baba88 Privacy Policy

Introduction

baba88 ("we", "us", "our") operates the online casino and sports betting platform accessible at https://baba88.vu. This Privacy Policy governs the collection, processing, storage, and disclosure of personal data relating to all individuals who interact with the baba88 platform, including registered players, prospective players who browse without registering, and any person who contacts baba88 support.

baba88 takes the privacy of its players seriously. We have designed our data practices to be transparent, proportionate, and consistent with the expectations of adult players in Bangladesh who entrust us with personal information as part of their registration, deposit, and wagering activity. We collect only what is necessary, retain it only for as long as required, and protect it to the highest practical standard throughout its lifecycle on our systems.

This Privacy Policy should be read alongside the baba88 Terms & Conditions and Responsible Gaming Policy, each of which incorporates this Privacy Policy by reference. By creating an account or using the baba88 platform, you confirm that you have read and understood this document and that you consent to the data practices described herein.

If you have questions about anything in this Privacy Policy before creating an account, please contact our support team at [email protected] — we are happy to clarify any aspect of how we handle your data before you commit to registering.

Data We Collect

baba88 collects personal data through several channels: directly from you during registration and account management, automatically through your interaction with the platform, and from third-party payment providers as a necessary part of transaction processing. The categories of personal data we collect are set out in the table below.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data for the purpose of unique identification (beyond standard KYC liveness checks), health data, or data concerning sexual orientation. Where our KYC process involves a liveness check, the biometric template generated is used solely for identity verification and is not retained as a biometric identifier beyond the verification event.

How We Use Your Data

baba88 uses the personal data it collects for the following purposes, each of which is tied to a specific legitimate reason described in Section 4:

• Account creation and management: Processing your registration, verifying your identity, maintaining your account balance, and managing your account settings and preferences.
• Transaction processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank channels; reconciling transaction records; investigating payment disputes.
• Platform operation: Delivering the casino games, sports betting markets, and other features you access on baba88; maintaining session continuity; resolving technical errors.
• Regulatory compliance and KYC: Verifying your age and identity in accordance with our 18+ policy; conducting anti-money laundering (AML) checks; maintaining records required by applicable financial regulations.
• Fraud prevention and security: Detecting and investigating suspicious account activity, unauthorised access attempts, multi-accounting, and other forms of platform abuse.
• Responsible gaming: Monitoring for indicators of problem gambling behaviour; enforcing deposit limits, time-out periods, and self-exclusion orders; sending responsible gaming communications where triggered by usage patterns.
• Customer support: Responding to your queries, complaints, and requests; maintaining a record of support interactions for quality assurance and dispute resolution purposes.
• Marketing communications: Sending promotional offers, bonus notifications, and platform news to players who have opted in. You may opt out of marketing communications at any time by updating your account preferences or by emailing [email protected].
• Platform improvement: Analysing aggregated, anonymised usage data to improve the baba88 platform experience, optimise game performance, and identify features that players value most.

baba88 does not use personal data for automated decision-making that produces significant legal effects on players, except where such automated processing is a necessary component of fraud detection or AML screening — in which case, any flagged account will be reviewed by a human compliance team member before any adverse action is taken.

Legal Basis for Processing

baba88 processes personal data only where a valid legal basis exists for doing so. The legal bases we rely upon are as follows:

• Contractual necessity: Processing required to perform our obligations under the baba88 Terms & Conditions — including account management, payment processing, and game delivery — is carried out on the basis that it is necessary to execute the contract between baba88 and the registered player.
• Legal obligation: Processing required to comply with applicable laws and regulations — including KYC identity verification, AML record-keeping, age verification, and response to lawful requests from competent authorities — is carried out on the basis of legal obligation.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and internal analytics is based on baba88's legitimate interest in operating a safe, secure, and compliant platform, provided that such interests are not overridden by the privacy rights of individual players.
• Consent: Processing for direct marketing communications — including promotional emails and SMS notifications about bonuses, seasonal offers (such as Eid or Pohela Boishakh promotions), and platform updates — is based on your explicit opt-in consent at registration or through account settings. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Sharing Your Data

baba88 does not sell, rent, or trade personal data to third parties for commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment service providers: We share the minimum personal and financial data required with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank to process your deposits and withdrawals. All data shared with payment providers is transmitted over encrypted channels and is subject to each provider's own data protection obligations.
• Game studio providers: Third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session and wagering data necessary to deliver their games within the baba88 environment. This data is governed by the studios' own data processing agreements with baba88.
• Identity verification services: We may share identity document data with accredited third-party KYC verification service providers for the purpose of automated document authentication and liveness checks. These providers act as data processors under contractual terms that restrict their use of data to the verification purpose only.
• Fraud prevention and AML services: Anonymised or pseudonymised transaction data may be shared with industry fraud prevention networks for the purpose of identifying and blocking known fraudulent activity patterns across multiple platforms.
• Legal and regulatory authorities: baba88 will disclose personal data to competent governmental, regulatory, or law enforcement authorities where required by law, court order, or where we reasonably believe disclosure is necessary to protect the rights, property, or safety of baba88, its players, or third parties.
• Business successors: In the event of a merger, acquisition, or sale of all or substantially all of baba88's assets, personal data held by baba88 may be transferred to the acquiring entity, subject to equivalent data protection commitments. Affected players will be notified prior to any such transfer taking effect.

All third parties with whom baba88 shares personal data are required to handle that data in a manner consistent with this Privacy Policy and to implement appropriate technical and organisational security measures. baba88 does not permit third-party processors to use player data for their own independent marketing or commercial purposes.

Cookies & Tracking Technologies

baba88 uses cookies and similar tracking technologies on its platform to deliver a functional, personalised, and secure experience. A cookie is a small text file placed on your device by the baba88 website when you visit. Cookies do not contain executable code and cannot access other data stored on your device.

The categories of cookies used by baba88 are as follows:

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your login session, remember your language and currency preferences, and ensure that security features operate correctly. These cookies cannot be disabled without impairing platform functionality.
• Performance and analytics cookies: These cookies collect anonymised data about how players navigate the baba88 platform — such as which pages are visited most frequently and where users encounter errors. This data is used solely to improve platform performance and user experience.
• Functional cookies: These cookies remember your preferences — such as game display settings, responsible gaming tool configurations, and notification preferences — so that you do not need to re-enter them on each visit.
• Security cookies: These short-lived cookies support fraud detection by identifying unusual session behaviour, such as rapid successive logins from geographically distant IP addresses.

baba88 does not use third-party advertising cookies or retargeting pixels that track your behaviour across other websites. You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to use core platform features including account login and payment processing.

Data Retention

baba88 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to any applicable legal or regulatory minimum retention periods. The principal retention periods applied by baba88 are as follows:

• Account and identity data: Retained for the duration of the active account relationship and for a minimum of five (5) years following account closure or the date of the last transaction, whichever is later. This period reflects financial record-keeping obligations and the limitation period for potential legal claims.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction in compliance with financial regulations applicable to online payment processing and AML obligations.
• KYC and verification documents: Retained for the duration of the account relationship and for five (5) years post-closure. Physical or digital document copies are stored in encrypted form with access restricted to compliance team members on a need-to-know basis.
• Support and communications records: Retained for three (3) years from the date of the last communication, to support dispute resolution and quality assurance review.
• Marketing consent records: Retained for the duration of the active account and for two (2) years following account closure or withdrawal of consent, whichever is later, to demonstrate compliance with consent obligations.
• Technical and usage data (logs): Server and access logs are retained for up to twelve (12) months for security monitoring and fraud investigation purposes, after which they are purged or permanently anonymised.

Where personal data is no longer required for its original collection purpose and no legal retention obligation applies, baba88 will either permanently delete the data from its systems or irreversibly anonymise it so that it can no longer be associated with an identifiable individual.

Data Security

baba88 implements a layered set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes, but is not limited to:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and the baba88 platform, ensuring that your login credentials, payment details, and personal information cannot be intercepted during transmission.
• Encryption at rest for all personal and financial data stored on baba88 servers, using industry-standard AES-256 encryption protocols.
• Access controls restricting employee access to personal data on a strict need-to-know basis, governed by role-based permissions. All staff with access to personal data are subject to confidentiality obligations and regular security training.
• Two-factor authentication available to all players for their baba88 account login, providing an additional layer of protection against unauthorised account access.
• Intrusion detection and prevention systems monitoring for anomalous network activity, brute-force login attempts, and other indicators of hostile access attempts in real time.
• Regular security assessments including penetration testing and vulnerability scanning of the baba88 platform and supporting infrastructure, conducted on a periodic schedule by qualified security professionals.

While baba88 takes all reasonable and practicable measures to secure your personal data, no system connected to the internet can guarantee absolute security. In the event of a personal data breach that poses a material risk to affected individuals, baba88 will notify the affected players without undue delay and will take all appropriate remedial action to contain and mitigate the breach.

Your Rights

As a baba88 player, you hold the following rights in respect of your personal data. All requests should be submitted in writing to [email protected] from the email address registered on your account:

• Right of access: You may request a copy of all personal data baba88 holds about you, together with information about how it is being used and with whom it has been shared. baba88 will respond to access requests within thirty (30) calendar days.
• Right to rectification: If any personal data held by baba88 is inaccurate or incomplete, you have the right to request its correction. Minor corrections — such as updating a mobile number or postal address — can be made directly through your account settings without needing a formal request.
• Right to erasure ("right to be forgotten"): You may request the deletion of personal data held by baba88 where it is no longer necessary for its original purpose, where you have withdrawn consent (for consent-based processing), or where processing was unlawful. This right is subject to baba88's overriding legal obligations to retain certain data under applicable regulations.
• Right to restriction of processing: You may request that baba88 temporarily suspend processing of your personal data in certain circumstances — for example, while the accuracy of data is contested, or while a complaint regarding our processing is under review.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that baba88 provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to object: You may object to processing based on baba88's legitimate interests at any time. Upon receipt of a legitimate interests objection, baba88 will cease processing unless it can demonstrate compelling grounds that override your privacy interests.
• Right to withdraw consent: Where processing is based on your consent — principally, direct marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

baba88 will not charge a fee for handling data rights requests made in good faith. If a request is manifestly unfounded or excessive (for example, repetitive requests for identical data within a short period), baba88 reserves the right to charge a reasonable administrative fee or decline to act on the request, providing written reasons for that decision.

Children's Privacy

baba88 is strictly an adult platform. We do not knowingly collect, process, or store personal data from any individual under the age of eighteen (18). Our registration process includes mandatory age declaration and is supported by KYC age verification measures designed to prevent underage access.

If baba88 becomes aware — through our own verification processes, a parental notification, or any other means — that an account has been created by or on behalf of a person under 18, we will immediately suspend the account, delete all personal data associated with it, and forfeit any funds in the account balance pending investigation. The matter may be referred to relevant authorities where the circumstances warrant such action.

If you are a parent or guardian and believe that a minor in your care has created a baba88 account, please contact [email protected] immediately with as much identifying information as you are able to provide. We will treat such reports as urgent and respond within two (2) business hours.

Third-Party Services

The baba88 platform integrates third-party services — including game studio software from Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to deliver its full range of casino and live dealer products. These studios operate their game engines within the baba88 environment under data processing agreements that restrict their use of player data to game delivery purposes only.

baba88 does not embed third-party social media widgets, advertising networks, or external analytics platforms that would track your behaviour beyond the baba88 platform itself. Any links to external websites that may appear in informational content on the platform are provided for reference only; baba88 is not responsible for the privacy practices of third-party websites and encourages players to review the privacy policies of any external site they visit.

International Data Transfers

baba88 may store and process personal data on servers located outside of Bangladesh, including in jurisdictions where data protection laws may differ from those applicable in Bangladesh. Where such transfers occur, baba88 takes all reasonable steps to ensure that personal data receives an equivalent level of protection, including through:

• Requiring all third-party data processors in other jurisdictions to execute data processing agreements incorporating appropriate contractual safeguards
• Using service providers operating in jurisdictions recognised as providing adequate data protection standards
• Applying encryption to all data in transit across international network boundaries

By using the baba88 platform and consenting to this Privacy Policy, you acknowledge that your personal data may be transferred to and stored in jurisdictions outside of Bangladesh for the purposes described in this document, subject to the safeguards outlined above.

Policy Updates

baba88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the structure of our platform. The date of the most recent revision is displayed prominently at the top of this document under "Last Updated".

Where changes to this Privacy Policy are material — meaning they meaningfully affect the rights of players or the way in which we use personal data — baba88 will notify registered players by email to the address on their account no fewer than fourteen (14) calendar days before the revised policy takes effect. Non-material changes such as typographical corrections, clarifications of existing practices, or updated contact details may be made without advance notice.

Your continued use of the baba88 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept a material change to this Privacy Policy, you should cease using the platform and request account closure by contacting [email protected] before the effective date of the change.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way baba88 handles your personal data, please contact our data support team using the details below. All privacy-related enquiries are handled by a dedicated team member and treated with strict confidentiality.

• Email: [email protected]
• Subject line for data requests: DATA REQUEST – [Your Registered Username]
• Response time: Within 48 hours for general privacy queries; within 30 calendar days for formal data subject access requests
• Support hours: 09:00 – 23:00 BST (UTC+6), seven days a week

To verify your identity before acting on a data rights request, baba88 will ask you to confirm your request from the email address registered on your account and may ask for one additional piece of identifying information. This verification step is performed to protect your data from being disclosed to unauthorised third parties who might attempt to impersonate you.