bahu88 Privacy Policy

bahu88 (operating through the domain bahu88.app) is the data controller responsible for the personal data of all registered players and website visitors. As data controller, bahu88 determines the purposes for which your personal data is collected and the means by which it is processed.

All data-related enquiries, access requests, and complaints should be directed to the bahu88 Data Protection team via email at [email protected] or via the 24/7 live chat service accessible from your account dashboard. bahu88 will acknowledge all data-related requests within 3 business days and will provide a substantive response within 30 calendar days.

bahu88 collects personal data across several categories depending on your level of interaction with the platform. The following table provides an overview of the categories of data collected, the specific data points within each category, and the reason each category is required:

bahu88 does not collect or process special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data) unless you voluntarily disclose such information in the course of a responsible gaming self-assessment or support interaction.

bahu88 collects personal data through the following means:

• Direct submission: Data you provide when completing the registration form, submitting KYC documents, making a deposit or withdrawal request, contacting support, or completing any other form on the platform.
• Automated technical collection: Data gathered automatically when you visit bahu88.app, including IP address, device identifiers, browser attributes, and session activity via cookies and server logs.
• Payment processor feeds: Transaction confirmation data provided by bKash, Nagad, Rocket, Upay, and card payment processors when you make a deposit or withdrawal.
• KYC verification services: Identity verification data returned by third-party KYC providers when you submit identity documents for account verification.
• Game studio data feeds: Game session results and round-level transaction data provided by licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi.
• Fraud prevention partners: Risk-scoring signals and device fingerprint data provided by integrated fraud detection services used to protect the platform and its players.

bahu88 processes your personal data only when there is a valid legal basis to do so. The following table sets out the primary purposes for which bahu88 processes personal data and the corresponding legal basis for each:

bahu88 does not sell, rent, or disclose your personal data to third parties for their own commercial or marketing purposes. Data is shared with third parties only in the following strictly defined circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, and card payment networks receive the minimum data necessary to process your transactions. These parties act as independent data controllers in respect of their own services and are governed by their own published privacy policies.
• KYC and identity verification providers: Identity document images and personal details are shared with regulated third-party KYC verification services solely for the purpose of confirming your identity and age. These providers are bound by confidentiality agreements and data processing agreements with bahu88.
• Game studio providers: Player identifiers and session data are shared with licensed game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) as required to deliver game content and verify round results. No financial data beyond session identifiers is shared.
• Fraud detection and security services: Technical data (IP address, device fingerprint, session metadata) is shared with fraud prevention partners to identify suspicious activity and protect player accounts.
• Legal and regulatory authorities: bahu88 will disclose personal data to competent legal or regulatory authorities where required to do so by a lawful order, court order, or statutory obligation. bahu88 will notify affected players of such disclosures where legally permissible.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of bahu88's business, player data may be transferred to the acquiring entity, subject to equivalent data protection obligations. Players will be notified of any such transfer in advance.

bahu88 primarily processes and stores player data on servers located in jurisdictions with robust data protection infrastructure. Where data is transferred to a third-party service provider located outside Bangladesh — for example, a KYC provider or game studio with operations in Europe or Southeast Asia — bahu88 ensures that appropriate safeguards are in place prior to any such transfer.

Appropriate safeguards used by bahu88 include contractual data processing agreements that impose obligations on recipients equivalent to those applied internally, use of service providers that maintain internationally recognised data security certifications, and technical measures such as data minimisation and pseudonymisation before transfer where feasible.

If you have questions about the specific jurisdictions to which your data may be transferred, please contact the bahu88 Data Protection team at [email protected].

bahu88 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, unless a longer retention period is required by applicable law. The following general retention guidelines apply:

• Active account data: Retained for the full duration of your account's active status plus a minimum post-closure retention period of five (5) years to comply with anti-money laundering record-keeping obligations.
• KYC documents: Retained for a minimum of five (5) years from the date of account closure or the last recorded transaction, whichever is later.
• Financial transaction records: Retained for a minimum of seven (7) years from the date of each transaction in accordance with financial record-keeping requirements.
• Support communications: Chat transcripts and email correspondence retained for three (3) years from the date of the interaction for quality assurance and dispute resolution purposes.
• Technical and usage data: Log data and session metadata retained for up to twelve (12) months for security monitoring and platform optimisation, after which it is aggregated or deleted.
• Marketing preference records: Opt-in and opt-out records retained for the lifetime of the account plus three (3) years to demonstrate compliance with marketing consent obligations.

Once a retention period has expired, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to an identifiable individual. Anonymised, aggregated statistical data may be retained indefinitely for platform analytics purposes.

bahu88 uses cookies and similar tracking technologies (including local storage and session storage) to operate the platform, maintain your login session, remember your preferences, and gather analytical data about how players use the site. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without preventing core platform functionality from working.
• Functional cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations. Disabling these cookies may affect your personalised experience but will not prevent access to the platform.
• Analytical cookies: Gather anonymised data about page visits, game session lengths, navigation paths, and error events. This data is used internally to improve platform performance and user experience. bahu88 uses first-party analytics and does not share analytical cookie data with advertising networks.
• Security and fraud detection cookies: Device fingerprinting and risk-scoring cookies used to identify suspicious login patterns, detect account sharing, and prevent automated bot activity. These cookies are essential for protecting your account security.

As a registered bahu88 player, you have the following rights in respect of your personal data. bahu88 is committed to honouring these rights promptly and without undue obstruction:

• Right of Access: You may request a copy of all personal data that bahu88 holds about you. bahu88 will provide this in a structured, commonly used format within 30 calendar days of a verified request.
• Right to Rectification: If any personal data held by bahu88 is inaccurate or incomplete, you have the right to request correction. Most account details (email address, contact number) can be updated directly from the account settings dashboard.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where there is no overriding legitimate reason to retain it. Note that bahu88 is obligated to retain certain data (transaction records, KYC documents) for statutory minimum periods and cannot delete such data upon request during those periods.
• Right to Restrict Processing: You may request that bahu88 restrict processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you have objected to processing based on legitimate interests.
• Right to Data Portability: You may request that bahu88 transfer your personal data to you or to a third party in a structured, machine-readable format where processing is based on consent or performance of a contract and is carried out by automated means.
• Right to Object: You have the right to object at any time to processing of your personal data where bahu88 relies on legitimate interest as the legal basis. bahu88 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, contact the bahu88 Data Protection team at [email protected] or via live chat. bahu88 may request proof of identity before processing a data rights request to ensure your data is not disclosed to an unauthorised party.

bahu88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• 256-bit TLS/SSL encryption on all data transmissions between your device and bahu88 servers.
• One-way cryptographic hashing of all passwords — bahu88 staff cannot retrieve or view your password under any circumstances.
• Optional two-factor authentication (2FA) for player accounts, available via the account security settings dashboard.
• Role-based access controls that limit employee access to personal data on a strict need-to-know basis.
• Regular penetration testing and vulnerability assessments carried out by independent security specialists.
• Automated intrusion detection systems that monitor for anomalous access patterns and trigger account lockdown procedures where suspicious activity is detected.
• Encrypted backups of all player data, stored in geographically separate secure facilities.

In the event of a data security incident that is likely to result in a high risk to your rights and freedoms, bahu88 will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the incident.

If you believe that a minor has registered a bahu88 account or that a minor in your household has accessed the platform, please contact bahu88 support immediately via live chat or at [email protected]. We take reports of underage gambling extremely seriously and will act on all credible reports within 24 hours.

Parents and guardians are encouraged to use parental control software to restrict access to online gambling platforms for minors in their household. bahu88 supports third-party filtering tools that can block access to gambling websites on shared or family devices.

bahu88 sends promotional communications — including bonus offers, deposit match promotions, free bet notifications, and seasonal campaign announcements (such as BPL season offers, Eid promotions, and Pohela Boishakh specials) — only to players who have explicitly opted in to receive such communications.

Marketing communications are sent via email and, where you have provided consent, via SMS to your registered mobile number. bahu88 does not send unsolicited marketing messages via WhatsApp, Telegram, or any other messaging application without your explicit consent to that specific channel.

You may opt out of marketing communications at any time by:

• Updating your notification preferences in the account settings dashboard.
• Clicking the unsubscribe link included in every marketing email.
• Contacting bahu88 support via live chat or email with a request to opt out.

Opting out of marketing communications does not affect transactional communications — bahu88 will continue to send you account-related notifications such as deposit confirmations, withdrawal updates, KYC requests, and security alerts, as these are necessary to operate your account.

The bahu88 platform integrates content and services from licensed third-party game studios and payment providers. While bahu88 takes all reasonable steps to select reputable partners and bind them to appropriate data protection obligations, bahu88 is not responsible for the privacy practices of independent third-party controllers such as bKash, Nagad, Rocket, Upay, Pragmatic Play, Evolution Gaming, or other licensed providers.

Each third-party service provider operates under its own privacy policy and data protection framework. Players are encouraged to review the privacy policies of payment providers they use regularly, as those providers may collect and process additional data in connection with your mobile wallet or bank account activity that falls outside bahu88's control.

bahu88.app does not contain links to external third-party websites for commercial or advertising purposes. Any links present within the platform navigate exclusively to internal bahu88 pages.

bahu88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. The "Last Reviewed" date displayed at the top of this page will be updated whenever a material change is made.

Where a change is material — meaning it significantly affects how your personal data is collected, used, or shared — bahu88 will provide advance notice by posting a prominent notice on the platform and, where practicable, sending a notification to your registered email address at least 14 days before the change takes effect.

Your continued use of the bahu88 platform after the effective date of any update to this Privacy Policy constitutes your acceptance of the revised policy. If you do not accept a material change, you may close your account and request deletion of your data by contacting support before the change takes effect.

For any questions, concerns, or requests relating to this Privacy Policy or the way in which bahu88 handles your personal data, please contact the bahu88 Data Protection team using the details below:

If you are not satisfied with bahu88's response to a privacy-related complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. bahu88 will cooperate fully with any such authority in the investigation of a complaint.

bahu88 is committed to resolving all privacy complaints fairly, transparently, and in a timely manner. We treat every data rights request and complaint with the same level of seriousness regardless of its complexity, and we do not charge any fee for handling data subject access requests or other rights requests.