as user authentication (keeping you logged in during a session), security token validation, and load balancing. These cookies cannot be disabled without impairing platform functionality.
• Functional Cookies: These cookies remember your preferences — such as your preferred language settings, display preferences, and game history — so that your experience is personalised on return visits.
• Analytics Cookies: These cookies collect aggregated, anonymised information about how players use the 88bf platform, including which pages are visited most frequently, where players encounter errors, and how long sessions last. This data helps us improve the platform. Analytics cookies are only placed with your consent.
• Marketing / Targeting Cookies: These cookies track your interactions with 88bf content and, where applicable, allow us to deliver promotional content that is relevant to your interests. Marketing cookies are only placed with your explicit consent and may be withdrawn at any time.

You can manage your cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies will affect your ability to use the 88bf platform. For instructions on managing cookies in your specific browser, please refer to your browser's help documentation.

7 Sharing Your Data

88bf does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing purposes. We share your personal data only in the following circumstances, and only to the extent necessary for the specified purpose:

• Payment Service Providers: When you make a deposit or withdrawal, your transaction details (including your mobile number and transaction amount) are shared with the relevant payment service provider — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, or another approved provider — to process the financial transaction. These providers act as independent data controllers for the financial transaction data they receive.
• Game Studio Partners: Game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) receive a pseudonymous player identifier and relevant game session data to enable game delivery, determine outcomes, and support dispute resolution. Game providers do not receive your full identity or payment details.
• Identity Verification Providers: Where KYC verification requires cross-referencing with an external identity database, 88bf shares the minimum necessary identity data (name, date of birth, document number) with a regulated verification partner. All such partners are contractually bound to process this data only for the stated verification purpose.
• Technology and Infrastructure Providers: 88bf uses third-party hosting, cloud storage, and security services to operate the platform. These providers have access to personal data only in their capacity as data processors, acting on documented instructions from 88bf, and are contractually required to maintain appropriate security measures.
• Legal and Regulatory Authorities: 88bf may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or other binding legal process. Where permissible, 88bf will notify the affected player of such a disclosure.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of 88bf's business assets, your personal data may be transferred to the acquiring entity as part of the transaction. In such cases, you will be notified in advance and your rights under this Privacy Policy will continue to be protected.

8 Data Retention

88bf retains personal data for only as long as is necessary for the purposes for which it was collected, or as required by applicable legal obligations. The following general retention periods apply:

• Active Account Data: All personal data associated with an active 88bf account is retained for the duration of the account's existence plus a period of five (5) years following account closure, to enable dispute resolution, support auditing, and comply with financial record-keeping obligations.
• KYC and Identity Documents: Identity verification documents are retained for a minimum of five (5) years following account closure, or longer where required by applicable anti-money-laundering law.
• Financial Transaction Records: Records of all deposits and withdrawals, including amounts, dates, and payment method references, are retained for a minimum of seven (7) years following the date of the transaction.
• Support Communications: Customer support records (emails, chat transcripts, ticket logs) are retained for three (3) years from the date of the last interaction in the relevant support thread.
• Marketing Consent Records: Records of consent given and withdrawn for marketing communications are retained for three (3) years following the last consent event.
• Technical and Usage Data: Anonymised or aggregated analytics data may be retained indefinitely for platform development purposes, as it cannot be attributed to any individual player.

When the applicable retention period expires, personal data is securely deleted or irreversibly anonymised. Players may request earlier deletion of their data by contacting [email protected], subject to any overriding legal retention obligations.

9 Data Security

88bf implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the 88bf platform is encrypted using industry-standard 256-bit SSL/TLS protocols, preventing interception by third parties.
• Password Hashing: Your account password is never stored in plain text. Passwords are hashed using a strong cryptographic hashing algorithm before storage, so that even 88bf staff cannot access your raw password.
• Access Controls: Access to systems containing personal data is restricted to authorised 88bf personnel on a strict need-to-know basis. All internal access is logged and subject to regular audit review.
• Secure Data Centres: 88bf's infrastructure is hosted in data centres that maintain physical security controls, environmental monitoring, redundant power supplies, and fire suppression systems.
• Penetration Testing and Security Audits: The 88bf platform undergoes regular security assessments, including penetration testing and vulnerability scanning, to identify and remediate security weaknesses before they can be exploited.
• Incident Response: In the event of a data security incident that poses a risk to your personal data, 88bf maintains a documented incident response procedure. Affected players will be notified without undue delay where required by applicable law.

10 Your Rights

As a player on the 88bf platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and a description of the right you wish to exercise.

• Right of Access: You have the right to request a copy of all personal data that 88bf holds about you, together with information about the purposes for which it is processed and the categories of recipients with whom it has been shared.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and no other legal basis applies, or where you object to processing and there are no overriding legitimate grounds. This right is subject to legal retention obligations, which may prevent full erasure of certain records.
• Right to Restriction of Processing: You have the right to request that 88bf restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you have objected to processing and a determination is pending.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to request that it be transmitted to another controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data based on legitimate interests. 88bf will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

88bf will respond to all valid data rights requests within 30 days of receipt. In complex or high-volume cases, this period may be extended by a further 60 days, in which case you will be notified of the extension and the reason for it within the initial 30-day period.

11 Children and Minors

The 88bf platform is strictly intended for adults aged 21 years and above. 88bf does not knowingly collect personal data from persons under the age of 21. If you are under 21, you must not register on or use the 88bf platform in any capacity.

If 88bf becomes aware that personal data has been collected from a person under the age of 21 — whether through age verification review, a complaint, or any other means — the relevant account will be closed immediately, all pending bets will be voided, any real-money balance will be returned to the originating payment method, and all personal data associated with the account will be deleted without undue delay.

12 Third-Party Links

The 88bf platform may contain references to third-party services — for example, the payment portals of bKash, Nagad, or Rocket, which are accessed via their own independent applications or websites when you initiate a transaction. 88bf is not responsible for the privacy practices of these third-party services, and this Privacy Policy does not apply to any data collected by third parties outside the 88bf platform.

We encourage you to review the privacy policies of any third-party service providers you interact with in connection with your use of 88bf — particularly your chosen payment method provider — to understand how they handle your personal data.

13 Changes to This Policy

88bf reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our services, technology, legal obligations, or data processing practices. When material changes are made, 88bf will update the "Last Updated" date at the top of this document and, where the changes are significant, will notify registered players via email to their registered address.

We encourage you to review this Privacy Policy periodically to stay informed about how 88bf handles your personal data. Your continued use of the 88bf platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the changes and your agreement to be bound by the updated terms.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 88bf handles your personal data, please get in touch with us using the contact details below. Our support team is available 24 hours a day, 7 days a week, operating on Bangladesh Standard Time (UTC+6).

• Email: [email protected] — for general privacy enquiries, data rights requests, and complaints.
• Subject Line for Data Rights Requests: Please use the subject line "Data Rights Request" so that your message is routed to our data protection team promptly.
• Response Time: We aim to respond to all privacy-related enquiries within 5 business days. Data rights requests will be processed within 30 days as described in Section 10.

All privacy communications should be directed to [email protected]. Please do not send sensitive documents (such as copies of identity documents) via unencrypted email — our support team will provide you with a secure upload link when document submission is required as part of a data rights request.