bb8bd Privacy Policy — How We Handle Your Personal Data

This Privacy Policy ("Policy") is published by bb8bd ("the Platform", "we", "us", "our"), which is operated by an internationally licensed offshore entity and accessible at https://bb8bd.bio. This Policy explains how bb8bd collects, processes, stores, shares, and protects personal data that is provided to us by players and visitors based in Bangladesh and other permitted markets, in connection with the use of our online betting and gaming services.

This Policy applies to all personal data collected through the bb8bd website, any associated mobile-optimised interfaces, our customer support channels, and any other interaction you may have with bb8bd as a registered player or as a visitor who has not yet completed registration. It should be read alongside our Terms & Conditions, which govern the overall relationship between you and bb8bd.

We are committed to handling your personal data responsibly, transparently, and in accordance with internationally recognised data protection principles. If you have any questions about this Policy or about the way your personal data is used, please contact us at [email protected] at any time.

bb8bd collects personal data from you in several ways: directly (when you provide it to us), automatically (when you use the Platform), and from third parties (such as payment processors and identity verification services). The categories of personal data we collect are set out below.

bb8bd does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health information, or biometric identifiers beyond what is necessary for age and identity verification purposes. Where a government-issued ID document incidentally contains sensitive data (for example, a national ID card that records religion), that data is processed solely for the purpose of verifying your identity and is not used for any other purpose.

bb8bd uses the personal data it collects for the following specific purposes. Each purpose is linked to a legal basis, which is set out in full in Section 4 of this Policy.

• Account creation and management: To set up, maintain, and administer your bb8bd account, including processing your registration details, managing your account balance, and keeping a record of your activity.
• Identity and age verification (KYC): To verify that you are who you claim to be and that you meet the minimum age requirement of 21 years before granting access to real-money play or processing a withdrawal. KYC is a mandatory operational requirement.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank transfer channels, including verifying that payment methods are registered in your name to prevent third-party payment fraud.
• Fraud prevention and anti-money laundering (AML): To detect, investigate, and prevent fraudulent activity, money laundering, and any other financial crimes. This includes automated screening of transaction patterns and, where necessary, filing reports with relevant authorities.
• Customer support: To respond to your queries, process complaints, and provide technical assistance through our live chat and email support channels.
• Service improvement: To analyse usage data in order to improve the Platform's functionality, user experience, game selection, and performance. This processing is carried out using aggregated and, where practicable, anonymised data.
• Responsible gaming compliance: To monitor your gambling activity for signs of problem gambling behaviour, to administer self-exclusion and cooling-off requests, to enforce deposit limits, and to send responsible gaming alerts where patterns in your usage suggest that such intervention may be appropriate.
• Legal and regulatory compliance: To comply with applicable laws, regulations, court orders, and lawful requests from regulatory or law enforcement authorities, including record-keeping obligations and the reporting of suspicious transactions.
• Marketing communications: To send you promotional offers, bonus notifications, and news about new games or features on bb8bd, where you have given your explicit consent to receive such communications. See Section 12 for full details on how to manage your marketing preferences.
• Security monitoring: To detect and respond to security threats, unauthorised account access, and any use of the Platform that violates our Terms & Conditions.

bb8bd processes your personal data on the following legal bases, in accordance with internationally recognised data protection frameworks:

• Contractual necessity: The majority of our processing — including account management, payment processing, and KYC verification — is necessary for the performance of the contract between you and bb8bd (as set out in the Terms & Conditions). Without this processing, we cannot provide the services you have agreed to receive.
• Legal obligation: Certain processing activities — including AML transaction monitoring, fraud reporting, and the retention of financial records — are required by applicable laws and regulations. bb8bd has no discretion to opt out of such processing.
• Legitimate interests: Some processing activities — including security monitoring, service improvement analytics, and responsible gaming oversight — are carried out on the basis of bb8bd's legitimate interests in operating a safe, fair, and commercially viable platform, where those interests are not overridden by your own rights and interests.
• Consent: Where bb8bd processes your personal data for marketing communications (promotional emails, SMS offers), that processing is conducted on the basis of your freely given, specific, and informed consent. You may withdraw that consent at any time, as described in Section 12.

bb8bd uses cookies and similar tracking technologies (such as web beacons and local storage objects) to operate the Platform, personalise your experience, and analyse how the site is used. Cookies are small text files placed on your device when you visit a website. They do not contain executable code and cannot access files stored on your device.

The categories of cookies used on bb8bd are as follows:

• Strictly necessary cookies: These are essential for the Platform to function. They maintain your login session, remember your preferences, and enable secure transactions. You cannot opt out of strictly necessary cookies without affecting the Platform's ability to operate correctly.
• Performance and analytics cookies: These cookies collect information about how visitors use the Platform — for example, which pages are visited most frequently and whether any error messages are encountered. This information is used in aggregated form to improve the Platform. These cookies do not identify you personally.
• Functional cookies: These cookies remember choices you have made — such as your preferred language settings or your last-used game category — in order to provide a more personalised experience on your next visit.
• Targeting and session tracking cookies: These cookies are used to keep track of your browsing session for security purposes, including detecting unusual login patterns that may indicate unauthorised access attempts.

You can manage your cookie preferences through your browser settings. Most modern browsers allow you to refuse all cookies, or to accept cookies from specific websites only. Please note that disabling certain cookies may affect the functionality of the bb8bd Platform and may prevent you from accessing some features.

bb8bd does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only in the following carefully controlled circumstances:

• Payment processors: We share the payment details and transaction information necessary to process your deposit or withdrawal with your chosen payment provider (bKash, Nagad, Rocket, Upay, or supported bank partners including Dutch-Bangla Bank, City Bank, BRAC Bank, and Sonali Bank). These providers process your data as independent data controllers under their own privacy policies.
• Identity verification providers: We share identity documents and registration data with our KYC technology partners for the purpose of automated and manual identity verification. These partners are contractually required to process your data solely for verification purposes.
• Game providers: When you play a game within the bb8bd Casino lobby, a connection is established with the game provider's servers (such as Pragmatic Play, Evolution Gaming, Ezugi, Microgaming, NetEnt, or Spribe). The game provider may receive certain technical data (such as your session token and bet values) as part of the game engine's operation. Game providers do not receive your full identity data.
• Fraud prevention and AML service providers: We share transaction pattern data with specialist fraud detection and AML compliance services that help us identify and respond to suspicious activity. These services process data under strict confidentiality agreements.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of bb8bd, its players, or the public.
• Cloud and infrastructure providers: Our Platform infrastructure relies on cloud hosting and CDN services. These providers process technical and usage data as part of their service delivery and are bound by contractual data processing agreements that require them to maintain appropriate security standards.

bb8bd is operated by an offshore entity, and as a result some of your personal data may be transferred to and processed in countries outside Bangladesh. These countries may have data protection laws that differ from those in Bangladesh. Where such transfers occur, bb8bd takes steps to ensure that your data is afforded an equivalent level of protection to that which it would receive if it remained within Bangladesh.

Safeguards we use for international data transfers include:

• Entering into data processing agreements with third-party service providers that incorporate internationally recognised standard contractual clauses or equivalent data transfer mechanisms.
• Ensuring that cloud and infrastructure partners operate data centres that maintain ISO 27001 certification or an equivalent recognised security standard.
• Conducting due diligence on all third-party processors to verify that their data protection practices meet bb8bd's minimum standards before any data sharing commences.

By using the bb8bd Platform, you acknowledge that your personal data may be transferred internationally as described in this section and consent to such transfers being carried out under the safeguards described above.

bb8bd retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention guidelines apply:

Once the applicable retention period expires, personal data is securely deleted from bb8bd's systems or, where deletion is not technically feasible (for example, in the case of data held in encrypted backups), anonymised so that it can no longer be linked to any identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

As a data subject, you hold a number of rights in relation to the personal data that bb8bd holds about you. These rights are described below. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Subject Request — [Your Account Username]".

bb8bd will respond to all data subject requests within 30 calendar days of receipt of a verified request. Verification may require you to confirm your identity before we can process the request. There is no charge for submitting a data subject request, except where requests are manifestly unfounded or excessive, in which case a reasonable administrative fee may be applied.

bb8bd is strictly an adults-only platform. The minimum age to register and play on bb8bd is 21 years. We do not knowingly collect personal data from any individual under the age of 21. Our KYC verification process is specifically designed to detect and prevent underage registration.

If bb8bd becomes aware that personal data has been collected from an individual under the age of 21, that account will be suspended immediately, all associated funds will be frozen pending investigation, and the personal data of the minor will be deleted as promptly as our legal obligations permit.

If you are a parent or guardian and you believe that a minor in your care has registered an account on bb8bd, please contact us immediately at [email protected]. We will investigate the matter and take appropriate action within 48 hours of receiving your report.

bb8bd takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or alteration. These measures include but are not limited to the following:

• SSL/TLS encryption: All data transmitted between your device and the bb8bd Platform is encrypted using industry-standard SSL/TLS protocols. This ensures that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Encrypted data storage: Personal data held in bb8bd's databases is encrypted at rest using AES-256 or equivalent encryption standards. Encryption keys are managed separately from the encrypted data and are rotated on a regular schedule.
• Access controls: Access to personal data within bb8bd's internal systems is strictly controlled on a need-to-know basis. Staff members are granted access only to the data required to perform their specific job function. All access is authenticated and fully logged.
• Two-factor authentication (2FA): bb8bd encourages all players to enable 2FA on their accounts as an additional layer of protection against unauthorised login. Internal staff systems require 2FA as a mandatory control.
• Penetration testing and vulnerability assessments: bb8bd's Platform and infrastructure undergo regular independent security assessments to identify and remediate potential vulnerabilities before they can be exploited.
• Incident response: bb8bd maintains a documented data breach response plan. In the event of a confirmed personal data breach that poses a risk to your rights and freedoms, we will notify affected users without undue delay and take immediate steps to contain and remediate the incident.
• Staff training: All bb8bd personnel who handle personal data receive regular data protection and security awareness training. Our data protection obligations are embedded in employment contracts and internal policies.

While bb8bd takes every reasonable precaution to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account password and for ensuring that you log out of your account when using shared devices. If you suspect that your account has been compromised, contact bb8bd support immediately at [email protected].

bb8bd may send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, seasonal offers, and platform updates. We will only send you such marketing communications where you have given your explicit consent to receive them, either during the registration process or through your account settings at a later date.

Each marketing communication we send will include a clear and easy method to opt out of future messages. You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "Unsubscribe" link included at the bottom of any marketing email;
• Updating your communication preferences in your bb8bd account settings dashboard;
• Contacting our support team at [email protected] and requesting that your marketing preferences be updated.

Withdrawal of consent for marketing communications will be processed within 5 business days. Please note that withdrawing your consent to receive marketing messages does not affect your consent to receive transactional communications, such as deposit confirmation emails, withdrawal processing notifications, account security alerts, and responsible gaming messages. These operational communications are sent on the basis of contractual necessity and cannot be opted out of while your account remains active.

bb8bd reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our business operations, or our data processing practices. When we make a material change to this Policy — that is, a change that meaningfully affects how we collect, use, or share your personal data — we will notify you by:

• Displaying a prominent notice on the bb8bd homepage and within the Platform for a period of not less than 14 days before the change takes effect;
• Sending a notification to the email address registered on your account, where the change is significant enough to warrant direct communication.

The "Last Updated" date displayed at the top of this Policy will always reflect the date on which the most recent version came into effect. We recommend that you review this Policy periodically to stay informed about how bb8bd handles your personal data. Minor amendments — such as corrections of typographical errors or clarifications that do not change the substance of the Policy — may be made without prior notice.

Your continued use of the bb8bd Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should discontinue use of the Platform and contact us to request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way bb8bd processes your personal data, please contact our data protection team using the details below. We are committed to resolving all privacy-related queries promptly and transparently.

• Data protection enquiries email: [email protected]
• Subject line for data subject requests: "Data Subject Request — [Your Account Username]"
• Subject line for privacy complaints: "Privacy Complaint — [Your Account Username]"
• Response time: All privacy enquiries are acknowledged within 24 hours (Bangladesh Standard Time, BST UTC+6) and receive a substantive response within 30 calendar days.
• Support availability: 24 hours a day, 7 days a week, including Bangladeshi public holidays

If you submit a formal privacy complaint and are not satisfied with bb8bd's response, you may escalate the matter through bb8bd's internal escalation process by requesting in writing that your complaint be reviewed by a senior member of the data protection team. bb8bd will provide a final written decision on all escalated complaints within 14 calendar days of the escalation request being received.