bbb8 Privacy Policy

bbb8 collects personal data in three principal ways: directly from you when you register an account or interact with our platform; automatically through the technical operation of the bbb8.club website; and from third-party service providers involved in identity verification and payment processing. The categories of data collected are described below.

1.1 Registration and Account Data

When you create a bbb8 account, we collect the following information:

• Full legal name as it appears on your government-issued identification.
• Date of birth — used to verify the 18+ age requirement.
• Mobile number — used for SMS-based account verification and security alerts.
• Email address — used for account communications, withdrawal confirmations, and support correspondence.
• Username and hashed password — your chosen login credentials. Passwords are never stored in plain text.
• Residential address — collected at the KYC verification stage, including district, division, and postal code within Bangladesh.

1.2 Identity Verification (KYC) Documents

To comply with our Know Your Customer obligations and to protect players from identity fraud, bbb8 may request copies of the following documents at account verification or before processing a withdrawal:

• National Identity Card (NID) issued by the Bangladesh Election Commission.
• Valid passport (biographical data page).
• Driver's licence issued by the Bangladesh Road Transport Authority.
• Proof of payment method — for example, a screenshot of a registered bKash or Nagad mobile wallet showing your name and number.

KYC documents are stored in an encrypted document management system and are accessible only to authorised bbb8 compliance personnel. They are not shared with game providers or marketing partners.

1.3 Transaction and Financial Data

bbb8 records all financial activity associated with your account, including deposit amounts, withdrawal requests, bonus credits, wagering history, game results, and account balance movements. All amounts are recorded in Bangladeshi Taka (৳). Payment method identifiers — such as the last four digits of a card or the registered mobile number of a bKash/Nagad/Rocket/Upay wallet — are stored to facilitate withdrawals to verified payment sources. Full card numbers and mobile banking PINs are never stored by bbb8.

1.4 Technical and Device Data

When you access bbb8.club, our servers and analytics systems automatically collect certain technical information, including:

• IP address and approximate geolocation (city/country level).
• Device type, operating system, and browser version.
• Session start and end times, pages visited, and features accessed.
• Referring URL (the page you visited immediately before arriving at bbb8.club).
• Error logs and crash reports where a technical fault occurs on your device.

This technical data is used for platform security, fraud detection, and aggregate performance monitoring. It is not used to build individual behavioural profiles for advertising purposes.

1.5 Communications Data

When you contact bbb8 customer support — whether by email, live chat, or any other written channel — we retain records of those communications including the content of messages, timestamps, and any attachments you provide. This data is used to resolve your enquiry, improve our support service, and maintain an audit trail of account-related decisions.

bbb8 processes your personal data only for purposes that are directly connected to the operation of the platform and the delivery of services to you as a player. We do not process personal data for purposes that are incompatible with those originally disclosed at the time of collection.

2.1 Account Management and Platform Operation

Your registration data, credentials, and account preferences are used to create, authenticate, and maintain your bbb8 account. This is the primary basis on which your data is processed — without it, we cannot provide you with access to games, betting markets, or your wallet.

2.2 Payment Processing

Transaction data is used to credit deposits to your bbb8 wallet, process withdrawal requests to your verified payment method (bKash, Nagad, Rocket, Upay, bank transfer, or card), apply bonus credits, and maintain an accurate ledger of your account balance in Bangladeshi Taka (৳). Payment data is shared with the relevant payment processor solely to execute the requested transaction — see Section 3 for details.

2.3 Identity Verification and Fraud Prevention

KYC documents and account data are processed to verify your identity, confirm your age (18+), detect and prevent duplicate account registrations, identify potentially fraudulent activity, and comply with anti-money-laundering obligations. Automated systems may flag unusual patterns for manual review by our compliance team.

2.4 Customer Support

Communications data and account history are used by our support team to understand the context of your enquiry, investigate disputes, and provide accurate, personalised assistance. Support interactions may be reviewed periodically for quality assurance and staff training purposes, using anonymised or pseudonymised records.

2.5 Responsible Gaming Monitoring

bbb8 uses your gameplay data, deposit frequency, and account activity patterns to identify potential indicators of problem gambling. Where our systems or support staff detect such indicators, we may proactively contact you to offer responsible gaming tools such as deposit limits, cool-off periods, or self-exclusion. This processing is conducted in the genuine interest of player welfare and is not used for any commercial purpose.

2.6 Service Communications

Your email address and mobile number may be used to send you transactional messages including deposit confirmations, withdrawal status updates, security alerts (such as a new device login), and changes to our Terms or Privacy Policy. These communications are necessary for the operation of your account and cannot be opted out of while your account is active. Promotional communications are sent only where you have explicitly opted in and may be unsubscribed at any time.

bbb8 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. Data is shared with external parties only in the limited circumstances described in this section, and only to the minimum extent necessary to fulfil the stated purpose.

3.1 Payment Service Providers

To process deposits and withdrawals, bbb8 shares the necessary transaction details with the relevant payment provider — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These providers receive only the information required to execute the transaction (such as your registered mobile number or masked card identifier) and are contractually prohibited from using that data for any other purpose.

3.2 Game and Software Providers

Third-party game providers integrated into bbb8 — including Pragmatic Play, NetEnt, Microgaming, Evolution Gaming, Ezugi, and Spribe — receive a pseudonymous player identifier, game session token, and wallet balance information sufficient to operate each game session. These providers do not receive your full name, NID details, contact information, or payment method data. Each provider maintains its own data processing standards as part of its certification requirements.

3.3 Identity Verification Partners

Where bbb8 uses a third-party KYC verification service to authenticate identity documents, your submitted documents and personal details are shared with that provider solely for the purpose of completing the verification check. Verification partners are bound by strict data processing agreements and are not permitted to retain your documents beyond the period necessary to complete the check.

3.4 Legal and Regulatory Disclosure

bbb8 may disclose personal data to law enforcement agencies, regulatory bodies, or other authorised government authorities where required to do so by applicable law, court order, or legally binding regulatory directive. In all such cases, bbb8 will disclose only the minimum data required to satisfy the legal obligation and, where permitted by law, will notify the affected player.

3.5 Business Transfers

In the event that bbb8 undergoes a merger, acquisition, asset sale, or corporate restructuring, player personal data may be transferred to the successor entity as part of that transaction. In such circumstances, bbb8 will provide advance notice to affected players and ensure that the receiving entity is bound by privacy obligations no less protective than those set out in this Privacy Policy.

bbb8.club uses cookies — small text files stored on your device — and similar client-side storage technologies to ensure the platform functions correctly, maintain your session security, and gather aggregate usage statistics. We do not use advertising cookies, behavioural tracking pixels, or third-party ad-network scripts on bbb8.club.

4.1 Strictly Necessary Cookies

These cookies are essential for the basic operation of bbb8.club and cannot be disabled without preventing you from using the platform. They include your authenticated session token, CSRF protection tokens, and load-balancing identifiers. No personal data is written into these cookies beyond an encrypted session reference.

4.2 Functional Cookies

Functional cookies remember your preferences — such as your display settings, last-visited game category, and table stake preferences — so that you do not need to re-enter them on each visit. These cookies persist for up to thirty (30) days and can be cleared at any time via your browser settings.

4.3 Analytics Cookies

bbb8 uses privacy-respecting server-side analytics to understand aggregate usage patterns — such as which game categories are most popular, average session length, and error frequency. Where client-side analytics scripts are used, they are configured to anonymise IP addresses and do not share data with advertising networks. Individual player behaviour is not tracked or profiled for commercial purposes through our analytics setup.

4.4 Managing Cookies

You can control or delete cookies at any time through your browser's settings. Most modern browsers allow you to block all cookies, accept only first-party cookies, or delete existing cookies on demand. Please note that disabling strictly necessary cookies will prevent you from logging in to your bbb8 account. Clearing functional cookies will reset your saved preferences on your next visit.

5.1 Retention Periods

bbb8 retains your personal data for as long as your account remains active and for a defined period thereafter, as required by financial recordkeeping and anti-money-laundering obligations. The following retention periods apply:

• Account and registration data: Retained for the lifetime of your active account plus five (5) years after closure.
• Transaction and financial records: Retained for seven (7) years from the date of each transaction, in line with standard financial recordkeeping requirements.
• KYC verification documents: Retained for five (5) years from the date of submission or account closure, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the last message in each support thread.
• Technical and device logs: Retained for ninety (90) days for security monitoring purposes, then automatically deleted.
• Marketing consent records: Retained for two (2) years from the date of opt-in, or until consent is withdrawn, whichever occurs first.

5.2 Data Storage Location

All personal data processed by bbb8 is stored on servers located in secure data centres with appropriate physical and technical security controls. Data is not routinely transferred outside of the jurisdictions in which bbb8 operates its infrastructure. Where a third-party service provider processes data in a different location, bbb8 ensures that appropriate contractual safeguards — such as standard data processing clauses — are in place before any transfer occurs.

5.3 Data Deletion

Upon expiry of the applicable retention period, personal data is either securely deleted from bbb8 systems or irreversibly anonymised so that it can no longer be linked to an individual. KYC document files are deleted from our document management system and overwritten so that they cannot be recovered. Backups containing personal data are purged on a rolling schedule in line with the retention periods above.

bbb8 respects your right to understand and control how your personal data is handled. The following rights are available to all bbb8 players. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Rights Request" and include your registered account email address so that we can verify your identity before processing the request. bbb8 will respond to all privacy rights requests within thirty (30) calendar days.

6.1 Right of Access

You have the right to request a copy of the personal data bbb8 holds about you. Upon a verified request, bbb8 will provide a summary of all data categories held, the purposes for which each category is processed, any third parties with whom the data has been shared, and the applicable retention period. This information will be delivered to your registered email address in a commonly used electronic format.

6.2 Right to Rectification

If any personal data bbb8 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Some data fields — such as your registered name and date of birth — can only be amended following re-submission of a valid identity document, to ensure that our records accurately reflect your verified identity.

6.3 Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (for consent-based processing), or where you believe processing has been unlawful. Please note that bbb8 may be unable to delete certain data — such as transaction records and KYC documents — during the mandatory retention period described in Section 5, where deletion would conflict with our legal obligations.

6.4 Right to Restrict Processing

While a privacy rights dispute is being resolved — for example, while you contest the accuracy of data we hold — you may request that bbb8 restrict active processing of the disputed data to storage only, pending the outcome of the review.

6.5 Right to Data Portability

For data processed on the basis of your consent or contract performance, you have the right to receive your personal data in a structured, machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider if you choose. This right applies to your account registration data and transaction history.

6.6 Right to Withdraw Marketing Consent

If you have opted in to receive promotional communications from bbb8, you may withdraw that consent at any time by clicking the unsubscribe link in any marketing email, updating your notification preferences in your account settings, or contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before withdrawal, and it does not affect your right to continue receiving transactional account communications.

bbb8 implements a layered security framework to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. While no platform can guarantee absolute security, bbb8 applies industry-recognised technical and organisational measures appropriate to the sensitivity of the data it processes.

7.1 Technical Security Controls

• 256-bit SSL/TLS encryption on all data in transit between your browser and bbb8 servers.
• AES-256 encryption for sensitive data fields stored at rest, including KYC documents and payment identifiers.
• Bcrypt password hashing — passwords are never stored or transmitted in plain text.
• Two-factor authentication (2FA) available for all player accounts and mandatory for bbb8 administrative staff accounts.
• Web Application Firewall (WAF) to protect against common attack vectors including SQL injection and cross-site scripting (XSS).
• Intrusion detection and monitoring systems that log and alert on anomalous access patterns in real time.
• Regular penetration testing conducted by independent security specialists to identify and remediate vulnerabilities.

7.2 Organisational Security Controls

• Access to personal data is restricted to bbb8 staff on a strict need-to-know basis, enforced through role-based access controls.
• All staff with access to personal data are required to complete data protection training and are bound by confidentiality obligations.
• KYC document access is restricted to a dedicated compliance team and is logged for audit purposes.
• Third-party service providers are assessed for data security standards before being granted access to any bbb8 player data, and are bound by data processing agreements.

7.3 Security Incident Response

In the event of a confirmed personal data breach that poses a risk to the rights and freedoms of affected players, bbb8 will notify affected individuals without undue delay — and within seventy-two (72) hours of becoming aware of the breach — providing details of the nature of the breach, the data categories affected, the likely consequences, and the measures taken or proposed to address it. Notifications will be sent to the registered email address on each affected account.

8.1 Amendments to This Privacy Policy

bbb8 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the introduction of new platform features. When material changes are made, we will notify registered players by email at least seven (7) days before the updated policy takes effect. The "Last updated" date at the top of this page will be revised upon each amendment. Continued use of bbb8 after the effective date of an updated Privacy Policy constitutes your acknowledgement of the revised terms.

8.2 Children and Minors

bbb8 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18. If bbb8 discovers that personal data has been submitted by a person under 18, that account will be immediately closed, all data will be deleted in line with our retention policy, and any deposits associated with the account will be returned to the originating payment method after verification. If you believe a minor has registered on bbb8, please contact [email protected] immediately.

8.3 Links to Third-Party Sites

bbb8.club does not contain links to external third-party websites for commercial or referral purposes. In the event that any third-party content is referenced on bbb8.club, bbb8 is not responsible for the privacy practices of those external sites and encourages users to review the privacy policies of any websites they visit independently of bbb8.

8.4 How to Contact Us About Privacy

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by bbb8, please contact our data protection team using the following details. All privacy enquiries are handled by a dedicated team and are acknowledged within two (2) business days:

• Email (plain text — not a link): [email protected]
• Subject line to use: Privacy Rights Request
• Support hours: 24/7 — Bangladesh Standard Time (UTC+6)
• Response time: Within 30 calendar days for formal privacy rights requests; within 2 business days for general enquiries.