Your Privacy at 88baje

1 Who We Are

88baje (referred to in this policy as "we", "us", or "our") operates the online casino and sports betting platform accessible at https://88baje.org (the "Platform"). We act as the data controller for all personal data collected through the Platform. Any reference to "you" or "your" means any individual who visits, registers on, or otherwise uses the Platform.

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, with whom we may share it, how long we retain it, and what rights you have in relation to your data. It should be read alongside our Terms & Conditions and our Responsible Gaming Policy.

If you have any questions about this policy or about how 88baje handles your personal data, please contact our privacy team at [email protected]. We aim to respond to all privacy-related enquiries within five business days.

2 Personal Data We Collect

We collect personal data about you through several channels: directly from you when you register or interact with the Platform, automatically through your use of the Platform, and from third-party identity verification and payment partners. The categories of personal data we collect include:

Identity and contact data:

• Full legal name
• Date of birth (to verify you are aged 21 or above)
• Residential address in Bangladesh (city, district, and full postal address)
• Mobile phone number
• Email address (where provided)
• National Identity Card (NID) number or passport number, provided during KYC verification

Account and financial data:

• Username and encrypted password hash
• Account balance history, deposit records, and withdrawal records in BDT
• Payment method identifiers (e.g., the registered bKash, Nagad, or Rocket account number associated with your profile — we do not store full card numbers)
• Transaction timestamps and reference numbers
• Bonus and promotional credit history

Gaming and behavioural data:

• Game session history including games played, stakes placed, wins, and losses
• Sports betting selections and event outcomes
• Session duration, login and logout timestamps
• Responsible gaming tool usage (deposit limits set, cooling-off periods activated, self-exclusion requests)

Technical and device data:

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Cookie identifiers and session tokens
• Platform interaction logs (pages visited, buttons clicked, errors encountered)

3 How We Use Your Personal Data

88baje processes your personal data only for specific, legitimate purposes. The table below summarises our primary processing activities and the lawful basis for each:

• Account registration and management: To create and maintain your player account, verify your identity and age, and provide you with access to the Platform's features. Lawful basis: performance of a contract with you.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, Visa, Mastercard, and other supported methods. Lawful basis: performance of a contract; legal obligation (anti-money laundering compliance).
• KYC and fraud prevention: To verify your identity against the documents you provide, detect fraudulent account activity, and comply with applicable laws. Lawful basis: legal obligation; legitimate interests (protecting the platform and other players from fraud).
• Responsible gaming monitoring: To monitor your gaming behaviour for signs of problem gambling, enforce self-imposed limits, and respond to responsible gaming requests. Lawful basis: legal obligation; vital interests (player welfare).
• Customer support: To handle your queries, complaints, disputes, and feedback efficiently. Lawful basis: performance of a contract; legitimate interests.
• Promotional communications: To send you information about bonuses, seasonal promotions (Eid, Pohela Boishakh, BPL season, Victory Day), and platform updates, where you have not opted out. Lawful basis: legitimate interests (direct marketing to existing customers); consent where required.
• Platform improvement and analytics: To understand how players use the Platform, identify technical issues, and improve game offerings and user experience. Lawful basis: legitimate interests. Analytics data is aggregated and anonymised where possible.
• Legal compliance: To comply with applicable laws, respond to lawful requests from competent authorities, and enforce our Terms & Conditions. Lawful basis: legal obligation.

4 Cookies and Tracking Technologies

88baje uses cookies and similar tracking technologies to operate the Platform, remember your session, and analyse usage patterns. The types of cookies we use are:

• Essential cookies: Required for the Platform to function. These include session authentication cookies and security tokens. You cannot opt out of these cookies while using the Platform.
• Functional cookies: Used to remember your preferences, such as language settings and responsible gaming tool configurations.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate the Platform. This helps us identify popular games, detect navigation issues, and improve the overall experience.

You can manage non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. We do not use cookies to serve third-party advertising or to track your behaviour on websites other than 88baje.org.

5 Sharing Your Personal Data

88baje does not sell your personal data. We may share your data with the following categories of trusted third parties, strictly on a need-to-know basis and subject to confidentiality obligations:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to process deposits and withdrawals and to comply with financial regulations.
• Identity verification partners: Third-party KYC service providers who assist us in verifying your identity and age in accordance with our Terms & Conditions.
• Technology and hosting providers: Cloud infrastructure, database, and content delivery network (CDN) providers who store and transmit Platform data on our behalf, under strict data processing agreements.
• Game content providers: Game studios and software providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) whose game engines are integrated into the Platform. These providers receive only the minimum technical data necessary to deliver the game experience.
• Legal and regulatory authorities: Where we are required by applicable law, court order, or the request of a competent authority to disclose personal data, we will do so. We will notify you of such disclosure where we are legally permitted to do so.

6 Data Retention

88baje retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or regulatory requirements. Our standard retention periods are:

• Active account data: Retained for the duration of your account and for a period of five years following account closure, to meet legal and financial record-keeping obligations.
• Transaction records: Retained for a minimum of five years from the date of each transaction, in compliance with applicable financial regulations.
• KYC documents: Retained for a minimum of five years following the completion of the verification process or account closure, whichever is later.
• Gaming session logs: Retained for three years to support responsible gaming monitoring, dispute resolution, and audit purposes.
• Support communications: Retained for two years from the date of the most recent communication in each support thread.
• Self-exclusion records: Retained indefinitely to prevent re-registration during an active exclusion period and to maintain a reliable exclusion register.

When personal data is no longer required, it is securely deleted or anonymised. Where anonymisation is not technically feasible, data is restricted from further processing until secure deletion is possible.

7 Your Data Rights

As a data subject, you have the following rights in relation to the personal data 88baje holds about you. To exercise any of these rights, please contact us at [email protected]. We will respond within a reasonable timeframe and in no case later than 30 days of receiving your request.

• Right of access: You may request a copy of the personal data we hold about you, together with information about how it is being used.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other lawful basis applies), or where the data has been unlawfully processed. This right is subject to our legal retention obligations — for example, transaction records must be kept for a minimum period.
• Right to restriction of processing: You may ask us to restrict the processing of your data in certain circumstances, such as while the accuracy of the data is being contested.
• Right to data portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request that we provide your data in a structured, machine-readable format.
• Right to object: You may object to processing carried out on the basis of our legitimate interests, including direct marketing. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

8 Security Measures

88baje implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption of sensitive data fields at rest, including password hashes and identity document references.
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis.
• Regular security assessments and penetration testing of Platform infrastructure.
• Automated anomaly detection systems to flag unusual account activity indicative of unauthorised access.
• Two-factor authentication options available for all player accounts.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 88baje will notify affected users without undue delay and take all reasonable steps to contain the breach and prevent recurrence.

9 Children and Minors

The 88baje Platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. Our registration process requires applicants to provide a date of birth and, where required, documentary evidence of age as part of KYC verification.

If you are a parent or guardian and believe that your child under the age of 21 has registered an account or provided personal data to 88baje, please contact us immediately at [email protected]. Upon verification, we will close the account and permanently delete all associated personal data.

10 Marketing Communications

From time to time, 88baje may send you information about new games, seasonal promotions, bonus offers, and platform updates. These communications may be sent via SMS to your registered mobile number or via email if you have provided one. You can opt out of marketing communications at any time by:

• Replying STOP to any SMS marketing message we send.
• Contacting our support team at [email protected] with the subject line "Unsubscribe".
• Adjusting your notification preferences in your account settings (where available).

Please note that even if you opt out of marketing communications, we will continue to send you essential transactional and account-related messages (e.g., deposit confirmation, withdrawal status updates, security alerts) as these are necessary for the operation of your account.

11 Links to Third-Party Services

The 88baje Platform integrates content from third-party game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) and may process payments through third-party payment gateways. When you interact with these integrated services, those third parties may process personal data under their own privacy policies. 88baje is not responsible for the privacy practices of third-party game studios or payment service providers beyond the data processing agreements we maintain with them.

12 Changes to This Privacy Policy

88baje may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the features of the Platform. When we make material changes, we will post the updated policy on this page with a revised effective date, and where the change significantly affects your rights, we will notify you directly via your registered contact details.

Your continued use of the Platform after a revised Privacy Policy has been published constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you should cease using the Platform and contact us to close your account.

13 Contact and Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or about the way 88baje processes your personal data, please contact our privacy team. All privacy enquiries are handled with strict confidentiality.

Contact email: [email protected] (plain text — not a clickable link). We aim to acknowledge all privacy-related correspondence within two business days and to resolve complaints within 30 days. Our support team is available 24 hours a day, seven days a week.