88hba Privacy Policy — Your Data, Handled with Care

This Privacy Policy describes how 88hba ("we", "us", "our") collects, uses, stores, and protects the personal data of individuals ("you", "Player") who access or use the 88hba Platform at https://88hba.io. This policy applies to all services offered through the Platform, including casino games, sports betting, the VIP loyalty programme, and customer support interactions.

88hba is committed to handling personal data responsibly and transparently. We operate this Platform exclusively for players based in Bangladesh and process personal data in accordance with applicable data protection principles, including purpose limitation, data minimisation, storage limitation, integrity, and confidentiality.

By registering an Account on 88hba, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with any part of this policy, you should not create an Account or use the Platform.

This Privacy Policy should be read in conjunction with the 88hba Terms & Conditions and Responsible Gaming Policy, both of which are published on the Platform and are incorporated by reference.

88hba collects the following categories of personal data from Players, depending on the nature and stage of the Player's interaction with the Platform:

2.1 Registration Data

When you create an Account, we collect: your chosen username; your mobile number (Bangladesh-registered); your date of birth; and your self-declared residential location (city or district) within Bangladesh. This information is necessary to open and maintain your Account.

2.2 Identity Verification (KYC) Data

Where KYC verification is required — typically triggered by withdrawal requests above a specified threshold or where suspicious activity is flagged — we collect: a copy of your National Identity Card (NID) or passport; a recent proof of address document; and where applicable, a selfie photograph for facial verification purposes. KYC documentation is processed solely for the purposes of age verification, identity confirmation, and anti-money-laundering (AML) compliance.

2.3 Financial Data

We collect transactional data associated with your Account, including: deposit amounts and timestamps; withdrawal requests and amounts; payment method identifiers (e.g., your registered bKash or Nagad mobile number, partial card numbers for Visa/Mastercard transactions); and your current Real Money Balance and Bonus Balance. We do not store full card numbers or MFS PINs. Payment processing is handled by third-party payment service providers and MFS operators, whose own privacy policies apply to the processing of payment credentials.

2.4 Gameplay and Activity Data

We collect records of your gaming activity on the Platform, including: games played; wager amounts and outcomes; session start and end times; VIP loyalty points earned and redeemed; and bonus activations and wagering progress. This data is used for account management, dispute resolution, responsible gaming monitoring, and fraud detection.

2.5 Technical and Device Data

We automatically collect certain technical data when you access the Platform, including: your IP address; device type and operating system; browser type and version; session identifiers; and general geolocation data derived from your IP address (country and city level only). This data is used for security monitoring, fraud prevention, and to ensure the Platform functions correctly across devices.

2.6 Communications Data

When you contact 88hba via live chat, email, or WhatsApp, we collect and retain a record of the communication, including the content of messages exchanged, timestamps, and the contact method used. This data is retained for quality assurance, dispute resolution, and regulatory compliance purposes.

88hba collects personal data through the following methods:

• Directly from you: Information you provide voluntarily during registration, KYC verification, deposit and withdrawal requests, responsible gaming tool activations, and customer support interactions.
• Automatically: Technical and device data collected via server logs, session tracking systems, and analytics tools when you access and use the Platform.
• From third-party payment providers: Confirmation data received from MFS operators (bKash, Nagad, Rocket, Upay) and banking partners following successful payment transactions. This is limited to transaction reference numbers and confirmation statuses — full payment credentials are not transmitted to 88hba.
• From KYC verification partners: Where 88hba uses a third-party identity verification service to process NID or passport documents, verification outcomes (pass/fail, age confirmed) are shared back to 88hba. The underlying identity documents are processed by the verification partner in accordance with their own data protection policies.
• Cookies and similar technologies: See Section 7 for full details on 88hba's use of cookies and session tracking technologies.

88hba uses the personal data we collect for the following purposes:

88hba will not use your personal data for any purpose that is incompatible with the purposes listed above without providing prior notice and, where required, obtaining your explicit consent.

88hba processes personal data on the following legal bases:

• Contractual necessity: Processing that is necessary to fulfil the contract between 88hba and the Player, including Account management, payment processing, and delivery of gaming services.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC identity verification, AML transaction monitoring, and retention of financial records.
• Legitimate interests: Processing for fraud detection, platform security, responsible gaming monitoring, and internal analytics — where these interests are not overridden by the Player's privacy rights.
• Consent: Processing for direct marketing communications and optional personalisation features, where the Player has provided explicit, informed consent. Consent may be withdrawn at any time by contacting support or updating notification preferences within the Account dashboard.

88hba does not sell, rent, or trade personal data. We share personal data only in the following strictly defined circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — for the sole purpose of processing financial transactions initiated by the Player. Each provider is bound by its own data protection obligations.
• KYC and identity verification partners: Third-party services engaged by 88hba to process identity documents submitted during KYC verification. These partners are contractually required to process data only for verification purposes and may not retain or repurpose the documents beyond what is necessary.
• Game content providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session identifiers to support game delivery and real-time data exchange. Personally identifiable information is not shared with game studios.
• Legal and regulatory authorities: Where required by applicable law, court order, or lawful regulatory request, 88hba may disclose personal data to law enforcement or regulatory bodies. 88hba will notify the affected Player of any such disclosure where permitted by law to do so.
• Business continuity: In the event of a merger, acquisition, or transfer of ownership of the 88hba Platform, personal data held on the Platform may be transferred to the acquiring entity. Players will be notified of any such transfer and the new entity's privacy terms before the transfer takes effect.

The 88hba Platform uses cookies and similar tracking technologies to support platform functionality, security, and — where consent has been given — analytics. The types of cookies used are described below:

You may manage your cookie preferences at any time through your Account Settings panel. Disabling analytics or marketing cookies will not affect your ability to use the core gaming and payment services on the Platform. Strictly necessary and functional cookies cannot be disabled without impairing Platform functionality.

88hba retains personal data for the periods set out below, after which data is securely deleted or fully anonymised so that it can no longer be associated with any individual:

Where a Player requests Account closure, 88hba will cease all active processing of that Player's data immediately. Retained data during the post-closure retention periods is archived and inaccessible for operational purposes — it is held solely to meet legal and regulatory obligations.

88hba implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• TLS 1.3 encryption for all data in transit between users and the Platform.
• AES-256 encryption at rest for sensitive stored data including KYC documents and financial records.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff with access to personal data are bound by confidentiality obligations and receive regular data protection training.
• Two-factor authentication (2FA): All internal administrative accounts with access to player data require 2FA. Players are also strongly encouraged to enable 2FA on their own accounts.
• Intrusion detection and monitoring: 88hba's infrastructure is monitored 24/7 Bangladesh Standard Time (BST, UTC+6) for signs of unauthorised access, data exfiltration, or abnormal activity patterns.
• Penetration testing: The Platform undergoes periodic security assessments conducted by independent security professionals to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a confirmed personal data breach that is likely to result in a risk to affected Players, 88hba will notify affected individuals without undue delay and will take immediate remedial action to contain and address the breach.

While 88hba takes all reasonable steps to protect your data, no security system is entirely impenetrable. Players are encouraged to use strong, unique passwords, enable 2FA on their accounts, and report any suspected security incidents to the support team at [email protected] without delay.

As a Player on the 88hba Platform, you hold the following rights in respect of your personal data. These rights may be exercised at any time by contacting [email protected] from the email address registered to your Account:

• Right of Access: You have the right to request a copy of all personal data that 88hba holds about you. 88hba will respond to access requests within 30 calendar days of receipt.
• Right to Rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. For data held in your Account profile, you may be able to update certain fields directly in your Account Settings without needing to contact support.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. Note that this right is subject to limitations where 88hba is required by law to retain the data (see Section 8).
• Right to Restriction of Processing: You have the right to request that 88hba restrict processing of your personal data in certain circumstances, such as while the accuracy of the data is being contested.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that it be transferred to another service provider where technically feasible.
• Right to Object: You have the right to object to processing of your personal data where that processing is based on legitimate interests. Where you object, 88hba will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

The 88hba Platform is strictly for adults aged 21 and above. 88hba does not knowingly collect, process, or retain personal data relating to any individual under the age of 21. Account registration requires confirmation of age, and 88hba reserves the right to request documentary proof of age (via NID or passport) at any stage of the Account lifecycle.

If 88hba discovers or has reasonable grounds to believe that personal data belonging to an individual under the age of 21 has been collected through the Platform, that Account will be immediately suspended, all collected data will be permanently deleted, and any deposits or balances held will be handled in accordance with the Account Suspension provisions of the Terms & Conditions.

If you are a parent or guardian and believe your child has created an Account on 88hba, please contact us immediately at [email protected] so that we can take prompt action.

88hba may send marketing communications to Players who have provided explicit consent to receive them. These communications may include information about new games, VIP promotions, bonus offers, seasonal campaigns (such as Eid, Pohela Boishakh, or cricket tournament promotions), and loyalty programme updates.

Marketing communications are delivered via the following channels, where consent has been given for each respective channel: SMS to your registered Bangladesh mobile number; email to your registered email address; and in-platform notifications when you are logged into your Account.

You may withdraw your consent to receive marketing communications at any time by: unchecking marketing preferences in your Account Settings dashboard; replying "STOP" to any SMS marketing message; or contacting the support team at [email protected] with the subject line "Marketing Opt-Out". Opt-out requests are processed within 48 hours (BST). Withdrawal of consent will not affect any transactional or account-management communications that are necessary to manage your Account.

88hba does not engage in cold outreach to individuals who have not created an Account on the Platform. All marketing communications are directed exclusively at registered Players who have opted in.

The 88hba Platform does not contain links to external third-party websites for general browsing purposes. All navigation within the Platform is contained within the 88hba domain. However, the Platform does integrate with third-party services — including payment gateways and game delivery infrastructure — that operate under their own domains and privacy policies.

When you initiate a deposit or withdrawal via a Mobile Financial Service (MFS) such as bKash or Nagad, you may be redirected to that provider's secure payment interface. Your interaction with that interface is governed by the MFS provider's own terms and privacy policy. 88hba is not responsible for the data practices of third-party MFS providers or banking partners beyond the scope of the integration described in this Privacy Policy.

Game content delivered via integration with studios such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi is served through secure iFrame or API-based delivery mechanisms. These integrations do not expose your personally identifiable information to the game studio — only anonymised session tokens are used for game delivery.

88hba reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services offered on the Platform. All amendments will be published on this page at https://88hba.io/privacy-policy with the "Last Revised" date updated accordingly.

Where amendments are material — for example, where we introduce a new purpose for processing, a new category of data, or a new third-party data sharing arrangement — 88hba will notify registered Players via email to their registered address at least 14 calendar days before the revised policy takes effect.

For minor or administrative amendments that do not substantively alter Players' rights or the scope of data processing, the revised policy will take effect immediately upon publication without individual notice. Players are encouraged to review this page periodically to stay informed of our current practices.

Continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 88hba handles your personal data, please contact our data protection team using the details below. All privacy-related correspondence is handled in English and will receive a response within 48 hours (Bangladesh Standard Time, UTC+6) for initial acknowledgement, and within 30 calendar days for a substantive response.

For urgent security concerns — such as suspected unauthorised access to your Account or a suspected data breach — please contact our 24/7 live support team directly via the in-platform Live Chat function for the fastest response. You may also reach us via WhatsApp at +88 01XXX-XXXXXX (plain text, not a clickable link).

Please include your registered username and the email address associated with your Account in all privacy correspondence so that we can locate your records promptly and verify your identity before processing any data rights request.