bl88 Privacy Policy — How We Collect, Use & Protect Your Data

This Privacy Policy ("Policy") is published by bl88, the operator of the online casino and sports betting platform accessible at https://bl88.bar ("the Platform"). In this Policy, "bl88", "we", "us", and "our" refer to the Platform operator, while "you" and "your" refer to any individual who visits, registers on, or otherwise interacts with the bl88 Platform.

This Policy explains what personal data bl88 collects from you, the purposes for which that data is processed, the legal bases that justify such processing, the circumstances in which data may be disclosed to third parties, and the rights that you hold in relation to your personal data. This Policy applies to all users of the bl88 Platform, including registered account holders, visitors who browse without registering, and individuals who communicate with bl88 support.

By accessing the bl88 Platform, registering an account, or submitting any personal information to bl88 in any form, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the Platform.

bl88 collects personal data through several channels: directly from you when you register or use the Platform, automatically through your browser or device during your session, and from trusted third parties such as identity verification services and payment processors. The categories of data we collect are set out below.

bl88 does not intentionally collect sensitive special-category personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where identity verification documents submitted by you may incidentally contain such information. In those cases, the information is processed solely for identity verification purposes and is not used for any other purpose.

bl88 uses personal data collected from you for the following purposes. Each purpose is tied to a specific legal basis for processing, which is described in Section 04 below.

• Account Creation & Management: To register your bl88 account, verify your identity and age (21+ requirement), maintain your account profile, and provide you with access to all Platform features.
• Payment Processing: To process BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported banks, and to maintain accurate transaction records.
• Service Delivery: To provide sports betting (including BPL, IPL, T20 World Cup), live casino, slot games, and all other gaming products available on the Platform.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct, including the use of automated fraud-detection systems.
• Responsible Gaming: To monitor gaming patterns and identify signs of problem gambling, administer deposit limits, self-exclusion requests, and other responsible gaming tools, and to comply with our duty of care toward players.
• Customer Support: To respond to your enquiries, process complaints, and provide technical assistance via email at [email protected].
• Marketing Communications: To send you relevant promotions, bonus offers, and platform news where you have provided consent or where bl88 has a legitimate interest in doing so. You may opt out at any time.
• Platform Improvement: To analyse usage patterns, conduct A/B testing, and improve the design, performance, and content of the bl88 Platform.
• Legal Compliance: To comply with applicable laws, regulations, and lawful requests from competent authorities, including anti-money laundering obligations and age verification requirements.

bl88 processes your personal data only where a valid legal basis exists. The legal bases on which bl88 relies are as follows:

• Performance of a Contract: Processing is necessary to fulfil bl88's contractual obligations to you — specifically to operate your account, process bets, and handle financial transactions.
• Consent: Where you have explicitly opted in to receive marketing communications or have consented to specific cookie categories. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Legitimate Interests: Where bl88 has a genuine business interest that is not overridden by your rights — for example, fraud prevention, platform security, analytics, and internal reporting.
• Legal Obligation: Where processing is required to comply with applicable law, including anti-money laundering (AML) requirements, age verification obligations, and lawful authority requests.

bl88 does not sell your personal data to third parties. Data is shared only with trusted partners and only to the extent necessary to deliver the bl88 service. The categories of recipients who may receive your data are:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and supported Bangladeshi banks (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank) receive the minimum transaction data necessary to process your deposits and withdrawals.
• Identity & Age Verification Partners: Third-party KYC (Know Your Customer) services receive identity document images and basic personal details for the sole purpose of verifying your age (21+) and identity.
• Game Content Providers: Providers such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe may receive a pseudonymised player identifier and session data necessary to operate games within their platforms. These providers operate under strict data processing agreements with bl88.
• Analytics & Technology Providers: Trusted technology partners who assist bl88 in operating and improving the Platform, subject to contractual data protection obligations.
• Legal & Regulatory Authorities: bl88 may disclose personal data to competent authorities where required by law, court order, or regulatory investigation. bl88 will notify you of such disclosure where legally permitted to do so.

All third parties with whom bl88 shares personal data are required to handle that data in accordance with applicable data protection principles and are prohibited from using it for any purpose beyond the specific service they have been engaged to provide.

bl88 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate the Platform and improve your experience. Cookies are small text files stored on your device when you visit the bl88 website. The categories of cookies we use are:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable you to stay logged in, navigate between pages, and access secure areas. These cookies cannot be disabled without severely disrupting your use of the Platform.
• Performance & Analytics Cookies: These cookies collect anonymised information about how visitors use the bl88 Platform — for example, which pages are visited most frequently and how long sessions last. This data helps bl88 improve the Platform's design and performance.
• Functional Cookies: These cookies remember your preferences such as display settings, notification preferences, and previously entered details to make your next visit more convenient.
• Security Cookies: Used to detect and prevent fraudulent account activity, multi-accounting, and other prohibited conduct by identifying unusual access patterns.

You can control non-essential cookies through your browser settings. Note that disabling certain cookies may affect Platform functionality. For detailed information about the specific cookies in use on bl88 and how to manage them, please contact support at [email protected].

bl88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce our agreements. The following retention periods apply as a general guide:

• Account & Identity Data: Retained for the duration of your account's active status plus a minimum period of five (5) years following account closure, to satisfy anti-money laundering and regulatory record-keeping requirements.
• Transaction & Financial Records: Retained for a minimum of five (5) years from the date of each transaction to comply with financial record-keeping obligations.
• Gaming & Betting History: Retained for five (5) years to support dispute resolution, responsible gaming monitoring, and regulatory compliance.
• Support Communications: Retained for three (3) years from the date of the last interaction, unless a longer period is required for an ongoing dispute or investigation.
• Technical & Log Data: Retained for up to twelve (12) months for security and fraud monitoring purposes.
• Self-Exclusion Records: Retained indefinitely to prevent re-registration by permanently self-excluded players.

When personal data is no longer required for any of the above purposes, bl88 will securely delete or anonymise it in accordance with our internal data disposal procedures.

bl88 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the bl88 Platform is encrypted using SSL/TLS technology. You can verify this by the padlock symbol in your browser's address bar.
• Password Hashing: Account passwords are stored using strong one-way cryptographic hashing algorithms. bl88 never stores passwords in plain text.
• Access Controls: Access to personal data within bl88's internal systems is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations.
• Security Monitoring: bl88 employs automated systems to monitor for suspicious login activity, unusual transaction patterns, and potential data breaches in real time.
• Secure Data Storage: Personal data is stored on secure, access-controlled servers. Financial data such as payment account details is stored in tokenised or encrypted form.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that poses a significant risk to your rights, bl88 will notify affected users without undue delay and take all reasonable steps to contain and remedy the breach.

As a data subject, you hold the following rights in relation to your personal data held by bl88. To exercise any of these rights, please contact our support team at [email protected]. bl88 will respond to all valid data rights requests within a reasonable timeframe.

bl88 will not charge a fee for handling data rights requests submitted in good faith. However, bl88 reserves the right to refuse requests that are manifestly unfounded or excessive, or to charge a reasonable administrative fee in such cases.

The bl88 Platform is strictly intended for individuals aged 21 years and above. bl88 does not knowingly collect personal data from any person under the age of 21. If bl88 becomes aware that personal data has been collected from an underage individual, that data will be deleted immediately and the associated account will be closed permanently.

If you are a parent or guardian and believe that a person under your care has submitted personal data to bl88, please contact us immediately at [email protected]. We will take prompt action to delete the data and close the account. Any deposits made by an underage account holder will be returned via the original payment method where technically possible, and any winnings will be forfeited.

The bl88 Platform integrates game content and services from third-party providers including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe. When you play games provided by these studios, their software may process limited session data to operate the game. Each of these providers maintains its own privacy policy governing its data practices.

bl88 is not responsible for the data practices of third-party game providers, payment processors, or any other external service accessed through the Platform. bl88 does, however, conduct due diligence on all third-party partners to satisfy itself that they maintain appropriate data protection standards before integration.

The bl88 Platform does not contain links to external third-party websites for browsing or marketing purposes. All links on the Platform direct to internal bl88 pages only. bl88 is therefore not responsible for the content or privacy practices of any external website.

bl88 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the scope of the Platform's services. When material changes are made, the updated Policy will be published on this page with a revised effective date. Where practicable, registered account holders will be notified of significant changes via email or an in-platform notification.

Your continued use of the bl88 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you must stop using the Platform and may request account closure by contacting support at [email protected].

For all privacy-related enquiries, data access requests, rectification requests, erasure requests, or any other questions about how bl88 handles your personal data, please contact the bl88 support team using the details below. All enquiries are handled 24 hours a day, 7 days a week, at Bangladesh Standard Time (UTC+6).

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24/7, Bangladesh Standard Time (UTC+6)
• Response Time: bl88 aims to respond to all data rights requests within 30 days of receipt. Complex requests may take up to 60 days, in which case we will notify you of the extended timeline.
• Verification: To protect your data, bl88 will ask you to verify your identity before processing any data rights request. This typically involves confirming your registered email address and account details.

When submitting a data rights request, please include your full name as registered on your bl88 account, your registered email address, the specific right you wish to exercise, and any relevant details that will help us locate and process your request efficiently. bl88 will not charge a fee for good-faith requests submitted in accordance with this Policy.