bah88 Privacy Policy — Your Data, Protected
At bah88, the privacy and security of every player's personal data is a core commitment, not an afterthought. This Privacy Policy explains exactly what information we collect, why we collect it, how we use and protect it, and what rights you have as a player based in Bangladesh. We are transparent because you deserve to know.
SSL Encryption
Every data exchange between your device and bah88 servers is protected by industry-standard SSL/TLS encryption, ensuring your personal and financial details are never transmitted in plain text.
No Data Selling
bah88 does not sell, rent, or commercially trade your personal information to third-party advertisers or data brokers. Your data is used solely to operate and improve your bah88 experience.
Your Rights Matter
You have the right to access, correct, or request deletion of your personal data at any time. bah88 will respond to all verified data requests within 30 calendar days of receipt.
Secure Data Storage
Player data is stored on access-controlled servers with strict internal permission policies. Only authorised bah88 personnel with a legitimate operational need may access identifiable player records.
Transparent Cookies
We use only functional and analytical cookies necessary to deliver and improve the Platform. We do not deploy third-party advertising trackers or cross-site fingerprinting technologies on bah88.
24/7 Privacy Support
Questions about how bah88 handles your data? Our English-language support team is available around the clock at [email protected] to assist with any privacy-related enquiry or data request.
1. Information We Collect
bah88 collects personal data from players in Bangladesh to enable account registration, payment processing, customer support, responsible gaming compliance, and ongoing platform improvement. We collect only the minimum information reasonably necessary for these purposes. Below is a complete description of the categories of personal data bah88 may collect and the specific data points within each category.
1.1 Registration Data
When you create a bah88 account, we collect your full legal name, date of birth, email address, Bangladesh mobile number (linked to your preferred payment method such as bKash, Nagad, Rocket, Upay, or SureCash), and a password of your choosing. This information is required to establish your identity, comply with our age verification obligations, and communicate with you about your account. You may also be asked to provide your division or city of residence within Bangladesh (for example, Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh) for fraud-prevention and regulatory purposes.
1.2 Identity Verification Data
In accordance with our Know Your Customer (KYC) obligations and to satisfy age verification requirements (18+), bah88 may request a copy of a government-issued identity document. Acceptable documents include a Bangladesh National Identity Card (NID), a valid passport, or a driving licence. Document images are processed securely and retained only for the period required to fulfil our verification obligations or as required by applicable law.
1.3 Financial Transaction Data
To process deposits and withdrawals in Bangladeshi Taka (৳), bah88 records transaction amounts, timestamps, payment method identifiers (for example, the last four digits of your bKash or Nagad mobile number), and transaction reference numbers. Full mobile banking credentials, PINs, and passwords are never stored by bah88 — these are handled exclusively by your payment provider.
1.4 Gaming Activity Data
bah88 automatically records data relating to your gaming activity on the Platform. This includes game sessions played, bet amounts, win and loss records, bonus participation history, and wagering progress. This data is used for account integrity, responsible gaming monitoring, dispute resolution, and platform analytics. Gaming activity data is associated with your account and retained in accordance with Section 6 (Data Retention) of this policy.
1.5 Technical & Device Data
When you access bah88, our servers automatically record certain technical data including your IP address, browser type and version, operating system, device type (mobile or desktop), screen resolution, referring URL, and the pages or features you interact with during each session. This technical data is used to maintain platform security, detect fraudulent access patterns, and improve the overall player experience. It is not used to build individual advertising profiles.
1.6 Communications Data
If you contact bah88 support via email ([email protected]) or live chat, we retain a record of that correspondence. This allows us to provide consistent support, track issue resolution, and maintain an audit trail in the event of a formal complaint or dispute. Support communications are retained for up to 36 months from the date of the last interaction.
Data Categories Summary
2. How We Use Your Data
bah88 uses the personal data it collects solely for the purposes described in this Privacy Policy. We do not use your data in ways that are incompatible with the purposes for which it was collected without first obtaining your explicit consent. The primary purposes for which bah88 processes personal data are as follows:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation and management | Registration data, device data | Contract performance |
| Age and identity verification (18+) | Date of birth, KYC documents | Legal obligation |
| Processing deposits and withdrawals in BDT | Financial transaction data, mobile number | Contract performance |
| Fraud prevention and platform security | IP address, device data, transaction data | Legitimate interest |
| Responsible gaming monitoring | Gaming activity, session data | Legal obligation / legitimate interest |
| Customer support and dispute resolution | Communications data, account data | Contract performance |
| Platform analytics and improvement | Technical data, gaming activity (aggregated) | Legitimate interest |
| Promotional communications (opt-in) | Email address, gaming preferences | Consent |
2.1 Promotional Communications
bah88 may send promotional emails regarding bonuses, seasonal Bangladesh promotions (such as those timed around BPL, Eid, Pohela Boishakh, or Victory Day), and new game launches. These communications will only be sent to players who have explicitly opted in to marketing messages at registration or via their account settings. You may opt out of promotional communications at any time by contacting support at [email protected]. Opting out of marketing will not affect transactional or account-critical communications.
2.2 Automated Decision-Making
bah88 uses automated systems to flag accounts for fraud screening, responsible gaming alerts, and bonus-abuse detection. Where an automated process results in a consequential action — such as account suspension or withdrawal delay — you have the right to request human review of that decision. Please contact [email protected] if you believe an automated decision has been applied to your account incorrectly.
3. Data Sharing & Disclosure
3.1 Payment Service Providers
To process your deposits and withdrawals in Bangladeshi Taka, bah88 must share the minimum necessary financial data with your chosen payment service provider (bKash, Nagad, Rocket, Upay, or SureCash). Data shared is limited to transaction amounts, timestamps, and your registered mobile number. Payment providers are contractually required to process this data only for the purpose of completing your transaction and are prohibited from using it for their own marketing or profiling purposes.
3.2 Game Technology Providers
bah88 sources its casino games from certified third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised or pseudonymised session data (such as bet amounts and game outcomes) solely to generate your game history, resolve technical disputes, and verify RTP compliance. Game providers do not receive your full name, NID, or financial account details.
3.3 Legal & Regulatory Disclosure
bah88 may disclose personal data to competent authorities — including law enforcement agencies and financial intelligence units operating under Bangladesh Bank guidelines — where it is legally required to do so by court order, subpoena, or a lawful regulatory demand. In such cases, bah88 will disclose only the minimum data required and will notify the affected player where permitted by law.
3.4 Business Transfers
In the event that bah88 undergoes a merger, acquisition, or sale of substantially all its assets, player data may be transferred to the successor entity as part of that transaction. In such circumstances, bah88 will provide affected players with notice of the transfer and any change in data controller identity at least 30 days in advance, via the registered email address on file.
Who May Receive Your Data
4. Cookies & Tracking Technologies
bah88 uses cookies and similar client-side storage technologies to enable core Platform functionality, maintain your logged-in session, remember your language and display preferences, and collect aggregated analytics that help us understand how players navigate the Platform. We do not use advertising cookies, cross-site tracking pixels, or third-party retargeting scripts.
Required for the Platform to function. These include session authentication tokens, CSRF protection cookies, and load-balancer affinity cookies. Cannot be disabled without breaking core functionality.
Store your UI preferences such as game display settings and notification choices. These are set only after you interact with the relevant Platform feature and are not required for basic access.
Aggregated, anonymised data about how players use the Platform — pages visited, features used, error rates. Used solely for internal improvement purposes. No individual player is profiled.
4.1 Managing Cookies
You may manage or disable non-essential cookies through your browser settings at any time. Most modern browsers — including those commonly used on Android and iOS devices in Bangladesh — allow you to block or delete cookies via the browser's privacy or security settings menu. Please be aware that disabling essential cookies will prevent you from logging in to your bah88 account and accessing Platform features. Disabling analytics cookies will not affect your ability to play games or process transactions.
4.2 Session Storage & Local Storage
In addition to cookies, bah88 may use browser session storage and local storage to temporarily cache game state, user preferences, and authentication tokens on your device. Session storage data is cleared automatically when your browser tab or window is closed. Local storage data persists between sessions but can be cleared via your browser's site data settings. Neither session storage nor local storage on bah88 contains any data that is shared with third parties.
5. Data Security
bah88 takes the security of your personal data seriously. We implement a layered set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, or alteration. While no online platform can guarantee absolute security, bah88 applies industry-standard safeguards across all points of data handling.
- Transport Encryption: All data transmitted between your device and bah88 servers is encrypted using TLS 1.2 or higher. Our SSL certificate is kept current and valid at all times.
- Password Hashing: Account passwords are stored as salted cryptographic hashes using a modern algorithm. bah88 staff cannot read your plain-text password under any circumstances.
- Access Controls: Internal access to production systems containing player data is restricted on a strict need-to-know basis. Staff with access undergo security awareness training and are bound by confidentiality obligations.
- Intrusion Detection: bah88 operates real-time monitoring systems that flag unusual access patterns, login anomalies, and potential data-extraction attempts for immediate review by our security team.
- Regular Security Reviews: Our platform infrastructure undergoes periodic internal security assessments. Critical vulnerabilities are patched as a priority.
5.1 Data Breach Response
In the unlikely event of a personal data breach that poses a risk to affected players, bah88 will notify impacted account holders via their registered email address without undue delay — and in any case within 72 hours of becoming aware of the breach — describing the nature of the incident, the categories of data affected, and the steps bah88 has taken to contain and remediate the breach. Players are advised to change their password immediately if they receive such a notification.
Security Measures at a Glance
- TLS 1.2+ encryption in transit
- Salted password hashing at rest
- Role-based internal access controls
- Real-time intrusion detection
- Periodic security assessments
- 72-hour breach notification commitment
6. Data Retention
bah88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve any outstanding disputes or enforce our agreements. The following retention schedule applies:
| Data Category | Retention Period | Reason |
|---|---|---|
| Registration & account data | Duration of account + 5 years after closure | Legal obligation, dispute resolution |
| KYC / identity documents | 5 years from date of verification | Anti-money-laundering compliance |
| Financial transaction records | 7 years from transaction date | Bangladesh Bank / financial regulations |
| Gaming activity logs | 3 years from last activity | Responsible gaming, dispute resolution |
| Technical / device logs | 12 months on a rolling basis | Security monitoring |
| Support communications | 36 months from last interaction | Quality assurance, dispute evidence |
| Marketing consent records | Duration of consent + 3 years | Regulatory audit trail |
Once the applicable retention period has elapsed, bah88 will securely delete or irreversibly anonymise the data in question. Anonymised, aggregated data (which can no longer be linked to an individual player) may be retained indefinitely for statistical and platform-improvement purposes.
7. Your Privacy Rights
As a bah88 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request" along with your registered email address and a description of your request. bah88 will respond within 30 calendar days of receiving a verified request.
You may request a copy of all personal data bah88 holds about you. We will provide this in a commonly used electronic format within 30 days.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (e.g., mobile number updates) can often be made directly via your account settings.
You may request that bah88 delete your personal data. This right is subject to our legal retention obligations — for example, financial transaction records must be kept for 7 years. Where deletion is not possible in full, we will anonymise data to the greatest extent practicable.
You may ask bah88 to restrict processing of your data in certain circumstances — for example, while the accuracy of data is being contested or while an objection to processing is being assessed.
Where processing is based on your consent or on a contract, you may request a structured, machine-readable export of the personal data you have provided to bah88 (e.g., account profile and transaction history in CSV format).
You may object at any time to processing of your data for direct marketing purposes. You may also object to processing based on legitimate interest grounds, in which case bah88 will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests.
7.1 Identity Verification for Rights Requests
To protect your data from unauthorised disclosure, bah88 will verify your identity before processing any privacy rights request. Verification typically requires you to confirm your registered email address and one additional identifier such as your registered mobile number or a partial transaction reference. bah88 will not charge a fee for responding to rights requests unless a request is manifestly unfounded or repetitive, in which case a reasonable administrative fee may apply.
7.2 Withdrawing Consent
Where bah88 processes your data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal. To withdraw consent, contact [email protected] or update your preferences directly within your account settings panel.
8. Contact & Policy Updates
8.1 How to Contact bah88 About Privacy
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way bah88 handles your personal data, please contact our support team directly:
Please include "Privacy Policy Enquiry" or "Privacy Rights Request" in the subject line of your email along with your registered bah88 username or email address so that we can locate your account and respond accurately. bah88 treats all privacy-related correspondence with the highest level of confidentiality.
8.2 Changes to This Privacy Policy
bah88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, Platform functionality, or data processing practices. When material changes are made, bah88 will:
- Update the "Effective Date" displayed at the top of this page and in the effective date bar below the hero section.
- Send a notification to all registered players via their registered email address at least 14 days before the updated policy takes effect, summarising the key changes.
- Display a prominent notice on the bah88 Platform homepage for a period of not less than 14 days following the update.
Your continued use of the bah88 Platform after the revised Privacy Policy takes effect constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you must discontinue use of the Platform and may request account closure by contacting [email protected]. Historical versions of this Privacy Policy are available upon request.
Policy Commitments
- No selling of personal data — ever
- SSL encryption on all data in transit
- Rights requests answered within 30 days
- Breach notification within 72 hours
- 14-day advance notice of policy changes
- 24/7 English-language privacy support
- Strict data minimisation principles
Questions About Your Privacy?
Our support team is available 24/7 in English to address any privacy-related question or data rights request. You can also explore our FAQ for quick answers, review our Responsible Gaming tools, or head to bah88 Casino to enjoy our full game library. 18+ only. Play responsibly.