Privacy Policy — How bx888 Protects Your Data

1. Who We Are

1.1 bx888 operates the online betting and casino platform accessible at https://bx888.io (the "Platform"). bx888 is an offshore platform providing sports betting, live casino, slots, and related gaming services to eligible players.

1.2 For the purposes of this Privacy Policy, bx888 acts as the data controller in respect of all personal data collected directly through the Platform. Where bx888 engages third-party processors — such as payment service providers or identity verification services — those parties act as data processors operating under bx888's instructions and under binding contractual obligations.

1.3 If you have any questions about how bx888 handles your personal data, you may contact our data support team at any time using the contact details set out in Section 15 of this policy.

2. Personal Data We Collect

2.1 bx888 collects the following categories of personal data from players:

2.1 Identity & Contact Data

• Full legal name
• Date of birth
• Gender (optional)
• Residential address (including city, district, and postcode)
• Email address
• Mobile phone number
• Copies of government-issued identity documents (National ID card, passport, or driving licence) submitted during KYC verification

2.2 Financial Data

• Mobile money account identifiers (bKash, Nagad, Rocket, Upay numbers) — used for deposit and withdrawal matching only; full credentials are never stored on bx888 servers
• Bank account references (DBBL, City Bank, BRAC Bank, Islami Bank, Sonali Bank, or other verified bank accounts) where used for transactions
• Transaction history (deposit amounts, withdrawal amounts, dates, and payment method references)
• Wallet balance history within the Platform

2.3 Account & Activity Data

• Username and hashed password credentials
• Betting history — sports markets wagered on, stake amounts, settlement outcomes
• Casino game history — game titles played, session durations, bet amounts, win/loss records
• Bonus and promotional offer usage records
• Responsible gaming settings (deposit limits, loss limits, self-exclusion requests)
• Customer support correspondence — emails, live chat transcripts, and complaint records

2.4 Technical & Device Data

• IP address at registration and each subsequent login
• Device type, operating system, and browser version
• Mobile device identifiers where applicable
• Geographic location derived from IP address (country and city level)
• Session timestamps and duration
• Referring URL (the page from which you arrived at bx888)

2.5 Communications Data

• Marketing communication preferences and consent records
• Records of promotional emails, SMS, or push notifications sent and their open/click status (where technically tracked)

3. How We Collect Your Data

3.1 Directly from you: When you complete the registration form, submit KYC documents, make a deposit or withdrawal, contact customer support, or update your account profile, you provide data directly to bx888.

3.2 Automatically: When you access the Platform, our servers, analytics tools, and cookie technologies automatically record technical and device data as described in Section 2.4. This occurs regardless of whether you are logged into an account.

3.3 From third parties: bx888 may receive data about you from identity verification service providers (during KYC), payment processors (to confirm transaction status), fraud prevention agencies (to cross-reference activity against known fraud patterns), and responsible gaming databases (where you have registered a self-exclusion with a recognised scheme).

3.4 From public sources: In limited circumstances — principally for AML screening — bx888 may consult publicly available sources such as sanctions lists, politically exposed persons (PEP) databases, or adverse media archives.

4. Legal Basis for Processing

bx888 processes personal data on the following legal grounds:

Purpose	Legal Basis
Account registration and management	Performance of a contract with you
Processing deposits and withdrawals	Performance of a contract with you
Identity verification (KYC)	Legal obligation; legitimate interests (fraud prevention)
Anti-money laundering (AML) screening	Legal obligation
Responsible gaming monitoring	Legitimate interests (player protection); legal obligation
Customer support and complaint handling	Performance of a contract; legitimate interests
Fraud detection and platform security	Legitimate interests
Sending promotional communications	Consent (opt-in only)
Platform analytics and improvement	Legitimate interests
Compliance with legal requests or court orders	Legal obligation

5. How We Use Your Personal Data

5.1 Account Administration. bx888 uses your identity and contact data to create and maintain your player account, authenticate your logins, and communicate important account-related notices such as password resets, withdrawal confirmations, and security alerts.

5.2 Transaction Processing. Financial data is used to process your deposits and withdrawals accurately, match incoming payments to your account, and resolve any transaction disputes with payment providers.

5.3 Identity Verification. KYC documents are used to verify that you meet the eligibility requirements to use the Platform (including the 21+ age requirement), to prevent fraudulent account creation, and to comply with applicable anti-money laundering obligations.

5.4 Responsible Gaming. Account activity data — particularly betting frequency, session duration, loss patterns, and changes in wagering behaviour — is monitored by bx888's responsible gaming systems to identify players who may be at risk of harm. This processing protects player welfare and may result in bx888 proactively reaching out to offer support tools.

5.5 Fraud Prevention and Security. Technical and device data, together with IP address and geographic information, is used to detect suspicious login activity, identify duplicate accounts, and prevent unauthorised access or financial fraud. bx888 employs automated systems as well as human review for this purpose.

5.6 Platform Improvement. Aggregated and anonymised analytics data is used to understand how players interact with the Platform, which features are most popular, and where technical issues arise, so that bx888 can improve the overall experience.

5.7 Marketing Communications. Where you have given explicit consent, bx888 may use your email address or mobile number to send you information about promotions, bonuses, new game releases, and seasonal offers relevant to the Bangladesh market (including BPL season promotions, Eid special offers, and Pohela Boishakh events). You can withdraw consent at any time.

5.8 Legal Compliance. bx888 may process and disclose your data where required to comply with a legal obligation, respond to a lawful court order or regulatory request, or cooperate with a law enforcement investigation.

6. Cookies & Tracking Technologies

6.1 bx888 uses cookies, web beacons, and similar tracking technologies on the Platform. A cookie is a small text file placed on your device when you visit the Platform. Cookies allow bx888 to recognise your browser, maintain your session, remember your preferences, and gather analytics data.

6.2 Types of Cookies Used

• Strictly Necessary Cookies: Required for the Platform to function — session authentication, security tokens, load balancing. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, game lobby layout, and responsible gaming tool configurations.
• Analytics Cookies: Collect aggregated, anonymised data about how players navigate the Platform — pages visited, time spent, error pages encountered. This data helps bx888 improve the user experience.
• Marketing Cookies: Track whether you arrived at bx888 via a specific campaign or affiliate link, so that bx888 can measure the effectiveness of marketing spend. These are set only where consent has been given.

6.3 You may manage or disable non-essential cookies through your browser settings at any time. Note that disabling strictly necessary cookies will impair your ability to log in or use account features.

7. Data Sharing & Third-Party Disclosure

7.1 bx888 does not sell, rent, or commercially transfer personal data to third parties. Data is shared only in the following limited and necessary circumstances:

• Payment Processors: bKash, Nagad, Rocket, Upay, and banking partners receive the minimum data required to execute your deposit or withdrawal (typically: account reference, transaction amount, and date).
• Identity Verification Providers: KYC documents and identity data are shared with accredited verification services to confirm your eligibility to use the Platform.
• Fraud Prevention Agencies: Transaction patterns and device data may be cross-referenced with fraud prevention databases to protect all players and the platform's financial integrity.
• Game Content Providers: Game providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe receive a player session token and game history data to operate their games within the bx888 environment. They do not receive your full identity or financial data.
• Responsible Gaming Databases: Where you request self-exclusion, bx888 may register your self-exclusion with recognised responsible gaming databases to prevent you from accessing other gambling platforms during your exclusion period.
• Legal Authorities: bx888 will disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by applicable law or a lawful order, without prior notice to you where disclosure would prejudice a legal investigation.
• Business Successors: In the event of a merger, acquisition, or sale of all or part of bx888's business, player data may be transferred to the acquiring entity, subject to equivalent privacy protections.

7.2 All third-party processors engaged by bx888 are bound by contractual data processing agreements that restrict their use of your data to the specific purpose for which it was shared and require them to maintain appropriate security standards.

8. International Data Transfers

8.1 bx888 is an offshore platform and its infrastructure — including servers, data centres, and third-party processors — may be located in jurisdictions outside Bangladesh. As a result, your personal data may be transferred to, stored in, and processed in countries that may not provide the same level of data protection as Bangladesh.

8.2 Where such transfers occur, bx888 takes reasonable steps to ensure that appropriate safeguards are in place, including contractual protections with the receiving entity. By using the Platform and accepting this Privacy Policy, you consent to the international transfer of your personal data as described in this section.

9. Data Retention

9.1 bx888 retains personal data for as long as your account is active and for a defined period following account closure, as follows:

• Account and transaction records: Retained for 5 years following account closure, in line with standard AML and financial record-keeping obligations.
• KYC documents: Retained for 5 years following account closure or the last verified transaction, whichever is later.
• Betting and casino game history: Retained for 5 years following the relevant activity, then anonymised or securely deleted.
• Customer support correspondence: Retained for 3 years following the close of the relevant support case.
• Marketing consent records: Retained for 3 years from the date consent was given or last renewed, even if you subsequently unsubscribe, to demonstrate compliance with consent requirements.
• Technical and device logs: Retained for 12 months from the date of collection, then deleted.

9.2 Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to an identifiable individual. Anonymised data may be retained indefinitely for aggregate analytics purposes.

10. Security Measures

10.1 bx888 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data in transit between your device and bx888 servers
• AES-256 encryption for sensitive data at rest, including KYC documents and financial records
• Multi-factor authentication (MFA) available for player accounts as an optional security enhancement
• Role-based access controls ensuring that bx888 staff can only access the data necessary for their specific job function
• Regular internal security audits and vulnerability assessments of the Platform infrastructure
• Automated anomaly detection systems monitoring for unusual login activity or data access patterns
• Contractual data security obligations imposed on all third-party processors

10.2 While bx888 applies industry-standard security practices, no online platform can guarantee absolute security against all threats. You are responsible for maintaining the security of your own account credentials. If you suspect your account has been compromised, contact bx888 support immediately at [email protected].

11. Your Privacy Rights

11.1 As a player on the bx888 Platform, you hold the following rights in respect of your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Privacy Rights Request". bx888 will acknowledge your request within 5 business days and respond substantively within 30 calendar days.

11.2 bx888 will not charge a fee for handling a privacy rights request unless the request is manifestly unfounded, repetitive, or excessive — in which case a reasonable administrative fee may apply. bx888 may ask you to verify your identity before processing a request to ensure that data is not disclosed to unauthorised parties.

11.3 If you believe bx888 has not handled your personal data in accordance with this Privacy Policy or applicable law, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

12. Children's Privacy

12.1 The bx888 Platform is strictly for persons aged 21 and above. bx888 does not knowingly collect personal data from individuals under the age of 21. If bx888 discovers that personal data has been collected from an underage person, the account will be immediately closed, all funds will be handled in accordance with applicable law, and the data will be deleted as soon as reasonably practicable.

12.2 If you are a parent or guardian and believe your child has registered an account on bx888, please contact us immediately at [email protected] with the subject line "Underage Account Report". We take all such reports seriously and will investigate and act promptly.

13. Third-Party Links & Game Providers

13.1 The bx888 Platform hosts games and content provided by third-party game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe, among others. While bx888 carefully selects its game provider partners, bx888 is not responsible for the privacy practices of these third parties.

13.2 Game providers operate their game engines within the bx888 environment under contractual data protection obligations. However, any interaction you have with a game provider's own standalone website, application, or support channel outside of the bx888 Platform is governed by that provider's own privacy policy.

13.3 The bx888 Platform may contain references to payment partners such as bKash, Nagad, and Rocket. Your use of those payment services is subject to the privacy policies of those respective companies, and bx888 has no control over how those entities process data outside the scope of the transaction instructions sent by bx888.

14. Changes to This Privacy Policy

14.1 bx888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, the services we offer, or applicable legal requirements. Material changes — those that significantly affect how we use your data or your rights — will be communicated to registered players via email to the address on file at least 7 days before the change takes effect.

14.2 The effective date and version reference at the top of this document will be updated each time the policy is revised. We encourage you to review the Privacy Policy periodically. Your continued use of the Platform after the effective date of a revised policy constitutes your acceptance of the updated terms.

14.3 Where bx888 intends to process your personal data for a purpose that is materially different from those described in this policy, we will seek your fresh consent before doing so.

15. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or the way bx888 handles your personal data, please contact our data support team using the details below. All privacy-related enquiries are handled by a dedicated team and are treated with strict confidentiality.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Privacy Requests: "Privacy Rights Request"
• Subject Line for Underage Reports: "Underage Account Report"
• Response Time: Acknowledgement within 5 business days; substantive response within 30 calendar days
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Language: English support available at all times

All formal privacy communications with bx888 must be submitted in English. bx888 will respond to all formal privacy correspondence in English.