Privacy policy overview

The platform may collect the following personal data to provide services and meet legal obligations:

• Identification and KYC information: full name, date of birth, national ID or passport, KYC document images, proof of address.
• Contact details: email, phone number, postal address.
• Account data: username, settings, responsible gaming preferences, verification status.
• Transaction and payment information: deposits, withdrawals, payment method details processed by providers.
• Technical and device data: IP address, device identifiers, browser type, app version, log files, approximate location.
• Usage information: pages visited, time on site, interactions that help improve online services.

Why this information is collected:

• To open and manage accounts and deliver requested services.
• To process payments and resolve billing issues.
• To conduct identity, age, fraud, and anti-money laundering checks.
• To provide customer support and handle complaints.
• To improve websites, security, and user experience through analytics.
• To meet legal and regulatory requirements in Bangladesh and abroad.

Protection measures:

• Encryption in transit using TLS and encryption at rest for sensitive records.
• Strong access controls, role-based permissions, and audit logging.
• Secure credential storage, network segmentation, and regular security testing.
• Staff training, vendor due diligence, and incident response procedures.
• Card data, if used, handled in line with PCI DSS by certified processors.

User rights:

• Access a copy of personal data.
• Request correction of inaccurate information.
• Request deletion where permitted by law.
• Object to or restrict processing in certain cases.
• Withdraw consent for optional uses at any time.

Compliance: Operates in line with applicable Bangladesh laws, including the Information and Communication Technology Act 2006, the Cyber Security Act 2023, and the Money Laundering Prevention Act 2012, and follows recognised international data protection standards such as GDPR principles where relevant.

The platform uses personal data only for lawful purposes and in a transparent way:

• Account services: registration, verification, login, profile management, responsible gaming settings.
• Transactions: deposits, withdrawals, refunds, chargeback handling, payment reconciliation.
• Customer support: responding to requests, complaints, dispute resolution.
• Security and integrity: fraud detection, risk scoring, abuse prevention, access control.
• Compliance: KYC, AML and CFT screening, record keeping, responding to lawful requests.
• Analytics and service improvement: performance monitoring, bug fixing, user experience optimisation.
• Marketing: only where consent exists, including email or notifications that can be opted out at any time.

Legal bases include consent, performance of a contract, legitimate interests in running secure services, and compliance with legal obligations. Processing is documented and reviewed to ensure fairness and necessity.

How to make a request:

• Submit a request from the account settings or email [email protected].
• Provide enough information to locate the records and verify identity.
• A response is usually provided within 30 days, or later if allowed by law.

Corrections:

• If any personal information is inaccurate, a user can request an update.
• Supporting documents may be required for changes to identification or address.

Deletion:

• A user may request deletion of personal data where permitted.
• Some records must be retained to meet AML, tax, or dispute requirements. Typical retention for KYC and transaction records is up to 5 years after account closure, unless a longer period is required by law or for ongoing proceedings.

By using Babu88, the user consents to security checks, risk assessments, and the processing of payment and verification information by payment providers, banks, identity services, and screening tools that support safe operation of the services.

The services are intended for persons aged 18 years or older. The operator cannot verify age without identification documents. If an account is found to belong to a minor, access will be restricted and personal data will be deleted where permitted by law. A parent or legal guardian may request deletion by contacting [email protected] and providing proof of authority and the relevant account details.

Personal information may be stored or processed outside Bangladesh in countries where partners, hosting providers, payment processors, or group companies operate. By using the website and services, the user consents to these international transfers. Confidentiality is protected by contractual obligations, strict access controls, and security standards imposed on all partners. Standard contractual clauses or equivalent safeguards are used where required. Data location can vary depending on the service components engaged.

This disclaimer forms part of the policy and may clarify or limit the scope or effects of certain rules to the extent permitted by law. It applies when the user accepts the policy through account creation, a click-to-accept mechanism, signature equivalents, or continued use of the services. If any provision is unlawful in a specific jurisdiction, the remaining provisions continue to apply to the fullest extent allowed.

Cookies are small files placed on a device to store and retrieve information. The platform uses cookies and similar tools for:

• Statistics and analytics to understand usage and improve services.
• Behaviour analysis to detect fraud and enhance security.
• Personalisation such as remembering preferences and language.
• Site improvement, performance measurement, and error tracking.

Retention: cookies are generally kept for up to 1 year, after which they expire or are removed. A user can manage or block cookies through browser settings, but some essential cookies are necessary for core functions and disabling them may affect the online experience.

Using the website and services means full acceptance of this policy and any terms referenced here. The current version of the policy prevails over earlier versions. Updates will be posted with a revised date, and continued use after changes indicates agreement to the updated document.

Personal data may be shared in the following situations:

• Service provision: payment processors, banks, identity verification and screening providers, cloud hosting, analytics, customer support tools, and communication platforms.
• Legal and compliance: responding to court orders, regulatory requests, AML and CFT obligations, audit, and tax requirements.
• Disputes and fraud prevention: chargeback handling, recovery, legal counsel, and fraud prevention agencies.
• Marketing: only where the user has consented and can opt out at any time.

A list or description of key third-party categories is maintained on the website. If a specific party is not listed, the purpose and scope of sharing will be communicated where required. Providing personal information constitutes consent to such sharing subject to contractual safeguards. The platform does not sell personal data.

The website may contain links to other websites or services that have their own privacy policies. The operator is not responsible for how those parties handle data. Users should review the privacy notices on any external site and proceed with caution when providing personal information outside this website.