bao88 Privacy Policy
At bao88, protecting your personal information is a fundamental part of how we operate. This Privacy Policy explains exactly what data we collect, why we collect it, how it is used and stored, who it may be shared with, and what rights you have as a bao88 user in Bangladesh.
How bao88 Safeguards Your Data
These six principles summarise our approach to data privacy. They do not replace the full policy below — please read all sections carefully to understand your rights and our obligations.
Minimal Data Collection
bao88 collects only the personal data that is strictly necessary to provide our services, process transactions, verify identity, and comply with legal obligations. We do not collect data speculatively or in excess of what is needed for a clearly defined purpose.
Encryption and Secure Storage
All personal data stored by bao88 is protected using 256-bit SSL encryption in transit and AES-256 encryption at rest. Access to data systems is restricted to authorised personnel only, governed by strict role-based access controls and regular security audits.
No Data Sales
bao88 does not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes. Any data sharing that occurs is limited to the specific categories of service partners described in this policy, and only to the extent necessary.
Your Rights Are Respected
As a bao88 user you have the right to access the data we hold about you, request corrections, ask for data deletion (subject to legal retention obligations), and object to certain types of processing. Requests may be submitted to [email protected] and are handled within 10 business days.
Defined Retention Periods
bao88 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. Account data is generally retained for a minimum of five years following account closure to meet anti-money-laundering record-keeping obligations.
Breach Notification
In the unlikely event of a data security breach that poses a material risk to your rights or interests, bao88 will notify affected users without undue delay and take all practicable steps to contain the breach, mitigate harm, and cooperate with any relevant regulatory inquiry.
01 Introduction
This Privacy Policy ("Policy") is issued by bao88 ("we", "us", or "our") and applies to all users ("you" or "User") who access or use the bao88 website at https://bao88.io and all associated services, including the sportsbook, live casino, and slot games ("Platform").
This Policy describes how bao88 collects, uses, stores, shares, and protects your personal data, as well as the rights you hold in relation to that data. It should be read alongside the bao88 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.
By registering an account, making a deposit, or continuing to use the bao88 Platform, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact [email protected] to request account closure.
02 Data We Collect
bao88 collects personal data across several categories. The specific data collected in each category is set out in the table below.
| Category | Examples of Data Collected | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, National Identity Card (NID) number, passport number, photograph | At registration and during KYC verification |
| Contact Data | Email address, mobile phone number, residential address (city/district), postal code | At registration or when you update your profile |
| Financial Data | bKash/Nagad/Rocket/Upay mobile wallet numbers, bank account references, deposit and withdrawal transaction records, account balance history | When you make a deposit or request a withdrawal |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, session duration, page visit logs | Automatically, each time you access the Platform |
| Behavioural Data | Games played, wagers placed, bet amounts, win/loss records, session frequency, responsible gaming tool usage | Automatically, during each session on the Platform |
| Communications Data | Support ticket content, live chat transcripts, emails sent to bao88, feedback and complaint records | When you contact our support team |
| Marketing Preferences | Email/SMS marketing opt-in status, preferred game categories, bonus preferences | When you update your communication preferences |
03 How We Collect Data
3.1 Data You Provide Directly
The majority of personal data we hold is provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, participate in a promotion, or update your account settings.
3.2 Automated Collection
When you access the bao88 Platform, our servers and analytics systems automatically record certain technical and behavioural data. This includes your IP address, device identifiers, browser characteristics, pages visited, game rounds initiated, and session timing data. This automated collection occurs through the use of server logs, cookies, and similar tracking technologies described in Section 7 of this Policy.
3.3 Third-Party Sources
In limited circumstances, bao88 may receive personal data about you from third-party sources, including:
- Payment processors (e.g., bKash, Nagad) — transaction confirmation and fraud screening data;
- Identity verification services — results of NID or document verification checks;
- Game studio providers (e.g., Pragmatic Play, Evolution Gaming) — game round outcomes and session data generated within their platforms;
- Anti-fraud and compliance databases — screening results for politically exposed persons (PEP) or sanctions lists.
In all cases, bao88 ensures that any third-party data source operates under appropriate data-sharing agreements that are consistent with this Policy.
04 How We Use Your Data
bao88 uses your personal data for the following clearly defined purposes:
- Account creation and management: To register your account, authenticate your identity at login, maintain your account settings, and communicate service-critical information to you.
- Transaction processing: To process deposits, settle withdrawals, and maintain accurate financial records of all transactions conducted through your account.
- Identity verification (KYC): To verify your age, identity, and payment method ownership in compliance with our internal policies and applicable legal obligations.
- Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, underage gambling, bonus abuse, multi-accounting, and other prohibited conduct described in our Terms & Conditions.
- Responsible gaming monitoring: To identify patterns of play that may indicate problem gambling and to apply appropriate responsible gaming measures in accordance with our Responsible Gaming Policy.
- Personalisation: To tailor game recommendations, bonus offers, and communications to your demonstrated preferences and activity history, where you have not opted out of such personalisation.
- Customer support: To respond to your enquiries, complaints, and support requests efficiently and accurately, using the history of your account and prior communications as context.
- Legal compliance: To meet record-keeping, reporting, and cooperation obligations under applicable anti-money-laundering (AML), counter-terrorism financing (CTF), and other legal frameworks.
- Platform improvement: To analyse aggregate usage patterns, identify technical issues, and improve the design, performance, and content of the bao88 Platform. This analysis uses anonymised or pseudonymised data wherever practicable.
- Marketing communications: To send you promotional offers, bonus notifications, and news about bao88 products via email or SMS, but only where you have opted in to receive such communications and only to the extent permitted under applicable law.
05 Legal Basis for Processing
bao88 processes your personal data on the following legal grounds, depending on the nature of the processing activity:
- Contractual necessity: Processing required to perform the contract between you and bao88 — including account registration, transaction processing, and customer support — is conducted on the basis that it is necessary for the performance of that contract.
- Legal obligation: Processing required to comply with applicable law — including KYC verification, AML record-keeping, and regulatory reporting — is conducted on the basis of legal obligation.
- Legitimate interests: Processing conducted for fraud prevention, security monitoring, responsible gaming oversight, and Platform analytics is conducted on the basis of bao88's legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
- Consent: Processing for marketing communications and optional personalisation is conducted on the basis of your explicit consent, which may be withdrawn at any time without affecting other processing activities.
06 Data Sharing
6.1 Service Providers
bao88 shares personal data with carefully selected third-party service providers who assist in operating the Platform. These providers are engaged under contractual data processing agreements that restrict their use of your data to the specific services they provide to bao88. Categories of service providers include:
- Payment processors and mobile financial service providers (bKash, Nagad, Rocket, Upay, and banking partners);
- Identity verification and KYC service providers;
- Game studio providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, Play'n GO);
- Cloud hosting and data centre providers;
- Fraud detection and cybersecurity vendors;
- Customer support platform providers;
- Email and SMS communication service providers.
6.2 Legal and Regulatory Disclosure
bao88 may disclose your personal data to law enforcement authorities, regulatory bodies, courts, or other public institutions where required to do so by applicable law, court order, or regulatory direction. In such cases, bao88 will disclose only the minimum data necessary to comply with the relevant requirement and will notify you of any such disclosure where legally permitted to do so.
6.3 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or substantially all of bao88's assets, your personal data may be transferred to the acquiring entity. In such circumstances, bao88 will take reasonable steps to ensure that the recipient provides data protection commitments equivalent to those set out in this Policy, and will notify registered users of any material change in data controller prior to any transfer taking effect.
6.4 No Commercial Data Sales
bao88 does not sell, rent, exchange, or otherwise commercially transfer your personal data to any third party for that party's own independent commercial or marketing purposes. Any sharing of data described in this Section is limited to what is necessary to deliver the bao88 service and meet legal obligations.
07 Cookies and Tracking Technologies
7.1 What Are Cookies
Cookies are small text files placed on your device by websites you visit. bao88 uses cookies and similar tracking technologies (including local storage objects and session tokens) to operate the Platform, remember your preferences, maintain your logged-in session, and collect analytical data about how the Platform is used.
7.2 Types of Cookies We Use
- Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication tokens, security cookies, and load-balancing cookies. These cookies cannot be disabled without preventing you from using core Platform functions.
- Functional Cookies: Store your preferences such as language settings, preferred game categories, and display options to improve your experience across sessions.
- Analytics Cookies: Collect aggregated data about how users navigate the Platform — including pages visited, time spent, and errors encountered — to help bao88 improve Platform performance and usability. Analytics data is processed in pseudonymised form.
- Marketing Cookies: Used only where you have given consent, to track the effectiveness of marketing campaigns and to avoid presenting you with repetitive promotional content. Marketing cookies may be set by bao88 directly or by our authorised communication partners.
7.3 Managing Cookies
You may control or delete cookies through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the Platform. Disabling analytics or marketing cookies will not affect your ability to play games or process transactions. Most modern browsers provide cookie management interfaces under their Privacy or Security settings menus.
08 Data Retention
bao88 retains personal data for no longer than is necessary for the purpose for which it was collected, subject to the following minimum retention periods:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account identity and KYC records | 5 years from account closure | AML / legal obligation |
| Financial transaction records | 5 years from transaction date | AML / legal obligation |
| Betting and gaming history | 3 years from account closure | Legitimate interests / dispute resolution |
| Customer support communications | 2 years from last interaction | Legitimate interests |
| Technical / server log data | 12 months from collection | Legitimate interests / security |
| Marketing preference records | Until consent is withdrawn, then 1 year | Consent / legal obligation |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Where data is anonymised, it may be retained indefinitely for aggregate statistical purposes without further notice.
09 Data Security
bao88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
- Encryption: All data transmitted between your device and bao88 servers is encrypted using 256-bit SSL/TLS protocols. Sensitive data stored in our databases is encrypted at rest using AES-256 encryption.
- Access Controls: Access to personal data is restricted to bao88 employees and contractors who have a demonstrable operational need to access it. All access is governed by role-based permissions, and access logs are maintained and reviewed regularly.
- Authentication: Internal systems require multi-factor authentication. Users are encouraged to enable two-factor SMS authentication on their bao88 accounts for additional protection.
- Security Audits: bao88 conducts periodic internal security reviews and engages third-party security specialists to perform vulnerability assessments and penetration testing of our infrastructure.
- Incident Response: bao88 maintains a documented incident response plan. In the event of a security incident, designated personnel follow a structured process to contain the breach, assess its scope, notify affected users, and implement remedial measures.
10 Your Rights
As a bao88 user, you have the following rights in relation to your personal data. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request".
- Right of Access: You have the right to request a copy of the personal data bao88 holds about you. bao88 will respond to verified access requests within 10 business days.
- Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held in your account. Minor corrections (e.g., contact details) can be made directly within your account settings.
- Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to bao88's legal retention obligations. Requests for erasure that conflict with mandatory retention periods will be partially fulfilled — data subject to legal retention will be retained for the applicable period but isolated from active processing.
- Right to Restriction: You have the right to request that bao88 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing based on legitimate interests pending verification of those interests.
- Right to Object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling for personalisation and responsible gaming monitoring. bao88 will assess such objections and cease the relevant processing unless compelling legitimate grounds for processing can be demonstrated.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
- Right to Data Portability: Where processing is carried out by automated means on the basis of consent or contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
11 Children and Minors
bao88 is strictly an adult platform. The minimum age to register and use bao88 is 21 years. bao88 does not knowingly collect personal data from individuals under the age of 21.
If bao88 becomes aware that personal data has been collected from an individual who is under 21 years of age, that account will be immediately suspended, all associated data will be reviewed, and the account will be permanently closed. Any deposits traceable to the underage user will be returned to their originating payment method, and all associated winnings will be voided.
If you are a parent or guardian and believe that your child has registered a bao88 account, please contact [email protected] immediately with the subject line "Underage Account Report". bao88 treats all such reports as a priority and will act on them without delay.
12 Third-Party Links
The bao88 Platform may contain references to third-party game studios, payment providers, and other service partners. While bao88 takes care in selecting its partners, this Policy applies only to data processed by bao88 directly. Any personal data you provide to a third party — including through their own platforms or applications — is governed by that third party's own privacy policy.
bao88 is not responsible for the privacy practices, data security standards, or content of any third-party platforms. We recommend that you review the relevant privacy policies of any third-party service you interact with in connection with your use of bao88.
13 Policy Updates
bao88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services we offer. The date of the most recent revision is displayed prominently at the top of this page.
Where changes are material — meaning they significantly affect how your data is used or your rights in relation to it — bao88 will notify registered users via their registered email address at least 14 days before the changes take effect. For minor or clarificatory updates, the revised Policy will be published on this page without individual notification.
Your continued use of the bao88 Platform following the effective date of any revision constitutes your acceptance of the updated Policy. If you do not agree to any revised terms, you must cease using the Platform and may request account closure as described in the bao88 Terms & Conditions.
14 Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the way bao88 handles your personal data, please contact our privacy team using the details below:
- Email: [email protected] (plain text — not a clickable link)
- Subject Line for Data Requests: "Data Rights Request"
- Subject Line for Privacy Enquiries: "Privacy Policy Enquiry"
- Response Time: Within 10 business days for data rights requests; within 2 business days for general privacy enquiries.
- Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6).
bao88 is committed to resolving all privacy-related concerns promptly and transparently. If you are not satisfied with our response, you retain the right to escalate your concern through any applicable regulatory or legal channel available to you under the laws of Bangladesh.
Your Data Is Safe. Now Let's Play.
You have taken the time to understand how bao88 protects your privacy — now explore everything the platform has to offer. Cricket betting, live casino, and hundreds of slot titles, all built for Bangladeshi players. 21+ only. Please play responsibly.