Privacy Policy — How bb8b Protects Your Data

1. Information We Collect

bb8b collects personal data from players in Bangladesh through the following channels: the registration form on our Platform, ongoing use of the Platform (including game play, betting activity, and financial transactions), the KYC identity verification process, communications with our support team, and automatic technical data collection through cookies and similar technologies. The categories of data we collect are as follows:

1.1 Identity and Registration Data

When you register a bb8b account, we collect your full legal name, date of birth, email address, Bangladesh mobile number, and a username of your choosing. This data is required to create and maintain your account and to verify that you meet the minimum age requirement of 18 years.

1.2 Identity Verification (KYC) Data

As part of our mandatory Know Your Customer (KYC) process, we collect copies of government-issued identity documents such as your Bangladesh National Identity Card (NID) or passport. We may also collect a selfie photograph for facial comparison purposes, and proof of payment method ownership (for example, a screenshot confirming that the bKash or Nagad number registered on your account is linked to your verified identity). KYC documents are retained in a secure, access-restricted document store.

1.3 Financial Transaction Data

We record details of all deposits and withdrawals processed through your bb8b account, including the transaction amount in BDT (৳), the payment method used (bKash, Nagad, Rocket, Upay, or bank transfer), the transaction timestamp, and the reference number provided by the payment provider. We do not store full payment account credentials — for example, we do not retain your full bKash PIN or bank internet-banking password.

1.4 Gaming and Betting Activity Data

We maintain a complete log of your game play and sports betting activity on bb8b, including games played, bet amounts, outcomes, session durations, and bonus usage. This data is used for account management, responsible gaming monitoring, fraud detection, and the resolution of any game-related disputes.

1.5 Technical and Device Data

When you access bb8b, we automatically collect certain technical information including your IP address, device type and operating system, browser type and version, screen resolution, and referring URL. This data is used for security monitoring, fraud prevention, and platform performance optimisation.

1.6 Communications Data

If you contact bb8b support via email or live chat, we retain a record of the content of that communication, including the query raised, any attachments submitted, and the response provided. These records are used for quality assurance, training, and dispute resolution purposes.

2. How We Use Your Data

bb8b processes your personal data only for defined, lawful purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected. The table below summarises the primary purposes for which we process each category of data and the lawful basis on which that processing rests.

2.1 Marketing Communications

bb8b will only send you promotional communications — including bonus offers, seasonal promotions tied to events such as BPL, Eid, or Pohela Boishakh, and new game announcements — if you have explicitly opted in to receive marketing messages during registration or through your Account Settings. You may withdraw your marketing consent at any time by updating your communication preferences in your account dashboard or by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to that withdrawal.

2.2 Automated Decision-Making

bb8b uses automated systems to detect potentially fraudulent activity, identify patterns consistent with money laundering, and flag accounts that may require responsible gaming intervention. Where an automated decision results in a material outcome — such as the temporary restriction of your account — you have the right to request a manual review of that decision by contacting our support team.

3. Data Sharing & Disclosure

bb8b does not sell your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for each stated purpose.

3.1 Game and Technology Providers

To deliver our gaming products, bb8b works with third-party game studios and technology providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive limited technical data (such as a pseudonymous player identifier and session token) necessary to deliver the game experience. They do not receive your full identity data, financial records, or KYC documents.

3.2 Payment Processing Partners

To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and Islami Bank, we share the transaction amount, your payment method identifier, and a transaction reference with the relevant payment processor. This sharing is strictly necessary to execute the financial transaction you have requested. Payment processors are independent data controllers for the data they receive and are bound by their own privacy policies and applicable financial regulations.

3.3 Identity Verification Services

bb8b may engage third-party identity verification service providers to assist with the KYC process. Where we do so, we share only the identity documents and data strictly required to complete verification. All such providers operate under contractual data-processing agreements that prohibit use of your data for any purpose other than identity verification on behalf of bb8b.

3.4 Legal and Regulatory Disclosure

bb8b may disclose personal data to law enforcement agencies, regulatory bodies, or other authorities when we are legally required to do so — for example, in response to a valid court order, a regulatory investigation, or a mandatory anti-money laundering (AML) reporting obligation. We will notify affected players of such disclosures to the extent permitted by applicable law.

3.5 Business Transfers

In the event that bb8b undergoes a merger, acquisition, or sale of all or part of its business assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and any material changes to how your data is handled as a result, with a reasonable opportunity to exercise your data rights before the transfer takes effect.

4. Cookies & Tracking Technologies

bb8b uses cookies and similar browser-based technologies to operate the Platform, maintain session security, understand how players use the site, and prevent fraudulent activity. This section explains the types of cookies we use and how you can manage your cookie preferences.

4.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function and cannot be disabled. They include session cookies that keep you logged in to your bb8b account during a browsing session, CSRF protection tokens that prevent cross-site request forgery attacks, and load-balancing cookies that ensure consistent server performance. No personal data is stored in strictly necessary cookies beyond what is required to maintain a secure, authenticated session.

4.2 Analytics Cookies

bb8b uses first-party analytics cookies to understand aggregate player behaviour on the Platform — for example, which game categories are most popular, how players navigate the site, and where technical errors occur. Analytics data is processed in aggregate form and is not linked to individual player identities for marketing purposes. You may opt out of analytics cookies by adjusting your browser settings or contacting our support team.

4.3 Security and Fraud Prevention Cookies

These cookies support our fraud detection and account security systems. They help us identify unusual login patterns — such as a login from an IP address in a city far from Dhaka when your account has historically been accessed from within Bangladesh — and flag potentially compromised accounts for review. These cookies are considered a legitimate interest of bb8b and of our players and cannot be disabled without materially degrading account security.

4.4 Managing Your Cookie Preferences

Most modern browsers allow you to control cookie storage through browser settings. You can typically configure your browser to refuse all cookies, accept only first-party cookies, or alert you before a cookie is stored. Please note that disabling strictly necessary or security cookies will impair or prevent access to bb8b. For detailed guidance on managing cookies in your specific browser, refer to your browser's help documentation.

5. Data Security Measures

bb8b implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security posture includes both technical and organisational measures, details of which are summarised below.

5.1 Encryption in Transit and at Rest

All data transmitted between your device and bb8b's servers is encrypted using TLS 1.2 or TLS 1.3 (the technology behind the padlock icon in your browser's address bar). Personal data stored in our databases — including KYC documents and financial records — is encrypted at rest using AES-256 encryption. Encryption keys are managed through a dedicated key management system with strict access controls.

5.2 Access Controls

Access to systems containing player personal data is restricted to bb8b staff members who require that access to perform their specific job function. Access rights are granted on a least-privilege basis, reviewed quarterly, and revoked immediately upon a staff member's departure. All administrative access is logged and subject to regular audit review.

5.3 Security Monitoring and Incident Response

bb8b operates continuous security monitoring across its infrastructure. Automated alerting systems flag anomalous activity — including unusual data access patterns, failed authentication attempts, and network intrusion indicators — for immediate investigation. In the event of a confirmed data security incident that affects your personal data, bb8b will notify you without undue delay and will take all reasonable steps to contain the incident and minimise harm.

5.4 Your Role in Data Security

While bb8b takes extensive measures to secure its systems, the security of your account also depends on the choices you make. We strongly recommend that you: use a strong, unique password for your bb8b account; enable SMS-based two-factor authentication (2FA); never share your login credentials with any other person; log out of your account when accessing bb8b from a shared or public device; and contact [email protected] immediately if you suspect any unauthorised access to your account.

6. Data Retention

bb8b retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any applicable legal retention obligations. The following retention periods apply to the main categories of data we hold.

Once the applicable retention period has elapsed, bb8b will securely delete or anonymise your personal data. Anonymised, aggregated data — which cannot be linked back to any individual — may be retained indefinitely for statistical and platform improvement purposes.

7. Your Privacy Rights

As a player on bb8b, you have the following rights in relation to your personal data. These rights may be exercised at any time by contacting our support team at [email protected]. We aim to respond to all data rights requests within 30 calendar days of receipt. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

7.1 Right of Access

You have the right to request a copy of the personal data that bb8b holds about you. We will provide this in a structured, commonly used, machine-readable format (such as CSV or PDF). Your first access request in any 12-month period is provided free of charge. For subsequent requests within the same period, a reasonable administrative fee may apply.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For most account data (such as your email address or mobile number), you can update information directly in your Account Settings. For identity data that requires documentary verification (such as your legal name or date of birth), please contact [email protected] and submit updated documentation.

7.3 Right to Erasure

You may request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other lawful basis for continued processing. Please note that bb8b is subject to legal retention obligations (particularly for KYC and financial transaction data) that may prevent immediate deletion of certain data categories. Where we are unable to fulfil an erasure request in full, we will explain which data must be retained and why.

7.4 Right to Restriction of Processing

You have the right to request that bb8b restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being evaluated. During a restriction period, we will store your data but will not actively process it beyond what is strictly necessary.

7.5 Right to Data Portability

Where we process your personal data on the basis of your consent or the performance of a contract, and where that processing is carried out by automated means, you have the right to receive your data in a portable, machine-readable format and to transmit it to another service provider of your choosing.

7.6 Right to Object

You have the right to object to the processing of your personal data where that processing is based on bb8b's legitimate interests. We will cease processing upon receipt of a valid objection unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms. You may object to marketing communications at any time, with immediate effect, by updating your Account Settings or contacting [email protected].

8. Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way bb8b handles your personal data, please contact our Data Protection team in the first instance. We are committed to resolving all privacy-related queries promptly and fairly.

8.1 How to Contact Us

You can reach the bb8b Data Protection team by email at [email protected]. Please include "Privacy Request" in the subject line of your email and provide sufficient detail to allow us to identify your account and understand the nature of your query. Our support team is available 24 hours a day, 7 days a week, operating on Bangladesh Standard Time (BST, UTC+6).

8.2 Updates to This Privacy Policy

bb8b may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law, or improvements to our Platform. The effective date at the top of this page indicates when the current version came into force. Where a change is material — for example, where we introduce a new purpose for processing, add a new category of data, or share data with a new category of third party — we will notify registered players by email at least 14 days before the change takes effect. Your continued use of bb8b after notification of a material change constitutes acceptance of the revised Privacy Policy.

8.3 Complaints

If you are not satisfied with bb8b's response to a privacy concern, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. bb8b takes all privacy complaints seriously and is committed to reaching a fair resolution. We encourage you to contact us directly before escalating to a regulatory body, as we are often able to resolve complaints more quickly through direct dialogue.