bha88 Privacy Policy — Your Data, Your Rights

1. Information We Collect

bha88 collects personal information in two primary ways: information you provide directly to us and information collected automatically when you use the platform. We only collect personal information that is necessary for the purposes described in this Privacy Policy. We do not collect special category data (such as health information, ethnic origin, or political opinions) as part of normal platform operations.

Information You Provide Directly

When you register an account, make a deposit, request a withdrawal, or contact our support team, you may provide us with the following categories of personal data:

• Identity information — your full name, date of birth, and National ID or passport number (collected as part of KYC verification).
• Contact information — your registered mobile phone number and, where provided, an email address.
• Financial information — your bKash, Nagad, Rocket, or Upay mobile financial account number, transaction reference numbers, and deposit and withdrawal history.
• Support correspondence — messages and attachments you send to bha88 support, including complaint records and any documentation you submit as part of a KYC or dispute process.

Information Collected Automatically

When you use the bha88 platform via a web browser, our systems automatically collect certain technical and behavioural data. This data is used to ensure the platform operates correctly, to detect fraud and suspicious activity, and to improve platform performance:

• Device and browser data — device type, operating system, browser version, screen resolution, and IP address.
• Session data — pages visited, games played, betting activity, session start and end times, and clickstream data within the platform.
• Cookie and tracking data — see Section 8 of this Privacy Policy for full details of the cookies bha88 uses and your options for managing them.

3. Legal Basis for Processing

bha88 processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity — processing your registration data, managing your account, and processing deposits and withdrawals are necessary to fulfil the contract between you and bha88 when you register and use the platform.
• Legal obligation — collecting identity verification documents and maintaining transaction records are required to comply with applicable anti-money laundering, counter-terrorism financing, and responsible gaming obligations.
• Legitimate interests — fraud prevention, platform security monitoring, and aggregated analytics for platform improvement are conducted on the basis of bha88's legitimate interest in maintaining a safe, fair, and functional platform.
• Consent — where we send optional marketing communications (such as promotional SMS), we do so on the basis of your consent, which you may withdraw at any time.

5. Payment Data and Local Payment Providers

All deposits and withdrawals on bha88 are processed in Bangladeshi Taka via bKash, Nagad, Rocket, and Upay. These are Mobile Financial Services (MFS) operated by regulated entities in Bangladesh. When you initiate a payment transaction on bha88, you are redirected to or prompted to confirm via the relevant MFS provider's own interface. bha88 receives confirmation of successful payment but does not store your MFS PIN, OTP, or full account password. The security of your MFS account credentials is governed by the terms and privacy policy of the respective provider.

bha88 retains records of financial transactions — including the payment method used, transaction amount, transaction reference number, and timestamp — for as long as required by applicable financial record-keeping obligations. These records may be used in connection with KYC verification, withdrawal processing, dispute resolution, and responses to regulatory or law enforcement requests.

7. Data Security

bha88 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data transmitted between your device and our platform, access controls that restrict internal access to personal data to authorised personnel only on a need-to-know basis, regular security assessments of our platform and infrastructure, and procedures for detecting and responding to personal data breaches.

While bha88 takes the security of your personal data seriously and maintains industry-standard protections, no method of electronic transmission or storage is 100% secure. You also play an important role in keeping your account secure — please use a strong, unique password for your bha88 account, never share your login credentials with anyone, and contact bha88 support immediately if you suspect that your account has been compromised.

9. Your Data Rights

As a player on bha88, you have the following rights in relation to your personal data. To exercise any of these rights, please contact bha88 support in writing at [email protected] with the subject line 'Data Rights Request' and provide your registered mobile number and a brief description of your request. bha88 will respond to all valid data rights requests within 30 days:

• Right of access — you may request a copy of the personal data bha88 holds about you, together with information about how it is used and with whom it is shared.
• Right to rectification — if any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure — in certain circumstances, you may request that bha88 delete the personal data it holds about you. This right is subject to overriding legal retention obligations — for example, bha88 cannot delete transaction records that it is legally required to retain.
• Right to restrict processing — you may request that bha88 restrict how it processes your personal data in certain circumstances, for example while a rectification request is being investigated.
• Right to withdraw consent — where processing is based on your consent (such as marketing communications), you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

bha88 will not charge a fee for responding to a data rights request unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply or we may decline to respond. We may need to verify your identity before fulfilling a data rights request to ensure the security of your personal data.

11. Changes to This Privacy Policy

bha88 may update this Privacy Policy from time to time to reflect changes in how we process personal data, changes in applicable law, or improvements to the platform. When we make material changes to this Privacy Policy, we will update the "Last Updated" date at the top of this page. Where the changes are significant, we will endeavour to notify registered players via SMS to their registered mobile number.

Your continued use of the bha88 platform following publication of an updated Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with the changes, you should stop using the platform and may request account closure by contacting bha88 support. We recommend reviewing this Privacy Policy periodically to stay informed about how bha88 protects your data.