ba88 Privacy Policy

1. Introduction

ba88 ("we", "our", or "the Platform") is committed to protecting the personal data and privacy of every individual who accesses or uses the ba88 online casino and sports betting platform at ba88.lol. This Privacy Policy explains, in plain terms, what personal information ba88 collects, why it is collected, how it is used, who it may be shared with, and how long it is retained.

This Policy applies to all players registered on ba88, all visitors who browse the Platform without registering, and all individuals who contact ba88 via its support channels. It covers all services offered on ba88, including cricket betting, live casino games, slots, and promotional activities.

This Privacy Policy should be read alongside the ba88 Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference and form part of the overall user agreement between a player and ba88. Where this Policy references obligations or rights in those documents, they carry equal weight.

ba88 may update this Privacy Policy from time to time to reflect changes in data practices, operational requirements, or applicable standards. The date of the most recent update is shown at the top of this page. Continued use of the Platform after an update constitutes acceptance of the revised Policy.

2. Data We Collect

ba88 collects personal data through several channels: directly from players during registration and account use, automatically through platform technology during browsing and gameplay, and from third-party sources where applicable for verification purposes.

2.1 Registration and Account Data

When a player creates a ba88 account, the following personal information is collected:

• Full legal name as it appears on a government-issued identification document
• Date of birth (for age verification — ba88 is strictly 18+ only)
• Valid email address
• Mobile phone number (used for OTP verification and account security)
• Preferred username and a securely hashed password
• Residential address in Bangladesh (district, city, postal code)

2.2 Identity Verification (KYC) Data

As part of the Know Your Customer (KYC) process, ba88 may request copies of the following documents, which are treated with the highest level of confidentiality:

• National Identity Card (NID) or passport
• Proof of address (utility bill, bank statement dated within the last three months)
• Proof of ownership of the payment method used (e.g., screenshot of bKash or Nagad account matching the registered mobile number)

2.3 Financial Transaction Data

ba88 records all financial transactions associated with a player's account, including deposit amounts, withdrawal requests, payment method references, transaction timestamps, and transaction statuses. Full payment card numbers are never stored on ba88 servers — only the last four digits and card type are retained for reference purposes.

2.4 Technical and Usage Data

When you interact with the ba88 platform, certain technical data is automatically collected by our servers and analytics systems:

• IP address and approximate geographic location
• Browser type, version, and operating system
• Device type (desktop, mobile, tablet) and screen resolution
• Pages visited, time spent on each page, and click-path data
• Game sessions initiated, bet amounts, and game outcomes (for fairness auditing)
• Session timestamps and login/logout records

2.5 Communications Data

When a player contacts the ba88 support team — whether by email, live chat, or any other channel — the content of those communications, the date and time, and the nature of the enquiry are recorded. This data is used to resolve the support request, improve service quality, and maintain an audit trail for dispute resolution purposes.

3. How We Use Your Data

ba88 uses the personal data it collects solely for the purposes described below. We do not use your data for any purpose that has not been disclosed in this Policy.

Purpose	Data Used
Account creation and management	Registration data, contact details
Identity verification (KYC)	KYC documents, date of birth, address
Processing deposits and withdrawals	Transaction data, payment method references
Fraud prevention and security monitoring	IP address, device data, login records, transaction patterns
Responsible gaming compliance	Betting history, session data, self-exclusion records
Customer support and dispute resolution	Communications data, account history
Personalised promotional communications	Email address, game preferences, deposit history
Platform analytics and improvement	Technical and usage data (anonymised where possible)

Players who do not wish to receive personalised promotional communications from ba88 may opt out at any time by contacting the support team at [email protected] or by updating their notification preferences in the account settings dashboard. Opting out of marketing communications does not affect the processing of data for account management, KYC, or fraud prevention purposes.

4. Legal Basis for Processing

ba88 processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing is required to fulfil the terms of the agreement between ba88 and a registered player — for example, processing deposits, verifying identity, and settling winnings.
• Legitimate interests: Processing is necessary for ba88's legitimate business interests, including fraud detection, platform security, and responsible gaming compliance, provided those interests are not overridden by the rights and freedoms of the data subject.
• Legal obligation: Processing is required to comply with financial record-keeping, anti-money-laundering (AML), and know-your-customer (KYC) obligations applicable to online payment platforms.
• Consent: Where processing is not covered by the above bases — for example, optional marketing communications — ba88 relies on the player's freely given, informed consent, which may be withdrawn at any time.

5. Sharing Your Data

ba88 does not sell, rent, or trade personal data to third parties. However, ba88 may share personal data with carefully selected third-party service providers and partners where it is necessary to operate the Platform effectively. All such third parties are contractually bound to handle personal data in a manner consistent with this Privacy Policy.

5.1 Payment Processors

To facilitate deposits and withdrawals in Bangladeshi Taka, ba88 shares relevant transaction and account data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card processing networks (Visa, Mastercard). These providers receive only the minimum data required to process the transaction and are bound by their own regulatory obligations regarding data security.

5.2 Game Content Providers

Third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive anonymised session and gameplay data for the purposes of game performance monitoring and RNG certification. These providers do not receive personally identifiable information beyond what is technically necessary to render the game session.

5.3 Identity Verification Services

ba88 may engage third-party KYC verification services to assist in validating identity documents and cross-referencing player details against fraud and sanctions databases. These services process data strictly under instruction from ba88 and do not retain data beyond the verification workflow.

5.4 Legal and Regulatory Disclosure

ba88 may be required to disclose personal data to law enforcement authorities, financial intelligence units, or other regulatory bodies where such disclosure is mandated by a lawful order, court directive, or legal obligation. ba88 will, to the extent permitted by law, notify the affected player of such a disclosure request before complying.

6. Cookies & Tracking Technologies

ba88 uses cookies and similar tracking technologies to deliver a functional, personalised, and secure platform experience. Cookies are small text files stored on your device by your web browser when you visit ba88.

6.1 Types of Cookies Used

• Essential cookies: Required for the Platform to function. They manage session authentication, maintain login state, and enable secure page navigation. These cannot be disabled without breaking core platform functionality.
• Analytics cookies: Used to collect anonymised data about how players navigate and use the Platform. This data helps ba88 identify usability issues and prioritise product improvements.
• Preference cookies: Store player preferences such as language, notification settings, and display configurations across sessions.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and session hijacking attempts.

6.2 Managing Cookies

Players may manage or disable non-essential cookies through their browser settings. Note that disabling essential cookies will impair the ability to log in and use the ba88 Platform. ba88 does not use third-party advertising cookies or cross-site tracking technologies for the purpose of serving advertisements on external websites.

7. Data Security

ba88 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, and alteration. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between players and ba88 servers
• One-way password hashing using industry-standard algorithms — plaintext passwords are never stored
• Two-step OTP verification available for all player accounts at the ba88 Login screen
• Automated anomaly detection that flags unusual login attempts, multiple failed authentications, and suspicious transaction patterns for manual review
• Role-based access controls that restrict internal staff access to personal data on a strict need-to-know basis
• Regular security audits and vulnerability assessments conducted on the Platform infrastructure

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in significant risk to affected players, ba88 will notify affected individuals without undue delay and take all reasonable steps to contain and remediate the breach.

8. Data Retention

ba88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, taking into account applicable legal and regulatory retention requirements. The following general retention periods apply:

• Active account data (registration details, transaction history, KYC documents): Retained for the lifetime of the account and for a minimum of five years after account closure, in accordance with financial record-keeping obligations.
• Support communications: Retained for a minimum of two years after the resolution of the relevant enquiry.
• Technical and usage data: Retained in identifiable form for up to 12 months, after which data is anonymised or deleted.
• Marketing preference records: Retained for the duration of the player's account plus a reasonable period to demonstrate compliance with opt-out requests.

When personal data is no longer required, ba88 either permanently deletes it from its systems or anonymises it such that it can no longer be linked to an identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

9. Your Rights

Registered ba88 players have the following rights with respect to their personal data. To exercise any of these rights, players may contact the ba88 support team at [email protected] with a clear description of their request.

• Right of access: You may request a copy of the personal data ba88 holds about you. ba88 will respond to such requests within a reasonable timeframe and at no charge for routine requests.
• Right to rectification: If any personal data ba88 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Players may also update certain account details directly from the account settings dashboard.
• Right to erasure: You may request the deletion of your personal data. ba88 will honour this request where there is no legal obligation to retain the data in question. Note that financial transaction records may be subject to mandatory retention periods that preclude immediate deletion.
• Right to restriction of processing: In certain circumstances, you may request that ba88 restrict the processing of your personal data — for example, while the accuracy of data is being verified following a rectification request.
• Right to data portability: Where processing is carried out by automated means and on the basis of consent or contractual necessity, you may request that ba88 provide your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where ba88 processes your data on the basis of consent (such as for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to the processing of your personal data where ba88 relies on its legitimate interests as the legal basis for processing. ba88 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.

10. Children's Privacy

The ba88 Platform is strictly intended for adults aged 18 years and above. ba88 does not knowingly collect personal data from individuals under the age of 18. Age verification is a mandatory step in the registration process, and ba88 reserves the right to request documentary proof of age at any time.

If ba88 becomes aware that personal data has been collected from an individual who is under 18 years of age, that account will be immediately suspended, all associated data will be deleted to the extent permitted by law, and the matter will be reviewed in accordance with the responsible gaming procedures described in the Responsible Gaming Policy.

If you are a parent or guardian and believe that your child may have created a ba88 account, please contact the support team immediately at [email protected] so that the account can be investigated and closed.

11. Third-Party Links

The ba88 Platform does not include outbound links to third-party websites for commercial or affiliate purposes. Any references to third-party brands — such as game studios (Pragmatic Play, Evolution Gaming, etc.) or payment providers (bKash, Nagad, Visa) — are made solely for informational purposes within the context of describing ba88 services. ba88 is not responsible for the privacy practices of any third party whose products are accessible through the ba88 Platform, including game content providers who render games within the ba88 interface.

12. Changes to This Policy

ba88 reserves the right to update or revise this Privacy Policy at any time. When material changes are made, the "Last Updated" date at the top of this page will be revised accordingly. Where changes are significant or affect how ba88 uses data in a way that may impact player rights, ba88 will endeavour to notify registered players via email or an on-platform notification.

It is the player's responsibility to review this Privacy Policy periodically. Continued use of the ba88 Platform following the publication of any update constitutes acceptance of the revised Privacy Policy. Players who do not agree with the changes may request account closure and withdrawal of their Real Money balance by contacting the support team prior to the effective date of the change where possible.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by ba88, please contact the support team using the following details:

• Support Email: [email protected] (plain text only — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week
• Response Language: English
• Typical Response Time: Under 5 minutes during Bangladesh Standard Time (BST, UTC+6) peak hours

For requests relating to data access, rectification, erasure, or any other exercise of rights described in Section 9, please include your registered account username and a brief description of your request in your email. ba88 will acknowledge your request within five business days and aim to resolve it within 30 calendar days.

For responsible gaming concerns — including self-exclusion, deposit limit adjustments, or cooling-off period requests — please visit the Responsible Gaming page or contact support directly. All such requests are processed with absolute confidentiality and are handled by dedicated responsible gaming staff.