bai888 Privacy Policy

1 Introduction

bai888 ("we", "us", "our") operates the online casino and sports betting platform available at https://bai888.app (the "Platform"). We are committed to protecting the privacy and personal data of every user who registers on, visits or otherwise interacts with the Platform.

This Privacy Policy describes the categories of personal data we collect, the purposes for which that data is processed, the circumstances under which it may be shared, the safeguards we apply to keep it secure, and the rights you hold as a data subject. This Policy applies to all users of the bai888 Platform, with a particular focus on players based in Bangladesh.

By registering an account on bai888 or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the data practices described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately and may contact us to request account closure.

2 Data We Collect

bai888 collects personal data through several channels: directly from you when you register or interact with the Platform, automatically as you browse and use the Platform, and in limited cases from third-party verification and payment service providers. The categories of data we collect are detailed below.

2.1 Registration & Identity Data

When you create a bai888 account, we collect the following information:

• Full legal name
• Date of birth (used to verify that you are 18 years of age or older)
• Email address
• Username and encrypted password
• Mobile phone number
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna) and postcode

2.2 Identity Verification (KYC) Data

To comply with anti-money-laundering obligations and to verify your age, we may request:

• A copy of a government-issued photo ID (National Identity Card, passport or driving licence)
• A proof-of-address document dated within the last three months (utility bill or bank statement)
• A selfie or live photo for biometric matching against your ID document
• Proof of ownership of the payment method used on the Platform (bKash, Nagad, Rocket or Upay account statement)

2.3 Financial & Transaction Data

We record all financial transactions conducted through the Platform, including:

• Deposit and withdrawal amounts in BDT
• Payment method type and the last four digits or masked account reference of your bKash, Nagad, Rocket, Upay, Visa or Mastercard account
• Transaction timestamps and reference IDs
• Bonus credits issued, wagering activity, and cashback calculations

2.4 Technical & Usage Data

When you access the Platform, we automatically collect certain technical information:

• IP address and approximate geographic location derived from it
• Device type, operating system, and browser type and version
• Pages visited, time spent on each page, links clicked and navigation paths
• Session start and end times
• Error logs and performance diagnostics

2.5 Communications Data

If you contact our support team via email, we retain a record of that correspondence, including your message content, the date and time of contact, and any resolution reached. This data is used for quality assurance, staff training and dispute resolution purposes.

3 How We Use Your Data

bai888 processes your personal data for the following specific purposes. We will not use your data for any purpose incompatible with those listed below without first obtaining your explicit consent.

• Account Management: Creating, maintaining and closing your bai888 account; authenticating your identity at login; communicating account-related updates and notices to you.
• Age & Identity Verification: Confirming that you are 18 years of age or older and that the identity information you have provided is accurate and genuine, in accordance with our responsible gaming obligations.
• Payment Processing: Facilitating deposits and withdrawals in BDT through bKash, Nagad, Rocket, Upay and other supported payment channels; reconciling transactions; investigating disputed or failed payments.
• Fraud Prevention & Security: Detecting, investigating and preventing fraudulent account activity, money laundering, bonus abuse, multi-accounting and any other prohibited conduct described in our Terms & Conditions.
• Regulatory Compliance: Meeting applicable anti-money-laundering (AML) and know-your-customer (KYC) obligations; responding to lawful requests from competent authorities.
• Customer Support: Responding to your enquiries, resolving disputes, processing complaints and providing after-care.
• Platform Improvement: Analysing aggregated and anonymised usage data to understand how players interact with the Platform, identify technical issues and improve the overall user experience.
• Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling behaviours; enforcing self-exclusions and deposit limits set by you or applied by bai888 under our responsible gaming framework.
• Marketing Communications: Where you have explicitly opted in, sending you information about promotions, bonuses and new features available on bai888. You may withdraw your marketing consent at any time by contacting [email protected].

4 Legal Basis for Processing

bai888 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you accepted at registration — including account management, payment processing and customer support.
• Legal Obligation: Processing required to comply with applicable AML, KYC and other regulatory obligations that bai888 is subject to.
• Legitimate Interests: Processing carried out for fraud prevention, security monitoring and Platform analytics, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for optional purposes such as marketing communications, where you have given freely given, specific and informed consent. Consent may be withdrawn at any time without affecting prior processing.

5 Data Sharing & Disclosure

bai888 does not sell, rent or trade your personal data. We may share your data with carefully selected third parties only in the circumstances described below.

5.1 Payment Service Providers

We share the minimum necessary transaction data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa and Mastercard solely to process your deposits and withdrawals. Each payment provider operates under its own privacy terms and security standards.

5.2 Identity Verification Partners

To fulfil KYC obligations, we may share your identity documents and personal details with accredited third-party identity verification service providers. These providers are contractually bound to use your data solely for the verification purpose and to apply security standards at least equivalent to our own.

5.3 Game Content Providers

Game studios such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming and Spribe may receive anonymised session identifiers and game event data to power their platforms and investigate disputed outcomes. They do not receive your full identity or financial data.

5.4 Legal & Regulatory Authorities

bai888 will disclose personal data to law enforcement agencies, regulators or courts when required to do so by applicable law, a valid legal process or a binding court order. Where legally permissible, we will notify you of such a disclosure.

5.5 Business Transfers

In the event of a merger, acquisition or sale of all or substantially all of bai888's assets, your personal data may be transferred to the successor entity. You will be notified of any such transfer and the privacy terms applicable to your data following the transaction.

6 Data Retention

bai888 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The general retention periods we apply are:

Once the applicable retention period has expired, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Anonymised, aggregated data may be retained indefinitely for statistical and research purposes.

7 Security Measures

bai888 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or alteration. Key measures include:

• Encryption in Transit: All data transferred between your browser or app and our servers is encrypted using 256-bit TLS/SSL protocols. Unencrypted connections are automatically redirected to HTTPS.
• Encryption at Rest: Sensitive fields — including passwords, payment references and KYC document contents — are encrypted in our databases using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Staff who do not require access to your data as part of their job function cannot retrieve it.
• Two-Factor Authentication (2FA): Internal systems holding personal data are protected by multi-factor authentication. We strongly encourage all bai888 players to enable 2FA on their accounts for additional protection.
• Intrusion Detection: Our infrastructure is monitored 24/7 by automated systems designed to detect and alert on anomalous access patterns, brute-force attempts and other security threats.
• Regular Security Audits: bai888 conducts periodic security assessments and vulnerability scans of its Platform infrastructure to identify and remediate potential weaknesses before they can be exploited.

8 Cookies & Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They allow the website to recognise your device on subsequent visits and to remember certain preferences or session states. bai888 uses cookies and similar technologies (such as local storage and session tokens) to operate and improve the Platform.

8.2 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function. These include session cookies that maintain your logged-in state and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without preventing use of the Platform.
• Preference Cookies: Remember your settings such as language preference (English), display options and notification preferences so that you do not need to reconfigure them on each visit.
• Analytics Cookies: Collect anonymised data about how visitors use the Platform — pages visited, time on page, navigation paths — to help bai888 improve the user experience. These cookies do not identify you personally.

8.3 Third-Party Advertising Cookies

bai888 does not place third-party advertising cookies on the Platform. We do not permit advertising networks to set tracking cookies through the bai888 website.

8.4 Managing Cookies

You can manage and delete cookies through your browser settings at any time. Please note that disabling essential cookies will prevent you from logging in and using core Platform features. Instructions for managing cookies in the most common browsers are available via the browser's official help documentation.

9 Your Data Rights

Subject to applicable law and the verification of your identity, you hold the following rights in respect of the personal data that bai888 processes about you:

• Right of Access: You may request a copy of all personal data bai888 holds about you, along with information about how it is being used. We will provide this in a structured, commonly used format within 28 days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. Minor corrections (e.g., email address updates) can be made directly within your account settings.
• Right to Erasure: You may request that bai888 delete your personal data where it is no longer necessary for the purposes it was collected, where you withdraw consent (and no other legal basis applies), or where you object to processing and no overriding legitimate interest exists. Please note that certain data must be retained for regulatory compliance and cannot be deleted on request.
• Right to Restrict Processing: You may request that bai888 limit the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, you may request that your personal data be provided to you (or transferred to another controller) in a machine-readable format.
• Right to Object: You may object at any time to processing carried out on the basis of bai888's legitimate interests, including profiling for fraud detection purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.

To exercise any of the rights listed above, please submit a written request to [email protected] with the subject line "Data Rights Request". We will acknowledge receipt within 48 hours and provide a full response within 28 days. We may need to verify your identity before processing certain requests.

10 Children's Privacy

The bai888 Platform is strictly intended for adults aged 18 and above. We do not knowingly collect personal data from any individual under the age of 18. Our registration process includes an age declaration and we conduct age verification as part of our KYC process.

If bai888 becomes aware that personal data has been collected from a person under the age of 18, we will immediately suspend the relevant account, delete the data as promptly as practicable (subject to any mandatory retention requirements) and notify the user of the reason for closure.

If you are a parent or guardian and believe that your child may have registered an account on bai888, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

11 Third-Party Links

The bai888 Platform may contain links to third-party websites or services — for example, links to payment provider information pages or game studio promotional content. This Privacy Policy applies solely to the bai888 Platform. bai888 is not responsible for the privacy practices, security standards or content of any third-party website, even where a link to that site appears on the Platform.

We encourage you to read the privacy policy of any third-party website you visit before submitting any personal data to it. The presence of a link on the bai888 Platform does not constitute an endorsement of the linked website or its privacy practices.

12 Updates to This Policy

bai888 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law or the services we offer. When material changes are made, we will publish the updated Policy on this page with a revised "Last Updated" date and, where practicable, provide notice to registered users via email.

Your continued use of the Platform after the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should cease using the Platform and may request account closure by contacting [email protected].

We recommend that you review this page periodically to stay informed about how bai888 protects your personal data. Archived versions of prior Privacy Policy editions are available on request.

13 Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or to bai888's handling of your personal data, please contact us using the details below. Our support team is available 24 hours a day, 7 days a week on Bangladesh Standard Time (BST, UTC+6).

Email addresses above are shown as plain text only and are not clickable links. Please copy the address manually into your email client. We aim to acknowledge all privacy-related enquiries within 48 hours of receipt.