baha88 Privacy Policy

This Privacy Policy ("Policy") applies to all personal data collected and processed by baha88 ("baha88", "we", "us", or "our") in connection with the baha88 online gaming platform ("Platform"), including its website, mobile-optimised interface, and any associated services or promotional communications. This Policy is addressed to registered and prospective users located in Bangladesh and any other jurisdictions from which our Platform is accessed.

baha88 is committed to protecting the privacy and security of personal data entrusted to us by our users. This Policy explains what personal data we collect, the legal bases on which we process it, how we use and share it, how long we retain it, and what rights you have in relation to it. Please read this Policy carefully alongside our Terms & Conditions and Responsible Gaming policy, both of which form part of your agreement with baha88.

2.1 Information You Provide Directly

When you register an account, verify your identity, make a deposit, request a withdrawal, contact support, or participate in a promotion, baha88 may collect the following categories of personal data:

2.2 Information Collected Automatically

When you access or use the Platform, we automatically collect certain technical and behavioural data, including: your IP address, device type and operating system, browser type and version, pages visited and time spent on each, referring URLs, session identifiers, game activity logs, and transaction records. This data is collected through server logs, cookies, and similar tracking technologies.

2.3 Information from Third Parties

baha88 may receive personal data about you from third-party sources where this is lawful and necessary. These sources include payment processors (such as bKash, Nagad, Rocket, and Upay) for transaction verification, identity verification service providers for KYC compliance, fraud detection and risk management partners, and public records or sanctions screening databases where required by law.

3.1 Account Administration

We use your registration information to create and manage your baha88 account, to verify your identity and age (you must be 21 or older to use the Platform), to authenticate your logins, and to communicate with you about your account activity. This processing is necessary for the performance of our contract with you.

3.2 Payment Processing

Your payment details and transaction history are used to process deposits and withdrawals, to detect and prevent fraudulent transactions, and to comply with anti-money laundering (AML) obligations. Payments are processed via our integrated payment partners; baha88 does not store full card numbers or mobile banking PINs on our own servers.

3.3 Legal and Regulatory Compliance

baha88 processes personal data where required to meet its legal obligations. This includes identity verification for KYC compliance, maintaining transaction records for audit and anti-money laundering purposes, age verification to prevent underage gambling, and responding to lawful requests from competent authorities.

3.4 Platform Security and Fraud Prevention

We analyse usage patterns, login behaviour, device fingerprints, and transaction data to detect suspicious activity, prevent account takeovers, identify multi-accounting, and protect the integrity of our games and betting markets. Our security processing is carried out on the basis of our legitimate interests in protecting the Platform and its users.

3.5 Service Improvement and Analytics

Aggregated and anonymised usage data is used to analyse player behaviour, identify technical issues, optimise game performance, and improve the overall user experience. Where analytics involve personal data, we rely on our legitimate interest in improving a safe and enjoyable platform for all users.

3.6 Marketing and Promotions

With your consent, baha88 may send you promotional emails, SMS notifications, or in-platform messages about bonuses, seasonal offers (such as Eid promotions or Pohela Boishakh specials), new game releases, or cricket betting markets including BPL and IPL seasons. You may withdraw your consent to marketing communications at any time by contacting [email protected] or by updating your account preferences.

3.7 Responsible Gaming

We may monitor account activity to identify patterns that suggest problematic gambling behaviour. Where such patterns are detected, we may contact you to offer responsible gaming tools, or in serious cases apply protective measures to your account. This processing is carried out in your vital interests and in the public interest of promoting safe gambling practices.

4.1 Payment Service Providers

baha88 shares transaction-related personal data with payment processors — including bKash, Nagad, Rocket, Upay, Visa, and Mastercard — strictly to the extent necessary to complete your deposit or withdrawal. These providers process your data under their own privacy policies and are bound by applicable financial data protection regulations.

4.2 Identity Verification Partners

To fulfil our KYC and age verification obligations, baha88 may share your name, date of birth, and identity document details with accredited third-party verification service providers. These providers are contractually prohibited from using your data for any purpose other than the verification service they provide to baha88.

4.3 IT Infrastructure and Cloud Providers

baha88 uses reputable cloud hosting, database, and content delivery providers to operate the Platform. These providers act as data processors on our behalf and are bound by data processing agreements that require them to maintain appropriate security standards and to process data only on our documented instructions.

4.4 Legal Disclosure

baha88 may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other competent authorities when required to do so by applicable law, a binding court order, or where we believe in good faith that disclosure is necessary to protect the rights, property, or safety of baha88, our users, or the public.

4.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of baha88's business, personal data held by baha88 may be transferred to the acquiring entity as part of that transaction. We will notify affected users of any such transfer in advance and will ensure the acquiring entity is bound by privacy obligations at least as protective as those in this Policy.

5.1 What We Use

baha88 uses the following types of cookies and similar technologies on the Platform:

• Essential cookies: Required for core Platform functionality including session management, authentication, and security. These cannot be disabled without impairing Platform performance.
• Functional cookies: Used to remember your preferences such as language settings, display preferences, and last-visited game categories.
• Analytical cookies: Used to collect anonymised data about how users interact with the Platform, which pages are most visited, and where technical errors occur. This data is used solely to improve the Platform.

5.2 Third-Party Cookies

baha88 does not permit third-party advertising networks to place tracking cookies on the Platform. Any third-party scripts present on the Platform (such as those from game providers like Pragmatic Play, Evolution Gaming, Spribe, or Ezugi) are scoped to their own embedded game frames and do not have access to your baha88 account data.

5.3 Managing Cookies

You can control and manage cookies through your browser settings. Please note that disabling essential cookies will prevent you from logging in or using key Platform features. Blocking functional cookies may result in some preferences not being saved between sessions.

baha88 retains personal data only for as long as is necessary to fulfil the purposes described in this Policy. Specific retention periods are determined as follows:

• Account data: Retained for the duration of the account relationship and for a period of five years following account closure, in compliance with standard financial record-keeping requirements.
• Transaction records: Retained for a minimum of five years from the date of each transaction, in line with anti-money laundering obligations.
• Identity verification documents: Retained for as long as required by applicable law and for a reasonable period thereafter to defend against any potential legal claims.
• Marketing preferences and consent records: Retained until you withdraw consent or for three years following your last interaction with a marketing communication, whichever is sooner.
• Support communications: Retained for up to three years from the date of the interaction unless a longer period is required in connection with an open dispute or legal matter.

When personal data reaches the end of its retention period, baha88 will securely delete it or, where deletion is not technically feasible, anonymise it so that it can no longer be linked to you as an individual.

baha88 respects your rights over your personal data. The following rights are available to all registered users:

To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request" and include your registered account username. We will acknowledge your request promptly and respond substantively within 30 days. Some requests may require identity verification before we can action them.

baha88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encrypted storage of sensitive data at rest, including identity documents and payment records.
• Multi-factor authentication options for account login to prevent unauthorised access.
• Role-based access controls ensuring that only authorised baha88 personnel can access personal data, and only to the extent required for their role.
• Regular security audits and penetration testing conducted by independent security professionals.
• Incident response procedures to detect, contain, and report data breaches in accordance with applicable obligations.

While baha88 takes all reasonable steps to protect your data, no online system can guarantee absolute security. You are responsible for keeping your account credentials confidential and for logging out of the Platform when using shared or public devices.

The baha88 Platform is strictly for adults aged 21 and above. baha88 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data belonging to a minor has been submitted to the Platform — whether through false registration details or otherwise — we will immediately suspend the relevant account, delete the data in question, and take appropriate steps to prevent recurrence. If you are a parent or guardian and believe that a minor has registered on the Platform, please contact us immediately at [email protected].

baha88 may update this Privacy Policy from time to time to reflect changes in our data practices, Platform features, or applicable legal requirements. When we make material changes, we will notify registered users via email or through a prominent notice on the Platform. The "Last updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the Platform following the posting of changes constitutes your acceptance of the revised Policy.

If you have questions, concerns, or complaints about this Privacy Policy or about how baha88 handles your personal data, please contact our support team. We take all privacy enquiries seriously and will respond in a timely and transparent manner.

Support email: [email protected] (plain text — not a clickable link). Please use the subject line "Privacy Enquiry" and include your registered account username so we can locate your records efficiently. Our support team is available 24 hours a day, 7 days a week.