88bg Privacy Policy

This Privacy Policy ("Policy") is issued by 88bg ("the Platform", "we", "us", "our") and applies to all personal data collected, processed, stored, or transmitted in connection with the 88bg website at https://88bg.io, its associated mobile interfaces, and all services accessible through those platforms.

This Policy governs the personal data of every individual ("you", "the Player", "User") who visits, browses, registers on, or otherwise interacts with the 88bg Platform, regardless of whether they complete registration or place any wager. By accessing the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy should be read alongside the 88bg Terms and Conditions, which govern the overall contractual relationship between you and the Platform. In the event of any conflict between this Policy and the Terms and Conditions on a matter of data privacy, this Policy shall prevail.

For the purposes of applicable data protection law, 88bg is the data controller in respect of all personal data collected through the Platform. As data controller, 88bg is responsible for determining the purposes and means by which your personal data is processed and for ensuring that all processing activities comply with applicable law.

Any questions, requests, or concerns relating to the processing of your personal data by 88bg should be directed to the 88bg Data Protection contact at: [email protected]. We aim to respond to all data-related inquiries within 14 calendar days of receipt.

88bg collects the following categories of personal data in the course of operating the Platform and delivering services to players:

88bg does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond identity document photos required for KYC), or health data beyond what is voluntarily disclosed in the context of responsible gaming requests.

88bg collects personal data through the following methods:

• Direct submission by you: Information you provide when completing the registration form, submitting identity documents for KYC, making a deposit or withdrawal request, contacting the support team, or updating your account profile.
• Automated technical collection: Information collected automatically when you access the Platform, including IP address, device identifiers, browser fingerprint, and session activity data collected via server logs, cookies, and similar tracking technologies (see Section 7).
• Payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and bank partners when a deposit or withdrawal is processed. 88bg receives transaction reference numbers and status confirmations — we do not receive or store full payment credentials.
• Identity verification partners: Confirmation of identity document authenticity from third-party KYC service providers engaged to assist with age and identity verification.
• Game technology providers: Aggregated game session data from partners such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Play'n GO, used to resolve disputed game outcomes and maintain platform integrity.

88bg processes your personal data on the following legal bases, each of which applies to specific processing activities as described:

• Contractual necessity: Processing that is necessary to perform the contract between you and 88bg — including account registration, payment processing, delivery of gaming services, and management of your account balance — is carried out on the basis that it is necessary for the performance of the contract to which you are a party.
• Legal obligation: Processing carried out to comply with applicable legal requirements, including KYC identity verification, anti-money-laundering transaction monitoring, and retention of financial records as required by law.
• Legitimate interests: Processing carried out for the legitimate business interests of 88bg where those interests are not overridden by your fundamental rights, including fraud detection and prevention, platform security monitoring, and improvement of services based on anonymised usage analytics.
• Consent: Processing of your data for direct marketing communications (promotional emails, SMS notifications about bonuses or new features) is carried out on the basis of your freely given, specific, and informed consent provided at the time of registration or subsequently through your account settings. You may withdraw this consent at any time.

88bg uses the personal data it collects for the following specific purposes:

• To create and manage your 88bg account, including verifying your identity and age in accordance with our 21+ player requirement.
• To process deposits and withdrawals through your chosen payment method (bKash, Nagad, Rocket, Upay, or bank transfer) and to maintain accurate transaction records.
• To provide access to the full range of 88bg gaming products, including the cricket sportsbook, live casino, slots, and all other Platform features available to registered players.
• To detect, investigate, and prevent fraud, money laundering, and any other prohibited activity as defined in the 88bg Terms and Conditions.
• To administer bonuses, promotions, and loyalty programs, including verifying eligibility and tracking wagering requirement progress.
• To provide customer support and respond to your inquiries, complaints, and disputes in a timely and informed manner.
• To send you service communications that are necessary to your account, including security alerts, transaction confirmations, policy change notifications, and responsible gaming reminders.
• To send you marketing communications about 88bg promotions, new games, seasonal offers, and bonus opportunities — only where you have provided consent and have not subsequently withdrawn it.
• To operate and improve the responsible gaming tools available on the Platform, including monitoring account activity for signs of problematic gambling behaviour and proactively reaching out to players who may benefit from support.
• To conduct anonymised statistical analysis of aggregated player behaviour to improve the Platform's performance, user experience, and product offerings.

88bg will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your specific consent or having a separate, valid legal basis for doing so.

88bg uses cookies and similar tracking technologies (including local storage objects and session tokens) to operate the Platform and improve your experience. The cookies used by 88bg fall into the following categories:

• Strictly necessary cookies: These cookies are essential to the operation of the Platform and cannot be disabled. They maintain your login session, remember your account preferences, and ensure the security of your interactions with the Platform. No consent is required for strictly necessary cookies.
• Functional cookies: These cookies remember choices you have made — such as your preferred language, time zone (Bangladesh Standard Time, UTC+6), or responsible gaming settings — so that you do not need to re-enter them on each visit.
• Analytics cookies: These cookies collect anonymised data about how players use the Platform, including which pages are visited most frequently and where players encounter difficulties. This data is used solely to improve Platform performance and is never linked to your individual identity.
• Security cookies: These cookies assist in detecting and preventing fraudulent activity, including session hijacking attempts, credential stuffing attacks, and suspicious login patterns.

You may control cookie settings through your browser preferences. Please note that disabling strictly necessary cookies may prevent you from logging in to your account or using certain Platform features. 88bg does not use third-party advertising cookies or behavioural targeting cookies.

88bg does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes under any circumstances. Personal data is shared with third parties only in the following limited and controlled circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank receive only the transaction data strictly necessary to process your requested deposit or withdrawal.
• KYC and identity verification providers: Third-party verification services receive copies of your identity documents solely for the purpose of confirming document authenticity and verifying that you meet the 21+ age requirement. These providers are contractually prohibited from retaining or using your documents for any other purpose.
• Game technology providers: Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Play'n GO, Spribe, and other game studios receive anonymised session identifiers necessary to deliver their games within the 88bg Platform. These providers do not receive your name, contact details, or financial information.
• IT infrastructure and security providers: Cloud hosting, database management, and cybersecurity service providers who process Platform data on our behalf under strict data processing agreements that prohibit any independent use of your data.
• Legal and regulatory disclosures: In the event that 88bg receives a lawful request from a competent legal authority, court, or regulatory body requiring disclosure of specific player data, we will comply with that request to the extent required by law. Where permitted by law, 88bg will notify the affected player of such a request before complying.

All third parties with whom 88bg shares personal data are required to implement appropriate technical and organisational security measures and are contractually prohibited from using your data for any purpose beyond the specific service they provide to 88bg.

88bg implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and 88bg servers, ensuring that personal and financial data cannot be intercepted in transit.
• Encryption at rest for all stored personal data, including identity documents, financial records, and account credentials.
• Role-based access controls ensuring that only authorised 88bg personnel with a legitimate operational need can access personal data, and only to the extent necessary for their specific role.
• Regular independent security audits and penetration testing of the Platform's infrastructure to identify and address vulnerabilities before they can be exploited.
• Two-factor authentication options for player accounts and mandatory multi-factor authentication for all 88bg staff with access to personal data systems.
• Automated intrusion detection systems that continuously monitor for suspicious access patterns and trigger immediate alerts and response protocols.
• Secure data backup procedures with geographically separate backup storage to ensure continuity of data protection in the event of a localised infrastructure incident.

In the event of a data security breach that is likely to result in a risk to your rights and freedoms, 88bg will notify affected players without undue delay via email to the registered account address and will take all reasonably practicable steps to mitigate the impact of the breach.

While 88bg takes every reasonable step to protect your data, no digital platform can guarantee absolute security. You also play a role in keeping your account secure — please refer to Section 5 of the Terms and Conditions for guidance on protecting your account credentials.

88bg retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by law. The following retention schedule applies:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that makes re-identification impossible. Anonymised and aggregated data that cannot be linked back to any individual may be retained indefinitely for statistical and analytical purposes.

As a player whose personal data is processed by 88bg, you hold the following rights in respect of that data. To exercise any of these rights, please submit a written request to [email protected]. 88bg will respond within 14 calendar days of receiving a valid, verifiable request.

• Right of access: You have the right to request confirmation of whether 88bg processes your personal data and, if so, to receive a copy of that data together with information about how it is being used.
• Right to rectification: You have the right to request that any inaccurate or incomplete personal data held by 88bg be corrected or completed without undue delay. You may also update certain data directly through your account profile settings.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the processing was unlawful. This right is subject to legal retention obligations — data that must be retained by law cannot be deleted before the end of the applicable retention period.
• Right to restriction of processing: You have the right to request that 88bg restrict the processing of your personal data in certain circumstances, such as while the accuracy of data is being contested or while an objection to processing is being assessed.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to 88bg in a structured, commonly used, and machine-readable format, and to have that data transmitted to another controller where technically feasible.
• Right to object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests or for direct marketing purposes. Where you object to direct marketing, processing for that purpose will cease immediately.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

88bg does not knowingly collect personal data from any individual under the age of 21. The Platform is strictly intended for adults aged 21 and above, and all registration processes include age verification steps designed to prevent access by minors.

If 88bg becomes aware that it has inadvertently collected personal data from an individual who is under 21 years of age, it will take immediate steps to delete that data, void any associated wagers, return any deposited funds to the original payment method, and close the account. Parents or guardians who believe a minor may have accessed the Platform should contact [email protected] immediately.

88bg strongly recommends that parents and guardians in Bangladesh install parental control software on all household devices to prevent minors from accessing online gambling platforms. Information about parental control tools is available through your internet service provider.

With your consent, 88bg may send you marketing communications about current promotions, new game releases, seasonal bonus offers tied to events such as IPL, BPL, T20 World Cup, Eid, and Pohela Boishakh, as well as platform updates and feature announcements. These communications may be delivered by email or SMS to the contact details registered on your account.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in every marketing email sent by 88bg.
• Updating your marketing preferences directly in the Notifications section of your 88bg account settings.
• Sending a written opt-out request to [email protected], clearly stating that you wish to be removed from all marketing communications.

Please allow up to 7 business days for opt-out requests to take full effect across all communication channels. Opting out of marketing communications will not affect the delivery of essential service communications — such as transaction confirmations, security alerts, and policy change notifications — which are sent on the basis of contractual necessity and cannot be disabled while your account is active.

88bg reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services offered on the Platform. When material changes are made to this Policy, 88bg will notify registered players via email to the address on their account and/or via a prominent notice displayed upon login, at least seven calendar days before the changes take effect.

The effective date at the top of this Policy will be updated to reflect the date on which the current version came into force. We encourage you to review this Policy periodically to stay informed about how 88bg protects your personal data. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

Previous versions of this Privacy Policy are available upon request by contacting [email protected].

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how 88bg has handled your personal data, please contact us in the first instance by emailing: [email protected]. Please include "Privacy" or "Data Request" in the subject line of your email to ensure your inquiry is routed to the appropriate team.

88bg is committed to resolving all privacy-related inquiries and complaints promptly and fairly. We aim to provide a substantive response to all privacy inquiries within 14 calendar days of receipt. For complex requests, we may require up to 30 calendar days and will inform you of any extension within the initial 14-day window.

If you are not satisfied with 88bg's response to your privacy complaint after following the process described above, you may have the right under applicable law to escalate your complaint to a relevant data protection supervisory authority. Please seek independent legal advice regarding your specific rights and the appropriate authority to contact in your jurisdiction.