bg888 Privacy Policy

bg888 is an internationally operated online betting and casino platform accessible at bg888.im. The Platform is operated by bg888 and is designed to serve players located in Bangladesh who wish to engage in sports betting, live casino games, slots, crash games, and related entertainment products.

For the purposes of this Privacy Policy, bg888 acts as the data controller in respect of all personal data collected from players who register and use the Platform. As data controller, bg888 determines the purposes and means by which personal data is processed.

All data-related enquiries, access requests, and complaints should be directed to the bg888 privacy team at [email protected]. bg888 commits to acknowledging all privacy-related communications within 48 hours of receipt during Bangladesh Standard Time (BST, UTC+6) business hours.

This Privacy Policy applies to all personal data collected by bg888 through the following channels:

• The bg888 website at bg888.im and all associated subdomains and Platform pages.
• The mobile browser interface of the bg888 Platform accessed from any device.
• Communications between players and bg888 support staff via email, live chat, or any other messaging channel operated by bg888.
• Transactional data generated when players deposit or withdraw funds using bKash, Nagad, Rocket, Upay, or partner bank channels.
• KYC (Know Your Customer) documentation submitted to bg888 for identity and age verification purposes.

This Policy does not govern the data practices of third-party game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, or Spribe), third-party payment processors, or any external website that may be linked to from the bg888 Platform. Players accessing third-party services do so subject to those parties' own privacy policies.

This Policy should be read alongside the bg888 Terms & Conditions and Responsible Gaming policy, all of which form part of the agreement between bg888 and registered players.

bg888 collects personal data across three broad categories: data you provide directly, data generated automatically through your use of the Platform, and data received from third-party service providers.

3.1 Data You Provide Directly

• Registration data: Full legal name, date of birth, email address, mobile number, and chosen username at the point of account creation.
• KYC verification data: Government-issued identity document (National ID card, passport, or driving licence), proof of address, and a live selfie or photograph, submitted when requested for identity and age verification.
• Payment data: bKash account number, Nagad number, Rocket number, Upay details, or bank account details provided when making deposits or requesting withdrawals. bg888 does not store full card numbers or mobile banking PINs.
• Communications data: Records of emails, live chat transcripts, and support tickets submitted to the bg888 support team.
• Responsible gaming data: Any deposit limits, loss limits, session timers, or self-exclusion requests submitted through your account settings or to bg888 support.

3.2 Data Generated Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and time zone setting (Bangladesh Standard Time, UTC+6).
• Usage data: Pages visited on the Platform, game sessions played, Wagers placed, bet amounts, game outcomes, session duration, and click-path data.
• Transaction logs: A timestamped record of all deposits, withdrawals, bonus credits, and wagering activity on your account.
• Cookie and tracking data: See Section 7 (Cookies & Tracking) for full details.

3.3 Data Received from Third Parties

• KYC verification results: Identity verification outcomes returned by bg888's KYC service provider following document checks.
• Payment confirmation data: Transaction reference numbers and payment status notifications from bKash, Nagad, Rocket, Upay, and partner banks.
• Fraud and risk screening data: Risk scores and flagged activity reported by bg888's fraud prevention service providers.

bg888 uses the personal data it collects exclusively for the following defined purposes. Data is never used in a manner incompatible with the purpose for which it was originally collected without obtaining fresh consent from the player.

bg888 does not use personal data to send unsolicited marketing communications. Players who have opted in to promotional communications may opt out at any time by contacting [email protected] or by updating their notification preferences in their account settings.

bg888 processes personal data only where a valid legal basis exists for doing so. The legal bases relied upon for each processing activity are as follows:

• Contractual necessity: Processing required to create and manage a player account, facilitate wagering, and process payments — all of which are necessary to perform the contract between bg888 and the player.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML) regulations, KYC obligations, responsible gaming requirements, and record-keeping duties imposed by bg888's operating licence conditions.
• Legitimate interests: Processing carried out for fraud prevention, platform security, abuse detection, and internal analytics — where bg888's legitimate business interests are not overridden by the individual player's privacy rights.
• Consent: Processing for optional communications (promotional emails or in-platform notifications) where the player has explicitly opted in. Consent may be withdrawn at any time without affecting the player's account status.

Where bg888 relies on legitimate interests as the legal basis for processing, a balancing assessment is conducted to confirm that the processing does not cause disproportionate interference with player privacy rights.

bg888 does not sell, rent, or otherwise transfer personal data to third parties for their own commercial purposes. Personal data is shared only in the following limited and defined circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and other banking partners receive transactional data strictly necessary to process deposits and withdrawals on behalf of players.
• KYC verification providers: Identity document data is transmitted to bg888's contracted KYC service provider for the sole purpose of performing age and identity verification. This provider is bound by a data processing agreement requiring the same data protection standards as bg888 itself.
• Game providers: Game session identifiers and wager data may be shared with licensed game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe, and others) to facilitate gameplay and resolve game disputes. Full personal identity data is not passed to game providers.
• Fraud and risk screening providers: Technical identifiers (IP address, device fingerprint) and transaction metadata may be shared with fraud prevention service providers to detect and prevent account abuse and financial crime.
• Legal and regulatory authorities: bg888 will disclose personal data to competent authorities where required by applicable law, court order, or regulatory direction. bg888 will inform the affected player of any such disclosure where legally permitted to do so.

bg888 uses cookies and similar tracking technologies on the Platform to ensure correct functionality, analyse usage patterns, maintain session security, and prevent fraud. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens that keep players logged in, CSRF protection tokens that prevent cross-site request forgery attacks, and load balancing cookies. These cookies cannot be disabled without breaking core Platform functionality.
• Functional cookies: Remember player preferences such as language setting and notification choices to improve the Platform experience. These are persistent cookies with a defined expiry period.
• Analytics cookies: Collect anonymised data about how players navigate the Platform — including pages visited, time spent, and error events — to allow bg888 to improve Platform performance and usability. Analytics data is aggregated and does not identify individual players.
• Security and fraud prevention cookies: Assist in identifying unusual activity patterns that may indicate account compromise, bot activity, or abuse. These cookies work in conjunction with bg888's server-side fraud detection systems.

Players may manage cookie preferences through their browser settings. Disabling strictly necessary cookies will impair the ability to use the Platform. Disabling analytics or functional cookies will not affect access to betting or gaming features but may reduce the quality of the Platform experience.

bg888 does not use third-party advertising cookies or behavioural tracking cookies that profile players across external websites.

bg888 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include, but are not limited to:

• Transport Layer Security (TLS): All data transmitted between player devices and bg888 servers is encrypted using 256-bit TLS. Players should verify the presence of the HTTPS padlock in their browser address bar before entering any personal or payment information.
• Password hashing: Player passwords are stored using a modern cryptographic hashing algorithm with per-user salting. Passwords are never stored in plain text and are not accessible to any bg888 staff member.
• Two-factor authentication (2FA): bg888 strongly recommends that all players enable 2FA on their accounts. 2FA adds a second verification step at login, significantly reducing the risk of unauthorised access even if login credentials are compromised.
• Access controls: Internal access to personal data is restricted to bg888 staff members who require that access to perform their job functions. Access is granted on a least-privilege basis and subject to regular review.
• Intrusion detection: bg888 operates continuous server-side monitoring for anomalous access patterns, brute force attempts, and data exfiltration indicators.
• Data breach response: In the event of a confirmed personal data breach that poses a risk to player rights, bg888 will notify affected players within 72 hours of becoming aware of the breach, setting out the nature of the incident and the steps taken to mitigate harm.

While bg888 takes all reasonable steps to protect personal data, no transmission over the internet is guaranteed to be completely secure. Players are reminded that they are responsible for keeping their own login credentials confidential and for using secure networks when accessing the Platform.

bg888 retains personal data only for as long as is necessary for the purpose for which it was collected, or for as long as is required by applicable legal or regulatory obligation. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely and permanently deleted or irreversibly anonymised. Players who close their accounts voluntarily will have their data retained for the periods above before deletion; they will not receive marketing communications after account closure.

Subject to applicable law, players whose personal data is processed by bg888 hold the following rights in respect of that data:

• Right of access: You may request a copy of all personal data bg888 holds about you. bg888 will provide this information within 30 days of a verified request, free of charge for the first request in any 12-month period.
• Right to rectification: If any personal data bg888 holds about you is inaccurate or incomplete, you have the right to request correction. Most registration data can be updated directly in your account settings; changes to KYC documents require a formal support request.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (where consent is the basis for processing), or where you object to processing based on legitimate interests and bg888 has no overriding grounds. This right is subject to legal retention obligations — bg888 cannot delete data it is required by law to retain.
• Right to restriction: You may request that bg888 restricts the processing of your personal data in certain circumstances, such as while the accuracy of data is being contested or while an objection is being assessed.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that bg888 provides your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interests, including profiling. bg888 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact the bg888 privacy team at [email protected] with the subject line "Privacy Rights Request", your registered account username, and a description of the right you wish to exercise. bg888 will acknowledge your request within 48 hours and respond substantively within 30 days.

The bg888 Platform is strictly intended for adults aged 21 years and above. bg888 does not knowingly collect personal data from any person under the age of 21. Persons under 21 are expressly prohibited from registering an account, depositing funds, or placing any Wager on the Platform.

bg888 employs age verification checks at registration and during KYC processing to enforce this requirement. If bg888 discovers or is notified that an account has been opened by a person under 21 years of age, the account will be suspended immediately, all funds ring-fenced, and the personal data of the underage individual handled in accordance with applicable responsible gaming guidelines.

If you are a parent or guardian and believe that your child has registered an account with bg888, please contact [email protected] immediately. bg888 will investigate and act without delay. 21+ Only

As an internationally operated platform, bg888 may transfer personal data to servers or service providers located outside Bangladesh. Such transfers may include KYC verification processing, fraud screening, and game provider data exchanges.

Where personal data is transferred outside Bangladesh to jurisdictions that may not provide the same level of data protection as Bangladesh, bg888 ensures that appropriate safeguards are in place. These safeguards include contractual data processing agreements that bind the recipient to data protection standards equivalent to those applied by bg888 itself.

By registering and using the bg888 Platform, you acknowledge and consent to the transfer of your personal data to countries outside Bangladesh for the purposes described in this Privacy Policy, subject always to the safeguards described above.

bg888 reserves the right to amend this Privacy Policy at any time. Where amendments are material — for example, changes to the types of data collected, the purposes for which data is used, or the rights available to players — bg888 will notify all registered players by email at least 7 days before the changes take effect.

The current version of this Privacy Policy is always available at bg888.im/privacy-policy. The effective date shown at the top of this page reflects the date on which the most recent version came into force. Players are encouraged to review this page periodically to remain informed of how their data is handled.

Continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy. Players who do not accept the revised terms may request account closure by contacting [email protected].

For any questions, concerns, or requests relating to this Privacy Policy or the personal data bg888 holds about you, please contact the bg888 privacy team using the details below:

• Email: [email protected] — Subject line: "Privacy Policy Enquiry" or "Privacy Rights Request"
• Live Chat: Available 24 hours a day, 7 days a week from within your bg888 account dashboard
• Response Time: Email acknowledgement within 48 hours; substantive response within 30 days for formal rights requests
• Operating Hours: Bangladesh Standard Time (BST, UTC+6)

bg888 takes all privacy-related enquiries seriously and is committed to resolving concerns promptly, fairly, and transparently. Players who remain dissatisfied with bg888's response to a privacy complaint may escalate their concern through the formal dispute resolution process outlined in the bg888 Terms & Conditions.