Your Privacy Matters
to 88 baji

1 Data We Collect

When you interact with 88 baji — whether by registering an account, making a deposit, playing a game, contacting support, or simply browsing the platform — we may collect certain categories of personal data. This section explains precisely what information we gather and why each category is necessary for the operation of our services.

Registration & Identity Data

When you create an account on 88 baji, we collect the information you provide during the registration form: your full legal name, date of birth, gender, residential address (including city and district — for example, Dhaka, Chittagong, Sylhet, or Khulna), email address, and mobile phone number. This data is required to create and maintain your player account, verify your identity, and communicate with you about your account status.

Verification & KYC Documents

As part of our Know Your Customer (KYC) obligations, we may request copies of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence. We may also request proof of residential address (such as a utility bill or bank statement) and proof of the payment method used for deposits (for example, a screenshot of your bKash or Nagad account registered in your name). These documents are processed solely for the purposes of identity verification and fraud prevention.

Financial & Transaction Data

We collect details of all financial transactions carried out through your 88 baji account. This includes deposit amounts, withdrawal requests, payment method identifiers (such as your bKash or Nagad mobile number, or the last four digits of a registered bank card), transaction timestamps, and transaction status. Full payment credentials such as complete card numbers or mobile banking PINs are never stored by 88 baji — these are processed directly by our payment service providers using their own secure infrastructure.

Gameplay & Betting Activity

We record your gameplay sessions, including the games you play, the amounts wagered, results, bonus usage, and session durations. This data is used to provide the gaming service, calculate winnings, apply responsible gaming tools such as deposit limits and session timers, detect unusual betting patterns that may indicate fraud or problem gambling, and improve our game catalogue based on player preferences.

Technical & Device Data

When you access the 88 baji platform, our servers automatically collect certain technical information about your device and connection. This includes your IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, referring URL, pages visited on the platform, and timestamps of your visits. This data is used for security monitoring, fraud detection, platform optimisation, and aggregate analytics.

Summary of Data Categories

2 How We Use Your Data

88 baji processes your personal data only for specific, legitimate purposes. We do not process data in a way that is incompatible with the original purpose for which it was collected. The following describes each processing purpose and the legal basis on which we rely.

• Account Management: We use your registration data to create and maintain your player account, authenticate your identity when you log in, and apply account-level settings such as responsible gaming limits. This processing is necessary for the performance of the contract between you and 88 baji.
• Transaction Processing: Your financial data is used to execute deposit and withdrawal requests via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, and Mastercard. Accurate transaction records are maintained for accounting, fraud prevention, and regulatory compliance.
• Identity Verification & KYC: KYC documents are processed to verify that you are who you claim to be, that you meet the 18+ age requirement, and that your account is not being used for money laundering or other financial crimes. This processing is based on our legal obligations under applicable anti-money laundering frameworks.
• Customer Support: When you contact the 88 baji support team at [email protected], we process your contact details and a record of the support interaction to resolve your query and maintain a history of communications relevant to your account.
• Responsible Gaming: Gameplay and session data is analysed to identify signs of problem gambling behaviour. If concerning patterns are detected, our responsible gaming team may reach out to you proactively to offer tools such as deposit limits, cooling-off periods, or self-exclusion as set out in our Responsible Gaming policy.
• Fraud & Security Monitoring: Technical and financial data is used to detect, investigate, and prevent fraudulent activity including multi-accounting, chargeback abuse, collusion, and money laundering. Suspicious activity may be reported to relevant financial intelligence or law enforcement authorities.
• Platform Improvement: Aggregated and anonymised analytics data helps us understand how players use the platform, which games are most popular, and where technical improvements should be focused. This data cannot be used to identify individual players.
• Promotional Communications: If you have opted in to marketing communications, we may use your email address or mobile number to send you information about new games, promotions, and seasonal offers relevant to the Bangladesh market — for example, Eid bonuses, BPL cricket betting promotions, or Pohela Boishakh special events. You may withdraw consent for marketing at any time by contacting [email protected].

3 Data Sharing & Disclosure

88 baji does not sell, rent, or trade your personal data to any third party for commercial purposes. However, in order to operate our platform and comply with applicable legal obligations, we may share certain data with the following categories of trusted recipients. All third parties who receive your data are contractually required to handle it securely and only for the specific purposes for which it was disclosed.

Payment Service Providers

To process your deposits and withdrawals, we share the minimum necessary financial information with our payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and card processors for Visa and Mastercard transactions. These providers operate their own privacy frameworks and are responsible for the security of data within their own systems. 88 baji does not store your full payment credentials.

Game Software Providers

Some 88 baji games are hosted and operated by third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game powered by one of these studios, certain session data — such as your player identifier, bet amounts, and game results — is transmitted to that provider's servers to run the game and calculate outcomes. Game providers are contractually prohibited from using this data for any purpose other than delivering the game session.

Identity Verification Partners

To perform KYC checks, 88 baji may share identity document data with specialist third-party verification service providers. These partners process your documents solely to confirm your identity and age and are bound by strict confidentiality and data protection obligations.

Legal & Regulatory Authorities

88 baji will disclose personal data to law enforcement agencies, financial intelligence units, or other competent governmental authorities where required to do so by law, court order, or regulatory direction. This includes disclosure in connection with investigations into money laundering, fraud, or other financial crimes. 88 baji will not notify the account holder of such disclosures where doing so would obstruct an ongoing investigation or is otherwise prohibited by law.

Business Transfers

In the event that 88 baji undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, you will be notified via the platform or by email, and the acquiring entity will be required to honour the terms of this Privacy Policy or provide you with a new policy at least as protective as this one.

4 Cookies & Tracking

88 baji uses cookies and similar tracking technologies to make the platform function correctly, remember your preferences, maintain your session when you navigate between pages, and gather anonymised analytics data about platform usage. This section explains the types of cookies we use and how you can control them.

What Are Cookies?

Cookies are small text files stored on your device by your web browser when you visit a website. They allow the website to recognise your device on subsequent visits, maintain session state, and remember settings you have configured. Cookies do not contain executable code and cannot access other files on your device.

Types of Cookies We Use

Managing Your Cookie Preferences

Strictly necessary and security cookies cannot be disabled, as they are essential to the functioning of the platform. You may disable functional and analytics cookies by adjusting the settings in your web browser. Most modern browsers — including Chrome, Firefox, Safari, and Edge — allow you to view, delete, and block cookies through their privacy or security settings menus. Please be aware that disabling functional cookies may affect your experience on the 88 baji platform, for example by requiring you to reconfigure your preferences on each visit.

We do not use third-party advertising cookies, retargeting pixels, or social media tracking scripts on the 88 baji platform. Our analytics data is processed in aggregate form and is not linked to your individual identity.

5 Data Retention

88 baji retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, and compliance obligations. The following retention periods apply to the principal categories of data we hold.

• Account & Identity Data: Retained for the duration of your account plus a minimum of five (5) years following account closure. This retention period reflects standard financial record-keeping requirements and enables us to handle any post-closure disputes or regulatory enquiries.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later. This period is consistent with anti-money laundering record-keeping obligations applicable to financial service operators.
• Transaction Records: All deposit and withdrawal transaction logs are retained for a minimum of five (5) years. This period supports audit obligations, dispute resolution, and financial crime investigation requirements.
• Gameplay Records: Detailed gameplay logs are retained for two (2) years from the date of the session. Aggregated and anonymised gameplay analytics may be retained indefinitely as they cannot be linked to individual players.
• Support Communications: Records of support interactions are retained for two (2) years from the date of the interaction, or for the duration of any unresolved dispute or legal proceeding, whichever is longer.
• Marketing Consent Records: Records of your consent to, or withdrawal from, marketing communications are retained for as long as your account is active and for five (5) years following account closure, to demonstrate compliance with consent-based marketing obligations.
• Technical & Log Data: Server logs and IP address records are retained for a maximum of twelve (12) months, after which they are deleted or anonymised.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Where deletion is not immediately technically feasible (for example, data held in encrypted backup archives), the data will be isolated from active processing and deleted at the next scheduled backup rotation.

6 Data Security

Protecting the personal data entrusted to us by 88 baji players is a core operational priority. We implement a multi-layered security framework that addresses data security at the technical, organisational, and procedural level. The following measures are among those in place to safeguard your information.

Technical Safeguards

• 128-Bit SSL/TLS Encryption: All data transmitted between your browser or mobile device and the 88 baji servers is encrypted using 128-bit SSL/TLS protocols, making it computationally infeasible for an intercepting party to read the data in transit.
• Encrypted Data Storage: Sensitive data fields — including identity document references and payment method identifiers — are stored in encrypted form within our database infrastructure. Encryption keys are managed separately from the encrypted data.
• Firewall & Intrusion Detection: The 88 baji platform is protected by enterprise-grade firewalls and continuous intrusion detection systems that monitor for anomalous access patterns and automatically block suspicious traffic.
• Access Controls: Internal access to player data is governed by a strict role-based access control (RBAC) system. Employees can only access the data categories required for their specific job function, and all access is logged and subject to periodic audit.
• Penetration Testing: The platform undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.

Organisational Safeguards

• All personnel with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Third-party service providers who handle personal data on 88 baji's behalf are subject to data processing agreements that require them to implement equivalent security standards.
• In the event of a data security incident that affects your personal data and poses a risk to your rights and freedoms, 88 baji will notify affected players without undue delay, with information about what occurred and what steps are being taken to address the breach.

7 Your Privacy Rights

As a player on 88 baji, you hold a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please submit a written request to [email protected]. We will acknowledge your request within five (5) business days and provide a substantive response within thirty (30) days.

• Right of Access: You have the right to request a copy of the personal data 88 baji holds about you, including the categories of data held, the purposes for which it is processed, and the third parties with whom it has been shared. We will provide this information in a clear, structured format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account details directly through your account settings panel.
• Right to Erasure: You may request that 88 baji delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent for marketing processing. Please note that this right is subject to limitations: we are required by law to retain certain data (such as KYC records and transaction logs) for a minimum of five years and cannot fulfil erasure requests in respect of that data.
• Right to Restrict Processing: In certain circumstances — for example, while a dispute about the accuracy of your data is being resolved — you may request that 88 baji restrict the processing of your personal data to storage only, pending resolution of the dispute.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request a copy of the personal data you have provided to 88 baji in a structured, commonly used, machine-readable format (such as JSON or CSV), so that it can be transferred to another service provider of your choice.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on 88 baji's legitimate interests. If you object, 88 baji will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent — most notably for marketing communications — you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.

8 Contact & Updates

Contacting Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which 88 baji handles your personal data, please contact our support team directly. All privacy-related enquiries are handled in English and will receive a substantive response within thirty (30) days of receipt.

Contact email: [email protected]
Support hours: 24 hours a day, 7 days a week
Response time zone: Bangladesh Standard Time (BST, UTC+6)

Changes to This Privacy Policy

88 baji reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in our data processing practices, changes in applicable law or regulatory guidance, or the introduction of new platform features that involve new categories of data processing.

When material changes are made to this Privacy Policy, we will notify you by posting a prominent notice on the 88 baji platform and, where practicable, by sending an email to your registered address at least seven (7) days before the changes take effect. The updated policy will display a revised effective date at the top of the document. Your continued use of the 88 baji platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy.

We encourage you to review this Privacy Policy periodically, especially before making a deposit or providing additional personal data through the KYC process. The current version of this Privacy Policy is always available at https://88-baji.com/privacy-policy.

This Privacy Policy should be read alongside the 88 baji Terms & Conditions and Responsible Gaming policy, both of which form part of the complete agreement governing your use of the platform. Together, these documents set out your rights and obligations as a player, and our responsibilities to you as a platform operator serving the Bangladesh market.