Privacy Policy — Your Data, Protected by ba880

1. Introduction

This Privacy Policy ("Policy") explains how ba880 ("ba880", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "the Player") who access or use the ba880 platform at https://ba880.io, including all associated services such as sports betting, live casino, slot games, promotional features, and customer support.

ba880 is committed to handling personal data responsibly and in a manner that respects the privacy of every player. This Policy has been written in plain English to ensure that all players — including those based in Bangladesh — can clearly understand their rights and our obligations. Where legal or technical terminology is unavoidable, we have provided explanatory context alongside it.

By registering a ba880 account or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the terms set out in this Policy, please discontinue use of the ba880 platform and contact [email protected] to close your account.

2. Data We Collect

ba880 collects personal data that falls into the following categories. We collect only what is necessary for the specific purpose identified against each category.

Data Category	Examples	Why Collected
Identity Data	Full name, date of birth, national ID number, passport number	Account registration and KYC identity verification
Contact Data	Email address, mobile phone number, city of residence	Account communications, support, and transactional notifications
Financial Data	bKash number, Nagad number, Rocket number, Upay number, bank account details	Processing deposits and withdrawals in Bangladeshi Taka (BDT)
Transaction Data	Deposit history, withdrawal history, bet history, bonus activity	Account management, fraud prevention, and regulatory compliance
Technical Data	IP address, device type, browser type, operating system, session data	Platform security, fraud detection, and service optimisation
Usage Data	Pages visited, games played, time on site, feature interactions	Platform improvement and personalisation of the player experience
Communications Data	Support ticket content, live chat transcripts, email correspondence	Resolving support requests and maintaining service quality records

2.1 Sensitive Data

ba880 does not intentionally collect sensitive personal data — such as health data, racial or ethnic origin, religious beliefs, or biometric data — unless this is specifically required for responsible gaming compliance purposes (for example, where a player voluntarily discloses a gambling-related health concern in connection with a self-exclusion request). Any such data shared voluntarily is handled with the highest level of care and is not used for any commercial purpose.

3. How We Collect Data

3.1 Data You Provide Directly

The majority of personal data ba880 holds about you is data that you have provided directly, including: information entered during account registration; identity documents submitted for KYC verification; payment details provided when making a deposit or requesting a withdrawal; and correspondence sent to the ba880 support team.

3.2 Data Collected Automatically

When you access the ba880 platform, certain technical and usage data is collected automatically through cookies, web server logs, and similar technologies. This includes your IP address, device identifiers, browser settings, and a record of pages and features you interact with. This data is used primarily for security monitoring and platform optimisation. It does not identify you personally on its own, but may be combined with other data we hold about your account.

3.3 Data from Third Parties

ba880 may receive limited personal data about you from trusted third-party service providers in specific circumstances, including:

• Identity verification providers who confirm the authenticity of documents you submit during KYC;
• Payment processors (such as bKash, Nagad, Rocket, and Upay) who confirm the status of transactions;
• Fraud prevention agencies who provide risk signals to help protect your account and the integrity of the platform.

ba880 does not purchase marketing lists or acquire personal data from data brokers for any purpose.

4. Purpose of Processing

ba880 processes your personal data for the following clearly defined purposes. We do not use your data for any purpose that is incompatible with the purposes listed here.

• Account Management: Creating, maintaining, and securing your ba880 player account;
• Transaction Processing: Handling deposits and withdrawals in BDT via supported payment methods;
• Identity Verification (KYC): Confirming your identity and age (21+) in accordance with responsible gaming requirements;
• Fraud and Security: Detecting, investigating, and preventing fraudulent activity, money laundering, and unauthorised account access;
• Legal Compliance: Meeting any applicable legal, regulatory, or law enforcement obligations;
• Customer Support: Responding to your queries, resolving disputes, and maintaining records of support interactions;
• Platform Improvement: Analysing usage patterns to improve the performance, reliability, and user experience of the ba880 platform;
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates — only where you have opted in to receive such communications, and only via the contact channel you have specified.

5. Data Sharing

5.1 Who We Share Data With

ba880 does not sell your personal data. We share data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, and Bangladeshi bank partners receive transaction-level data required to process your deposits and withdrawals;
• Identity Verification Partners: Third-party KYC providers receive a copy of the identity documents you submit in order to verify their authenticity;
• Fraud Prevention Services: Anonymised or pseudonymised technical signals may be shared with fraud detection platforms to protect the ba880 player community;
• Game Technology Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a player session identifier to enable gameplay, but do not receive your full identity or financial data;
• Legal and Regulatory Authorities: Where required by applicable law or a valid legal process, ba880 may disclose personal data to law enforcement agencies or other authorities. ba880 will notify affected players where legally permitted to do so.

5.2 International Data Transfers

Some of the third-party service providers engaged by ba880 may be located outside Bangladesh. Where personal data is transferred internationally, ba880 ensures that appropriate safeguards are in place to protect your data, including contractual data protection clauses that require receiving parties to uphold standards equivalent to those set out in this Policy.

6. Cookies and Tracking Technologies

6.1 What Are Cookies

Cookies are small text files placed on your device by websites you visit. ba880 uses cookies and similar tracking technologies (such as web beacons and local storage) to maintain session continuity, remember your preferences, detect fraudulent activity, and gather aggregated analytics about how players use the platform.

6.2 Types of Cookies Used by ba880

• Strictly Necessary Cookies: Required for the platform to function. These enable login sessions, maintain your account state, and support security features. They cannot be disabled without breaking core platform functionality;
• Analytical Cookies: Used to measure how players navigate the platform, which games and features are most popular, and where performance issues occur. Data is aggregated and does not identify individual players;
• Functional Cookies: Remember your preferences such as language settings and display options to provide a more consistent experience across sessions;
• Security Cookies: Used to detect and prevent fraudulent logins, bot activity, and other security threats.

6.3 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to refuse non-essential cookies, delete existing cookies, or receive a notification before a cookie is placed. Please note that disabling strictly necessary cookies will impair or prevent access to the ba880 platform. Detailed instructions for managing cookies in popular browsers are available in your browser's help documentation.

7. Data Security

ba880 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• Encrypted storage of sensitive data fields including payment method details and identity document references;
• Role-based access controls that restrict internal access to personal data on a strict need-to-know basis;
• Continuous security monitoring of platform infrastructure to detect and respond to threats in real time;
• Regular security assessments and penetration testing of the ba880 platform;
• Staff data protection training to ensure all team members understand their obligations when handling personal data.

In the event of a personal data breach that poses a risk to your rights and freedoms, ba880 will take prompt remediation action and notify affected players as quickly as practicable. ba880 maintains an internal incident response procedure specifically for data security events.

8. Data Retention

ba880 retains personal data only for as long as it is needed to fulfil the purposes set out in this Policy, or as required by applicable legal obligations. The following general retention principles apply:

• Active Account Data: Personal data associated with an active ba880 account is retained for the lifetime of the account and for a defined period following account closure;
• Transaction Records: Financial transaction records are retained for a minimum period to meet anti-money-laundering (AML) and record-keeping requirements;
• KYC Documents: Identity verification documents are retained for the period required by applicable legal and regulatory standards, after which they are securely deleted;
• Support Communications: Customer support records are retained for a period sufficient to resolve any follow-up queries or disputes, and are then deleted or anonymised;
• Technical Logs: Server and security logs are retained for a short rolling period to support security monitoring and are then automatically purged.

When personal data reaches the end of its retention period, ba880 will securely delete or irreversibly anonymise it. Anonymised data (which can no longer be attributed to any individual) may be retained indefinitely for aggregated analytics purposes.

9. Your Rights

As a ba880 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the ba880 data team at [email protected] with the subject line "Data Rights Request". ba880 will acknowledge your request within a reasonable period and will fulfil it as promptly as practicable.

• Right of Access: You have the right to request a copy of the personal data ba880 holds about you, along with information about how it is being used;
• Right to Rectification: If any personal data ba880 holds about you is inaccurate or incomplete, you have the right to request that it be corrected;
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. Note that this right may be limited where ba880 is required to retain data to comply with a legal obligation;
• Right to Restrict Processing: You may request that ba880 restrict the processing of your data in specific circumstances, for example while the accuracy of the data is being contested;
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. This right also applies to certain other types of processing, subject to ba880's legitimate interests;
• Right to Data Portability: Where technically feasible and legally applicable, you may request that ba880 provide your personal data in a structured, commonly used, machine-readable format.

10. Minors and Age Policy

The ba880 platform is strictly for adults aged 21 years or older. ba880 does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you are not permitted to register an account or use the ba880 platform in any capacity.

If ba880 becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately closed, all data associated with the account will be deleted, and any deposits made will be returned to the originating payment method where technically possible. If you believe a minor has accessed the ba880 platform, please contact [email protected] immediately.

11. Changes to This Policy

ba880 reviews this Privacy Policy regularly and may update it from time to time to reflect changes in our data practices, platform features, or applicable legal requirements. When material changes are made, ba880 will notify registered players by email and will post a prominent notice on the platform indicating that the Policy has been updated.

The effective date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the ba880 platform after the effective date of any revision constitutes your acceptance of the updated Policy.

12. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ba880 handles your personal data, please contact the ba880 privacy team using the details below. All privacy-related enquiries are handled in English.

• Email: [email protected]
• Subject Line (for data rights requests): "Data Rights Request — [Your Registered Username]"
• Response Time: ba880 aims to respond to all privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6)
• FAQ: Answers to common questions about your account and data are available at ba880.io/faq

Please do not include your password, full payment card details, or other sensitive credentials in any email correspondence with the ba880 team. Our support staff will never ask for this information by email.