bn088 Privacy Policy

1. Introduction

bn088 is an online casino and sports betting platform operated for adult players in Bangladesh. We are fully committed to protecting the privacy and personal data of every player who registers on or interacts with our platform. This Privacy Policy sets out, in plain and formal English, the complete details of our data collection, processing, storage, and disclosure practices.

This policy applies to all services operated under the bn088 brand, including the website accessible at bn088.io, any associated mobile applications, and all customer support channels through which players communicate with us. It applies to all personal data collected regardless of the device or method used to access our platform.

bn088 takes its data protection obligations seriously. We process personal data in a fair, transparent, and lawful manner, collecting only what is necessary and retaining it only for as long as required. We do not engage in any practice that would be considered incompatible with the purpose for which data was originally collected.

2. Data Controller

For the purposes of this Privacy Policy, bn088 acts as the data controller in respect of personal data collected from players based in Bangladesh. As data controller, bn088 determines the purposes and means by which your personal data is processed.

If you have any questions, concerns, or requests relating to the processing of your personal data, you may contact our dedicated data protection contact using the details provided in Section 16 of this policy. All data-related enquiries are handled in English and are treated with strict confidentiality.

3. Data We Collect

bn088 collects the following categories of personal data from players:

3.1 Identity and Contact Data

• Full legal name (as it appears on your National Identity Card or passport)
• Date of birth (for age verification — players must be 21 years or older)
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi)
• Email address
• Mobile phone number (used for account notifications and bKash/Nagad/Rocket payment linkage)
• National Identity Card (NID) number or passport number (for verification purposes)

3.2 Financial Data

• Mobile financial service account numbers (bKash, Nagad, Rocket, Upay) — stored in tokenised form only
• Bank account or card details (Visa, Mastercard, Dutch-Bangla Bank, City Bank, BRAC Bank) — tokenised and never stored in plain text
• Transaction history, including deposit amounts, withdrawal amounts, and timestamps
• Wallet balance information at time of transaction

3.3 Account and Activity Data

• Username and encrypted password hash
• Account registration date and last login timestamp
• Game history, including game titles played, bet amounts, outcomes, and session durations
• Sports betting history, including markets wagered on (cricket, football, kabaddi), stake amounts, and settlement outcomes
• Bonus claims, wagering progress, and promotional participation records
• Responsible gaming tool activations (deposit limits, session limits, cooling-off periods, self-exclusion)

3.4 Technical and Device Data

• IP address (used for geolocation, fraud prevention, and compliance)
• Device type, operating system, and browser version
• Session identifiers and authentication tokens
• Cookie data (see Section 8 for full details)
• Log data including page views, click paths, and error reports

3.5 Communications Data

• Content of support tickets, live chat messages, and email correspondence with our team
• Dispute and complaint records
• Feedback and survey responses (where voluntarily provided)

4. How We Collect Data

bn088 collects personal data through the following means:

• Direct collection: Data you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated collection: Technical and device data collected automatically when you access and use the bn088 platform, including via cookies, session tracking, and server logs.
• Third-party sources: Identity verification data confirmed via third-party KYC (Know Your Customer) service providers, and fraud-screening data from fraud prevention networks.
• Payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partnered Bangladeshi banks when you initiate a deposit or withdrawal.

5. How We Use Your Data

bn088 uses the personal data it collects for the following purposes:

Purpose	Data Categories Used
Account creation and management	Identity, contact, account data
Age and identity verification (KYC)	Identity, contact data
Processing deposits and withdrawals	Financial, identity data
Fraud prevention and security monitoring	Technical, financial, identity data
Responsible gaming compliance	Account, activity, identity data
Customer support and dispute resolution	Communications, account, financial data
Platform improvement and analytics	Technical, activity data (anonymised where possible)
Personalised promotional offers (opt-in only)	Account, activity data
Legal and regulatory compliance	All categories as required by law

bn088 does not use your personal data for any purpose that is incompatible with the purposes listed above. Where a new purpose arises that is materially different from those described, we will update this policy and notify you accordingly before processing begins.

6. Legal Basis for Processing

bn088 relies on the following legal bases for processing personal data:

• Contractual necessity: Processing required to perform the contract between bn088 and the player — this covers account management, payment processing, and delivery of game and betting services.
• Legal obligation: Processing required to comply with applicable law, including age verification, anti-money laundering (AML) checks, and record-keeping obligations.
• Legitimate interests: Processing carried out in pursuit of bn088's legitimate business interests, including fraud prevention, platform security, and analytics — provided those interests are not overridden by the player's data protection rights.
• Consent: Where processing is based on your consent (for example, receiving personalised promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent, contact us at [email protected].

7. Data Sharing and Disclosure

bn088 does not sell, rent, or trade your personal data to any third party. Data is shared only in the following limited and controlled circumstances:

• Payment providers: We share the minimum necessary financial and identity data with bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partnered banks to process your transactions. These providers are contractually bound to process your data solely for payment purposes.
• Identity verification providers: Third-party KYC service providers may receive identity documents and personal data to verify your age and identity. These providers operate under strict data processing agreements.
• Fraud prevention networks: Anonymised or pseudonymised data may be shared with fraud-screening services to protect bn088 and its players from fraudulent activity.
• Law enforcement and regulatory authorities: bn088 will disclose personal data to competent authorities where required to do so by applicable Bangladeshi law, court order, or other binding legal process. We will notify affected players of such disclosures to the extent permitted by law.
• Professional advisers: Legal counsel, auditors, and other professional advisers may access personal data on a strictly need-to-know basis and are bound by confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of bn088's business, player data may be transferred to the successor entity, provided that the successor is bound by data protection obligations no less stringent than those in this policy. Players will be notified prior to any such transfer.

8. Cookies and Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They serve a variety of functions, from keeping you logged into your account to helping us understand how players use our platform so we can improve it. bn088 uses both first-party cookies (set directly by bn088.io) and limited third-party cookies (set by our analytics and fraud-prevention partners).

8.2 Types of Cookies We Use

Cookie Type	Purpose	Duration
Strictly Necessary	Session authentication, account security, fraud prevention. Cannot be disabled.	Session / up to 24 hours
Functional	Remembering your preferences (e.g., language, last game played, responsible gaming settings).	Up to 12 months
Analytics	Understanding how players navigate the platform (page views, click paths, session duration). Data is anonymised before analysis.	Up to 24 months
Performance	Measuring platform load times, error rates, and game performance to enable technical improvements.	Up to 12 months

8.3 Managing Cookies

You may manage non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will affect the functionality of the bn088 platform and may prevent you from accessing your account or completing transactions. Instructions for managing cookies are available in your browser's help documentation.

9. Data Retention

bn088 retains personal data for the following periods:

• Active account data: Retained for the full duration of your account's existence, plus a minimum of five (5) years following permanent account closure, to satisfy legal and regulatory record-keeping obligations.
• Financial transaction records: Retained for a minimum of seven (7) years after the transaction date, in accordance with standard financial compliance requirements.
• Identity verification documents: Retained for a minimum of five (5) years after account closure.
• Support and communications records: Retained for three (3) years after the matter is closed, or five years where the communication relates to a financial dispute.
• Analytics data: Anonymised analytics data may be retained indefinitely for platform improvement purposes, as it is no longer attributable to any individual.
• Marketing consent records: Retained for the duration of your account plus three years, to demonstrate consent compliance.

At the end of the applicable retention period, personal data is securely deleted or permanently anonymised. Players may request early deletion of specific data categories where deletion would not conflict with bn088's legal obligations — see Section 11 for details.

10. Data Security

bn088 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures in place include:

• 256-bit SSL/TLS encryption applied across all platform pages, APIs, and data transmission channels
• Tokenisation of all financial credentials — raw card numbers and mobile payment PINs are never stored on bn088 servers
• Password hashing using industry-standard cryptographic algorithms (bcrypt or equivalent) — bn088 never stores plaintext passwords
• Role-based access control (RBAC) — internal staff access to player data is restricted on a strict need-to-know basis and is logged for audit purposes
• Intrusion detection systems (IDS) and continuous monitoring of platform infrastructure for anomalous activity
• Regular security assessments and penetration testing conducted by qualified third-party security professionals
• Encrypted database storage for sensitive personal data fields
• Incident response procedures that ensure prompt investigation and, where required, notification of any data breach

Notwithstanding the above, no online platform can guarantee absolute security against all possible threats. Players are encouraged to protect their accounts by using strong, unique passwords, enabling any available two-factor authentication, and immediately reporting any suspected unauthorised account access to [email protected].

11. Your Data Rights

As a bn088 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with your full name, registered email address, and a clear description of your request. We will respond within 30 calendar days.

• Right of access: You have the right to request a copy of all personal data bn088 holds about you, along with information about how it is processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold. Some corrections (e.g., name or date of birth) may require supporting documentation.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to bn088's legal retention obligations — we cannot delete data we are required by law to retain.
• Right to restriction: You may request that processing of your data be restricted in certain circumstances, for example while a rectification request is being assessed.
• Right to data portability: Where processing is based on consent or contractual necessity, you may request a copy of your data in a structured, machine-readable format suitable for transfer to another service provider.
• Right to object: You may object to processing of your data where it is carried out on the basis of legitimate interests, including profiling for personalised promotional offers. Where you object to marketing communications, we will cease such communications immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

12. Protection of Minors

bn088 maintains a strict minimum age requirement of 21 years for all players. The platform does not knowingly collect personal data from individuals under the age of 21 under any circumstances. Age verification is conducted as part of the account registration and KYC process, and accounts where the player is found to be underage are immediately suspended.

If bn088 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on bn088, please contact us immediately at [email protected].

Parents and guardians of minors are encouraged to make use of parental control software to restrict access to online gambling platforms. bn088 supports responsible gaming initiatives and is committed to preventing underage gambling in Bangladesh.

13. International Data Transfers

bn088's primary data processing infrastructure is operated with Bangladeshi players in mind. Where any personal data is processed by third-party service providers operating outside Bangladesh — for example, cloud infrastructure providers, KYC verification services, or payment processors — bn088 ensures that adequate safeguards are in place to protect your data to a standard no less stringent than that described in this policy.

Such safeguards may include contractual data protection clauses, processor-level certifications (such as ISO 27001), and data processing agreements that bind the third party to bn088's data protection standards. If you would like information about the specific safeguards in place for international transfers, please contact us using the details in Section 16.

14. Third-Party Services

The bn088 platform incorporates games and services provided by third-party game studios and technology providers, including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play games from these providers, certain technical data (such as game session identifiers, stake amounts, and game outcomes) may be processed by those providers' systems in order to deliver the game and determine outcomes.

These game providers operate under their own data processing and security standards. bn088 requires all game providers to comply with data protection obligations consistent with those described in this policy. However, bn088 is not responsible for the independent data practices of third-party game studios outside of their contractual obligations to bn088.

The bn088 platform does not contain links to external third-party websites beyond its own services. If you navigate away from bn088 to any third-party site independently, bn088 has no control over and accepts no responsibility for that site's privacy practices.

15. Changes to This Policy

bn088 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. Where changes are material — for example, where we add a new purpose for processing or a new category of third-party recipient — we will notify registered players via the email address on file prior to the changes taking effect, and will update the "Last Updated" date at the top of this policy.

For minor administrative or clarificatory changes, notice may be given solely by updating this page. Players are encouraged to review the Privacy Policy periodically. Continued use of the bn088 platform after changes are published constitutes acceptance of the revised policy.

16. Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a concern about how bn088 has handled your personal data, please contact our data protection team using the details below. All communications must be in English and include your registered account details for verification purposes.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Include "Privacy Policy Enquiry" or "Data Rights Request" in the subject for priority routing
• Response Time: Acknowledgement within 5 business days; full response within 30 calendar days
• Language: English only
• Operating Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)