Data Protection & Privacy
bbab88 Privacy Policy — How We Handle Your Personal Data
Your privacy matters at bbab88. This Privacy Policy explains exactly what personal data we collect from Bangladesh players, how we use it, who we share it with, and the rights you hold over your own information.
Our Commitment to You
Privacy Principles at bbab88
bbab88 is committed to handling the personal data of Bangladesh players with transparency, care, and strict purpose limitation. The six principles below summarise how privacy is embedded into how we operate — not treated as a compliance checkbox.
Minimum Necessary Collection
bbab88 collects only the personal data that is strictly necessary to provide you with a safe, compliant, and functional platform. We do not harvest data speculatively. If a data point is not required for account operation, identity verification, payment processing, or legal compliance, we do not collect it.
Encrypted at Every Layer
All data transmitted between your device and bbab88.net is protected by 256-bit TLS encryption — the same standard used by major Bangladesh banks including BRAC Bank and Dutch-Bangla Bank. Data stored in our systems is encrypted at rest using AES-256, with access strictly limited to authorised personnel on a need-to-know basis.
Your Data, Your Control
bbab88 players have the right to access, correct, restrict, and request deletion of their personal data. These rights can be exercised by contacting our English-language support team. We respond to all substantiated data requests within 30 days and do not charge a fee for reasonable requests.
No Selling of Personal Data
bbab88 does not sell, rent, or trade your personal data to third-party marketers, data brokers, or advertising networks. Data shared with third parties is limited to what is operationally necessary — for example, sharing payment details with bKash or Nagad to process your transaction, or sharing identity data with our KYC provider to verify your account.
Defined Retention Periods
bbab88 does not retain personal data indefinitely. Each category of data has a defined retention period tied to its operational or legal purpose. Financial transaction records are retained for seven years to meet international anti-money-laundering standards. Account data is deleted within 90 days of confirmed account closure, subject to any outstanding legal hold requirements.
Transparent Marketing Opt-Out
If you have opted in to receive bbab88 promotional communications — including bonus offers, tournament alerts, and seasonal promotions relevant to Bangladesh events — you may withdraw that consent at any time by contacting our support team. Opt-out requests are actioned within 5 business days and do not affect your ability to continue using the Platform.
Section 1
Data We Collect
Transparency First: bbab88 collects personal data only through lawful means and only for specific, documented purposes. The table below summarises the main categories of data we collect and the reason for collecting each category.
| Data Category | Examples | Why Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, National ID number, passport scan | Account registration, age verification, KYC compliance |
| Contact Data | Email address, mobile number, residential address | Account communication, transaction alerts, support |
| Financial Data | bKash/Nagad/Rocket mobile number, transaction reference IDs, deposit and withdrawal amounts | Payment processing, withdrawal verification, fraud prevention |
| Gameplay Data | Game history, bet amounts, win/loss records, session duration, sports betting selections | Platform operation, responsible gaming monitoring, dispute resolution |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution | Security monitoring, fraud detection, platform optimisation |
| Usage Data | Pages visited, features used, click paths, session timestamps, referral source | Platform improvement, personalisation, analytics |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Quality assurance, dispute resolution, compliance records |
Data Collected Automatically
When you visit bbab88.net, certain technical and usage data is collected automatically by our web servers and analytics systems. This includes your IP address (which is used to approximate your general location for fraud detection purposes — it is not used to identify your precise residential address), the type of device and browser you are using, the pages you visit, and the duration of your session. This automatic collection occurs regardless of whether you are logged in to a bbab88 account.
Data Collected from Third Parties
bbab88 may receive personal data about you from the following third-party sources:
- Payment service providers (bKash, Nagad, Rocket, Upay): Transaction confirmation data, including the registered mobile number and transaction reference, to verify deposit and withdrawal requests.
- Identity verification partners: Results of automated KYC and age-verification checks conducted on the documents you submit during account registration.
- Fraud prevention databases: Flagging information indicating that a device, IP address, or identity has been associated with fraudulent activity on other platforms.
- Publicly available sources: In limited circumstances, bbab88 may cross-reference publicly available records (for example, sanctions lists or politically exposed persons databases) as part of our anti-money-laundering compliance obligations.
Section 2
How We Use Your Data
bbab88 uses the personal data it collects for the following lawful purposes. Where we rely on your consent as the legal basis, you may withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal.
Account Operation and Platform Delivery
The primary use of your personal data is to operate your bbab88 account and deliver the services you have signed up for. This includes registering your account, verifying your identity and age, processing BDT deposits and withdrawals via bKash, Nagad, and Rocket, crediting bonuses, maintaining your game and betting history, and providing English-language customer support operating on Bangladesh Standard Time (BST, UTC+6).
Legal and Regulatory Compliance
bbab88 is obligated to retain certain personal and financial data to comply with international anti-money-laundering (AML) standards, counter-terrorism financing requirements, and general record-keeping obligations applicable to online gaming operators. This includes retaining transaction records for a minimum of seven years and cooperating with law enforcement or regulatory bodies where required by valid legal process.
Fraud Prevention and Security
bbab88 uses technical data, gameplay data, and identity data to detect and prevent fraudulent activity including account takeovers, unauthorised payment transactions, bonus abuse, collusion, and money laundering. Automated systems continuously monitor for anomalous patterns; where a concern is identified, human review is conducted before any account action is taken.
Responsible Gaming Monitoring
bbab88 uses gameplay data — including session frequency, session duration, bet escalation patterns, and deposit frequency — to identify players who may be exhibiting signs of problem gambling. Where such patterns are detected, our responsible gaming team may make contact to offer support, apply cooling-off restrictions, or flag the account for review. This processing is conducted in the genuine interest of player welfare and is not used for any marketing purpose.
Service Communications
bbab88 uses your contact data to send you transactional communications that are necessary to your account operation — for example, deposit confirmations, withdrawal status updates, identity verification requests, security alerts, and material changes to these Terms or this Privacy Policy. These communications are not marketing and cannot be opted out of while your account remains active.
Marketing Communications (Consent-Based)
Where you have explicitly opted in, bbab88 may send you promotional communications including information about new games, bonus offers, seasonal promotions (such as those tied to Eid, Pohela Boishakh, or Bangladesh cricket events), and tournament alerts. You may withdraw marketing consent at any time by contacting our support team.
Section 3
Data Sharing & Third Parties
No Data Sales: bbab88 does not sell, rent, or otherwise commercialise your personal data. Sharing is strictly limited to what is operationally necessary or legally required.
bbab88 may share your personal data with the following categories of third parties, under strict data-sharing agreements that require those parties to process your data only for the specified purpose and to maintain security standards equivalent to our own:
- Payment processing partners (bKash, Nagad, Rocket, Upay, and other approved payment providers): We share the minimum necessary payment data — including your registered mobile number and transaction amount — to process deposits and withdrawals. These providers operate under their own privacy policies and are responsible for the security of data within their own systems.
- Identity verification and KYC providers: We share copies of identity documents and selfies submitted during account verification with our certified third-party KYC partners for the sole purpose of confirming your identity and age. KYC data is not used for any other purpose by these providers.
- Game technology providers: Game providers (including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming) may receive session and gameplay data necessary to deliver their games within the bbab88 platform. These providers are contractually prohibited from using that data for independent marketing or profiling purposes.
- Fraud prevention and security services: Anonymised or pseudonymised technical data (such as device fingerprints and IP reputation scores) may be shared with specialist fraud intelligence services to protect the platform and its players from known threat patterns.
- Analytics providers: Aggregated and anonymised usage data may be shared with web analytics providers to help us understand how the platform is used and where improvements can be made. No personally identifiable data is included in these analytics reports.
- Legal and regulatory authorities: bbab88 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where it is required to do so by law, valid legal process, or in order to protect the rights, property, or safety of bbab88, its players, or the public. bbab88 will notify affected players of such disclosures where it is legally permitted to do so.
All third-party service providers engaged by bbab88 are subject to contractual data protection obligations. bbab88 does not permit third parties to use personal data obtained through bbab88 for their own independent commercial purposes.
In the event that bbab88 undergoes a business acquisition, merger, or asset transfer, player personal data may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer and the new entity's privacy terms before the transfer takes effect.
Section 5
Data Retention
bbab88 retains personal data for no longer than is necessary for the purpose for which it was collected, subject to any legal obligation that requires a longer retention period. The following retention periods apply to the principal categories of data we hold:
- Identity and KYC documents (National ID, passport, address proof): Retained for the duration of the account plus 5 years from account closure, in compliance with AML record-keeping obligations.
- Financial transaction records (deposit and withdrawal history, transaction references): Retained for 7 years from the date of each transaction, in accordance with international financial record-keeping standards.
- Gameplay records (bet history, game session logs): Retained for 3 years from the date of each session, available for dispute resolution and responsible gaming review purposes.
- Customer support communications (live chat transcripts, email correspondence): Retained for 2 years from the date of the last communication in each case.
- Account profile data (name, contact details, account preferences): Retained for the duration of the active account plus 90 days following confirmed account closure, after which it is permanently deleted from live systems (backup deletion may take a further 30 days).
- Technical and usage data (IP logs, session analytics): Retained for up to 12 months from collection, after which it is aggregated and anonymised.
- Marketing consent records: Retained for 3 years from the date consent was granted or last renewed, as evidence of your opt-in decision.
When a retention period expires and there is no superseding legal obligation to retain the data, bbab88 permanently deletes or irreversibly anonymises the relevant data. Anonymised data — data from which all identifying information has been removed such that re-identification is not reasonably possible — may be retained indefinitely for aggregate analytics and platform improvement purposes.
Where a player submits a deletion request before the natural expiry of a retention period, bbab88 will action the deletion subject to our right to retain data that is necessary to comply with legal obligations, resolve an open dispute, or prevent fraud. In such cases, we will inform you of the specific legal basis on which we are retaining the relevant data and for how long.
Section 6
Your Privacy Rights
As a bbab88 player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our English-language support team via live chat and identify yourself as making a data rights request. We will acknowledge your request within 5 business days and fulfil it within 30 days, or notify you if additional time is needed.
Right of Access
Request a copy of all personal data bbab88 holds about you, together with an explanation of how it is used and who it has been shared with.
Right to Rectification
Request correction of any inaccurate or incomplete personal data held in your bbab88 account, including name, address, or contact details.
Right to Erasure
Request deletion of your personal data where there is no longer a lawful basis for bbab88 to retain it, subject to any legal hold obligations.
Right to Restrict Processing
Request that bbab88 limit how it uses your data while a dispute about its accuracy or lawfulness is being resolved.
Right to Data Portability
Receive a structured, machine-readable copy of the personal data you provided to bbab88, to transfer to another service if you choose.
Right to Object
Object to bbab88 processing your data for direct marketing purposes or where processing is based on our legitimate interests rather than your consent.
bbab88 will not charge a fee for exercising any of the above rights in ordinary circumstances. Where a request is manifestly unfounded or excessive — for example, because it is repetitive — bbab88 reserves the right to either charge a reasonable administrative fee or decline to comply with the request, with written reasons provided.
bbab88 may need to verify your identity before actioning a data rights request to ensure that personal data is not disclosed to or deleted at the request of an unauthorised third party. Identity verification for this purpose typically involves confirming your registered email address, mobile number, and one piece of identity documentation already held on file.
Section 7
Data Security Measures
bbab88 employs a multi-layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme encompasses the following technical and organisational measures:
- Transport Layer Security (TLS 1.3): All data transmitted between your device and bbab88.net is encrypted in transit using TLS 1.3, the current industry-standard protocol. Our SSL certificate is visible in your browser's address bar as a padlock icon.
- Encryption at Rest: Sensitive personal data stored in our databases — including identity documents, financial records, and authentication credentials — is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the encrypted data and rotated on a defined schedule.
- Access Control: Access to personal data is restricted to bbab88 staff and authorised third parties who have a legitimate operational need to process it. Role-based access controls ensure that staff can only access the categories of data relevant to their specific function. All access is logged and auditable.
- Password Security: bbab88 does not store player passwords in plain text. Passwords are stored as salted cryptographic hashes. bbab88 staff cannot view your password and will never ask you for it.
- Two-Factor Authentication: bbab88 accounts support two-factor authentication (2FA) as an additional layer of login security. Players are strongly encouraged to enable 2FA via their account security settings.
- Penetration Testing and Vulnerability Management: bbab88's technical infrastructure undergoes regular security assessments, including penetration testing conducted by independent security specialists. Identified vulnerabilities are remediated according to a risk-prioritised schedule.
- Incident Response: bbab88 maintains a documented data breach response procedure. In the event of a security incident that is likely to result in a high risk to affected players, bbab88 will notify impacted individuals promptly and without undue delay, providing details of the incident, the data affected, and the steps taken to mitigate harm.
While bbab88 takes every reasonable precaution to protect your personal data, no system connected to the internet can be guaranteed to be completely secure. You play an important role in keeping your data safe by choosing a strong, unique password for your bbab88 account, enabling two-factor authentication, not sharing your credentials with any third party, and logging out of your account when using a shared or public device.
Section 8
Policy Updates & Contact
bbab88 reviews this Privacy Policy periodically and updates it to reflect changes in our data practices, applicable legal requirements, or the services we offer. The date at the bottom of this page reflects the most recent review. Where changes are material — meaning they alter your rights or how your data is used in a significant way — bbab88 will notify registered players via the email address on file prior to the changes taking effect.
Your continued use of the bbab88 Platform following notification of material policy changes constitutes your acceptance of those changes. If you do not agree with a material change, you should cease using the Platform and close your account before the changes take effect. Any data already collected will continue to be processed under the terms in place at the time of collection until its retention period expires.
The English language version of this Privacy Policy is the definitive and authoritative version. Any summary, translation, or alternative-language version provided for convenience does not supersede the English text.
Contact Us on Privacy Matters
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a concern about how bbab88 has handled your personal data, you may contact our support team via the live chat feature available on bbab88.net. Our English-language privacy support team operates on Bangladesh Standard Time (BST, UTC+6) and will acknowledge all substantiated privacy enquiries within 5 business days.
For formal written privacy requests, you may also contact us by email at: [email protected] — please include "Privacy Request" in your subject line and provide your registered account mobile number to assist with identity verification.
Continue Exploring
Your Data Is Safe — Now Enjoy the Platform
bbab88 is built with your security and privacy at its core. Ready to explore our games, check the FAQ, or log in to your account? Everything you need is one step away.