bai88 Privacy Policy

1. Definitions and Interpretation

In this Policy, the following terms have the meanings set out below unless context requires otherwise:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, date of birth, national identity number, mobile number, email address, IP address, device identifiers, financial account details, and transaction records.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, and destruction.
• "Data Controller" means bai88, which determines the purposes and means of processing Personal Data collected through the platform.
• "Third Party" means any organisation or individual that is not bai88 or the data subject (Player).
• "KYC" means Know Your Customer verification procedures used to confirm a Player's identity, age, and eligibility to use the platform.
• "Cookie" means a small text file placed on a Player's device by the bai88 platform for the purposes described in Section 8 of this Policy.
• "Platform" means the bai88 website, all associated subpages, and any services made available through the domain bai88.io.

2. Who We Are

2.1 bai88 operates the online casino and sports betting platform accessible at bai88.io. The platform is designed and marketed primarily for players based in Bangladesh, with all natural-language content provided in English.

2.2 For the purposes of this Policy, bai88 acts as the Data Controller responsible for your Personal Data. All data-related inquiries, access requests, correction requests, and deletion requests should be directed to [email protected].

2.3 bai88 is committed to responsible data stewardship and operates under a framework of transparency, security, and respect for user privacy. This Policy reflects our commitment to those principles and is reviewed at least annually to ensure it remains accurate and up to date.

3. Data We Collect

3.1 bai88 collects the following categories of Personal Data, depending on how you interact with the platform:

Category	Examples	When Collected
Identity Data	Full legal name, date of birth, national identity card (NID) number, passport number	Registration and KYC verification
Contact Data	Mobile phone number, email address, residential address (district, city, postcode)	Registration and account updates
Financial Data	bKash account number, Nagad mobile number, Rocket number, Upay account, Visa/Mastercard last four digits, transaction amounts in BDT (৳)	Deposit and withdrawal processing
Technical Data	IP address, browser type and version, operating system, device type, screen resolution, time zone (Bangladesh Standard Time, UTC+6)	Platform access (automatic collection)
Usage Data	Pages visited, games played, bets placed, session duration, click paths, search queries within the platform	Platform access (automatic collection)
Communications Data	Support ticket content, live chat transcripts, email correspondence with bai88 staff	When you contact bai88 support
Verification Documents	Scanned or photographed NID, passport, utility bill, mobile money account screenshots submitted for KYC	KYC verification process

3.2 bai88 does not knowingly collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, genetic data, or health data, unless disclosure is volunteered by the Player in a support communication and is directly relevant to the support query.

4. How We Collect Your Data

4.1 Directly from You. The majority of Personal Data bai88 holds is provided directly by you during account registration, KYC submission, deposit and withdrawal transactions, and communications with the bai88 support team.

4.2 Automatically. When you access the bai88 platform, certain Technical Data and Usage Data is collected automatically through server logs, cookies, and similar tracking technologies. This automatic collection is necessary to maintain platform security, detect fraud, and improve the user experience.

4.3 From Third Parties. In limited circumstances, bai88 may receive data about you from third-party identity verification providers (used for KYC), payment processors (used to confirm transaction status), and fraud prevention services. Data received from these sources is used solely for the stated purpose and is subject to this Policy.

5. Legal Basis for Processing

5.1 bai88 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing is necessary to perform the contract between bai88 and the Player — specifically, to operate the Player's account, process deposits and withdrawals, settle bets, and provide customer support.
• Legal Obligation: Processing is necessary to comply with applicable legal requirements, including identity verification, anti-money laundering (AML) obligations, and fraud prevention duties.
• Legitimate Interests: Processing is necessary for bai88's legitimate interests in maintaining platform security, preventing fraud, improving the platform experience, and communicating material operational updates to Players — provided those interests are not overridden by the Player's data protection rights.
• Consent: Where processing is not covered by the above bases (for example, sending optional promotional communications), bai88 will seek your explicit consent and will honour any subsequent withdrawal of that consent.

6. How We Use Your Data

6.1 bai88 uses collected Personal Data for the following specific purposes:

• Creating and maintaining your bai88 account, including verifying your identity and age (21+ requirement) during registration and KYC.
• Processing deposits and withdrawals in Bangladeshi Taka (৳) via bKash, Nagad, Rocket, Upay, Visa, Mastercard, SureCash, and other supported payment methods.
• Settling bets and game outcomes, calculating winnings, and crediting or debiting your account balance accordingly.
• Providing customer support via email and live chat, including investigating complaints and resolving disputes.
• Sending transactional communications — such as deposit confirmations, withdrawal status updates, and security alerts — that are necessary to operate your account.
• Sending promotional communications (bonus offers, seasonal promotions including Eid and BPL season offers) where you have consented to receive such communications. You may withdraw consent at any time by contacting [email protected].
• Detecting, investigating, and preventing fraudulent activity, money laundering, underage gambling, and other prohibited conduct as defined in the bai88 Terms & Conditions.
• Complying with legal obligations, responding to lawful requests from competent authorities, and enforcing bai88's contractual rights.
• Analysing aggregated, anonymised usage data to understand platform performance, identify popular games and features, and guide product improvements.
• Maintaining responsible gaming safeguards, including monitoring for patterns consistent with problem gambling behaviour and applying deposit limits or self-exclusion measures where appropriate.

7. Data Sharing and Disclosure

7.1 bai88 does not sell, rent, or trade your Personal Data to any third party for commercial or marketing purposes. Data sharing is limited to the following categories of recipients and purposes:

7.2 Payment Processors

bai88 shares the minimum necessary financial data with payment service providers — including bKash, Nagad, Rocket, Upay, and card networks (Visa, Mastercard) — solely to process deposit and withdrawal transactions. These providers operate under their own privacy policies and data security standards.

7.3 Identity Verification Providers

For KYC purposes, bai88 may share identity document images and personal details with third-party verification service providers. These providers are contractually bound to process the data only for verification purposes and to maintain appropriate security standards.

7.4 Fraud Prevention and Security Services

bai88 works with fraud detection and cybersecurity partners to protect the integrity of the platform. Technical Data (such as IP addresses and device identifiers) may be shared with these partners to identify and block suspicious activity. Data shared for this purpose is subject to strict contractual controls.

7.5 Legal and Regulatory Disclosure

bai88 may disclose Personal Data to competent legal authorities, courts, or regulatory bodies where required by applicable law, court order, or other legal process. bai88 will notify affected Players of such disclosures where legally permitted to do so.

7.6 Business Transfers

In the event of a merger, acquisition, or sale of all or part of bai88's assets, Personal Data held by bai88 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any resulting changes to this Privacy Policy before the transfer takes effect.

8. Cookies and Tracking Technologies

8.1 The bai88 platform uses cookies and similar tracking technologies (including web beacons and local storage objects) to operate core platform functionality, maintain session security, and analyse usage patterns. The categories of cookies used are as follows:

• Strictly Necessary Cookies: These are required for the platform to function. They include session authentication cookies, security tokens, and load-balancing identifiers. These cookies cannot be disabled without impairing core platform functionality.
• Functional Cookies: These store your preferences (such as language settings and preferred games) to personalise your experience on the platform. They are active for the duration of your session or for a defined period as noted in the cookie settings.
• Analytics Cookies: These collect aggregated, anonymised data about how Players navigate the platform — pages visited, time spent on each page, and game selections. This data is used to improve the platform. No individual Player is identified in analytics reports.
• Security and Fraud Prevention Cookies: These help bai88 detect and prevent automated bot activity, account takeover attempts, and other fraudulent behaviour by identifying anomalous patterns in session data.

8.2 You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the bai88 platform. Disabling analytics cookies will not affect your ability to use the platform but will reduce bai88's ability to identify and fix usability issues.

9. Data Security

9.1 bai88 implements a layered approach to data security designed to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction:

• Encryption in Transit: All data exchanged between your device and the bai88 platform is encrypted using 256-bit SSL/TLS protocols. This applies to account login, payment processing, and all other platform interactions.
• Encryption at Rest: Sensitive Personal Data, including identity documents and financial account details, is stored in encrypted form on bai88's secured infrastructure.
• Access Controls: Access to Personal Data held by bai88 is restricted to staff members who require it to perform their specific role. All internal access is subject to authentication, logging, and periodic review.
• Intrusion Detection: bai88 employs continuous monitoring, intrusion detection systems, and regular security audits to identify and respond to potential threats to the platform and its data.
• Incident Response: In the event of a data breach affecting Player Personal Data, bai88 will take immediate steps to contain the breach, assess the impact, notify affected Players where required, and implement remediation measures.

9.2 While bai88 takes all reasonable steps to protect your Personal Data, no internet transmission or electronic storage system is entirely secure. bai88 cannot guarantee absolute security of data in transit or at rest and recommends that Players also maintain strong, unique passwords for their bai88 accounts.

10. Data Retention

10.1 bai88 retains Personal Data for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations. The following retention periods apply as general guidance:

• Account Data (identity, contact): Retained for the lifetime of the active account plus a minimum period of five (5) years following account closure, to comply with anti-money laundering and fraud prevention obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with standard financial record-keeping requirements.
• KYC Verification Documents: Retained for a minimum of five (5) years following account closure or the date of the last transaction, whichever is later.
• Support Communications: Retained for three (3) years from the date of the communication, or longer if the communication is relevant to an ongoing dispute or legal matter.
• Cookies and Technical Logs: Session cookies are deleted when you close your browser. Persistent cookies are retained for the period specified in the cookie settings. Server logs are typically retained for ninety (90) days before being purged.

10.2 When Personal Data is no longer required and retention obligations have been satisfied, bai88 will securely delete or anonymise the data so that it can no longer be attributed to any individual Player.

11. Your Rights

11.1 As a Player whose Personal Data is processed by bai88, you hold the following rights. To exercise any of these rights, please contact [email protected] with your full name, registered email address, and a description of your request:

• Right of Access: You have the right to request a copy of the Personal Data bai88 holds about you, together with information about how it is used and shared.
• Right to Rectification: If any Personal Data bai88 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure ("Right to be Forgotten"): You may request that bai88 delete your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to bai88's legal retention obligations — data required for AML, fraud prevention, or dispute resolution purposes cannot be deleted on request during the applicable retention period.
• Right to Restriction of Processing: You may request that bai88 restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of the data is being disputed or while an objection to processing is being assessed.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive a copy of your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your Personal Data where bai88 relies on legitimate interests as its legal basis for processing, unless bai88 can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.

11.2 bai88 will respond to all data rights requests within thirty (30) calendar days. Where a request is complex or involves a large volume of data, bai88 may extend this period by an additional thirty (30) days, with notice provided to the requesting Player.

12. Children and Minors

12.1 The bai88 platform is strictly for adults aged 21 and above. bai88 does not knowingly collect Personal Data from individuals under the age of 21. If bai88 discovers that an account has been registered by a person under the age of 21, the account will be immediately suspended, any Personal Data collected will be securely deleted (subject to any legal obligations to retain evidence of the breach), and the matter will be escalated in accordance with bai88's underage gambling prevention procedures.

12.2 If you believe a minor has registered an account on the bai88 platform, please notify us immediately at [email protected] so that we can investigate and act promptly.

13. Third-Party Links

13.1 The bai88 platform may contain references to third-party payment providers (such as bKash and Nagad) and game content providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi). While bai88 takes care to work only with reputable partners, bai88 is not responsible for the privacy practices of third-party services accessed through or referenced on the platform.

13.2 This Privacy Policy applies solely to data processed by bai88 in connection with the bai88 platform. Players who interact directly with third-party services should review those services' own privacy policies.

14. Changes to This Policy

14.1 bai88 reviews this Privacy Policy at least annually and may update it at any time to reflect changes in our data practices, changes in applicable law, or improvements to the bai88 platform.

14.2 Where changes to this Policy are material — meaning they significantly affect how your Personal Data is used or your rights in relation to it — bai88 will notify registered Players via the email address on file and/or via a notice displayed on the platform at login, prior to the changes taking effect.

14.3 The "Last Updated" date at the top of this Policy indicates when the current version came into effect. Continued use of the bai88 platform following notification of an update constitutes acceptance of the revised Policy. If you do not agree with a material change, you should contact [email protected] to request account closure before the change takes effect.

15. Contact and Complaints

15.1 For any questions about this Privacy Policy, to exercise your data rights, or to raise a privacy-related concern, please contact the bai88 data team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: "Privacy Policy Inquiry" or "Data Rights Request"
• Response Time: Within 48 hours for general inquiries; within 30 calendar days for formal data rights requests
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)

15.2 If you are not satisfied with bai88's response to a privacy complaint, you have the right to escalate your complaint through appropriate legal channels available in your jurisdiction. bai88 takes all privacy complaints seriously and will cooperate fully with any lawful investigation.

This Privacy Policy was last reviewed and updated in 2026. It supersedes all prior versions of the bai88 Privacy Policy. © 2026 bai88. All rights reserved.