bha88 Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") describes how bha88 ("bha88", "we", "us", or "our") collects, uses, stores, and discloses personal data when you ("User", "you", or "your") access or use the bha88 online gaming and sports betting platform available at bha88.io and all associated subdomains, mobile interfaces, and digital services (collectively, the "Platform").

This Policy applies to all personal data processed by bha88 in connection with the Platform, regardless of the device or method you use to access it. It covers data collected directly from you when you register, deposit, play, or contact support, as well as data collected automatically through your interaction with the Platform.

By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. This Policy forms an integral part of the bha88 Terms & Conditions and should be read alongside them.

If you do not agree with any part of this Policy, you must discontinue your use of the Platform and request account closure by contacting [email protected].

2. Data Controller

For the purposes of applicable data protection law, bha88 is the data controller responsible for the personal data collected and processed through the Platform. All enquiries regarding this Policy, your personal data, or the exercise of your data rights should be directed to:

• Platform: bha88.io
• Contact Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week
• Response Language: English

When contacting us regarding data protection matters, please include "DATA PRIVACY REQUEST" in the subject line of your email to ensure your enquiry is routed to the appropriate team and handled within the shortest possible timeframe.

3. Data We Collect

bha88 collects personal data from several sources. The categories of data we collect, and the circumstances in which we collect them, are set out below:

3.1 Data You Provide Directly

When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or otherwise interact with the Platform, you may provide us with the following categories of personal data:

Data Category	Examples	When Collected
Identity Data	Full legal name, date of birth, national ID number, passport number	Registration & KYC verification
Contact Data	Email address, mobile phone number, residential address, city (Dhaka, Chittagong, Sylhet, etc.)	Registration & account updates
Financial Data	bKash account number, Nagad account number, Rocket/DBBL number, Upay number, Visa/Mastercard last 4 digits	Deposits & withdrawals
Identity Documents	Scanned copy or photograph of NID card, passport, or driving licence; proof of address documents	KYC compliance checks
Support Data	Content of emails, chat transcripts, complaint details, screenshots	Customer support interactions
Responsible Gaming Data	Self-exclusion requests, deposit limit preferences, cooling-off period settings	Responsible gaming tool usage

3.2 Data Collected Automatically

When you access and use the Platform, certain technical and behavioural data is collected automatically through your device and browser. This includes:

• Device & Technical Data: IP address, device type (mobile, desktop, tablet), operating system version, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, features accessed, games played, bets placed (including stake amounts, game types, and outcomes), session duration, click paths, and navigation patterns within the Platform.
• Transaction Data: Records of all deposits, withdrawals, bonuses claimed, bets placed, and gaming activity associated with your account.
• Location Data: Approximate geolocation derived from your IP address. bha88 does not collect precise GPS coordinates unless you explicitly permit this on a mobile device.
• Cookie & Tracker Data: Data collected through cookies and similar technologies as described in Section 7 of this Policy.

3.3 Data from Third Parties

bha88 may receive personal data about you from the following third-party sources:

• Payment Providers: Transaction confirmation data, payment method verification status, and fraud signals from bKash, Nagad, Rocket, Upay, Visa, and Mastercard.
• Identity Verification Partners: KYC status flags and document verification results from third-party identity verification service providers.
• Game Providers: Game session logs, RNG (random number generator) audit trails, and bonus eligibility data from licensed game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi.
• Fraud Prevention Services: Risk scores, device fingerprinting data, and account behaviour signals from anti-fraud technology partners.

4. How We Use Your Data

bha88 uses the personal data we collect for the following clearly defined purposes. We do not use your data for any purpose incompatible with those listed below without first obtaining your explicit consent or as otherwise required by law.

• Account Creation & Management: To register your account, verify your identity, maintain your profile, and provide you with access to all Platform features.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate transaction records in Bangladeshi Taka (BDT).
• KYC & Regulatory Compliance: To verify your age (21+ requirement), identity, and source of funds, and to comply with applicable anti-money laundering (AML) and counter-terrorism financing (CTF) obligations.
• Platform Delivery: To operate, maintain, and improve the Platform, including sports betting markets, live casino games, slots, crash games, and all other services offered by bha88.
• Customer Support: To respond to your support requests, resolve disputes, and maintain records of communications for quality assurance and training purposes.
• Responsible Gaming: To administer self-exclusion orders, deposit limits, cooling-off periods, and reality checks, and to identify and proactively contact users showing signs of problem gambling behaviour.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, bot usage, account takeovers, and other prohibited activities as defined in the Terms & Conditions.
• Personalisation: To tailor your Platform experience, including recommended games, relevant promotions, and preferred payment methods, based on your historical usage patterns and preferences.
• Communications: To send you account-related notifications (transaction confirmations, security alerts, KYC reminders), service updates, and — where you have consented — promotional communications about bha88 offers and new features.
• Analytics & Performance: To analyse aggregated Platform usage data to understand user behaviour, identify technical issues, improve game performance, and inform product development decisions.
• Legal Proceedings: To establish, exercise, or defend legal claims and to comply with lawful requests from competent authorities.

5. Legal Basis for Processing

bha88 processes your personal data on the basis of one or more of the following legal grounds, depending on the specific purpose of the processing activity:

• Contract Performance: Processing necessary to fulfil our obligations under the Terms & Conditions agreement with you — including account creation, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable laws — including KYC/AML verification, transaction record-keeping, and responses to lawful authority requests.
• Legitimate Interests: Processing carried out for bha88's legitimate business interests — including fraud prevention, platform security, abuse detection, and analytics — where those interests are not overridden by your fundamental rights.
• Consent: Processing based on your freely given, specific, and informed consent — including marketing communications and non-essential cookie usage. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Vital Interests: In rare circumstances, processing to protect the vital interests of you or another individual — for example, sharing data with emergency services where there is an immediate risk to life.

6. Data Sharing & Disclosure

bha88 does not sell or rent your personal data to any third party. We share personal data only in the circumstances described below, and only to the minimum extent necessary for the specified purpose:

6.1 Service Providers & Processors

bha88 engages trusted third-party service providers to perform functions on our behalf. These providers act as data processors under contractual obligations that prohibit them from using your data for any purpose other than delivering their contracted services to bha88. Categories of service providers include:

• Payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard network processors)
• KYC and identity verification technology providers
• Licensed game studios and content providers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi)
• Cloud hosting and data centre operators
• Customer support platform providers
• Fraud detection and cybersecurity technology partners
• Email and SMS notification delivery services
• Analytics and platform performance monitoring services

6.2 Legal & Regulatory Disclosure

bha88 may disclose your personal data to competent public authorities, law enforcement agencies, courts, or regulatory bodies where such disclosure is required by applicable law, a valid legal order, or a binding regulatory request. In such cases, bha88 will disclose only the data specifically requested and will, where legally permissible, notify you of such disclosure.

6.3 Business Transfers

In the event of a merger, acquisition, asset sale, restructuring, or other corporate transaction involving bha88, your personal data may be transferred to the acquiring or successor entity as part of the transaction. In such circumstances, bha88 will ensure that the receiving entity is bound by data protection obligations no less protective than those set out in this Policy, and will notify you of any material change to how your data is processed as a result of the transaction.

6.4 With Your Consent

bha88 may share your personal data with additional third parties where you have provided your explicit prior consent to such sharing. You may withdraw any such consent at any time by contacting [email protected].

7. Cookies & Tracking Technologies

bha88 uses cookies and similar tracking technologies (including local storage, session storage, pixel tags, and device fingerprinting) to operate the Platform effectively, personalise your experience, and gather analytical data. The categories of cookies we use are described in the table below:

Category	Purpose	Can Be Disabled?
Strictly Necessary	Essential for core Platform functionality: maintaining your login session, remembering your language preference, processing payments, and delivering game content securely.	No — required for Platform operation
Functional	Remembering your preferences such as display settings, preferred payment method, and recently played games to provide a more personalised experience on return visits.	Yes — via cookie settings
Analytics	Collecting aggregated data on how users navigate and interact with the Platform — including page views, session durations, and feature engagement — to help us improve the Platform.	Yes — via cookie settings
Security	Supporting fraud detection, bot identification, device fingerprinting, and account security monitoring to protect both users and the integrity of the Platform.	No — required for Platform security

Most modern web browsers allow you to control cookie settings, including blocking or deleting cookies. Please note that disabling strictly necessary or security cookies may impair or entirely prevent your ability to access and use the bha88 Platform. Disabling functional or analytics cookies will not affect Platform access but may reduce the quality of your personalised experience.

8. Data Retention

bha88 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by law or legitimate business need:

• Account Data & Identity Documents: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML record-keeping obligations.
• Transaction Records: All deposit, withdrawal, and betting transaction records are retained for a minimum of five (5) years from the date of the transaction.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years following the end of the business relationship, as required by applicable AML law.
• Support Communications: Customer support emails and chat transcripts are retained for a period of three (3) years from the date of the interaction.
• Responsible Gaming Records: Self-exclusion records and responsible gaming tool activity logs are retained for a minimum of five (5) years to ensure re-registration controls function correctly.
• Technical & Usage Logs: Server logs and usage analytics data are retained for a maximum of twenty-four (24) months, after which they are permanently deleted or anonymised.
• Marketing Consent Records: Records of your marketing consent or opt-out are retained for the duration of your account plus three (3) years following account closure.

At the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual. Where anonymisation is applied, the resulting anonymised data sets may be retained indefinitely for analytical purposes.

9. Data Security

bha88 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and the bha88 servers is encrypted using industry-standard Transport Layer Security protocols.
• Encrypted Data Storage: Sensitive data at rest — including identity documents, financial data, and hashed credentials — is stored using strong encryption algorithms on access-controlled infrastructure.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. All staff who access personal data are subject to confidentiality obligations and receive regular data protection training.
• Two-Factor Authentication: Where applicable, bha88 requires or strongly recommends two-factor authentication (2FA) for both user accounts and internal staff systems.
• Penetration Testing & Vulnerability Assessments: Regular security testing is conducted by independent specialists to identify and remediate potential vulnerabilities in the Platform infrastructure.
• Incident Response: bha88 maintains a documented data breach response procedure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you within the timeframe required by applicable law.

While bha88 takes all reasonable and proportionate steps to protect your personal data, no electronic transmission or storage system can be guaranteed to be completely secure. You are also responsible for keeping your own account login credentials confidential and for using the Platform on a secure, private network where possible.

10. Your Rights

Subject to applicable law and certain exceptions, you have the following rights in relation to the personal data that bha88 holds about you. To exercise any of these rights, please contact [email protected] with the subject line "DATA RIGHTS REQUEST":

• Right of Access: You have the right to request a copy of the personal data bha88 holds about you, along with information about how that data is processed.
• Right to Rectification: You have the right to request correction of any personal data held by bha88 that is inaccurate, incomplete, or out of date.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the processing is unlawful — subject to legal retention obligations that require bha88 to retain certain data.
• Right to Restriction: You have the right to request that bha88 temporarily suspend processing of your personal data — for example, while the accuracy of the data is under dispute.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you have the right to receive a copy of the personal data you have provided to bha88 in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling, where you have grounds relating to your particular situation. You also have an unconditional right to object to direct marketing at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out prior to withdrawal.

bha88 will respond to all verified data rights requests within thirty (30) days of receipt. In complex cases or where the volume of requests requires additional handling time, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reason for it.

11. Children & Minors

The bha88 Platform is strictly prohibited for use by individuals under the age of 21. We do not knowingly solicit, collect, or process personal data from individuals below this age threshold. Registration on the bha88 Platform requires affirmative confirmation that you are 21 years of age or older, and identity verification procedures are in place to enforce this requirement.

If bha88 becomes aware — through internal review, parental notification, or any other means — that a person under the age of 21 has registered an account or provided personal data to the Platform, we will immediately:

• Suspend and permanently close the account;
• Refund any real-money deposits made by the minor to the originating payment method;
• Delete all personal data associated with the account as quickly as technically practicable; and
• Where required by law, report the incident to the appropriate regulatory or child protection authority.

Parents or guardians who believe that a minor in their care has accessed the bha88 Platform are encouraged to contact us immediately at [email protected] with the subject line "MINOR ACCOUNT REPORT". We will treat such reports as a priority and act within 24 hours of receiving a verified notification.

12. Third-Party Links

The bha88 Platform may from time to time display references to or contextual mentions of third-party services — including payment providers such as bKash, Nagad, Rocket, and Upay, and game studio brands such as Evolution Gaming and Pragmatic Play. Where any third-party interface is accessed through or alongside the Platform, those third parties operate their own independent privacy policies and data practices.

bha88 is not responsible for and does not endorse the privacy practices of any third party. Users who interact with third-party services — including mobile banking applications used to make deposits and withdrawals — should review the relevant third party's own privacy policy to understand how their personal data is handled in that context.

13. Policy Updates

bha88 reserves the right to update, modify, or replace this Privacy Policy at any time. When material changes are made, bha88 will:

• Publish the revised Policy on this page with an updated "Last Updated" date;
• Display a prominent notice on the Platform informing users of the change; and
• Where the change materially affects how we process your personal data, send a notification to the email address registered to your account at least seven (7) days before the changes take effect.

Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must cease using the Platform and request account closure prior to the effective date.

We recommend that you review this page periodically to stay informed about how bha88 collects, uses, and protects your personal data. The most current version of this Policy is always available at bha88.io/privacy-policy.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way bha88 handles your personal data, please contact us using the details below. We are committed to resolving all privacy-related enquiries promptly and transparently.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "DATA PRIVACY REQUEST"
• Subject Line for Minor Reports: "MINOR ACCOUNT REPORT"
• Response Time: Within 1 business hour during peak Bangladesh Standard Time (BST, UTC+6) hours; within 24 hours at all other times.
• Support Availability: 24 hours a day, 7 days a week, 365 days a year.
• Language of Response: English