bab8 Privacy Policy — How We Collect, Use, and Protect Your Data
At bab8, your privacy is a core obligation, not an afterthought. This Privacy Policy explains exactly what personal information we collect, why we collect it, how it is stored and protected, and what rights you have over your own data.
Our Commitments
Six Privacy Principles at bab8
These six principles govern every data decision we make at bab8. They apply to all personal information collected from players in Bangladesh and across the South Asian region.
bab8 collects personal data only for clearly defined, legitimate purposes. We do not repurpose your data for activities unrelated to the services you have signed up for. Every data collection decision must have an identified legal basis before it is implemented.
We collect only the minimum amount of personal information necessary to deliver our services and meet our legal obligations. If a purpose can be achieved with less data, that is the approach bab8 takes. We review our data collection practices regularly to eliminate unnecessary fields.
All personal data stored on bab8 systems is protected by 256-bit SSL encryption in transit and strong encryption at rest. Access to player data within bab8 is restricted on a strict need-to-know basis, with access logs maintained and reviewed regularly.
bab8 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Data is shared only with partners who are contractually bound to process it solely on bab8's behalf and only for the purposes we specify.
bab8 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. When data is no longer needed, it is securely deleted or anonymised in accordance with our data retention schedule.
We tell you what we collect, why we collect it, and who we share it with — in plain English. This Privacy Policy is reviewed and updated whenever our data practices change. The "Last Updated" date at the top of the legal section reflects the most recent revision.
This Privacy Policy ("Policy") describes how bab8 ("bab8", "we", "us", "our") collects, uses, stores, and discloses personal information about users ("Player", "User", "you") who access or use the bab8 platform available at https://bab8.io.
bab8 is a digital betting and casino platform serving the Bangladesh market. We process personal data in connection with account registration, identity verification, payment processing, sports betting, casino gaming, and customer support activities. This Policy explains the legal basis under which we process that data and the rights you hold in relation to your information.
By registering an account on bab8 or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, please do not use the bab8 platform. You may contact us at any time with questions or concerns about your data at [email protected].
Scope: This Policy applies to all bab8 services including the main website, mobile-optimised site, sports betting, live casino, slots, and any other products or features made available under the bab8 brand. It covers data collected from players based in Bangladesh and any other jurisdiction from which our services are accessed.
bab8 collects the following categories of personal information:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, government-issued ID number | Age verification, KYC compliance, account management |
| Contact Data | Email address, phone number, residential address (city, district) | Account communication, support, withdrawal verification |
| Financial Data | bKash / Nagad / Rocket wallet numbers, transaction amounts, deposit and withdrawal history | Payment processing, AML compliance, fraud prevention |
| Account Data | Username, password hash, account preferences, betting history, bonus usage | Service delivery, personalisation, dispute resolution |
| Technical Data | IP address, device type, browser, operating system, session timestamps | Security monitoring, fraud detection, platform optimisation |
| Usage Data | Pages visited, games played, click paths, session duration, bet slip interactions | Product improvement, responsible gaming monitoring |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions | Customer service, quality assurance, dispute resolution |
We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information, except where strictly required by law (for example, problem gambling risk assessments in the context of responsible gaming).
bab8 collects personal data through the following channels:
- Direct collection: Information you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting support, or responding to a survey or promotion.
- Automated collection: Technical and usage data collected automatically when you access the bab8 platform via cookies, server logs, and similar tracking technologies (see Section 7 for full cookie details).
- Third-party sources: Identity verification data from KYC partners; fraud-risk signals from payment processors; device fingerprinting data from security service providers. All third-party data sources are bound by contractual data processing agreements.
- Payment providers: When you initiate a transaction via bKash, Nagad, Rocket, or Upay, the relevant provider shares transaction confirmation data with bab8 to facilitate deposit crediting and withdrawal processing. bab8 does not receive full wallet credentials — only the transaction reference and amount.
bab8 processes personal data under one or more of the following legal bases:
- Contractual necessity: Processing required to fulfil the bab8 service contract with you — including account creation, payment processing, bet settlement, and customer support.
- Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) regulations, age verification requirements, and record-keeping obligations.
- Legitimate interests: Processing necessary for bab8's legitimate business interests, such as fraud prevention, security monitoring, platform optimisation, and responsible gaming risk assessment — provided these interests are not overridden by your rights.
- Consent: Where we rely on your consent (for example, for marketing communications), we will request it explicitly and separately. You may withdraw consent at any time without affecting the lawfulness of prior processing.
Marketing Communications: bab8 will only send you promotional emails or messages if you have opted in. You may unsubscribe at any time by contacting [email protected]. Transactional communications (such as deposit confirmations and withdrawal notifications) are sent regardless of marketing preferences as they form part of our service contract.
bab8 uses the personal data we collect for the following purposes:
- Account management: Creating and maintaining your bab8 account, verifying your identity, and managing your account preferences and settings.
- Service delivery: Processing deposits and withdrawals, settling bets, providing access to casino games, and delivering customer support.
- Fraud prevention and security: Detecting and preventing unauthorised account access, fraudulent transactions, collusion, and other forms of abuse on the platform.
- AML and regulatory compliance: Monitoring transactions for money laundering risk indicators, maintaining records as required by applicable regulations, and reporting to authorities where legally required.
- Responsible gaming: Monitoring player behaviour patterns for indicators of problem gambling; triggering responsible gaming checks and interventions where appropriate; processing self-exclusion requests and deposit limit changes.
- Platform improvement: Analysing aggregated, anonymised usage data to improve the bab8 website, optimise game performance, and enhance the overall user experience.
- Marketing (with consent): Sending promotional offers, bonus notifications, and news about bab8 products to players who have opted in to marketing communications.
- Legal proceedings: Preserving and disclosing records in connection with legal disputes, regulatory investigations, or law enforcement requests where bab8 is legally obligated to comply.
bab8 does not sell or rent your personal data to third parties. We may share your data in the following limited circumstances:
- Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive transaction data necessary to process your deposits and withdrawals. Each provider operates under its own privacy policy.
- Identity verification partners: KYC and age verification service providers receive identity documents submitted during the verification process. These partners are contractually prohibited from using your data for any purpose other than identity verification on our behalf.
- Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a player session token to deliver game content. They do not receive your full identity or financial data.
- Security and fraud prevention services: Third-party security vendors may process technical data (such as IP addresses and device fingerprints) to assess fraud risk. This processing is governed by data processing agreements.
- Legal and regulatory authorities: bab8 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by law or valid legal process. Where permitted, we will notify you of such disclosures.
- Business transfers: In the event of a merger, acquisition, or sale of bab8's assets, personal data may be transferred to the relevant successor entity. Players will be notified in advance of any such transfer and the applicable privacy terms.
No Cross-Border Sale of Data: bab8 does not transfer or sell player data to advertising networks, data brokers, or marketing aggregators. Any international data transfer to service providers outside Bangladesh is governed by appropriate contractual safeguards.
bab8 uses cookies and similar technologies on its platform. Cookies are small text files placed on your device that help us operate the site, remember your preferences, and analyse usage patterns. The following categories of cookies are used:
- Strictly necessary cookies: Required for the bab8 platform to function correctly. These include session authentication cookies, security tokens, and load-balancing identifiers. These cannot be disabled without impairing service functionality.
- Functional cookies: Used to remember your account preferences, language settings, and bet slip state across sessions. Disabling these may reduce platform convenience.
- Analytics cookies: Aggregate, anonymised data about page visits, game interactions, and navigation paths. This data is used solely for internal product improvement and is not shared with advertising networks.
- Security cookies: Used by our fraud detection systems to identify and block suspicious access patterns, bot activity, and account takeover attempts.
You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging into your bab8 account. bab8 does not use third-party advertising cookies or behavioural retargeting technologies.
bab8 implements a layered security architecture to protect personal data against unauthorised access, loss, destruction, or alteration. Our security measures include:
- Encryption in transit: All data transmitted between your browser and bab8 servers is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to login, deposit, withdrawal, and all other platform interactions.
- Encryption at rest: Sensitive data stored in bab8 databases — including identity documents and financial records — is encrypted at rest using industry-standard algorithms.
- Access controls: Internal access to player data is restricted to authorised personnel who require it to perform their job functions. All internal access is logged, audited, and subject to regular review.
- Password hashing: Player passwords are never stored in plain text. bab8 uses a strong one-way hashing algorithm with per-account salting. Even bab8 staff cannot retrieve your original password.
- Incident response: bab8 maintains a documented data breach response procedure. In the event of a confirmed breach affecting player data, affected players will be notified promptly in accordance with applicable law.
Your Responsibility: While bab8 takes extensive technical measures to protect your data, you also play a role in account security. Use a strong, unique password for your bab8 account. Never share your login credentials with any third party. If you suspect your account has been compromised, contact [email protected] immediately.
bab8 retains personal data for the period necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by law. The following general retention periods apply:
- Account data: Retained for the duration of your active account plus a minimum of 5 years following account closure, to meet AML record-keeping obligations.
- Transaction records: Retained for a minimum of 5 years from the date of each transaction, in line with standard financial record-keeping requirements.
- Identity verification documents: Retained for 5 years following account closure or the last transaction, whichever is later.
- Support communications: Retained for 2 years from the date of the last interaction, unless the matter relates to a dispute or legal proceeding, in which case records are retained until that matter is fully resolved.
- Technical and usage logs: Retained for 12 months for security monitoring purposes, after which they are anonymised or deleted.
- Marketing consent records: Retained for the duration of the consent plus 2 years following any withdrawal of consent, to evidence compliance.
When data reaches the end of its retention period, bab8 securely deletes or permanently anonymises it so that it can no longer be linked to any individual.
As a bab8 player, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request".
You may request a copy of all personal data bab8 holds about you. We will provide this in a structured, commonly used format within 30 days of a verified request.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You may also update certain information directly from your account settings.
You may request deletion of your personal data. This right is subject to legal retention obligations — for example, AML law requires us to keep transaction records for a minimum period even after account closure.
In certain circumstances, you may request that bab8 restricts the processing of your data — for example, while the accuracy of a data record is being contested, or while an objection to processing is being assessed.
You may request your personal data in a machine-readable format (such as JSON or CSV) to transfer to another service provider, where technically feasible and where the data was provided by you directly.
You may object to processing carried out on the basis of legitimate interests, including profiling for marketing purposes. If you object to marketing, we will stop processing your data for that purpose immediately.
Response Time: bab8 will acknowledge all privacy rights requests within 72 hours and aim to fulfil verified requests within 30 calendar days. For complex requests, we may extend this by a further 30 days and will notify you of the extension. We may need to verify your identity before processing a request — this is to protect your data from unauthorised access by a third party claiming to be you.
bab8 is strictly an adults-only platform. The minimum age to register and use bab8 is 21 years. We do not knowingly collect personal data from anyone under the age of 21. If we become aware that personal data has been collected from a person under the minimum age, we will take immediate steps to delete that data and close the associated account.
Parents or guardians who believe their child may have registered on bab8 should contact us immediately at [email protected]. We take underage access extremely seriously and will act on all credible reports without delay.
The bab8 platform does not contain links to third-party websites or services other than those necessary to deliver core functionality (such as payment provider portals). However, if any such links appear in promotional content or informational sections of the site, please note that bab8 has no control over the privacy practices of third-party websites.
We encourage you to review the privacy policies of any third-party service you interact with in connection with bab8, including your mobile payment provider (bKash, Nagad, Rocket, or Upay). bab8 is not responsible for the data practices of these independent services.
bab8 reviews this Privacy Policy regularly and may update it to reflect changes in our data practices, legal obligations, or regulatory guidance. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page.
- Display a prominent notice on the bab8 platform for a reasonable period following the change.
- Where the change significantly affects your rights or how we use your data, send a direct notification to your registered email address.
Your continued use of bab8 following publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you disagree with any material change, you may close your account and request deletion of your data in accordance with Section 10.
If you have any questions about this Privacy Policy, wish to exercise a data rights request, or have a concern about how bab8 is processing your personal information, please contact our data team using the details below:
- Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" for fastest routing.
- Live Chat: Available 24 hours a day, 7 days a week, directly within the bab8 platform after login.
- Response Time: Email enquiries are typically acknowledged within 24 hours Bangladesh Standard Time (BST, UTC+6) and resolved within 30 days.
bab8 is committed to resolving all privacy concerns fairly and transparently. If you remain unsatisfied after raising a concern with us, you may have the right to escalate to a relevant supervisory or consumer protection authority in your jurisdiction.
Now that you know how bab8 handles your data, explore our full range of cricket betting, slots, and live casino games — backed by the security commitments in this policy.
21+ Only. Please gamble responsibly. Visit our Responsible Gaming page for support tools and resources.