bah88 Privacy Policy — How We Handle Your Data

Introduction

This Privacy Policy ("Policy") describes how bah88 ("we", "us", "our") collects, processes, stores, and protects personal data belonging to users ("you", "your") of the bah88 website at bah88.ws and all associated products and services, including sports betting, live casino, slots, crash games, and fishing arcade. By creating a bah88 account or by continuing to use the bah88 platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data in the manner described herein. If you do not agree with this Policy, you must not use the bah88 platform.

bah88 is committed to handling all personal data with transparency, care, and in full compliance with applicable data protection principles. This Policy applies to all personal data collected through the bah88 website, mobile platform, customer support channels, and any other touchpoints through which bah88 interacts with players. We review and update this Policy periodically. When material changes are made, the "Last updated" date at the top of this page will be revised accordingly.

2. How We Use Your Personal Data

bah88 uses the personal data it collects for the following specific purposes. We do not use personal data for any purpose not listed here without obtaining your prior consent:

• 1Account Management
  To create, verify, and maintain your bah88 account; to process deposits and withdrawals in BDT via bKash, Nagad, Rocket, and other approved channels; to authenticate your identity each time you log in; and to deliver account notifications, transaction confirmations, and support communications.
• 2Regulatory Compliance
  To fulfil our obligations under applicable anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, age verification obligations, and responsible gaming duties. This includes verifying that all players are aged 21 or above and flagging any account activity that may indicate problem gambling or financial crime.
• 3Platform Improvement and Personalisation
  To analyse gameplay patterns and platform usage in aggregate to improve the bah88 product, optimise the user experience for Bangladesh players, and ensure the game library and promotional calendar remain relevant. Gameplay data may also be used to personalise the game lobby and deliver contextually relevant promotions where you have consented to receive them.
• 4Security and Fraud Prevention
  To monitor platform activity for signs of fraud, collusion, money laundering, multi-accounting, or any other prohibited conduct described in our Terms & Conditions. Technical data including IP addresses, device fingerprints, and session logs are used for this purpose. Where suspicious activity is identified, bah88 reserves the right to report relevant data to law enforcement or regulatory authorities as required by applicable law.

4. Sharing Your Personal Data

bah88 does not sell your personal data to third parties. We share personal data only in the limited circumstances described below, and only with parties who are contractually bound to protect it to standards equivalent to those in this Policy:

• 1Payment Processors
  Transaction data is shared with payment service providers including bKash, Nagad, Rocket, Upay, and card processors (Visa, Mastercard) solely for the purpose of processing deposits and withdrawals. These providers operate under their own privacy policies and are subject to applicable financial regulations. bah88 does not share gameplay data or KYC documents with payment processors.
• 2Game Providers
  Certain technical data (session identifiers, RNG verification tokens) is shared with game providers such as Pragmatic Play, Evolution Gaming, Ezugi, Spribe, and others as necessary to deliver their games within the bah88 platform. Game providers do not receive your full identity data, financial data, or KYC documents.
• 3Legal and Regulatory Authorities
  bah88 may be required by law or by a competent authority to disclose personal data, including identity data, transaction records, and account activity. bah88 will comply with all lawful disclosure obligations and, where legally permissible, will notify the affected player of any such disclosure.

6. Data Retention

bah88 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, subject to any minimum retention periods required by applicable law. Account data and transaction records are retained for the duration of your active account plus a further period as required for regulatory compliance purposes, including AML record-keeping obligations. KYC documents are retained for the legally required period from the date of last account activity. Where you close your bah88 account, we will delete or anonymise personal data that is no longer required, subject to our legal retention obligations.

Where personal data is no longer required and no legal retention obligation applies, bah88 will securely delete or irreversibly anonymise the data so that it can no longer be attributed to any identifiable individual. Anonymised or aggregated data that cannot be linked back to a specific player may be retained indefinitely for platform analytics and product improvement purposes.

8. How We Protect Your Data

bah88 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. All data in transit between your device and the bah88 platform is encrypted using 256-bit SSL/TLS encryption. Data at rest is stored on secured servers with access controls limited to authorised personnel only. bah88 conducts regular security reviews and updates its security infrastructure in response to evolving threats. Payment credentials such as bKash PINs and card numbers are never stored on bah88 servers — they are processed directly by the respective payment providers via encrypted channels.

Despite the security measures bah88 has in place, no internet-based platform can guarantee absolute security against all possible threats. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bah88 will take all steps required by applicable law, including notifying affected players and relevant authorities within the required timeframe. You are encouraged to protect your own account by using a strong, unique password and by logging out of your account when using a shared or public device.

10. Changes to This Privacy Policy

bah88 reserves the right to update, amend, or replace this Privacy Policy at any time. When material changes are made, the "Last updated" date at the top of this page will be revised and, where bah88 considers the change to be significant, registered players will be notified via account notification or email. Your continued use of the bah88 platform following any update to this Policy constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to stay informed about how bah88 handles your personal data.