bab8 Privacy Policy

1 Data We Collect

bab8 collects personal data in two primary ways: information you provide directly when you interact with the platform, and information gathered automatically as you use our services. We collect only what is necessary to operate the platform safely, fairly, and in compliance with responsible gaming and anti-money-laundering standards.

1.1 Information You Provide Directly

When you register a bab8 account, make a deposit, request a withdrawal, contact support, or participate in a promotion, you may provide the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, and national identification number (NID) or passport number;
• Contact Data: Email address, mobile phone number, and residential address including city, district, and postcode;
• Financial Data: Payment method details including bKash mobile number, Nagad account, Rocket number, Upay account, bank account number, or card details (Visa/Mastercard). Note: full card numbers are never stored by bab8 — they are tokenised by our payment processors;
• Verification Documents: Copies of identity documents such as your National Identity Card (NID), passport, or driving licence submitted during KYC verification;
• Communication Data: The content of messages you send to our support team via email or live chat, including the subject, timestamp, and any attachments.

1.2 Information Collected Automatically

When you visit bab8.net or use the platform, certain technical data is collected automatically by our systems:

• Device & Technical Data: IP address, browser type and version, operating system, device model, screen resolution, and time zone;
• Usage Data: Pages visited, time spent on each page, links clicked, games played, betting history, session start and end times, and navigation paths through the platform;
• Transaction Data: Deposit amounts, withdrawal requests, bonus claims, wagering history, and win/loss records associated with your account;
• Cookie & Tracking Data: Data collected via cookies, pixel tags, and similar technologies as described in Section 5 of this Policy.

1.3 Data Collected from Third Parties

In certain circumstances bab8 may receive personal data about you from third parties, including payment processors who confirm transaction status, fraud prevention agencies who provide risk-scoring data, identity verification services used during KYC checks, and game providers such as Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi who may share session and gameplay data with us for dispute resolution and audit purposes.

2 How We Use Your Data

bab8 uses your personal data for specific, clearly defined purposes. We do not use your data for any purpose beyond what is described in this Policy without first obtaining your explicit consent or as otherwise required by law.

2.1 Marketing Communications

bab8 will only send you marketing emails, SMS messages, or push notifications if you have explicitly opted in to receive them during registration or through your account settings. You may withdraw your consent to marketing communications at any time by contacting [email protected] or adjusting your notification preferences in your account. Withdrawing marketing consent does not affect the processing of your data for other purposes such as account management or security.

3 Legal Basis for Processing

bab8 processes your personal data on one or more of the following legal grounds, depending on the specific purpose of the processing activity:

• Contract Performance: Processing is necessary to enter into or fulfil our contractual obligations to you as a registered bab8 player. This covers account creation, payment processing, bonus delivery, and customer support;
• Legal Obligation: Processing is required to comply with applicable law, including age verification (18+ requirement), anti-money-laundering checks, responsible gaming obligations, and cooperation with lawful requests from authorities;
• Legitimate Interest: Processing serves bab8's legitimate business interests, such as fraud prevention, platform security, improving service quality, and detecting Terms violations — provided those interests are not overridden by your fundamental rights and freedoms;
• Consent: Where none of the above grounds apply, we will ask for your explicit consent before processing your data. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

Where bab8 relies on legitimate interests as the legal basis, we conduct a balancing test to ensure that our interests do not override your right to privacy. If you wish to obtain more information about any specific balancing test we have conducted, please contact us at [email protected].

4 Data Sharing & Third Parties

bab8 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We share your data only in the limited circumstances described below, and only with parties who are contractually bound to protect it.

4.1 Service Providers

We share personal data with carefully vetted third-party service providers who process data on our behalf under strict data processing agreements. These include:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and international card networks (Visa, Mastercard) receive the financial data necessary to process your transactions;
• Identity Verification Providers: Third-party KYC services that validate identity documents and perform age verification checks;
• Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed providers receive the minimum session data required to deliver games and resolve disputes;
• Fraud Prevention & Security Vendors: Providers of IP intelligence, device fingerprinting, and risk-scoring tools used to protect the platform and its users;
• Cloud Infrastructure Providers: Hosting and database service providers bound by enterprise-level data protection agreements, operating on servers with SSL encryption and restricted access controls.

4.2 Legal Disclosures

bab8 may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities when required to do so by applicable law, a valid court order, or a legitimate regulatory instruction. We will notify you of such disclosures where we are legally permitted to do so.

4.3 Business Transfers

In the event that bab8 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the successor entity. We will notify you of any such transfer and ensure that your data continues to be protected in accordance with this Privacy Policy.

4.4 What We Will Never Do

bab8 will never sell your personal data to data brokers, advertisers, or any commercial third party for their own use. We will never share your financial data with any party other than those directly involved in processing your transactions. We will never use your data to build advertising profiles for sale to third parties.

5 Cookies & Tracking Technologies

bab8 uses cookies and similar tracking technologies to operate the platform, remember your preferences, ensure security, and understand how users interact with our services. A cookie is a small text file stored on your device by your browser when you visit a website.

5.1 Types of Cookies We Use

5.2 Managing Cookies

You can control and delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will impair your ability to log in, make deposits, or use core platform features. Disabling functional cookies may result in the loss of your saved preferences. Analytics and security cookies can be disabled with minimal impact on core functionality. Most modern browsers provide detailed cookie management tools in their settings or preferences menus.

6 Data Retention

bab8 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention guidelines apply:

• Active Account Data: Retained for the lifetime of your bab8 account, plus an additional period of up to five (5) years following account closure to meet anti-money-laundering and responsible gaming record-keeping requirements;
• KYC & Identity Documents: Retained for a minimum of five (5) years from the date of submission, in accordance with financial regulations applicable to online payment platforms;
• Transaction Records: All deposit, withdrawal, and wagering records are retained for a minimum of five (5) years following the transaction date;
• Support Communications: Emails and chat logs are retained for three (3) years from the date of the last interaction;
• Marketing Consent Records: Retained for three (3) years from the date consent was given or withdrawn, to demonstrate compliance;
• Cookie & Analytics Data: Anonymised usage data may be retained for up to twelve (12) months before being permanently deleted or further anonymised.

When your personal data is no longer required for any of the above purposes, bab8 will securely delete or irreversibly anonymise it. Where deletion is not immediately possible due to technical constraints (for example, data held in encrypted backup archives), we will ensure it is isolated from active processing until deletion can be completed.

7 Your Privacy Rights

As a bab8 user, you have meaningful rights over your personal data. bab8 is committed to honouring these rights promptly and transparently. The following rights are available to all registered users:

• Right of Access: You have the right to request a copy of all personal data that bab8 holds about you. We will provide this in a structured, commonly used, machine-readable format within 30 days of your request;
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay;
• Right to Erasure ("Right to be Forgotten"): You may request that bab8 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations described in Section 6;
• Right to Restriction of Processing: You may ask bab8 to temporarily suspend the use of your data while a dispute about its accuracy or lawfulness is resolved;
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request that your data be transferred directly to another service provider in a machine-readable format;
• Right to Object: You have the right to object to processing of your data based on legitimate interest, including direct marketing. Once you object to marketing, bab8 will cease marketing communications immediately;
• Right to Withdraw Consent: Where processing is based solely on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

7.1 How to Exercise Your Rights

To exercise any of the rights listed above, please contact our data team at [email protected] with the subject line "Privacy Rights Request". Please include your full name, registered email address, and a clear description of the right you wish to exercise. We will respond within 30 days. In some cases, we may need to verify your identity before processing your request to protect against unauthorised access to your data.

8 Data Security Measures

bab8 takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure.

8.1 Technical Safeguards

• 256-bit SSL/TLS Encryption: All data transmitted between your device and bab8.net is encrypted using industry-standard 256-bit SSL/TLS protocols, ensuring that your credentials and financial data cannot be intercepted in transit;
• Password Hashing: Account passwords are stored using a strong, salted hashing algorithm. bab8 staff members can never view your plain-text password;
• Two-Factor Authentication (2FA): Available to all registered users as an optional additional layer of account protection beyond your standard login credentials;
• Tokenised Payment Data: Full payment card numbers are never stored on bab8 servers — they are immediately tokenised by our PCI-DSS compliant payment processors;
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff members with data access are subject to background checks, confidentiality agreements, and regular security training.

8.2 Organisational Safeguards

bab8 conducts regular internal security reviews and vulnerability assessments of our platform infrastructure. In the event of a data breach that poses a risk to your rights and freedoms, bab8 will notify affected users without undue delay and will take immediate steps to contain and remediate the breach. We are committed to fair play and data integrity as core platform values, consistent with our status as Bangladesh's premier online casino and sports betting destination.

8.3 Your Responsibility

While bab8 takes every reasonable precaution to protect your data on our side, you are responsible for maintaining the security of your own account credentials. You should use a strong, unique password for your bab8 account, never share your login details with anyone, and contact support immediately if you suspect unauthorised access to your account.

9 Updates to This Policy

bab8 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, the services we offer, or applicable law. When material changes are made to this Policy, we will post a notice on bab8.net and, where reasonably practicable, send an email notification to your registered address. The updated Policy will clearly state the date it takes effect.

We encourage you to review this Privacy Policy periodically. Your continued use of the bab8 platform after any updated Policy takes effect constitutes your acknowledgement of the changes. If you do not agree with any changes to this Policy, you should discontinue use of the platform and may request account closure in accordance with Section 8.1 of our Terms & Conditions.

For any privacy-related queries or concerns not addressed in this Policy, please reach out to our support team — contact us at [email protected] (plain text, not a clickable link). We aim to respond to all privacy enquiries within 5 working days.