Privacy Policy — How bz888 Collects, Uses, and Protects Your Data

This Privacy Policy ("Policy") is published by bz888 ("bz888", "we", "us", "our") and applies to all users ("you", "your", "the Player") of the bz888 platform accessible at bz888.io, including any associated mobile interfaces or subdomains. This Policy sets out in clear terms how bz888 collects, uses, stores, shares, and protects personal information in connection with your use of our online betting and casino services, which are made available primarily to players based in Bangladesh.

By registering a bz888 account, depositing funds, placing bets, or otherwise interacting with the bz888 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated into the overall agreement between you and bz888.

bz888 is committed to handling your personal data with transparency, integrity, and security. We review and update this Policy periodically to reflect changes in our data practices, applicable law, or operational requirements. The most current version of this Policy is always available on this page, with the effective date displayed at the top.

bz888 collects a range of personal and technical information to deliver a secure, personalised, and compliant gambling service. The categories of data we collect are as follows:

bz888 does not collect sensitive data categories such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data, except where specifically required for responsible gaming assessments (e.g., a self-declared gambling problem) and only with your explicit consent.

bz888 collects your personal data through the following channels:

• Direct Input: Information you provide when completing the bz888 registration form, updating your account profile, submitting identity verification documents, contacting customer support, or filling in any other form on the platform.
• Automated Platform Interactions: Data generated automatically as you use the bz888 platform, including your IP address, device identifiers, session duration, pages visited, bet placements, and game interactions. This data is collected through server logs and platform analytics tools.
• Payment Providers: Transaction confirmations and basic account identifiers received from payment processors such as bKash, Nagad, Rocket, Upay, Visa, and Mastercard when you initiate a deposit or withdrawal. bz888 does not store full card numbers or full mobile financial service PINs.
• Identity Verification Partners: Where we engage a third-party KYC (Know Your Customer) service to verify your identity documents, we may receive confirmation data from that provider. We do not receive raw biometric scan data.
• Cookies and Similar Technologies: Through cookies, web beacons, and local storage technologies described in Section 7 of this Policy.

bz888 processes your personal data for the following specific purposes:

• Account Creation and Management: To create, maintain, and manage your bz888 account, including verifying your identity, age (minimum 21 years), and eligibility to use the platform.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain an accurate financial record of all transactions on your account.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, collusion, and other prohibited conduct described in our Terms & Conditions.
• Responsible Gaming: To monitor gambling behaviour patterns, apply deposit limits and session alerts you have configured, and identify players who may be at risk of problem gambling in order to offer timely support or intervention.
• Legal and Regulatory Compliance: To meet our obligations under applicable anti-money-laundering (AML) regulations, Know Your Customer (KYC) requirements, and other legal duties applicable to the jurisdictions in which bz888 operates.
• Customer Support: To provide timely and effective responses to your support enquiries, complaints, and dispute submissions via the bz888 live chat and email support channels.
• Platform Improvement: To analyse aggregated, anonymised usage data to understand how players interact with our platform, identify technical issues, and improve the overall user experience for players across Bangladesh.
• Promotional Communications: Where you have opted in to receive marketing communications, to send you information about relevant bz888 promotions, bonuses, cricket betting opportunities, and new game releases. You may withdraw this consent at any time by contacting support.

bz888 does not use automated decision-making that produces legal or similarly significant effects without human review. Account suspension decisions based on automated fraud flags are always reviewed by our compliance team before any permanent action is taken.

bz888 processes your personal data on one or more of the following legal bases, depending on the specific purpose and context:

• Contractual Necessity: Processing that is necessary for the performance of the agreement between you and bz888 — for example, processing your identity data to register your account and processing your financial data to complete a deposit or withdrawal.
• Legal Obligation: Processing that bz888 is required to carry out under applicable law — for example, retaining transaction records for AML compliance purposes or verifying that a player is aged 21 or above before allowing betting activity.
• Legitimate Interests: Processing carried out to pursue bz888's legitimate operational interests, provided that those interests are not overridden by your data protection rights — for example, platform security monitoring, fraud detection, and responsible gaming analytics.
• Consent: Processing based on your freely given, specific, and informed consent — for example, sending you optional promotional emails about bz888 bonuses and new cricket or slots offerings. You may withdraw consent at any time without affecting the lawfulness of prior processing.

bz888 does not sell your personal data to any third party. We share your data only in the following limited and controlled circumstances:

• Payment Processors: We share the minimum necessary financial and identity data with payment partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard) to process your deposits and withdrawals. These providers are contractually bound to process your data solely for payment purposes and in compliance with applicable data protection requirements.
• Identity Verification (KYC) Providers: Where we use a third-party service to verify identity documents submitted during account verification, we share the relevant document images and personal details with that provider solely for the purpose of verification. KYC providers operate under strict data processing agreements with bz888.
• Game and Platform Technology Providers: Game studios and technology providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data for game performance and fairness auditing purposes. These providers do not receive your name, contact details, or payment information.
• Legal Authorities: bz888 may disclose your personal data to law enforcement agencies, regulatory bodies, or other public authorities where required to do so by applicable law, court order, or official regulatory request. bz888 will notify you of such disclosure where legally permitted to do so.
• Professional Advisers: In certain circumstances, bz888 may share relevant data with its legal counsel, auditors, or other professional advisers under strict confidentiality obligations.

bz888 uses cookies and similar tracking technologies (including local storage and session storage) to operate the platform, maintain your logged-in session, remember your preferences, and gather anonymised analytical data to improve our services. The types of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential for the bz888 platform to function. They maintain your authenticated session, prevent cross-site request forgery, and enable core platform features. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: These cookies remember your preferences such as language settings, responsible gaming limit configurations, and display settings, so you do not need to re-enter them on each visit.
• Analytical Cookies: These cookies collect anonymised data about how players navigate and use the bz888 platform — for example, which game categories are most visited, how long sessions last, and which pages generate the most support enquiries. This data is used in aggregate form only and cannot be used to identify you individually.
• Security Cookies: These cookies assist our fraud detection systems by identifying unusual access patterns, suspicious IP behaviour, or multiple-account registration attempts from the same device.

You can manage cookie preferences through your browser settings. Most modern browsers allow you to refuse or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to use the bz888 platform, including logging in to your account and placing bets.

bz888 does not use third-party advertising cookies or behavioural profiling cookies for the purpose of displaying targeted advertisements on external websites.

bz888 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law. Our standard data retention periods are as follows:

• Account and Identity Data: Retained for the duration of your active account and for a minimum of 5 years following permanent account closure, in accordance with AML record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, in accordance with financial record-keeping requirements applicable to online payment services.
• Betting and Gaming Activity Records: Retained for a minimum of 3 years following your last active session, and for the full duration of any unresolved dispute involving that activity.
• Customer Support Communications: Retained for 2 years from the date of the last communication in a support ticket, unless the communication relates to a formal dispute or legal matter, in which case it is retained for the duration of that matter plus 2 years.
• Technical and Log Data: Standard server log data is retained for 12 months. Security-related log data flagged for investigation may be retained for up to 5 years.

When data is no longer required for any legitimate purpose, bz888 will securely delete or anonymise it in accordance with our internal data disposal procedures. Anonymised data (from which you cannot be identified) may be retained indefinitely for statistical and platform improvement purposes.

bz888 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security infrastructure includes:

• SSL/TLS Encryption: All data transmitted between your browser or device and the bz888 servers is encrypted using TLS 1.2 or higher, preventing interception during transit.
• Access Controls: Access to personal data within bz888's internal systems is restricted on a strict need-to-know basis. Staff who handle player data are subject to confidentiality obligations and regular data security training.
• Secure Password Storage: Account passwords are stored in hashed, salted form using industry-standard cryptographic algorithms. Plain-text passwords are never stored by bz888.
• Two-Factor Authentication (2FA): bz888 supports and encourages the use of two-factor authentication on player accounts using OTP codes delivered to your registered mobile number, adding an additional layer of protection against unauthorised access.
• Intrusion Detection and Monitoring: bz888 operates continuous security monitoring systems that detect and alert on unusual access patterns, potential brute-force attacks, and other security threats in real time.
• Regular Security Audits: bz888 conducts periodic reviews of its data security practices and platform infrastructure to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no online system can be guaranteed to be completely immune from security incidents. If bz888 becomes aware of a data breach that poses a risk to your rights, we will notify affected players promptly in accordance with our incident response procedures.

You also play an important role in keeping your account secure. Use a strong, unique password, never share your credentials with anyone, and contact bz888 support immediately if you suspect your account has been compromised.

As a bz888 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with your request. We aim to respond to all data rights requests within 14 calendar days.

• Right of Access: You have the right to request a copy of the personal data that bz888 holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any personal data that is inaccurate, incomplete, or out of date. You can update many details directly from your bz888 account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. Note that legal retention obligations (e.g., AML record-keeping) may mean certain data cannot be immediately deleted.
• Right to Restriction of Processing: You may request that bz888 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing and a decision is pending.
• Right to Data Portability: Where processing is based on your consent or on a contract with you, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of bz888's legitimate interests, including profiling for fraud detection and responsible gaming monitoring. bz888 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

The bz888 platform is strictly intended for adults aged 21 years and above. bz888 does not knowingly collect, process, or store personal data from individuals under the age of 21. If you believe that a person under 21 has registered an account or provided personal data to bz888, please contact us immediately at [email protected] so that we can investigate and, where confirmed, delete the data and close the account without delay.

During the registration process, bz888 collects date-of-birth information specifically to enforce this age restriction. Where there is a discrepancy between the stated date of birth and identity verification documents subsequently submitted, bz888 will suspend the account pending investigation.

bz888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory requirements, or the addition of new platform features. When we make material changes to this Policy, we will notify active players via email or a prominent notice on the bz888 platform at least 7 days before the changes take effect.

The updated Policy will be published on this page with a revised effective date. Your continued use of the bz888 platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you should discontinue use of the platform and contact us to close your account.

For minor changes that do not materially affect your rights or obligations — such as corrections of typographical errors or clarifications that do not alter the substance of the Policy — bz888 may update this page without prior notice. We recommend that you review this Privacy Policy periodically to stay informed of how bz888 is protecting your data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bz888 handles your personal data, please contact our data support team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Response Time: We aim to respond to all privacy-related enquiries within 3 business days (Bangladesh Standard Time, UTC+6).
• Data Rights Requests: Please include your registered account username and a clear description of your request so we can process it efficiently.
• Escalation: If you are not satisfied with our response to a data rights request or privacy complaint, you may escalate the matter by resubmitting with the subject line "Escalation — Privacy Complaint" and a member of our senior compliance team will review the matter within 7 business days.