ba8888 Privacy Policy

ba8888 does not sell, rent, or trade your personal data. We may share specific data with carefully selected third parties only where necessary and only under strict confidentiality obligations. The categories of recipients are as follows:

• Payment service providers — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, and Mastercard — solely to process transactions you have initiated.
• Identity verification and KYC providers — to confirm your identity, verify your age (21+), and screen against sanctions lists as required.
• Fraud detection and anti-money laundering (AML) partners — to identify suspicious activity and comply with applicable financial crime prevention obligations.
• Game platform and software providers — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi — solely to facilitate gameplay. Game studios receive only the data required to run the game session; they do not receive your payment or identity documents.
• IT infrastructure and cloud hosting providers — who store and process data on ba8888's behalf under data processing agreements that prohibit independent use of your data.
• Regulatory and law enforcement authorities — where disclosure is required by applicable law, court order, or a legitimate formal request from a competent public authority.

All third parties with whom ba8888 shares personal data are contractually required to maintain appropriate technical and organisational security measures and to process data only for the specified purpose.

ba8888 retains your personal data only for as long as is necessary for the purposes for which it was collected, or for as long as we are required to retain it under applicable law. Our standard retention periods are as follows:

• Account data (name, DOB, contact details): retained for the duration of your active account plus a minimum of five (5) years after account closure, in line with standard financial record-keeping requirements.
• Transaction records: retained for a minimum of five (5) years from the date of each transaction.
• KYC and identity verification documents: retained for five (5) years following account closure or the completion of the relevant verification process, whichever is later.
• Communication records (support tickets, chat logs): retained for three (3) years from the date of the last communication.
• Marketing preferences and consent records: retained until you withdraw consent or close your account, plus one (1) year for audit purposes.
• Technical logs (IP addresses, session data): retained for up to twelve (12) months from collection.

When the applicable retention period expires, ba8888 will securely delete or anonymise your personal data so that it can no longer be attributed to you. Where anonymisation is used rather than deletion, the resulting data set may be retained indefinitely for aggregated statistical analysis.

As a player whose data is processed by ba8888, you hold the following rights with respect to your personal information:

• Right of Access: You may request a copy of the personal data ba8888 holds about you. We will respond to verified access requests within thirty (30) days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. You may also update certain details directly via your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Deletion requests will be processed within thirty (30) days where technically and legally feasible.
• Right to Restrict Processing: You may request that ba8888 temporarily suspend processing of your data while a rectification or erasure request is under review.
• Right to Data Portability: You may request that ba8888 provide your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You may object at any time to processing carried out on the basis of legitimate interests, including direct marketing. Objections to marketing will be actioned immediately.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact ba8888 at [email protected] with the subject line "Data Rights Request". We may need to verify your identity before processing the request. There is no charge for submitting a data rights request.

ba8888 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and our servers.
• At-rest encryption for stored personal data and payment credentials using industry-standard algorithms.
• Access controls: personal data is accessible only to authorised ba8888 staff who require it to perform their job functions, on a strict need-to-know basis.
• Two-factor authentication (2FA) available to all players and mandatory for staff accessing player data systems.
• Regular security audits and penetration testing conducted by independent third-party specialists.
• Intrusion detection and real-time monitoring of all server environments hosting player data.

While ba8888 takes all reasonable precautions, no internet-based service can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights, ba8888 will notify affected players without undue delay and will take all appropriate steps to contain and remediate the breach.

ba8888 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to remember your preferences, and to analyse how players use the site so that we can improve our services. The types of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for core Platform functions such as maintaining your logged-in session, remembering items in your account, and enabling secure payment flows. These cookies cannot be disabled without impairing Platform functionality.
• Performance and Analytics Cookies: Collect anonymised data about how players navigate the Platform (pages visited, time on site, error messages) to help ba8888 identify areas for improvement. No personally identifiable information is collected via these cookies.
• Functionality Cookies: Remember your preferences such as language settings, display options, and responsible gaming limits to provide a more personalised experience on return visits.
• Security Cookies: Used to detect and prevent fraudulent activity, identify suspicious login behaviour, and protect player accounts from unauthorised access.

ba8888 does not use third-party behavioural advertising cookies to track you across external websites. You may manage your cookie preferences via your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in and using core Platform features.

ba8888 is strictly intended for individuals aged 21 years and above. We do not knowingly collect or process personal data from any individual under the age of 21. During the account registration process, players are required to confirm their date of birth, and ba8888 reserves the right to request documentary proof of age at any time.

If ba8888 discovers that personal data has been collected from a player who is under 21 years of age, we will immediately suspend the relevant account, delete the underage player's personal data from our systems as far as legally permissible, and take all appropriate steps to prevent recurrence. Any winnings generated during a period of underage access may be forfeited in accordance with our Terms & Conditions.

If you believe that ba8888 has inadvertently collected personal data from a person under the age of 21, please notify us immediately at [email protected] so that we may take prompt corrective action.

ba8888 may send you promotional communications by email or SMS about new games, seasonal offers, and platform updates — but only where you have explicitly opted in to receive such communications. Typical marketing communications from ba8888 may relate to BPL or IPL cricket promotions, Eid and Pohela Boishakh bonus offers, new slot releases from Pragmatic Play or NetEnt, and loyalty reward updates.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email we send you.
• Adjusting your notification preferences in your ba8888 account settings.
• Contacting support at [email protected] with the subject line "Unsubscribe".

Withdrawal of marketing consent will not affect your ability to continue using your ba8888 account or to receive essential transactional communications such as deposit confirmations, withdrawal notifications, and security alerts. Transactional messages are not marketing and are sent regardless of marketing preferences.

ba8888 reserves the right to update or amend this Privacy Policy at any time. Where material changes are made — for example, changes to the categories of data collected or to the third parties with whom data is shared — ba8888 will notify registered players by displaying a prominent notice on the Platform and, where appropriate, by sending a direct notification to the email address registered on the account.

The "Last updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of the Platform after any amendments have been published constitutes your acceptance of the revised Policy. If you do not agree to the amended terms, you must cease using the Platform and may request account closure by contacting [email protected].

We encourage you to review this Policy periodically so that you remain informed about how ba8888 protects your personal data.