bp88 Privacy Policy
bp88 is committed to protecting the personal data of every player on our platform. This Privacy Policy explains what information we collect, why we collect it, how it is used and stored, and the rights you hold over your own data as a registered bp88 user in Bangladesh.
Six Principles That Guide How bp88 Handles Your Data
Every data handling decision at bp88 is guided by these core principles. They apply to every registered player, from Dhaka to Cox's Bazar.
Collect Only What Is Necessary
bp88 collects only the personal data that is genuinely required to deliver our services, verify your identity, process your payments, and meet our legal obligations. We do not collect data speculatively or for purposes unrelated to your use of the platform.
No Sale of Personal Data
bp88 does not sell, rent, or trade your personal data to third-party marketing companies. Your contact details, payment information, and gaming history are used exclusively for the purposes described in this Policy and are never monetised as a data product.
Encrypted Storage & Transmission
All personal data stored by bp88 is encrypted at rest using industry-standard AES-256 encryption. All data transmitted between your device and the bp88 platform is protected by 256-bit SSL/TLS encryption, the same technology used by major international banks.
Your Rights Are Respected
You have the right to access, correct, and request deletion of your personal data held by bp88. These rights can be exercised at any time by contacting our support team. bp88 will respond to all data rights requests within 30 days of receipt.
Clear Retention Periods
bp88 does not retain personal data longer than necessary. Retention periods are defined for each category of data and are documented within this Policy. When data is no longer required, it is securely deleted or anonymised so it can no longer be linked to you.
Transparent Updates
When this Privacy Policy is materially updated, bp88 will notify registered players via email and post a notice on the platform. The effective date at the top of this page always reflects the date of the most recent revision, so you know exactly which version applies to your account.
Summary: bp88 collects personal data solely to operate its platform, verify player identities, process payments, and comply with applicable legal obligations. We do not sell your data. We protect it with encryption. You can request access to, correction of, or deletion of your data at any time by contacting our support team at [email protected].
1 About This Policy
This Privacy Policy ("Policy") describes how bp88 ("bp88", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "Player", "User") who register for and use the bp88 online betting and casino platform, accessible at bp88.im and its associated mobile web application.
This Policy applies to all personal data processed by bp88 in connection with the delivery of its services to players based in Bangladesh. By registering a bp88 account, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.
This Policy should be read alongside the bp88 Terms & Conditions, which govern the overall use of the platform. In the event of any conflict between this Policy and the Terms & Conditions with respect to data privacy matters, this Policy shall prevail.
2 Personal Data We Collect
bp88 collects and processes the following categories of personal data. The specific data collected depends on how you interact with the platform.
2.1 Identity Data
- Full legal name as it appears on your government-issued identity document
- Date of birth (used for age verification — players must be 21 or older)
- Nationality and country of residence
- Government-issued identity document number (e.g., National Identity Card number, passport number)
- Copies of identity documents submitted during KYC verification
2.2 Contact Data
- Email address
- Mobile phone number (including WhatsApp-linked numbers for support purposes)
- Residential address (city, district, division — e.g., Dhaka, Chittagong, Sylhet, Khulna)
2.3 Financial Data
- Mobile financial service account details (bKash, Nagad, Rocket, Upay account numbers)
- Card details where applicable (card type, last four digits, expiry — full card numbers are not stored by bp88)
- Transaction history: deposit amounts, withdrawal amounts, dates, and payment method used
2.4 Gaming and Behavioural Data
- Betting history: sports markets, stake amounts, odds accepted, settlement outcomes
- Casino game history: games played, session durations, wager amounts, win/loss records
- Platform navigation patterns and feature usage frequency
- Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)
2.5 Technical Data
- IP address and approximate geographic location derived from IP
- Device type, operating system, and browser version
- Session timestamps, login history, and logout records
- Cookie identifiers and similar tracking technology data (see Section 7)
2.6 Communications Data
- Records of correspondence with bp88 support via live chat, WhatsApp, and email
- Feedback, complaints, and dispute records
- Marketing preference settings (opt-in or opt-out status for promotional communications)
bp88 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, health data, or biometric data. If any such data is inadvertently submitted to our support channels, it will be deleted immediately and not used for any purpose.
3 How We Collect Your Data
3.1 Directly From You
The majority of data bp88 holds about you is provided directly by you during the account registration process, the KYC verification process, when you make deposits or withdrawals, when you contact our support team, and when you update your account profile or responsible gaming settings.
3.2 Automatically During Platform Use
When you access and use the bp88 platform, certain technical and behavioural data is collected automatically via cookies, server logs, and platform analytics tools. This includes your IP address, device information, session data, and in-platform navigation behaviour. This data collection is necessary for platform security, fraud prevention, and service optimisation.
3.3 From Third-Party Payment Providers
When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the relevant payment provider shares transaction confirmation data with bp88. This is limited to the information necessary to verify that the transaction was completed successfully and to match it to your bp88 account.
3.4 From Identity Verification Services
During the KYC verification process, bp88 may use third-party identity verification services to cross-reference the documents you submit. These services return a verification result (pass or fail) and relevant extracted data points (e.g., name, date of birth, document number) to bp88. The third-party service does not retain your documents beyond the verification check.
4 How We Use Your Personal Data
bp88 uses the personal data it collects for the following specific purposes:
| Purpose | Data Categories Used |
|---|---|
| Account registration and management | Identity, Contact |
| Age verification (21+ requirement) | Identity |
| KYC and anti-fraud checks | Identity, Financial, Technical |
| Processing deposits and withdrawals | Financial, Identity |
| Delivering betting and casino services | Gaming, Technical |
| Providing customer support | Identity, Contact, Communications |
| Responsible gaming monitoring and tools | Gaming, Financial |
| Sending account notifications and alerts | Contact |
| Sending promotional communications (opt-in only) | Contact, Communications |
| Platform security and fraud detection | Technical, Financial, Gaming |
| Platform analytics and improvement | Technical, Gaming (anonymised) |
| Legal and regulatory compliance | All categories where required |
bp88 does not use your personal data for automated decision-making that produces legal or similarly significant effects on you without human review. If any automated process flags your account for investigation, a member of our compliance team will review the case before any account action is taken.
5 Legal Basis for Processing
bp88 processes your personal data on the following legal bases:
- Contractual necessity: Processing required to fulfil our obligations under the bp88 Terms & Conditions, including account management, payment processing, and service delivery.
- Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering obligations, age verification requirements, and record-keeping duties.
- Legitimate interests: Processing for purposes such as fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where these interests are not overridden by your fundamental rights.
- Consent: Processing for optional purposes such as sending promotional offers and marketing communications. You may withdraw your consent for marketing at any time by updating your communication preferences in your account settings or by contacting support.
6 Data Sharing and Disclosure
6.1 Payment Processors
bp88 shares the minimum necessary financial and identity data with its payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard) to facilitate deposits and withdrawals. These partners process your payment data under their own privacy policies and are independently responsible for compliance with applicable financial data protection standards.
6.2 Identity Verification Providers
During KYC verification, relevant identity document data is shared with our contracted identity verification service provider solely for the purpose of completing the verification check. The provider is contractually prohibited from using your data for any other purpose.
6.3 Game Content Providers
Third-party game studios (including Pragmatic Play, Evolution Gaming, Spribe, Microgaming, NetEnt, and Ezugi) may receive a session token and anonymised player identifier when you launch one of their games through the bp88 platform. These providers do not receive your full identity data, payment information, or contact details.
6.4 Legal and Regulatory Disclosure
bp88 may disclose personal data to relevant authorities, law enforcement bodies, or regulatory agencies where required to do so by applicable law, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or harm to a third party. bp88 will always seek to limit such disclosures to the minimum data required.
6.5 No Sale of Data
bp88 does not sell, rent, lease, or trade your personal data to any third party for marketing, commercial, or any other purpose. This is an unconditional commitment and applies regardless of any change in bp88's business structure or ownership.
Data Processor Agreements: All third parties with whom bp88 shares personal data are bound by contractual data processing agreements that require them to handle your data securely, use it only for the specified purpose, and delete it when the purpose is fulfilled.
7 Cookies and Tracking Technologies
7.1 What Are Cookies
Cookies are small text files stored on your device when you visit the bp88 platform. They allow the platform to recognise your device across sessions, remember your preferences, and collect analytical data about platform usage. bp88 also uses similar technologies including session storage, local storage, and pixel tags for comparable purposes.
7.2 Types of Cookies Used by bp88
- Essential cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. You cannot opt out of these while using the platform.
- Functional cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations. Disabling these may affect your platform experience.
- Analytical cookies: Collect anonymised data about how players navigate and use the platform. This data is used to improve platform design and performance. These cookies can be disabled without affecting core platform functionality.
- Security and fraud-prevention cookies: Help bp88 identify unusual login patterns, detect automated bot activity, and prevent account takeover. These are essential for platform security and cannot be disabled.
7.3 Managing Cookies
You can control non-essential cookies through your browser settings. Most modern browsers allow you to view, delete, and block cookies on a per-site basis. Please note that disabling certain cookies may affect the functionality of the bp88 platform. Detailed guidance on managing cookies is available in your browser's help documentation.
8 Data Retention
bp88 retains personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable law. The following retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account identity and contact data | Duration of account + 5 years after closure | Legal and regulatory compliance |
| KYC documents | Duration of account + 5 years after closure | Anti-money laundering obligations |
| Transaction and financial records | Duration of account + 7 years after closure | Financial record-keeping requirements |
| Betting and gaming history | Duration of account + 3 years after closure | Dispute resolution and fraud investigation |
| Support and communications records | 3 years from date of interaction | Dispute resolution and quality assurance |
| Anonymised analytical data | Indefinite (anonymised — no longer personal data) | Platform improvement |
When the applicable retention period expires, personal data is securely deleted using industry-standard deletion protocols, or irreversibly anonymised so that it can no longer be attributed to any identifiable individual.
9 Data Security
bp88 implements a layered security architecture to protect the personal data it holds. Our technical and organisational security measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
- AES-256 encryption at rest for all stored personal and financial data
- Role-based access controls ensuring that only authorised personnel with a legitimate need can access personal data
- Two-factor authentication for all internal systems that handle player data
- Regular penetration testing and vulnerability assessments conducted by independent security specialists
- Intrusion detection systems monitoring for unusual access patterns in real time
- Secure data centre facilities with physical access controls, environmental monitoring, and redundant infrastructure
While bp88 takes all reasonable measures to protect your data, no system can be guaranteed to be completely immune from security incidents. In the event of a data breach that poses a material risk to your rights, bp88 will notify affected players as soon as reasonably practicable and take immediate steps to contain and remediate the incident.
10 Your Privacy Rights
As a bp88 player, you have the following rights in relation to your personal data. All requests should be submitted to [email protected] and will be processed within 30 days.
Right of Access
Request a copy of all personal data bp88 holds about you, along with information about how it is used and who it has been shared with.
Right to Rectification
Request correction of any inaccurate or incomplete personal data bp88 holds about you. Some corrections may require identity re-verification.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to bp88's legal retention obligations.
Right to Restrict Processing
Request that bp88 limit how it uses your data in specific circumstances, for example while a rectification request is being assessed.
Right to Data Portability
Request your personal data in a structured, machine-readable format so that you can transfer it to another service provider if you choose.
Right to Withdraw Consent
Withdraw consent for any processing based on consent (e.g., marketing emails) at any time via account settings or by contacting support. Withdrawal does not affect prior lawful processing.
Exercising any of the above rights will not result in any penalty, downgrade of service, or negative treatment of your account. bp88 may need to verify your identity before processing a data rights request to ensure we do not disclose data to an unauthorised party.
11 Children and Minors
The bp88 platform is strictly for individuals who are 21 years of age or older. bp88 does not knowingly collect or process personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately delete that data, close the associated account, and void any transactions linked to it.
If you are a parent or guardian and believe that your child has registered a bp88 account or submitted personal data to our platform, please contact us immediately at [email protected]. We will investigate and take appropriate action within 24 hours of receiving your report.
bp88 uses age verification as a mandatory step in the account registration process. Players who cannot confirm they are 21 or older cannot complete registration. Additional documentary verification may be requested at any point during the account lifecycle.
12 Third-Party Links and Embedded Content
The bp88 platform may contain references to third-party game providers, payment services, and other external services in the course of delivering its products. Where you click through to a third-party service, that service's own privacy policy will govern the handling of any personal data you provide to them directly. bp88 is not responsible for the privacy practices of third-party services and encourages you to review their policies before engaging with them.
Live casino games delivered by third-party providers such as Evolution Gaming, Pragmatic Play Live, and Ezugi operate on infrastructure that is separate from the bp88 platform. When you launch a live game, a secure session is established with the provider using a session token. The provider does not receive your full bp88 account data through this session.
13 Changes to This Privacy Policy
bp88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, bp88 will:
- Update the "Last Updated" date at the top of this page
- Send a notification email to all registered players at the email address on file
- Display a prominent notice on the bp88 platform for a minimum of 14 days following the change
Your continued use of the bp88 platform after a Privacy Policy update constitutes your acknowledgement of the revised Policy. If you disagree with any material change to this Policy, you may close your account by contacting support, and any available balance will be processed for withdrawal in accordance with the standard verification procedures.
14 Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or the personal data bp88 holds about you, please contact our Data Privacy team through the following channels. All formal data rights requests should be submitted in writing via email for record-keeping purposes.
- Email: [email protected] (plain text — not a clickable link)
- WhatsApp: +880 1700 000000
- Live Chat: Available on the bp88 platform 24/7, Bangladesh Standard Time (BST, UTC+6)
Response Commitment: bp88 will acknowledge all privacy-related enquiries within 48 hours and aim to resolve them fully within 30 days of receipt. For complex erasure or portability requests, we will keep you informed of progress throughout the process.
Questions About Your Privacy?
Our support team is available around the clock to answer any questions about how your personal data is handled. You can also explore our FAQ for quick answers or review our Responsible Gaming page for player protection tools.