ban88 Privacy Policy —
How We Protect
Your Personal Data

ban88 ("we", "us", "our", "the Platform") is an online sports betting and casino entertainment service operating at ban88.io, serving eligible adult players in Bangladesh. This Privacy Policy applies to all personal data collected and processed by ban88 in connection with the registration, operation, and closure of player accounts, and the delivery of all associated services including sports betting, live casino, slot games, and fishing games.

For the purposes of this Privacy Policy, ban88 acts as the data controller in respect of the personal information you provide when using the ban88 platform. As data controller, ban88 determines the purposes and means by which your personal data is processed.

By registering a ban88 account or using any feature of the ban88 platform, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Privacy Policy, you should not use the ban88 platform.

ban88 collects personal data in several contexts. The categories of data we collect, and the circumstances in which they are collected, are set out below:

ban88 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, biometric data, or health records, except where the collection of such data is expressly required for responsible gaming assessment purposes and you have provided your explicit consent to that collection.

Where you choose not to provide certain categories of data — particularly identity verification documents — ban88 may be unable to complete account verification, process withdrawals, or permit access to certain platform features. In such cases, ban88 will communicate clearly which features are affected.

ban88 uses the personal data it collects for the following specific and defined purposes:

• Account registration and management: To create, maintain, and administer your ban88 player account, including verifying your identity, age (21+), and eligibility to use the platform in accordance with our Terms & Conditions.
• Service delivery: To enable you to place bets, participate in casino games, make deposits and withdrawals, claim bonuses, and use all features of the ban88 platform.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer, and to maintain accurate financial records associated with your account activity.
• Identity verification (KYC/AML): To verify your identity and comply with anti-money-laundering obligations, including screening your details against applicable watchlists and sanctions databases.
• Fraud prevention and platform security: To detect, investigate, and prevent fraudulent activity, account abuse, collusion, and other prohibited conduct described in the ban88 Terms & Conditions.
• Responsible gaming: To monitor account activity for indicators of problem gambling behaviour and to administer self-exclusion requests, deposit limits, and other responsible gaming tools you have applied to your account.
• Customer support: To respond to your enquiries, process complaints, and resolve disputes in relation to your account or any aspect of the ban88 service.
• Platform improvement: To analyse aggregated and anonymised usage data for the purpose of improving the ban88 platform, game selection, payment options, and user experience.
• Legal compliance: To comply with any legal, regulatory, or court-ordered obligation applicable to ban88 in connection with its operations, including the retention of financial records and the reporting of suspicious activity where required.
• Marketing communications: Where you have provided consent or where we have a legitimate interest to do so, to send you promotional offers, bonus notifications, and platform news relevant to your account. You may opt out of marketing communications at any time (see Section 12).

ban88 does not use your personal data for automated profiling that produces legal or similarly significant effects without human review. Where ban88 uses automated tools to flag accounts for review — such as fraud detection or responsible gaming monitoring — a member of the ban88 compliance or support team will always conduct a human review before any account action is taken.

For each purpose described in Section 3, ban88 relies on one of the following legal bases for processing your personal data:

Where ban88 relies on legitimate interests as the legal basis for processing, we have assessed that those interests are not overridden by your privacy rights and interests. You may request further information about any such assessment by contacting ban88 support at the details provided in Section 14.

ban88 does not sell your personal data. We share your personal data only in the following limited and controlled circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, and partner banks receive the minimum account and transaction data necessary to process your deposits and withdrawals securely.
• Identity verification providers: Third-party KYC and AML screening services receive your identity documents and personal details for the purpose of verifying your identity and checking against applicable sanctions and watchlists. These providers are bound by strict data processing agreements.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and anonymised player identifier to facilitate your access to their games hosted on the ban88 platform. These providers do not receive your full identity or financial data.
• Platform infrastructure providers: Cloud hosting and content delivery partners who provide the technical infrastructure on which ban88 operates. These providers process data strictly in accordance with ban88's instructions and are contractually prohibited from using your data for their own purposes.
• Fraud prevention and analytics services: Third-party tools used to detect fraudulent activity and monitor platform integrity. Data shared with these services is subject to contractual restrictions limiting its use to fraud prevention only.
• Legal and regulatory authorities: Where ban88 is required by applicable law, court order, or regulatory direction to disclose personal data to a government body, law enforcement agency, or financial intelligence unit, we will comply with that obligation. Where legally permissible, ban88 will notify the affected player of any such disclosure.

ban88 does not transfer your personal data to recipients in jurisdictions that do not maintain an adequate standard of data protection without implementing appropriate safeguards, including contractual data protection clauses.

ban88 uses cookies and similar tracking technologies on its web platform to provide a functional, secure, and personalised experience for players. The categories of cookies we use are as follows:

ban88 does not use third-party advertising or behavioural targeting cookies. We do not share cookie data with advertising networks or data brokers for the purpose of serving targeted advertisements to you on other websites or platforms.

You may manage cookie settings through your browser's privacy controls. Disabling strictly necessary or security cookies may impair your ability to access the ban88 platform or may prevent certain features from functioning correctly.

ban88 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS): All data transmitted between your device and the ban88 platform is encrypted in transit using TLS 1.2 or higher, preventing interception of your data over the network.
• Encryption at rest: Sensitive personal data including identity documents, financial records, and payment method references are stored using strong encryption. Encryption keys are managed separately from the encrypted data stores.
• Access controls: Access to personal data within ban88's systems is restricted on a strict need-to-know basis. Only personnel whose role requires access to specific categories of player data are granted that access, and all access is logged and audited.
• Multi-factor authentication: Administrative access to ban88's backend systems requires multi-factor authentication. Players are strongly encouraged to enable two-factor authentication on their player accounts via the account security settings dashboard.
• Regular security assessments: ban88's technical infrastructure is subject to regular security reviews, including vulnerability scanning and penetration testing conducted by independent security professionals.
• Incident response: ban88 maintains a documented data breach response procedure. In the event of a data breach that is likely to affect your rights or interests, ban88 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

ban88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required to comply with applicable legal, regulatory, or financial record-keeping obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is either securely deleted from ban88's systems or permanently anonymised so that it can no longer be associated with any individual player. Anonymised data may be retained indefinitely for statistical and analytical purposes without restriction.

Where you request deletion of your personal data (see Section 9), ban88 will honour that request to the extent permitted by applicable legal and regulatory obligations. Data that must be retained for legal compliance cannot be deleted upon request, but will be restricted from use for any other purpose during the mandatory retention period.

As a ban88 player, you hold the following rights in respect of the personal data we hold about you. To exercise any of these rights, please contact ban88 support using the details provided in Section 14. ban88 will respond to all data rights requests within 30 days of receipt.

ban88 will not charge a fee for exercising any of the above rights unless a request is manifestly unfounded or excessive. In such cases, ban88 may charge a reasonable administrative fee or decline to act on the request, providing written reasons for that decision. If you are dissatisfied with ban88's response to a data rights request, you may escalate your concern to the relevant data protection authority in your jurisdiction.

The ban88 platform is strictly intended for adults aged 21 and above. ban88 does not knowingly collect personal data from persons under the age of 21. If ban88 becomes aware that personal data has been submitted by or on behalf of a person under 21, the associated account will be immediately closed, all collected data will be deleted (subject to any mandatory retention obligations), and any deposits received will be returned via the original payment method.

ban88 recommends that parents and guardians use parental control software to prevent minors from accessing online gambling platforms. ban88 supports the responsible use of such tools and encourages any adult player who shares a device with a minor to enable appropriate access restrictions.

The ban88 platform may contain references to or integrations with third-party services, including game providers, payment processors, and identity verification services. This Privacy Policy applies only to the personal data collected and processed directly by ban88 at ban88.io and through the ban88 application.

ban88 does not accept responsibility for the privacy practices or data handling procedures of any third party, including game content providers whose games are accessible through the ban88 platform. ban88 recommends that you review the privacy policy of any third-party service provider whose services you access in connection with your use of the ban88 platform.

ban88 may send you promotional offers, bonus notifications, and platform updates by email or SMS where you have provided consent to receive marketing communications, or where ban88 has a legitimate interest in contacting you as an existing player about relevant offers. Marketing communications from ban88 will always be clearly identified as promotional material.

You may withdraw consent to marketing communications at any time by:

• Using the unsubscribe link included in any marketing email sent by ban88.
• Updating your notification preferences in the ban88 account settings dashboard.
• Contacting ban88 support at [email protected] with the subject line "Marketing Opt-Out".

Opt-out requests will be processed within 5 business days. Please note that opting out of marketing communications does not affect the delivery of transactional or service-related communications, such as account notifications, deposit confirmations, withdrawal updates, security alerts, and responsible gaming messages. These communications are essential to the operation of your account and cannot be disabled.

ban88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal or regulatory requirements, or the scope of services offered on the ban88 platform. All updates to this Privacy Policy will be published at ban88.io/privacy-policy with a revised "Last Updated" date at the top of the document.

Where a proposed change is material — meaning it significantly affects how we collect, use, or share your personal data — ban88 will notify registered players via the email address associated with their account at least 14 days before the change takes effect. Continued use of the ban88 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms.

If you disagree with any change to this Privacy Policy, you may close your account by contacting ban88 support before the effective date of the change. Account closure does not affect ban88's right to retain data in accordance with the mandatory retention periods described in Section 8.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ban88 handles your personal data, please contact our support team using the details below. All data-related enquiries are handled by ban88's privacy and compliance team and will receive a substantive response within 30 days of receipt.

Please include your registered account email address and a clear description of your request or concern when contacting ban88 about a data matter. This will allow our privacy team to locate your account records and respond to your request efficiently.

ban88 is committed to resolving all data-related concerns fairly and promptly. If you remain dissatisfied with ban88's response after raising a concern through our support channel, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.