bab8 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") sets out how bab8 ("bab8", "we", "us", "our") collects, uses, stores, shares, and protects personal data relating to users ("you", "Player", "User") of the bab8 online gaming platform accessible at bab8.pro. This Policy applies to all personal data collected through the platform, including data collected during account registration, gameplay, payment processing, customer support interactions, and promotional activity.

By registering an account or otherwise using the bab8 platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with the terms of this Policy, you must not access or use the bab8 platform. We recommend that you read this Policy in full alongside our Terms and Conditions.

2. Information We Collect

bab8 collects personal data in two primary ways: information you provide directly, and information collected automatically through your use of the platform. The categories of personal data we collect include:

• Identity data: full name, date of birth, nationality, national ID or passport number (collected for age verification and KYC compliance purposes).
• Contact data: registered mobile number, email address, and residential address (city and division within Bangladesh) as provided during account registration.
• Financial data: bKash, Nagad, Rocket, or Upay wallet numbers and supported bank account references used for deposits and withdrawals. bab8 does not store full card numbers.
• Transaction data: records of all deposits, withdrawals, bets placed, game sessions, bonus credits, and promotional activity associated with your account.
• Technical data: IP address, device type and model, operating system, browser type and version, time zone, and mobile network information collected automatically when you access bab8.
• Usage data: pages visited, features used, game categories browsed, session duration, click patterns, and navigation paths within the bab8 platform — used to improve the user experience and detect suspicious activity.

In addition to data you provide and data collected automatically, bab8 may also receive personal data from the following third-party sources:

• Payment processors (bKash, Nagad, Rocket, Upay, and supported bank partners) who confirm transaction status and return mobile wallet verification data as part of the payment flow.
• Identity verification and KYC service providers who process identity document images and return a verification outcome to bab8. bab8 does not retain raw document images longer than required by applicable law.
• Fraud detection and anti-money-laundering screening services that check account activity against known risk indicators and flagged entity lists.
• Analytics and platform optimisation partners who return aggregated, anonymised usage insights. These partners do not receive data that directly identifies individual Users.

3. How We Use Your Information

bab8 uses the personal data it collects for the following purposes. We process personal data only where we have a lawful basis to do so, as outlined in section 4 below:

• Account creation and management: to register your account, verify your identity and age, maintain your account balance, process requests to update account details, and manage account closure.
• Payment processing: to process deposit requests via bKash, Nagad, Rocket, Upay and supported banks, to verify payment method ownership, and to process withdrawal requests to the verified payment method registered on your account.
• Game and service delivery: to provide access to casino games, cricket betting markets, slots, crash games, and all other platform services, and to record game results and settle bets accurately.
• Legal compliance: to meet our obligations under applicable anti-money-laundering law, financial reporting requirements, age verification obligations, and any other legal or regulatory requirements applicable to our operations.
• Responsible gaming: to monitor account activity for signs of problem gaming, to enforce self-exclusion requests, to apply deposit limits and session time-outs, and to comply with our Responsible Gaming Policy.
• Customer support: to respond to queries, complaints, and account disputes submitted via our support email, to investigate reported issues, and to maintain records of support interactions for quality and audit purposes.
• Platform improvement and analytics: to analyse anonymised usage patterns, identify technical issues, improve game delivery speeds, test new features, and optimise the overall user experience for Bangladesh players.

4. Legal Basis for Processing Personal Data

bab8 processes your personal data on one or more of the following legal bases, depending on the category of data and the purpose of processing:

• Contractual necessity: processing required to enter into and perform the contract between bab8 and a registered User, including account administration, payment processing, game delivery, and withdrawal settlement.
• Legal obligation: processing required to comply with applicable law, including anti-money-laundering obligations, age verification requirements, financial reporting duties, and responses to valid legal process.
• Legitimate interests: processing carried out for fraud prevention, responsible gaming monitoring, platform security, and internal analytics — where these interests are not overridden by your rights and freedoms as a User.
• Consent: where you have given specific, informed consent to a particular processing activity, such as receiving promotional communications about bab8 offers, seasonal promotions, or BPL and IPL betting markets. You may withdraw consent at any time by contacting [email protected].

5. Disclosure of Personal Data to Third Parties

bab8 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. bab8 may share personal data with third parties only in the following strictly limited circumstances:

• Service providers and data processors: bab8 engages carefully selected third-party service providers to perform functions on our behalf, including payment processing (bKash, Nagad, Rocket), KYC and identity verification, fraud screening, server hosting, and platform analytics. These providers act as data processors under our instruction and are bound by confidentiality obligations. They may not use your data for their own purposes.
• Game providers: when you play a game supplied by a third-party studio (e.g. Pragmatic Play, Evolution Gaming, Spribe), your account reference and game session data are transmitted to that provider's platform to enable game delivery and result settlement. Game providers do not receive your full identity or financial data.
• Legal and regulatory authorities: bab8 will disclose personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or courts where required to do so by applicable law, valid court order, or other lawful process. bab8 will, where legally permitted, notify affected Users of such disclosures.
• Business transfers: in the event of a merger, acquisition, or sale of all or substantially all of bab8's assets, personal data held by bab8 may be transferred to the acquiring entity as part of that transaction. bab8 will notify registered Users of any such transfer and the acquiring entity will be required to honour this Policy.

6. Payment Data and Financial Information

When you make a deposit using bKash, Nagad, Rocket, Upay, or a supported bank transfer, your payment transaction is processed through the relevant payment network. bab8 receives a transaction confirmation and the last few digits or a reference token associated with your payment account — sufficient to confirm payment and match the transaction to your bab8 account. bab8 does not store full mobile wallet PIN codes, full bank account numbers, or any payment credential that could be used to initiate a payment without your authorisation.

All payment data exchanged between your mobile device and bab8 is transmitted over SSL-encrypted channels. bab8 retains records of deposit and withdrawal transactions for a minimum of five years from the date of the transaction in order to meet financial record-keeping obligations under applicable law. This retention period may be extended where a transaction is the subject of an active legal dispute or regulatory investigation.

7. Cookies and Tracking Technologies

bab8 uses cookies and similar tracking technologies to operate the platform, remember your session, and improve the user experience. The types of cookies used on bab8.pro include:

• Essential cookies: required for the platform to function correctly, including session management, login state persistence, and security token validation. These cannot be disabled without breaking platform functionality.
• Performance and analytics cookies: collect anonymised data about how Users navigate the platform, which game categories are most visited, and where technical errors occur. This data is used solely for platform improvement.
• Functional cookies: remember your preferences such as language setting, and maintain your account session across page navigations to avoid requiring repeated logins during a single visit.
• Fraud prevention and security cookies: used to detect suspicious access patterns, identify potential bot activity, and protect your account from unauthorised access attempts. These are a critical security layer and cannot be disabled.

You can manage cookie preferences through your mobile browser settings. Note that disabling essential or security cookies may prevent bab8 from functioning correctly or may log you out of your session. bab8 does not use third-party advertising cookies or pass cookie data to advertisers.

8. Data Retention

bab8 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

Account and identity data is retained for the duration of your active account and for a minimum of five years following account closure, in line with standard financial record-keeping requirements. Transaction records are retained for a minimum of five years. Support interaction records are retained for three years from the date of the interaction. Technical and usage data (logs, IP records) are retained for up to twelve months, after which they are anonymised or deleted. Where data is the subject of an active legal dispute, investigation, or regulatory inquiry, retention is extended until the matter is fully resolved.

9. Your Data Rights

As a User of bab8, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with a clear description of your request. bab8 will respond within a reasonable period and, in any event, within 30 calendar days of receiving a verifiable request:

bab8 will not charge a fee for handling data rights requests submitted in good faith. However, where a request is manifestly unfounded or excessive (for example, repetitive requests for the same data within a short period), bab8 reserves the right to charge a reasonable administrative fee or to decline the request, with written explanation.

10. Data Security Measures

bab8 takes data security seriously and implements a layered set of technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our current security measures include, but are not limited to:

• SSL/TLS encryption on all data transmissions between User devices and bab8 servers, ensuring that login credentials, payment references, and account data cannot be intercepted in transit.
• Access controls: personal data stored on bab8 systems is accessible only to authorised personnel on a strict need-to-know basis. All internal access is logged and subject to audit review.
• Two-factor authentication (2FA) options available to all registered Users via SMS OTP to their registered mobile number, providing an additional layer of protection against unauthorised account access.
• Regular security testing: bab8's platform undergoes periodic security reviews, vulnerability assessments, and infrastructure audits to identify and remediate potential weaknesses before they can be exploited.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, bab8 will notify affected Users without undue delay and will take immediate steps to contain and remediate the breach.

11. Children and Persons Under 21

bab8 is strictly an adults-only platform. Access to and use of bab8 is prohibited for any person under the age of 21. bab8 does not knowingly collect personal data from persons under the age of 21. Age verification checks are conducted as part of the registration process and, where bab8 suspects that an account has been registered by or for a person under 21, the account will be suspended immediately and all collected data associated with that account will be reviewed and deleted where there is no legal basis to retain it.

12. Third-Party Links and Integrations

The bab8 platform integrates third-party game providers whose software is embedded within the bab8 interface. When you access a third-party game, your browser or device communicates directly with the game provider's servers to load game assets and transmit game outcomes. bab8 is not responsible for the privacy practices of third-party game studios or payment networks. We encourage you to review the privacy policies of Pragmatic Play, Evolution Gaming, Spribe, and other providers whose games you play, as their data practices may differ from those of bab8. bab8 does not control how third-party providers handle technical data transmitted during game sessions.

13. Changes to This Privacy Policy

bab8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When we make material changes to this Policy, we will notify registered Users via a notice on the bab8 platform or by message to the registered mobile number at least 7 days before the changes take effect.

The updated Policy will always be accessible on bab8.pro with the effective date clearly displayed at the top. Continued use of the bab8 platform after the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you must cease using the platform and may request account closure by contacting [email protected].

14. Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or the way bab8 handles your personal data, please contact our support team. We aim to respond to all privacy-related enquiries within 5 business days. For data rights requests (access, correction, deletion, portability, objection), allow up to 30 calendar days for a full response.

Contact email (plain text — not a clickable link): [email protected]