bl888 Privacy Policy — How We Handle Your Data

This Privacy Policy ("Policy") describes how bl888 ("we", "us", "our", "the Platform") collects, uses, stores, and protects the personal data of individuals ("you", "Player", "User") who access or use the bl888 website, mobile site, and associated services. This Policy applies to all bl888 account holders and visitors regardless of their location within Bangladesh, including players from Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh, and Cox's Bazar. By registering an account or using bl888, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

This Policy should be read in conjunction with bl888's Terms & Conditions, which are incorporated herein by reference. Where this Policy and the Terms & Conditions address the same subject matter and conflict, this Policy shall prevail in respect of data protection matters. bl888 may update this Policy from time to time. The most current version is always published on this page with the effective date shown above. Continued use of bl888 following publication of an updated Policy constitutes acceptance of the updated terms.

bl888 collects personal data that you provide directly, data that is generated automatically by your use of the platform, and data received from third-party payment processors in connection with your deposits and withdrawals. The categories of personal data bl888 collects include:

• Identity data: full name, date of birth, and where required for account verification, copies of government-issued identity documents such as a National ID card or passport.
• Contact data: mobile phone number (used as your primary account identifier on bl888), and optionally an email address where provided at registration.
• Financial data: mobile wallet identifiers (bKash, Nagad, Rocket, or Upay account numbers) used for deposit and withdrawal processing; transaction amounts and timestamps; account balance history. bl888 does not store full mobile wallet PINs or passwords.
• Usage data: betting and gaming activity including games played, bet amounts, win/loss records, session durations, login times, and platform features accessed. This data is used to operate your account, detect fraud, and comply with responsible gaming obligations.
• Technical data: IP address, device type, operating system, browser type and version, screen resolution, and mobile network carrier. This data is collected automatically when you access bl888 and is used for platform security, fraud detection, and service optimisation.

bl888 collects only the personal data that is necessary for the purposes described in this Policy. bl888 does not collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless specifically required by law or for the purpose of complying with responsible gaming obligations — for example, data related to a self-exclusion request or a player welfare concern.

bl888 uses the personal data it collects for the following purposes, each of which is necessary to operate the platform or to comply with legal and regulatory obligations:

• Account creation and management: to register your bl888 account, verify your identity, manage your account settings, process your deposits and withdrawals, and communicate with you about your account.
• Platform operation and personalisation: to operate the bl888 platform, serve the games and betting markets you access, remember your preferences, and provide a consistent experience across sessions on all devices you use to access bl888.
• Fraud prevention and security: to detect, investigate, and prevent fraudulent transactions, bonus abuse, money laundering, account takeover, and other security threats. Technical and usage data is analysed continuously to identify patterns consistent with fraudulent or abusive behaviour.
• Responsible gaming compliance: to monitor player behaviour for indicators of problem gambling, to enforce deposit limits, self-exclusion requests, and session time restrictions set by you or by bl888's responsible gaming team, and to ensure bl888's minimum age policy of 21 years is observed.
• Customer support: to respond to your queries, complaints, and account-related requests submitted to bl888 support, and to maintain records of support interactions for quality assurance and dispute resolution purposes.

bl888 processes your personal data on the following legal bases:

• Contractual necessity: the majority of bl888's data processing is necessary to perform the contract between bl888 and you — specifically, to operate your account, process deposits and withdrawals, and deliver the gaming services you have requested.
• Legitimate interests: bl888 processes certain technical and usage data on the basis of its legitimate interests in operating a secure and reliable platform, preventing fraud and abuse, and improving the platform for all players. These interests are balanced against your privacy rights and do not override them.
• Legal obligation: bl888 processes personal data where required to comply with applicable anti-money laundering laws, age verification obligations, and other legal requirements applicable to bl888's operations.
• Consent: where bl888 relies on your consent to process personal data — for example, to send you promotional communications about new games, bonuses, or seasonal promotions — you may withdraw that consent at any time by contacting bl888 support or using the communication preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

bl888 processes deposits and withdrawals exclusively through Bangladesh's mobile payment infrastructure — bKash, Nagad, Rocket, and Upay. When you initiate a deposit or withdrawal, bl888 transmits the necessary transaction details to the relevant mobile wallet provider to complete the transaction. Each mobile wallet provider is an independent data controller with its own privacy policy governing its processing of your payment data. bl888 is not responsible for the data practices of bKash, Nagad, Rocket, or Upay.

bl888 retains records of all deposit and withdrawal transactions associated with your account, including amounts, timestamps, and the mobile wallet identifiers used. This data is retained for a minimum of five years from the date of the transaction to comply with applicable financial record-keeping requirements. Transaction records are not accessible to other players and are used solely for account management, dispute resolution, fraud prevention, and compliance purposes.

bl888 does not sell, rent, or trade your personal data to any third party for marketing or advertising purposes. bl888 may share your personal data with third parties only in the following limited circumstances:

• Service providers and data processors: bl888 engages third-party service providers to assist in operating the platform, including payment processing partners (bKash, Nagad, Rocket, Upay), game technology providers (Evolution Gaming, Pragmatic Play, NetEnt, Ezugi, Microgaming, Spribe), and IT infrastructure providers. These parties process data only on bl888's instructions and are bound by confidentiality obligations consistent with this Policy.
• Legal and regulatory requirements: bl888 may disclose personal data to law enforcement, regulatory bodies, or other government authorities where required to do so by applicable law, court order, or binding legal process. bl888 will, where legally permitted, notify you of any such disclosure.
• Business transfers: in the event of a merger, acquisition, or sale of all or substantially all of bl888's assets, your personal data may be transferred to the successor entity as part of the transaction. bl888 will notify you of any such transfer by updating this Policy prior to completion of the transaction.

In all cases where bl888 shares personal data with third parties, bl888 requires those parties to maintain appropriate technical and organisational security measures to protect your data, and to use your data only for the purposes for which it was shared. bl888 does not authorise its service providers to use player personal data for their own independent marketing or profiling purposes.

bl888 uses cookies and similar tracking technologies on its website and mobile site to support platform functionality, improve performance, and understand how players use the platform. The categories of cookies bl888 uses include:

• Strictly necessary cookies: these are essential to the operation of bl888 and cannot be disabled. They include session cookies that keep you logged in during your visit, security cookies that protect against cross-site request forgery, and preference cookies that remember your language and display settings.
• Performance and analytics cookies: these cookies collect aggregate, anonymised information about how players use bl888 — for example, which pages are visited most frequently, where players navigate from and to, and how long sessions last. This data helps bl888 identify areas for platform improvement.
• Functional cookies: these cookies remember choices you make on bl888 — such as your preferred language — to provide a more personalised experience. They do not track your activity across other websites.

Most mobile browsers allow you to control cookies through your browser settings. Disabling strictly necessary cookies may prevent bl888 from functioning correctly. Disabling performance or functional cookies will not prevent you from accessing bl888 but may affect your experience. bl888 does not use cookies to serve third-party advertising on its platform.

bl888 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply: account data (identity, contact, and financial data) is retained for the duration of your account and for a minimum of five years following account closure to comply with financial record-keeping and anti-money laundering requirements; usage and technical data is retained for a maximum of two years from collection; support interaction records are retained for three years from the date of the interaction; cookie and session data expires in accordance with the cookie lifespan described in Section 7.

When personal data is no longer required for any retention purpose, bl888 will securely delete or anonymise it. Anonymised data — from which no individual can be identified — may be retained indefinitely for aggregate statistical and platform improvement purposes.

As a bl888 player, you have the following rights with respect to the personal data bl888 holds about you. To exercise any of these rights, contact bl888 support at [email protected]. bl888 will respond to all data rights requests within 30 days of receipt. There is no charge for exercising your data rights.

• Right of access: you have the right to request a copy of the personal data bl888 holds about you. bl888 will provide this information in a structured, commonly used, and machine-readable format where technically feasible.
• Right to rectification: you have the right to request correction of inaccurate personal data bl888 holds about you. Where data is incomplete, you have the right to have it completed, including by providing a supplementary statement.
• Right to erasure: you have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent on which processing was based, or where processing has been unlawful. This right is subject to bl888's legal retention obligations and may not result in complete deletion of all data where retention is legally required.
• Right to restrict processing: you have the right to request that bl888 restrict the processing of your personal data in certain circumstances — for example, while bl888 investigates a disputed accuracy challenge, or where you have objected to processing based on legitimate interests and bl888 is assessing that objection.
• Right to data portability: where bl888 processes your personal data by automated means on the basis of your consent or a contract with you, you have the right to receive that data in a structured, commonly used, machine-readable format, and to transmit it to another data controller where technically feasible.

To exercise any of the rights described above, please contact bl888 support in writing at [email protected]. Please note that the support email address must be typed manually into your email client — it is provided as plain text and is not a clickable link. bl888 may request verification of your identity before processing a data rights request to ensure that personal data is not disclosed to an unauthorised party.

bl888 implements appropriate technical and organisational measures to protect the personal data it holds against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL encryption of all data in transit between your device and bl888 servers, password hashing using industry-standard algorithms, role-based access controls limiting staff access to player data to the minimum necessary for each role, regular security reviews of platform infrastructure, and monitoring of access logs for anomalous activity.

No data transmission over the internet or mobile network can be guaranteed as completely secure. While bl888 takes all reasonable steps to protect your personal data, bl888 cannot guarantee the absolute security of data transmitted to or from the platform. Players are responsible for maintaining the security of their own account credentials and should contact bl888 support immediately if they suspect that their account has been accessed without authorisation.

bl888 is strictly for adults aged 21 years and above. bl888 does not knowingly collect personal data from individuals under the age of 21. If bl888 discovers that personal data has been collected from an individual under the age of 21, that data will be deleted immediately and the associated account will be closed. If you believe that bl888 may have inadvertently collected personal data from an underage individual, please contact bl888 support immediately at [email protected] so that bl888 can take appropriate action without delay.

bl888 may update this Privacy Policy from time to time to reflect changes in its data practices, legal requirements, or platform features. The most current version of this Policy is always available on this page and carries the effective date shown at the top. Where changes are material — meaning they significantly affect the way bl888 processes your personal data or your rights with respect to that data — bl888 will make reasonable efforts to notify registered account holders via their registered contact details prior to the changes taking effect. Your continued use of bl888 after the updated Policy takes effect constitutes your acceptance of the updated terms. If you do not accept the updated Policy, you should cease using bl888 and may request account closure by contacting bl888 support.

If you have any questions, concerns, or requests relating to this Privacy Policy or bl888's handling of your personal data, please contact bl888 support. Support is available 24 hours a day, 7 days a week. You can reach the bl888 data team by writing to [email protected]. Please note that this email address is provided as plain text only and must be typed manually into your email client — it is not a clickable link. bl888 will acknowledge all privacy-related queries within 3 business days and will provide a substantive response within 30 days of receipt.