Privacy Policy

1. Introduction

bbu888 ("bbu888", "we", "us", "our") is committed to protecting the privacy and personal data of every individual who accesses or uses the bbu888 platform at bbu888.app ("Platform"). This Privacy Policy ("Policy") describes in detail the categories of personal data we collect, the purposes for which we process that data, the legal basis on which we rely, how long we retain it, with whom we share it, and what rights you hold in relation to your personal data.

By registering an account on the bbu888 Platform, making a deposit, placing a wager, or otherwise using any feature of the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference.

2. Data Controller

For the purposes of applicable data protection legislation, bbu888 acts as the data controller in respect of the personal data of its registered players and website visitors. bbu888 determines the purposes and means of processing personal data collected through the Platform.

All data protection queries, subject access requests, and complaints should be directed to the bbu888 data protection contact point using the details set out in Section 15 of this Policy. We endeavour to respond to all data-related enquiries within 30 calendar days of receipt.

3. Data We Collect

bbu888 collects personal data across several categories depending on your interaction with the Platform. The table below sets out the main categories of personal data we collect and examples of specific data points within each category:

4. How We Collect Your Data

4.1 Data You Provide Directly

The majority of personal data we hold about you is provided directly by you when you register an account, complete identity verification, make a deposit or withdrawal, contact our support team, or participate in a promotion. You are responsible for ensuring that the data you provide is accurate and up to date.

4.2 Data Collected Automatically

When you visit and interact with the bbu888 Platform, certain technical data is collected automatically through our servers, analytics tools, and cookies. This includes your IP address, device identifiers, browser characteristics, session timestamps, and page interaction data. This data is used primarily for security monitoring, fraud prevention, and platform performance optimisation.

4.3 Data from Third Parties

In limited circumstances, bbu888 may receive personal data about you from third parties, including:

• Payment service providers (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank) who confirm the status and ownership of payment transactions
• Identity verification and KYC service providers who assist in confirming the authenticity of documents submitted during account verification
• Fraud prevention and anti-money laundering screening services
• Responsible gaming databases and self-exclusion registers where applicable

5. Purposes of Processing & Legal Basis

bbu888 processes your personal data only where a lawful basis exists under applicable data protection principles. The table below sets out the primary purposes for which we process your personal data and the corresponding legal basis for each:

6. Data Sharing & Third Parties

6.1 Service Providers

bbu888 engages carefully selected third-party service providers to assist in operating the Platform. These providers are granted access to your personal data only to the extent strictly necessary to perform their contracted services and are contractually prohibited from using your data for any other purpose. Categories of service providers include:

• Payment processing partners (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank)
• Game software and casino content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi)
• Identity verification and KYC technology providers
• Cloud infrastructure and data hosting providers
• Customer support platform operators
• Anti-fraud and cybersecurity monitoring services
• Email and SMS communication service providers

6.2 Legal Disclosure

bbu888 may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where we are legally required to do so, where disclosure is necessary to protect the rights or safety of bbu888 or its players, or where disclosure is required to investigate or prosecute suspected criminal activity including fraud or money laundering.

6.3 No Sale of Data

bbu888 does not sell, rent, lease, or otherwise commercially exploit your personal data to any third party under any circumstances.

7. Data Retention Periods

bbu888 retains personal data only for as long as it is reasonably necessary to fulfil the purposes for which it was collected, or for as long as required by applicable legal or regulatory obligations. The following indicative retention periods apply:

• Account and identity data: Retained for the duration of your active account plus a minimum of five years following account closure, to meet anti-money laundering and fraud prevention obligations.
• Financial transaction records: Retained for a minimum of five years from the date of the transaction, as required by applicable financial record-keeping obligations.
• KYC verification documents: Retained for the duration of the account plus five years following closure.
• Customer support communications: Retained for three years from the date of the last communication, unless a longer period is required to resolve a dispute.
• Marketing preference records: Retained for the duration of your account registration to demonstrate compliance with consent requirements.
• Technical and log data: Retained for up to 12 months for security and fraud monitoring purposes, then anonymised or deleted.

At the expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be attributed to any identifiable individual.

8. Security Measures

bbu888 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security framework includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the bbu888 Platform
• Encrypted storage of all sensitive personal and financial data at rest on our servers
• Role-based access controls ensuring that only authorised personnel can access personal data relevant to their specific function
• Regular security audits, vulnerability assessments, and penetration testing of the Platform infrastructure
• Multi-factor authentication requirements for all administrative access to data systems
• Monitoring systems designed to detect and respond to suspicious access attempts or data anomalies in real time
• Staff training and data protection awareness programmes for all personnel with access to personal data

Despite these measures, no system is entirely immune to security risk. In the event of a data breach that is likely to result in a risk to your rights and freedoms, bbu888 will notify affected players as promptly as practicable, in accordance with our obligations under applicable data protection legislation.

9. Cookies & Tracking Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits, remember your preferences, and collect information about how you use the site. bbu888 uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a defined period).

9.2 Categories of Cookies Used

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session management cookies, security tokens, and login state cookies. They cannot be disabled without breaking core Platform functionality.
• Performance & Analytics Cookies: Used to collect anonymised information about how visitors use the bbu888 Platform, including which pages are visited most frequently and how users navigate between sections. This data is used solely to improve Platform performance and user experience.
• Functional Cookies: Enable the Platform to remember your preferences such as language settings, display preferences, and responsible gaming tool selections, providing a more personalised experience.
• Security Cookies: Used to detect and prevent fraudulent activity, bot traffic, and suspicious login attempts. These are part of our fraud prevention infrastructure and cannot be disabled.

9.3 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to block or delete cookies, or to receive a notification before a cookie is placed. Please note that disabling certain categories of cookies may impair the functionality of the bbu888 Platform or prevent you from accessing certain features. Instructions for managing cookies in popular browsers are available in each browser's help documentation.

10. Your Data Rights

As a registered player on the bbu888 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us using the details in Section 15:

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used format within 30 days of a valid request.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. Minor corrections (such as updates to your contact address) can often be made directly through your account settings.
• Right to Erasure: In certain circumstances you have the right to request deletion of your personal data. This right is subject to overriding legal obligations, including our legal duty to retain financial records and KYC documentation for the periods specified in Section 7.
• Right to Restriction: You have the right to request that we restrict the processing of your personal data in circumstances where you contest its accuracy, object to its processing, or require it to be retained for the purposes of a legal claim.
• Right to Data Portability: You have the right to receive personal data that you have provided to bbu888 in a structured, machine-readable format, and to transmit that data to another service provider where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where bbu888 relies on legitimate interests as the legal basis. You have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent (for example, receipt of marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

11. Marketing Communications

bbu888 may send you promotional communications about bonuses, new game launches, seasonal offers (such as Eid, Pohela Boishakh, or BPL season promotions), and platform updates, but only where you have expressly opted in to receive such communications at the time of registration or subsequently through your account settings.

You may opt out of marketing communications at any time by:

• Updating your communication preferences within your account settings panel
• Clicking the unsubscribe link included in any promotional email sent by bbu888
• Contacting the bbu888 support team directly at [email protected] with an opt-out request

Please note that opting out of marketing communications does not affect transactional communications that are necessary for the operation of your account, such as deposit confirmations, withdrawal notifications, security alerts, or KYC verification requests. These operational communications will continue regardless of your marketing preferences.

12. Minors & Under-18 Protection

The bbu888 Platform is strictly intended for adults aged 18 years and above. bbu888 does not knowingly collect, process, or retain personal data from individuals under the age of 18. If we become aware that personal data has been submitted by a minor, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a person under your care has registered on the bbu888 Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

13. International Data Transfers

The bbu888 Platform serves players primarily based in Bangladesh. In the course of providing our services, certain personal data may be transferred to or processed by service providers located outside Bangladesh, including game studios and cloud infrastructure providers operating in other jurisdictions.

Where such transfers occur, bbu888 takes appropriate steps to ensure that your personal data continues to be protected to a standard consistent with this Policy. This includes entering into data processing agreements with all third-party service providers that impose equivalent data protection obligations, and conducting due diligence on the security practices of all processors before engagement.

14. Changes to This Privacy Policy

bbu888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, the services we offer, or applicable legal requirements. When material changes are made, we will publish the updated Policy on this page with a revised effective date and, where practicable, notify registered players via email or an in-platform notification prior to the changes taking effect.

Your continued use of the bbu888 Platform following the publication of an amended Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how we protect your data.

15. Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how bbu888 has handled your personal data, please contact our data protection team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Response Time: We aim to acknowledge all data-related requests within 48 hours and provide a full response within 30 calendar days
• Support Hours: 24 hours a day, 365 days a year — Bangladesh Standard Time (BST, UTC+6)