babu8 Privacy Policy – How We Protect Your Personal Data

1. Introduction

This Privacy Policy describes how babu8 ("we", "us", "our", or "the Platform") collects, processes, stores, and protects the personal information of users ("you", "your", or "Player") who access and use the babu8 online betting and casino platform at babu8.ws. This policy applies to all services offered by babu8, including sports betting, live casino, slot games, and all associated support and communication channels.

We take the privacy of our players seriously. Bangladesh players entrust us with sensitive personal and financial information when they create an account and transact on babu8, and we recognise our responsibility to handle that information with care, transparency, and in accordance with applicable data protection principles.

By registering a babu8 account, using our platform, or otherwise interacting with our services, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with any part of this policy, please discontinue use of the babu8 platform and contact support to arrange account closure.

2. Data Controller

2.1 Identity: For the purposes of this Privacy Policy, babu8 acts as the data controller in respect of personal data collected through the babu8 platform. As data controller, we determine the purposes and means of processing your personal information.

2.2 Contact: All data-related enquiries, requests to exercise your rights, and complaints regarding our data practices should be directed to our Data Protection contact at [email protected], clearly marked "DATA PRIVACY" in the subject line.

2.3 Responsibility: babu8 is responsible for ensuring that personal data collected through the platform is handled in accordance with the principles set out in this Privacy Policy. Where we engage third-party processors to handle data on our behalf, we ensure contractual safeguards are in place to protect your information.

3. Data We Collect

babu8 collects the following categories of personal data from players. We collect only what is necessary for the specified purpose:

Data Category	Specific Data Points	Purpose
Identity Data	Full legal name, date of birth, National ID / passport number, gender	Account registration, KYC verification, age verification
Contact Data	Email address, mobile phone number, residential address	Account communication, support, verification
Financial Data	bKash/Nagad/Rocket mobile wallet numbers, bank account details, transaction history, deposit and withdrawal records	Payment processing, fraud prevention, AML compliance
Verification Documents	Copies of National ID, passport, driving licence, utility bills, bank statements	KYC compliance, identity verification, fraud prevention
Account Activity Data	Login history, bet records, game history, session duration, wagering patterns, bonus usage	Service delivery, responsible gaming monitoring, dispute resolution
Technical Data	IP address, device type, browser type and version, operating system, screen resolution, time zone	Security, fraud detection, platform optimisation
Communication Data	Customer support chat logs, email correspondence, complaint records	Support delivery, dispute resolution, quality assurance
Preference Data	Marketing preferences, communication opt-ins/opt-outs, responsible gaming settings	Personalisation, marketing compliance, responsible gaming

4. How We Collect Data

4.1 Directly From You: We collect data that you provide directly during the account registration process, when completing KYC verification, when making deposits or withdrawal requests, when contacting customer support, and when responding to surveys or promotional communications.

4.2 Automatically: When you access and use the babu8 platform, we automatically collect technical and usage data through cookies, web beacons, server logs, and similar tracking technologies. This includes your IP address, device identifiers, browsing behaviour within the platform, and session information.

4.3 From Third Parties: We may receive personal data about you from third parties in the following circumstances:

• Payment Providers: bKash, Nagad, Rocket, Upay, and bank partners share transaction confirmation data necessary to process deposits and withdrawals.
• Identity Verification Services: Third-party KYC and age verification providers confirm the authenticity of identity documents you submit.
• Fraud Prevention Services: We receive risk signals from fraud detection partners to protect the integrity of the platform.
• Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other integrated providers share relevant game session data for settlement and dispute purposes.

5. Legal Basis for Processing

babu8 processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and babu8 — specifically, to create and manage your account, process bets and transactions, pay out winnings, and provide customer support.
• Legal Obligation: Processing is required to comply with anti-money laundering (AML) laws, Know Your Customer (KYC) regulations, age verification requirements, and financial record-keeping obligations applicable to online gaming operators.
• Legitimate Interests: We process certain data based on our legitimate interests in fraud prevention, platform security, service improvement, and responsible gaming monitoring, where those interests are not overridden by your privacy rights.
• Consent: Where processing is based on consent — such as for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. How We Use Your Data

babu8 uses your personal data for the following purposes:

• Account Management: Creating, verifying, and maintaining your babu8 player account, including identity verification and age confirmation.
• Service Delivery: Processing bets and wagers, settling games, crediting winnings, and providing the full range of babu8 platform features to you.
• Payment Processing: Facilitating deposits via bKash, Nagad, Rocket, Upay, and bank transfers, and processing withdrawal requests to your verified payment method.
• Fraud & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, underage gambling, multiple account creation, and other platform abuse.
• Responsible Gaming: Monitoring betting patterns to identify signs of problem gambling, applying self-imposed limits you have set, and enforcing self-exclusion requests.
• Legal Compliance: Complying with KYC obligations, AML reporting requirements, responding to lawful requests from regulatory or law enforcement authorities, and maintaining required financial records.
• Customer Support: Responding to your queries, resolving complaints, processing disputes, and providing technical assistance.
• Platform Improvement: Analysing usage patterns, testing new features, optimising platform performance, and improving the overall player experience.
• Marketing: Sending you promotional offers, bonus notifications, and relevant platform updates where you have consented to receive such communications. You may opt out at any time.

7. Data Sharing

7.1 We Do Not Sell Your Data: babu8 does not sell, rent, or trade your personal information to any third party for commercial gain. Period.

7.2 Authorised Third-Party Processors: We share data with carefully selected third-party service providers who process data strictly on our behalf and under our written instructions. These include:

• Payment Processors: bKash, Nagad, Rocket, Upay, and licensed banking partners in Bangladesh, for the sole purpose of processing financial transactions.
• KYC / AML Providers: Identity verification and age-check service providers who assist us in meeting regulatory obligations.
• Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive pseudonymised session data necessary to deliver and settle games.
• IT & Security Services: Cloud hosting providers, cybersecurity firms, and fraud detection partners who help us operate and protect the platform.
• Customer Support Tools: Helpdesk software providers used to manage support tickets and communication history.

7.3 Legal Disclosures: babu8 may disclose your personal data to government agencies, law enforcement bodies, regulatory authorities, or courts when legally required to do so, when we reasonably believe disclosure is necessary to protect the rights or safety of babu8 or others, or in connection with legal proceedings.

7.4 Business Transfers: In the event of a merger, acquisition, or sale of all or part of babu8's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified via your registered email address prior to any such transfer.

8. Cookies & Tracking Technologies

8.1 What Are Cookies: Cookies are small text files placed on your device when you visit babu8. They help us recognise you, remember your preferences, keep you logged in, and understand how you use the platform so we can improve it.

8.2 Types of Cookies We Use:

• Essential Cookies: Strictly necessary for the platform to function. These enable login sessions, maintain security tokens, and ensure transactions process correctly. These cannot be disabled without breaking the service.
• Performance Cookies: Collect anonymised data about how players use babu8 (pages visited, time on page, errors encountered) to help us improve platform performance. No personally identifiable information is stored.
• Functionality Cookies: Remember your preferences such as language settings, preferred payment method, and responsible gaming limits so you do not need to re-enter them on each visit.
• Analytics Cookies: Used to understand aggregate usage patterns and player journeys across the platform. Data is processed in anonymised, aggregated form.

8.3 Managing Cookies: You can manage or disable non-essential cookies through your browser settings. Please note that disabling cookies may affect the functionality of certain babu8 features, including maintaining your login session and saving your platform preferences.

8.4 Web Beacons: In addition to cookies, babu8 may use web beacons (also known as pixel tags or clear GIFs) in emails and on certain pages to confirm email delivery and opening, and to track the effectiveness of communications.

9. Data Security

9.1 Technical Measures: babu8 employs a comprehensive set of technical security measures to protect your personal and financial data:

• 256-bit SSL (Secure Sockets Layer) encryption for all data transmitted between your device and our servers
• AES-256 encryption for sensitive data stored in our databases
• Multi-factor authentication (MFA) options for player accounts
• Regular penetration testing and vulnerability assessments by independent security professionals
• Intrusion detection systems and real-time security monitoring
• Secure, access-controlled data centre environments with physical security controls

9.2 Organisational Measures: Access to your personal data within babu8 is restricted to personnel who have a legitimate need to access it for the purposes described in this policy. All staff with access to personal data are trained on data protection obligations and are bound by confidentiality obligations.

9.3 Breach Notification: In the event of a personal data breach that poses a risk to your rights and freedoms, babu8 will notify affected players via registered email address without undue delay and will take all reasonable steps to mitigate the impact of the breach.

9.4 Your Responsibilities: Security is a shared responsibility. You are responsible for keeping your babu8 login credentials confidential, using a strong and unique password, enabling two-factor authentication where available, and logging out of your account after each session especially on shared devices.

10. Data Retention

10.1 Retention Periods: babu8 retains personal data for as long as is necessary to fulfill the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the full duration your babu8 account is active.
• Financial Transaction Records: Retained for a minimum of 5 years after the transaction date to comply with AML regulations and financial record-keeping requirements.
• KYC / Verification Documents: Retained for a minimum of 5 years after account closure as required by applicable regulations.
• Customer Support Records: Retained for 3 years after the support interaction is resolved.
• Marketing Consent Records: Retained for 3 years from the date of consent or from the date consent is withdrawn, whichever is later.
• Closed Account Data: Where no legal retention requirement applies, personal data is deleted or securely anonymised within 90 days of confirmed account closure.

10.2 Anonymisation: Where data must be retained beyond the period necessary for its original purpose (for example, for statistical analysis or platform improvement), we anonymise the data so that it can no longer be linked back to any individual player.

11. Your Rights

As a babu8 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact [email protected] with the subject line "DATA RIGHTS REQUEST":

• Right of Access: You have the right to request a copy of all personal data babu8 holds about you. We will respond to access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Some data corrections may require supporting documentation.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent (and no other legal basis applies), or where processing is unlawful. This right is subject to legal retention obligations.
• Right to Restriction: In certain circumstances, you may request that we restrict processing of your data — for example, while we verify the accuracy of data you have disputed.
• Right to Data Portability: You have the right to receive personal data you have provided to us in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including profiling for responsible gaming monitoring. You may also object to direct marketing at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the legality of processing before withdrawal.

We will respond to all legitimate rights requests within 30 days. In complex cases, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it.

12. Children's Privacy

12.1 Age Restriction: The babu8 platform is strictly prohibited for persons under the age of 21. We do not knowingly collect personal data from individuals under 21. If we become aware that personal data has been collected from a minor, we will immediately delete that data and close the associated account.

12.2 Age Verification: babu8 employs age verification procedures during registration and KYC review to prevent underage individuals from accessing the platform. Providing false date of birth information during registration is a breach of our Terms & Conditions and may constitute a criminal offence.

12.3 Parental Controls: Parents and guardians who believe their child may have created a babu8 account should contact [email protected] immediately. We will investigate and act without delay.

13. International Data Transfers

13.1 Cross-Border Processing: Some of babu8's third-party service providers — including game technology providers and cloud infrastructure partners — may be located outside Bangladesh. Where personal data is transferred to processors in other countries, we ensure that appropriate safeguards are in place to maintain an equivalent level of data protection.

13.2 Safeguards: International data transfers are protected through contractual clauses that bind recipients to data protection standards consistent with those described in this Privacy Policy. We do not transfer personal data to countries or organisations that cannot provide adequate data protection guarantees.

13.3 Payment Data: Financial data processed through Bangladesh-based payment providers — including bKash, Nagad, Rocket, and Upay — is handled by those providers in accordance with the Bangladesh Payment and Settlement Systems Regulations and their own published privacy policies.

14. Third-Party Links

The babu8 platform may contain references to third-party game providers and technology partners. These third parties operate their own platforms and are subject to their own privacy policies. babu8 is not responsible for the privacy practices of third-party software providers or their platforms.

Players are encouraged to review the privacy policies of any third-party services they interact with in connection with babu8. The presence of a third-party provider's name or branding on the babu8 platform does not constitute an endorsement of that provider's privacy practices.

15. Marketing Communications

15.1 Opt-In: babu8 sends promotional communications — including bonus offers, deposit match promotions, and platform updates — only to players who have explicitly opted in to receive such communications during registration or through their account settings.

15.2 Opt-Out: You may withdraw consent for marketing communications at any time by updating your preferences in your babu8 account settings, or by contacting [email protected] with the subject line "UNSUBSCRIBE". Opt-out requests are processed within 5 business days. Withdrawing marketing consent does not affect your ability to use the babu8 platform.

15.3 Transactional Communications: Certain communications are not marketing in nature and will be sent regardless of marketing preferences. These include account verification emails, transaction confirmations, security alerts, material changes to Terms & Conditions or this Privacy Policy, and responses to your support requests.

15.4 Personalisation: Where permitted by your marketing preferences, babu8 may personalise promotional offers based on your game preferences and activity history. This personalisation is aimed at making communications more relevant to you and does not involve selling data to third parties.

16. Changes to This Policy

16.1 Right to Update: babu8 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or platform services. The most current version will always be available at babu8.ws/privacy-policy.

16.2 Notification: Where changes to this Privacy Policy are material — meaning they significantly affect your rights or how your data is processed — we will notify you via your registered email address at least 14 days before the changes take effect. For minor or clarifying updates, we will update the "Last Updated" date at the top of this page.

16.3 Continued Use: Your continued use of the babu8 platform after a Privacy Policy update constitutes acceptance of the revised policy. If you do not agree with the updated policy, you should discontinue use and contact support to close your account.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or babu8's data handling practices, please contact our team using the details below. We are committed to addressing all privacy enquiries promptly and transparently.

By using babu8, you acknowledge that you have read and understood this Privacy Policy in full. We thank you for trusting babu8 with your personal information and remain committed to handling it responsibly at every step.