Privacy Policy —
babua88 Bangladesh

When you register for an account, use the Platform, or interact with babua88's customer support team, we collect certain categories of personal information. The nature of the information collected depends on the specific interaction and the services you use. The main categories of personal data we collect are as follows:

Identity and Contact Information: When you register, we collect your full legal name, date of birth, gender (optional), email address, and mobile phone number. This information is used to create and verify your account, communicate with you about your account, and fulfil our Know Your Customer (KYC) obligations. Players in Bangladesh may be asked to provide their National Identity Card (NID) number as part of the identity verification process.

Financial and Payment Information: To facilitate deposits and withdrawals in Bangladeshi Taka (BDT), we collect information about your chosen payment method. For bKash and Nagad transactions, this includes your registered mobile number. For bank transfers, this includes your account name, account number, and bank branch details. For card payments via Visa or Mastercard, we collect your card number (masked), expiry date, and billing name. babua88 does not store full card numbers on its own servers — payment card data is handled by our PCI-DSS-compliant payment processing partners.

Technical and Device Information: When you access the Platform, we automatically collect certain technical data about your device and browsing session. This includes your IP address, browser type and version, operating system, device type (mobile, tablet, desktop), screen resolution, referring URL, and session timestamps. This data is used for security monitoring, fraud prevention, and platform performance optimisation.

Behavioural and Gaming Data: We collect records of your gaming activity on the Platform, including game sessions played, bet amounts, win/loss history, bonus usage, and deposit and withdrawal transactions. This data is used to personalise your experience, detect unusual account activity, enforce responsible gaming limits, and fulfil our regulatory and anti-money laundering (AML) obligations.

Communications Data: If you contact our customer support team by email, live chat, or any other channel, we retain a record of the correspondence, including the content of your messages and our responses. This data is used for quality assurance, dispute resolution, and training purposes.

Voluntary Information: If you participate in surveys, promotions, or competitions offered by babua88, you may voluntarily provide additional information such as your preferred games, betting preferences, or feedback on the Platform. Participation in such activities is entirely optional.

babua88 does not sell, rent, or trade your personal data to third parties for their independent commercial purposes. However, in order to operate the Platform effectively and fulfil our legal obligations, we share certain personal data with carefully selected categories of third parties under strict data processing agreements. These third-party recipients are permitted to use your data only for the specific purposes for which it was shared.

Payment Processing Partners: To facilitate BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, and card payment networks, we share the minimum necessary financial data with our payment processing partners. These partners are required to maintain the security of your payment data in accordance with PCI-DSS standards and applicable financial regulations.

Game Providers: babua88's game library is powered by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and Habanero. When you launch a game from one of these providers, certain technical data (such as your anonymised player session ID and currency preference) is transmitted to the game provider's servers in order to load and run the game. Game providers do not receive your full identity or payment details.

Identity Verification Services: For KYC purposes, babua88 may use third-party identity verification services to validate the authenticity of the documents you submit. These services process your identity document data solely for the purpose of verification and are bound by strict confidentiality obligations.

IT Infrastructure and Security Providers: babua88 relies on third-party cloud hosting, content delivery, and cybersecurity providers to operate the Platform. These providers may process limited technical data (such as server logs containing IP addresses) in the course of providing their services. They are contractually prohibited from using this data for any purpose other than service delivery.

Legal and Regulatory Authorities: babua88 may be required by law, court order, or lawful regulatory direction to disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities. In such cases, we will disclose only the minimum data required by the relevant legal obligation and will, where legally permitted, notify the affected player of the disclosure.

Business Transfers: In the event of a merger, acquisition, or sale of substantially all of babua88's assets, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and of any material change in data processing practices that results from it.

babua88 takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, or disclosure. While no system can guarantee absolute security, we continuously review and enhance our security practices to reflect current best standards.

Encryption in Transit: All data transmitted between your device and babua88's servers is encrypted using TLS 1.3 (Transport Layer Security). This ensures that your login credentials, payment details, and personal information cannot be intercepted by third parties during transmission. Our domain is served exclusively over HTTPS; any HTTP request is automatically redirected to the secure HTTPS version.

Encryption at Rest: Sensitive personal data — including identity documents, payment information, and account credentials — is encrypted at rest using AES-256 encryption. Database access is restricted to authorised personnel only, and all access events are logged and monitored.

Access Controls: Access to personal data within babua88's systems is granted on a strict need-to-know basis. Customer support staff can access only the account data necessary to resolve your query. Administrative access to backend systems requires multi-factor authentication (MFA) and is subject to regular access reviews.

Intrusion Detection and Monitoring: babua88 operates continuous intrusion detection systems (IDS) and security information and event management (SIEM) tools to monitor for abnormal activity across its infrastructure. Potential security incidents are escalated to our security team for immediate investigation.

Data Breach Response: In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, babua88 will notify affected players as promptly as reasonably practicable, providing details of the nature of the breach, the categories of data affected, the likely consequences, and the measures taken or proposed to address it. Players are encouraged to notify us immediately at support@babua88 if they suspect that their account has been compromised.

Geographic Storage: babua88 stores player data on servers located in secure data centres. Player data relating to Bangladesh-resident players is handled in accordance with the data security standards described in this Privacy Policy. Where data is processed by third-party service providers located outside Bangladesh, we ensure that appropriate safeguards are in place through contractual obligations that require those providers to maintain equivalent levels of data protection.

babua88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Once the applicable retention period has elapsed, personal data is securely deleted from our systems or anonymised so that it can no longer be linked to an identifiable individual.

The following retention periods apply to the main categories of personal data we hold:

• Account identity data (name, date of birth, NID): Retained for the duration of your account plus five (5) years following account closure, to fulfil AML and KYC record-keeping obligations.
• Financial transaction records (deposit and withdrawal history): Retained for seven (7) years following the transaction date, in accordance with standard financial record-keeping requirements.
• Gaming activity records (bet history, game sessions): Retained for five (5) years following the date of the activity.
• Customer support correspondence: Retained for two (2) years following the resolution of the relevant query or dispute.
• Marketing consent records: Retained for the duration of the consent plus two (2) years following withdrawal of consent, as evidence of consent status.
• Technical and device data (server logs, IP addresses): Retained for up to ninety (90) days for security and fraud detection purposes, after which they are automatically purged.

Where a legal hold is in place — for example, in connection with active litigation, a regulatory investigation, or a law enforcement request — data subject to that hold will be retained until the hold is formally lifted, regardless of the standard retention period.

Players who close their accounts voluntarily may request early deletion of data that is not subject to a legal retention obligation by submitting a written request to support@babua88. We will confirm within 14 days which categories of data can be deleted immediately and which must be retained for legal reasons, and will action the deletions accordingly.