Privacy Policy — How bn888 Protects Your Data

01 Introduction

bn888 is committed to protecting the privacy and personal data of every player who uses its platform. We recognise that the information you share with us is sensitive — it includes identity documents, financial transactions, and gaming behaviour — and we treat it accordingly with the highest degree of care and operational discipline.

This Policy applies to all personal data collected through the bn888.ws website, including all sub-pages, game interfaces, live casino sections, sportsbook features, and any associated mobile-optimised experiences. It applies to all registered players, prospective players who browse the site without registering, and individuals who contact our support team.

Our platform primarily serves players based in Bangladesh, and our data practices are designed to be consistent with internationally recognised privacy principles. We process personal data lawfully, fairly, and transparently, collecting only what is necessary for clearly defined purposes, and retaining it only for as long as those purposes require.

02 Data Controller

For the purposes of this Privacy Policy, bn888 acts as the data controller in respect of all personal data collected from players using the bn888.ws platform. As data controller, bn888 determines the purposes for which and the manner in which personal data is processed.

If you have any questions regarding the identity of the data controller, how your data is being processed, or wish to exercise any of the rights described in Section 11 of this Policy, you may contact the bn888 Data Protection team via the following:

• Email: support at bn888.ws (plain text — not a clickable link)
• Live Chat: Available 24/7 directly on the bn888.ws platform
• Response Time: All data-related enquiries are acknowledged within 48 hours (BST) and fully resolved within 30 days of receipt

03 Data We Collect

bn888 collects personal data across several categories, each of which is collected for specific and documented operational purposes. The table below summarises the categories of data we collect and the primary reason for collection:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data (beyond document photographs used for KYC), or health data, unless you voluntarily provide health-related information in the context of a responsible gaming self-exclusion request.

04 How We Collect Data

bn888 collects personal data through the following means:

• Direct provision by you: When you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact support, or participate in a promotion, you directly provide us with personal data.
• Automated technical collection: When you browse bn888.ws, our servers automatically record technical data including your IP address, device identifiers, browser type, and session activity logs. This data is collected via standard web server logging and first-party analytics tools.
• Cookies and similar technologies: bn888 uses cookies, local storage, and session tokens to maintain your login state, remember your preferences, detect fraud signals, and analyse platform usage. See Section 10 for full details on our cookies practice.
• Payment processor data: When you initiate a transaction via bKash, Nagad, Rocket, Upay, or a bank transfer, our payment processing partners transmit transaction reference data to bn888 to confirm and record the payment against your account.
• Third-party verification services: bn888 may use regulated third-party KYC verification providers to validate identity documents. These providers transmit a verification result to bn888 but do not retain your documents on our behalf.

05 How We Use Your Data

bn888 processes your personal data for the following specific purposes, each tied to a lawful basis described in Section 6:

• Account creation and management: To register your account, verify your identity, maintain your player profile, and communicate with you about your account status.
• Payment processing: To process deposits, verify withdrawal requests, conduct anti-money-laundering checks, and maintain accurate transaction records.
• Platform security and fraud prevention: To detect suspicious login attempts, identify multi-accounting, prevent bonus abuse, and investigate any activity that may indicate fraud or system manipulation.
• Responsible gaming: To monitor gaming patterns that may indicate problem gambling behaviour, enforce player-requested deposit limits, cool-off periods, or self-exclusion restrictions, and fulfil our duty of care obligations.
• Customer support: To respond to your queries, investigate complaints, and maintain records of support interactions for quality assurance and dispute resolution purposes.
• Legal and regulatory compliance: To fulfil our obligations under applicable anti-money-laundering, counter-terrorism-financing, and data protection frameworks, including responding to lawful requests from law enforcement or regulatory bodies.
• Promotional communications (with consent): If you have opted in to receive marketing communications, we may send you information about promotions, seasonal bonuses (e.g., BPL season offers, Eid bonuses), and new game releases. You may opt out at any time via the Account Settings page or by contacting support.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the performance, layout, and game offering of bn888.ws.

06 Legal Basis for Processing

Each processing activity described in this Policy relies on one or more of the following lawful bases:

• Contractual necessity: Processing required to perform the contract between bn888 and you as a registered player — including account management, payment processing, and game access. Without this processing, we cannot provide the service.
• Legal obligation: Processing required for bn888 to comply with applicable laws, including anti-money-laundering obligations, age verification requirements, and responses to lawful law enforcement requests.
• Legitimate interests: Processing carried out for the legitimate interests of bn888 or third parties, including fraud prevention, platform security, IT system maintenance, and responsible gaming monitoring — provided these interests are not overridden by your rights and freedoms.
• Consent: Processing activities where you have provided clear, freely given, specific, and informed consent — primarily in the context of marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

07 Data Sharing & Disclosure

bn888 does not sell, rent, or commercially transfer your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the extent necessary for the specified purpose:

• Payment service providers: We share transaction reference data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other payment processors solely for the purpose of processing deposits and withdrawals. These providers are contractually bound to use your data only for payment purposes.
• KYC and identity verification providers: We may share identity document data with regulated third-party verification services to confirm the authenticity of KYC submissions. These providers operate under strict data processing agreements.
• Game content providers: When you play a game provided by Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, or other studios, limited session data (such as player ID and bet amount) is transmitted to the provider's systems to facilitate game play. Game providers do not receive your full identity data.
• Law enforcement and regulatory authorities: bn888 will disclose personal data to competent authorities where required by law, court order, or formal regulatory request. We will notify affected players of such disclosures where legally permitted to do so.
• Fraud prevention networks: In cases of confirmed fraudulent activity, bn888 may share relevant account and transaction data with industry fraud prevention networks to prevent the individual from victimising other platforms.

08 Data Retention

bn888 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of your account's active status on the platform.
• Transaction and financial records: Retained for a minimum of 5 years following the date of the transaction, in line with standard anti-money-laundering record-keeping requirements.
• KYC documents: Retained for a minimum of 5 years from the date of the last transaction on the account, or from the date of account closure, whichever is later.
• Support interaction records: Retained for 3 years from the date of the last support interaction, for quality assurance and dispute resolution purposes.
• Marketing consent records: Retained for as long as you remain subscribed to marketing communications, plus an additional 2 years following opt-out to evidence the consent history.
• Technical logs (IP, device, session): Retained for up to 12 months from the date of collection for fraud detection and security review purposes, then deleted or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised data may be retained indefinitely for statistical and analytical purposes.

09 Data Security

bn888 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• SSL/TLS encryption: All data transmitted between your device and bn888.ws is encrypted using industry-standard Transport Layer Security (TLS) protocols. The padlock icon in your browser confirms that an encrypted connection is active.
• Encrypted data storage: Personal data held in our databases, including KYC documents and financial records, is encrypted at rest using AES-256 or equivalent encryption standards.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Staff with legitimate access undergo regular security training and are bound by confidentiality obligations.
• Two-factor authentication: Players are strongly encouraged to enable two-factor authentication (2FA) on their accounts. bn888 internal systems also enforce multi-factor authentication for all staff accessing player data.
• Intrusion detection and monitoring: bn888's infrastructure is monitored 24/7 for anomalous access patterns, potential intrusions, and data exfiltration attempts.
• Vulnerability management: Regular penetration testing and security audits are conducted against the bn888 platform to identify and remediate vulnerabilities before they can be exploited.

10 Cookies & Tracking Technologies

bn888 uses cookies and similar technologies (local storage, session tokens, pixel tags) to operate the platform, maintain your login session, and understand how players interact with the site. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking the platform's core functionality.
• Functional cookies: Used to remember your preferences such as language setting, notification preferences, and display options. Disabling these will not prevent platform access but may affect your experience.
• Analytics cookies: Used to collect anonymised data about how players navigate bn888.ws, which pages are visited most frequently, and where users encounter difficulties. This data is used solely to improve the platform.
• Security cookies: Used to detect fraudulent login attempts, identify suspicious device behaviour, and enforce account security rules such as rate limiting.

bn888 does not use third-party advertising cookies, social media tracking pixels, or behavioural retargeting technologies. Our cookies serve operational and security purposes only.

You can manage cookie preferences through your browser settings. Blocking strictly necessary cookies will prevent you from logging in to your bn888 account. Blocking other cookie categories will not affect your ability to access the platform but may reduce functionality.

11 Your Privacy Rights

As a registered player on bn888, you hold the following rights in respect of your personal data. To exercise any of these rights, contact the bn888 support team via live chat or by writing to support at bn888.ws:

• Right of access: You may request a copy of all personal data that bn888 holds about you. We will provide this in a structured, readable format within 30 days of your request.
• Right to rectification: If any personal data held by bn888 is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to erasure ("right to be forgotten"): In certain circumstances, you may request deletion of your personal data. Note that this right is subject to override where we are required to retain data for legal compliance (e.g., anti-money-laundering records).
• Right to restriction of processing: You may request that bn888 restrict the processing of your personal data in specific circumstances, such as while a dispute regarding accuracy is being resolved.
• Right to data portability: You may request that your personal data be transferred to you or to another organisation in a machine-readable format, where technically feasible.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including marketing profiling. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

bn888 will respond to all privacy rights requests within 30 days. In complex cases, this period may be extended by a further 60 days, in which case you will be notified of the extension and the reason for it within the initial 30-day window.

12 Minors & Age Policy

The bn888 platform is strictly intended for adults aged 21 and above. bn888 does not knowingly collect personal data from individuals under the age of 21. Our registration process includes age verification steps specifically designed to identify and prevent underage access.

bn888 recommends that parents and guardians use parental control software to prevent minors from accessing online gambling platforms. A range of third-party filtering tools are available to help manage a minor's internet access in Bangladeshi households.

13 Contact & Complaints

If you have any questions, concerns, or complaints regarding how bn888 processes your personal data, we encourage you to contact us directly in the first instance. Our support team handles all data protection enquiries with the same priority as account and payment issues.

• Live Chat: Available 24/7 on bn888.ws — the fastest way to reach our team for any privacy-related query.
• Email: support at bn888.ws — for written enquiries where you need a documented response. Please include your registered username and a clear description of your query to ensure the fastest possible resolution.
• Response commitment: All privacy-related enquiries are acknowledged within 48 hours (Bangladesh Standard Time, UTC+6) and resolved within 30 days.

If you are not satisfied with the outcome of your complaint after completing our internal process, you retain the right to escalate the matter to the appropriate data protection authority or seek independent legal advice regarding your privacy rights.

14 Changes to This Policy

bn888 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or platform functionality. The "Last updated" date shown at the top of this Policy indicates when the most recent revision was made.

For material changes — those that significantly affect how we collect or use your data, or that reduce your privacy rights in any way — bn888 will provide prominent notice via an on-platform notification displayed upon your next login, or via an email sent to your registered address at least 14 days before the change takes effect.

For minor changes (such as clarifications of existing language, correction of typographical errors, or updates to contact details), we will update the Policy without prior individual notification. We encourage you to review this page periodically to stay informed of our current practices.