Privacy Policy — bad88

When you register and use the bad88 platform, we collect personal information across several categories. The specific data collected depends on how you interact with the platform and which products and features you use. Below is a detailed breakdown of the categories of personal data bad88 may collect:

bad88 does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where directly relevant to a responsible gaming referral or self-exclusion request initiated by the player themselves.

Data may be collected directly from you during registration and account use, automatically via technical systems when you browse or interact with the bad88 platform, and from third-party identity verification providers engaged by bad88 for KYC compliance purposes.

bad88 does not sell, rent, or trade your personal data to third parties. However, in order to operate the platform and comply with our legal obligations, we share certain data with a limited set of trusted service providers and authorities. All third parties with whom we share data are required to handle your information securely and in accordance with applicable data protection standards.

The categories of recipients with whom bad88 may share your personal data are as follows:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are independently regulated.
• Identity verification providers: Third-party KYC services engaged by bad88 to verify identity documents and confirm player eligibility. These providers process only the minimum data necessary for verification purposes.
• Game content providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data necessary to deliver their game content and ensure fair play integrity. These providers do not receive your full identity data.
• IT infrastructure and hosting providers: Cloud hosting and data centre providers that store the bad88 platform and its associated databases. These providers act as data processors under contractual obligations and have no independent right to use your data.
• Fraud prevention and security services: Specialist third-party services that assist bad88 in detecting fraudulent account activity, unusual betting patterns, and potential money-laundering indicators.
• Regulatory and law enforcement authorities: bad88 will disclose personal data to competent authorities — including the Bangladesh Financial Intelligence Unit (BFIU) and law enforcement agencies — where required to do so by law, court order, or legitimate regulatory request. bad88 will notify affected players of such disclosures where it is legally permitted to do so.
• Professional advisers: Legal counsel, auditors, and compliance consultants engaged by bad88 who are bound by confidentiality obligations.

Where bad88 engages third-party data processors, it does so under written agreements that require those processors to implement appropriate technical and organisational security measures and to process data only on bad88's documented instructions.

bad88 does not transfer personal data to countries outside Bangladesh or the player's country of access except where necessary to deliver the services described above (for example, where a game provider's servers are located in a different jurisdiction). In such cases, bad88 ensures that adequate data protection safeguards are in place.

bad88 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and the bad88 platform.
• Encryption of sensitive data fields (including passwords and financial identifiers) at rest in bad88's databases using industry-standard encryption algorithms.
• Role-based access controls ensuring that bad88 staff can access personal data only to the extent required for their specific job function.
• Regular security audits and vulnerability assessments of the bad88 platform and infrastructure.
• Two-factor authentication (2FA) available to all players and mandatory for bad88 administrative accounts.
• Automated monitoring for suspicious access patterns, including unusual login locations, high-volume API calls, and failed authentication attempts.

While bad88 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. In the event of a data breach that poses a significant risk to your rights and freedoms as a player, bad88 will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.

Data Retention: bad88 retains your personal data for as long as your account is active and for a period thereafter as required by our legal and compliance obligations. The following general retention periods apply:

After the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and platform improvement purposes.

The bad88 platform integrates with third-party services to deliver a complete gaming experience. These include game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), and identity verification services. Each of these providers operates under its own privacy policy and data protection practices.

bad88 selects its third-party partners carefully and requires that all data processors it engages implement adequate security measures. However, once data passes to a third-party provider's system (for example, when you complete a bKash transaction), that provider's own privacy policy governs the data within their system. bad88 is not responsible for the privacy practices of independent third parties.

Game content delivered within the bad88 interface by providers such as Evolution Gaming (live dealer tables) or Spribe (crash games including Aviator) may include embedded software that communicates directly with those providers' servers to deliver real-time gameplay. In these contexts, game providers may receive technical data such as your device type, session identifier, and in-game actions as necessary to deliver the game. This data sharing is governed by the game provider's own terms and privacy notices, which are made available within each game's information panel.

bad88 does not include outbound links to external websites within the main platform interface. If you navigate away from bad88 via a link included in a promotional communication or partner notification, please review the privacy policy of the destination site, as bad88 has no control over how external sites collect or use your data.