bbb8 Privacy Policy

1. Introduction

bbb8 ("the Company", "we", "us", "our") operates bbb8.io, an online casino and sports betting platform serving players in Bangladesh and internationally. In the course of providing our services, we collect and process personal data relating to our players, visitors, and prospective customers. This Privacy Policy sets out our approach to data collection, processing, storage, and disclosure in a transparent and accessible way.

bbb8 is committed to handling personal data responsibly and in accordance with applicable data protection principles. We collect only the data that is necessary to deliver and improve our services, verify player identity, process payments, fulfil our legal obligations, and maintain a safe platform. We do not sell personal data to third parties for marketing or commercial profiling purposes.

This policy applies to all personal data collected through bbb8.io, our mobile interface, customer support communications, and any other digital touchpoint associated with the bbb8 brand. It should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy.

2. Data We Collect

bbb8 collects the following categories of personal data from players and visitors to bbb8.io:

2.1 Identity & Registration Data

• Full legal name
• Date of birth
• Gender (where provided voluntarily)
• Government-issued ID number (national ID, passport number) — collected during KYC verification
• Username chosen at registration

2.2 Contact Data

• Email address
• Mobile phone number
• Residential address (city, district, country)

2.3 Financial & Payment Data

• bKash, Nagad, Rocket, or Upay mobile wallet identifiers (account numbers used for transactions)
• Visa or Mastercard details (card type, last four digits, expiry — full card numbers are never stored by bbb8)
• Bank account details where relevant to withdrawals via Dutch-Bangla Bank or other supported institutions
• Transaction history including deposit amounts, withdrawal amounts, and timestamps

2.4 Gaming & Betting Activity Data

• Game sessions, wager amounts, win/loss records, and bonus usage history
• Sports betting selections, stake amounts, and settlement records
• Responsible gaming tool usage (deposit limits set, self-exclusion periods, session alerts triggered)

2.5 Technical & Device Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser type and version
• Session timestamps, page views, and navigation paths on bbb8.io
• Cookies and similar tracking identifiers (see Section 9)

2.6 Communications Data

• Contents of live chat conversations with the bbb8 support team
• Email correspondence sent to or received from bbb8
• Complaint and dispute records

3. How Data Is Collected

bbb8 collects personal data through the following channels:

• Direct provision: Data you supply when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated collection: Data gathered automatically as you browse and use bbb8.io, including via cookies, server logs, and analytics tools embedded in the Platform.
• Third-party providers: Data received from payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank), identity verification services, fraud prevention partners, and game data suppliers.
• Publicly available sources: In certain cases where required for KYC or fraud prevention, information from publicly accessible records may be used to verify the accuracy of data you have provided.

4. Purpose of Processing

bbb8 processes personal data for the following specific purposes:

bbb8 does not process personal data for automated profiling that produces legal or similarly significant effects on players without human review.

5. Legal Basis for Processing

bbb8 relies on the following legal bases to process personal data, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between bbb8 and the player — including account creation, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering obligations, age verification requirements, and record-keeping duties.
• Legitimate interests: Processing carried out in bbb8's legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where such interests are not overridden by the player's rights and freedoms.
• Consent: Where bbb8 relies on consent (for example, for optional marketing communications), players are entitled to withdraw that consent at any time by contacting the support team or updating account preferences.

6. Data Sharing & Disclosure

bbb8 does not sell, rent, or trade personal data to third parties. Data may be shared with the following categories of recipients only to the extent necessary for the purposes described in this policy:

6.1 Payment Processors

Transaction data is shared with bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Dutch-Bangla Bank as required to process deposits and withdrawals. Each processor operates under its own privacy terms and applicable financial regulations.

6.2 Identity Verification Providers

Where KYC checks are performed by a third-party verification service, identity documents and personal details are shared with that provider under a strict data processing agreement.

6.3 Game & Platform Technology Providers

Game studios and platform technology suppliers (including but not limited to Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi) may receive session and gameplay data necessary to deliver their games through the bbb8 Platform.

6.4 Fraud Prevention & Security Partners

Technical and behavioural data may be shared with fraud detection and cybersecurity providers to protect the integrity of the Platform and the safety of player accounts.

6.5 Legal & Regulatory Authorities

bbb8 may disclose personal data to competent legal, regulatory, or law enforcement authorities where required to do so by applicable law, court order, or in connection with investigations into suspected fraud, money laundering, or other criminal activity.

6.6 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of assets involving bbb8, player data may be transferred to the relevant successor entity, subject to equivalent data protection obligations.

7. Data Retention

bbb8 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to applicable legal retention obligations. The following indicative retention periods apply:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of five years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction and financial data: Retained for a minimum of five years from the date of each transaction.
• Customer support and communications data: Retained for up to three years from the date of the interaction, or longer where relevant to an ongoing dispute or investigation.
• Technical and session data: Retained for up to 13 months from the date of collection for analytics and security purposes.
• KYC documents: Retained for a minimum of five years following account closure or the date of the last transaction, whichever is later.

When personal data is no longer required, bbb8 will securely delete or anonymise it in accordance with our internal data lifecycle management procedures.

8. Data Security

bbb8 employs a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your device and bbb8.io is protected by 256-bit SSL encryption.
• Access controls: Personal data is accessible only to authorised personnel on a strict need-to-know basis, governed by role-based access controls.
• Data minimisation: bbb8 collects and retains only the minimum personal data necessary for each specific processing purpose.
• Pseudonymisation: Where technically feasible, personal data used for analytics and internal reporting is pseudonymised to reduce re-identification risk.
• Regular security assessments: The bbb8 Platform undergoes periodic security reviews and vulnerability assessments to identify and address potential risks.
• Payment security: Full payment card numbers are never stored on bbb8 servers. Card transactions are handled directly by PCI-DSS compliant payment processors.

While bbb8 takes all reasonable steps to protect personal data, no online platform can guarantee absolute security. Players are encouraged to use a strong, unique password for their bbb8 account and to report any suspected unauthorised access to the support team immediately.

9. Cookies & Tracking

bbb8.io uses cookies and similar tracking technologies to deliver a functional, personalised, and secure user experience. The categories of cookies used on bbb8.io are as follows:

Strictly necessary cookies cannot be disabled as they are essential to Platform functionality. For other cookie categories, you may manage your preferences through your browser settings. Please note that disabling certain cookies may affect the performance or availability of some features on bbb8.io.

10. Your Data Rights

As a data subject, you hold the following rights in relation to the personal data bbb8 holds about you. To exercise any of these rights, please contact the bbb8 support team via live chat or at [email protected].

• Right of access: You may request a copy of the personal data bbb8 holds about you, along with information about how it is processed.
• Right to rectification: You may request that inaccurate or incomplete personal data held by bbb8 be corrected or completed without undue delay.
• Right to erasure: In certain circumstances, you may request that bbb8 delete your personal data. This right is subject to overriding legal retention obligations, particularly those related to anti-money laundering compliance.
• Right to restriction of processing: You may request that bbb8 restrict the processing of your personal data in specific circumstances, such as where you contest the accuracy of the data or have objected to processing.
• Right to data portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing carried out on the basis of legitimate interests. bbb8 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

bbb8 aims to respond to all data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, with prior notice provided to you. Identity verification may be required before any request is fulfilled.

11. Minors & Age Policy

Age verification is conducted as part of the standard KYC process for all registered players. Any player who is found to have misrepresented their age during registration will have their account terminated and any funds held in the account may be forfeited in accordance with the bbb8 Terms & Conditions. Parents and guardians who believe a minor may have registered on bbb8.io are encouraged to contact the support team immediately.

12. International Data Transfers

bbb8 operates internationally and may transfer personal data to service providers and technology partners located outside of Bangladesh. Where such transfers take place, bbb8 takes appropriate steps to ensure that personal data receives an adequate level of protection consistent with the principles set out in this Privacy Policy.

Safeguards applied to international data transfers may include contractual clauses requiring recipients to maintain equivalent data protection standards, as well as technical measures such as encryption in transit and at rest. Players in Bangladesh should be aware that data protection laws in other jurisdictions may differ from those applicable locally.

13. Changes to This Policy

bbb8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in data processing practices, applicable law, or Platform functionality. Material changes will be communicated to registered players via a notice on bbb8.io or by email to the registered account address prior to the changes taking effect.

The effective date at the top of this document will be updated each time a revision is published. Players are encouraged to review this Privacy Policy periodically. Continued use of bbb8.io following the publication of a revised Privacy Policy constitutes acceptance of the updated terms.

14. Contact Information

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bbb8 handles your personal data, please contact our support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via bbb8.io
• Email: [email protected] (plain text — not a clickable link)

bbb8 takes all privacy-related enquiries seriously and aims to acknowledge formal written requests within two business days (Bangladesh Standard Time, UTC+6). Where a request involves a complex data rights exercise, we will provide a written update within 30 calendar days of receipt.