Privacy Policy

01 Data We Collect

When you register for, access, or interact with the bau888 platform, we collect certain categories of personal data. The specific data we collect depends on how you use our services. Below is a full breakdown of the data categories, the individual data points within each category, and the source from which that data originates.

1.1 Registration and Identity Data

When you create a bau888 account, you provide us with the following information: your full legal name, date of birth, email address, mobile phone number, and a username of your choosing. This data forms the core of your player profile and is used to identify you uniquely within the platform, communicate with you about your account, and fulfil our legal identity verification obligations.

1.2 Identity Verification (KYC) Documents

Before processing a withdrawal, bau888 requires you to complete a Know Your Customer (KYC) verification step. As part of this process, you may be asked to submit a copy of a government-issued identity document — such as your National Identity Card (NID), passport, or driving licence — and in some cases a photograph or selfie for facial verification purposes. These documents are treated with the highest level of security and are processed only for identity confirmation. They are never shared with third parties for purposes other than regulatory compliance.

1.3 Financial and Transaction Data

bau888 records all financial transactions conducted through your account. This includes deposit amounts, withdrawal requests, the payment method used (such as bKash, Nagad, Rocket, Upay, or Visa), transaction timestamps, and transaction reference numbers. We do not store full card numbers or mobile wallet PINs — payment credentials are handled directly by the respective payment gateway providers under their own security frameworks. We retain only the transaction metadata necessary for account management and regulatory compliance.

1.4 Gameplay and Betting Activity Data

The platform automatically logs your activity within our games and sportsbook, including: games played, bet amounts, win/loss outcomes, session start and end times, game type and provider, and any bonus funds applied to a session. This data is used to manage your account balance accurately, detect patterns of problem gambling for responsible gaming interventions, investigate disputes, and improve platform performance.

1.5 Technical and Device Data

When you access bau888, our servers automatically receive certain technical data from your device and browser, including your IP address, device type and model, operating system and version, browser type and version, screen resolution, and the URL path of the pages you visit within the platform. This data is used for fraud prevention, security monitoring, platform optimisation, and to ensure the correct version of the platform is served to your device.

1.6 Communications Data

If you contact our support team via live chat or email, we retain a record of that communication, including the content of messages, the date and time of the interaction, and the resolution outcome. This data is used to manage your support queries, train our support team, and maintain a history of your interactions with bau888 for dispute resolution purposes.

1.7 Summary Data Collection Table

02 How We Use Your Data

bau888 uses the personal data it collects for the following specific purposes. We do not use your data for any purpose that is not listed here without first obtaining your explicit consent or updating this Privacy Policy.

2.1 Account Management and Platform Operation

The most fundamental use of your data is to operate your account: creating it, authenticating your logins, maintaining your balance, processing deposits and withdrawals, and delivering the games and betting markets you interact with. Without this processing, the platform cannot function for you as a user. The legal basis for this processing is performance of the contract between you and bau888.

2.2 Identity Verification and Regulatory Compliance

bau888 is required to verify the identity of its players before processing withdrawals and to maintain records of financial transactions as part of its anti-money laundering (AML) obligations. Your KYC documents and transaction records are processed for this purpose. The legal basis is legal obligation — this processing is not optional and cannot be opted out of; however, it is limited strictly to what is required to fulfil those obligations.

2.3 Fraud Prevention and Security Monitoring

bau888 uses your technical data, transaction patterns, and gameplay activity to detect and prevent fraudulent activity including account takeover attempts, bonus abuse, payment fraud, collusion, and money laundering. This processing is continuous and automated in part, with human review triggered by anomaly detection. The legal basis is legitimate interest — bau888 has a genuine and proportionate interest in protecting the integrity of its platform and the security of all players' accounts and funds.

2.4 Responsible Gaming

bau888 analyses your gameplay activity data — including session lengths, bet frequency, deposit patterns, and self-exclusion history — to identify signs of problem gambling and to deliver responsible gaming interventions such as deposit limit reminders, session time warnings, and proactive support contact. This processing is undertaken in the legitimate interest of player welfare and forms a core part of bau888's duty of care to its players.

2.5 Customer Support

Communications data — your support conversations, emails, and associated account activity — is used to resolve your queries, investigate disputes, and provide accurate assistance. Support records are retained to provide continuity of service and to protect both you and bau888 in the event of a formal dispute. The legal basis is contract performance and legitimate interest.

2.6 Service Improvement and Analytics

Aggregated and anonymised data derived from gameplay activity and platform usage is used to improve the bau888 platform — for example, identifying game performance issues, improving page load times, and tailoring the user experience. Where analytics involve individual-level data, it is pseudonymised to the extent technically possible. The legal basis is legitimate interest.

2.7 Marketing Communications

If you have opted in to marketing communications during registration or subsequently through your account settings, bau888 may contact you by email or SMS to inform you of new promotions, seasonal offers (such as Eid or Pohela Boishakh specials), or new game launches. You may withdraw your consent at any time by updating your preferences in your account settings or by contacting support. Withdrawal of marketing consent does not affect your ability to use the platform.

03 Data Sharing & Disclosure

bau888 does not sell your personal data to third parties. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

3.1 Payment Gateway Providers

To process your deposits and withdrawals, bau888 shares transaction-related information with the relevant payment gateway or mobile wallet provider (such as bKash, Nagad, Rocket, Upay, or Visa's issuing bank network). The data shared is limited to what is technically required to initiate or confirm the transaction. Each payment provider is bound by its own data protection obligations and security standards.

3.2 Game Studio Providers

Live casino games and certain slot titles are powered by third-party studios including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe. To allow you to participate in these games, a session token and minimal player identifier (not your full name or payment data) is shared with the game studio's servers. These studios operate under certified gaming licences and are contractually bound to handle player data in accordance with applicable data protection standards.

3.3 Identity Verification Service Providers

For KYC processing, bau888 may use a third-party identity verification technology provider to assist with automated document checking and liveness detection. Any such provider is engaged under a data processing agreement and is prohibited from using your identity data for any purpose other than completing the verification check requested by bau888.

3.4 Legal and Regulatory Disclosure

bau888 may disclose personal data — including account records, transaction histories, and communications — to law enforcement agencies, financial intelligence units, or other regulatory bodies where required to do so by applicable law, a valid legal order, or in connection with the investigation of suspected money laundering, fraud, or other criminal activity. Such disclosures are made only to the extent legally required and, where permitted, we will notify you that a disclosure has been requested.

3.5 No Advertising Networks

bau888 does not share your personal data — including your email address, mobile number, betting history, or browsing behaviour — with any third-party advertising network, data broker, or retargeting service. Your data is not used to build advertising profiles or to serve you targeted advertisements on other websites or applications.

04 Cookies & Tracking

bau888 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small data file placed on your device by a website. The following categories of cookies are used on bau888.app:

bau888 does not use third-party advertising cookies or allow any external advertising network to place cookies on bau888.app. You can manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary or security cookies will impair or prevent your ability to log in and use the platform.

05 Data Retention

bau888 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Account registration data: Retained for the lifetime of your account, plus five (5) years after permanent account closure. This retention period is driven by AML record-keeping requirements.
• KYC identity documents: Retained for five (5) years from the date of the most recent verification check, or five years from account closure, whichever is later.
• Financial transaction records: Retained for seven (7) years from the date of each transaction, in line with standard financial record-keeping obligations.
• Gameplay and betting logs: Retained for three (3) years from the date of each session, unless required for an ongoing dispute or investigation.
• Support communications: Retained for two (2) years from the date of the most recent message in a support thread.
• Technical and device logs: Retained for ninety (90) days on a rolling basis, except where a specific log entry is flagged as relevant to a security investigation.
• Marketing consent records: Retained for the period of active consent plus one (1) year after consent is withdrawn, to demonstrate compliance.

Once the applicable retention period has expired, data is either permanently and securely deleted from our systems or irreversibly anonymised so that it can no longer be linked to you as an individual. Anonymised, aggregated data (which cannot identify any individual) may be retained indefinitely for statistical and product improvement purposes.

06 Your Privacy Rights

As a bau888 player, you hold the following rights over your personal data. To exercise any of these rights, please contact our support team via live chat within your account dashboard, or email [email protected]. bau888 will acknowledge your request within five (5) business days and respond substantively within thirty (30) days.

6.1 Right of Access

You have the right to request a copy of all personal data that bau888 holds about you. We will provide this in a structured, readable format (typically a PDF or CSV export). There is no fee for a single access request; repeated requests within a short period may be subject to a reasonable administrative charge.

6.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Some data — such as your registered name and date of birth — can only be corrected following re-submission of KYC documentation, since accuracy is critical for regulatory compliance.

6.3 Right to Erasure

You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn your consent and there is no other legal basis for processing. Please note that this right is subject to bau888's legal obligations: we cannot delete data that we are required to retain under AML, KYC, or financial record-keeping regulations, even if you request it.

6.4 Right to Restriction of Processing

In certain circumstances — for example, while you contest the accuracy of your data or while a complaint is being investigated — you may request that bau888 temporarily restrict its processing of your data to storage only, without active use.

6.5 Right to Data Portability

Where processing is based on your consent or on contract performance, you have the right to receive the personal data you have provided to bau888 in a structured, machine-readable format (such as JSON or CSV), suitable for transfer to another service provider.

6.6 Right to Object

You may object to processing that is based on bau888's legitimate interests — for example, certain types of analytics or profiling. Where you raise such an objection, bau888 will cease the processing unless it can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for the establishment, exercise, or defence of legal claims.

6.7 Right to Withdraw Marketing Consent

Where processing is based on your consent (such as marketing emails or SMS), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. You can unsubscribe from marketing messages using the unsubscribe link in any marketing email, or by updating your communication preferences in your bau888 account settings.

07 Data Security

bau888 takes the security of your personal data seriously and implements a layered set of technical and organisational controls to protect it against unauthorised access, disclosure, alteration, or destruction.

7.1 Technical Controls

• TLS/SSL encryption on all data in transit between your device and bau888's servers.
• AES-256 encryption for sensitive data stored at rest, including KYC documents and payment metadata.
• Multi-factor authentication (MFA) available for player accounts and mandatory for administrative access to player data.
• Web application firewall (WAF) and distributed denial-of-service (DDoS) mitigation to protect platform availability and integrity.
• Automated anomaly detection on login patterns, transaction flows, and game activity to identify and respond to security incidents in real time.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.

7.2 Organisational Controls

• Access to player personal data is restricted on a strict need-to-know basis. Only personnel whose job function requires access to specific data categories are granted that access.
• All personnel with access to personal data are bound by confidentiality obligations and receive regular data protection and security training.
• Third-party service providers with access to personal data are engaged under data processing agreements that impose equivalent security obligations.
• bau888 maintains an incident response plan that includes notification procedures for data breaches. In the event of a breach likely to affect your rights and freedoms, you will be notified without undue delay.

08 Policy Updates & Contact

8.1 Changes to This Policy

bau888 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or platform features. When we make material changes to this Policy, we will notify active players by posting a notice on the bau888 platform dashboard and updating the "Last Updated" date at the top of this page. For significant changes that affect how we process data in ways materially different from those described at the time you provided the data, we will seek your renewed consent where legally required.

We encourage you to review this Privacy Policy periodically. Continued use of the bau888 platform following the publication of an updated Policy constitutes acceptance of the revised terms, subject to any consent requirements noted above.

8.2 Contacting bau888 About Privacy

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how bau888 handles your personal information, please contact us using the details below:

• Support Channel: Live chat, available 24/7 from within your bau888 account dashboard after login.
• Email: [email protected] (plain text — not a clickable link).
• Response Time: Within 2 hours for general support queries; within 5 business days for formal data rights requests (Bangladesh Standard Time, UTC+6).

8.3 Scope of This Policy

This Privacy Policy applies solely to personal data processed by bau888 in connection with the bau888.app platform. It does not apply to third-party websites or services that may be referenced within the platform (for example, game studio support portals). bau888 is not responsible for the privacy practices of third-party providers, and we encourage you to review their respective privacy policies independently.