bbu8 Privacy Policy

1 Introduction

bbu8 ("we", "us", "our") operates the online casino and sports betting platform accessible at https://bbu8.io (the "Platform"). This Privacy Policy describes the personal data we collect from players and visitors based in Bangladesh, the purposes for which we process that data, the parties with whom it may be shared, and the rights available to you as a data subject.

We are committed to handling your personal information with transparency, care, and in accordance with applicable data protection standards. This policy forms part of the broader bbu8 legal framework alongside the Terms & Conditions and Responsible Gaming Policy. Where this policy uses the term "personal data", it refers to any information that identifies you or can reasonably be used to identify you as an individual.

2 Information We Collect

2.1 Registration Data

When you create a bbu8 account, we collect the personal information you provide during the registration process. This includes your full legal name, date of birth, residential address (including city — for example Dhaka, Chittagong, Sylhet, Khulna, or Rajshahi), email address, and mobile phone number.

2.2 Identity Verification Data

To comply with our anti-money laundering and know-your-customer obligations, we may request copies of identity documents such as your National Identity Card (NID), passport, or other government-issued photographic identification. We may also request proof of address documentation and, where large transactions are involved, supporting evidence of source of funds.

2.3 Financial Data

We collect information about deposits and withdrawals made through your bbu8 account. This includes transaction amounts, dates, and the identifiers associated with your chosen payment method (for example, a masked bKash or Nagad mobile wallet number, or masked bank account details). We do not store full card numbers, CVV codes, or complete bank account numbers on our servers.

2.4 Gaming Activity Data

We maintain records of your gaming and betting activity on the Platform, including the games played, bets placed, amounts staked, outcomes, and session timestamps. This data is used to administer your account, prevent fraud, monitor for signs of problem gambling, and comply with regulatory obligations.

2.5 Technical and Device Data

When you access bbu8, our servers automatically collect certain technical information, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and the pages you visit on the Platform. This data is used to ensure Platform security, improve user experience, and detect unusual access patterns.

2.6 Communications Data

If you contact bbu8 via email, live chat, or any other support channel, we retain records of those communications, including the content of your messages and our responses. This enables us to resolve disputes, improve our support service, and maintain an accurate account history.

The table below summarises the main categories of data collected and the primary purpose for each:

3 How We Use Your Data

bbu8 uses the personal data we collect for the following purposes:

• Account administration: Creating, maintaining, and managing your bbu8 account, including processing deposits and withdrawals.
• Identity and age verification: Confirming that you meet the 21+ age requirement and that the identity information provided is accurate and belongs to you.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, unauthorised account access, money laundering, and other prohibited activities.
• Regulatory compliance: Meeting our legal obligations under applicable anti-money laundering standards, financial crime prevention requirements, and any other applicable law.
• Responsible gaming: Monitoring gaming activity to identify patterns that may indicate problem gambling behaviour, and proactively reaching out where concerns are identified.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the performance, security, and user experience of the bbu8 Platform.
• Customer support: Responding to your enquiries, resolving disputes, and maintaining support records.
• Marketing communications: Sending promotional offers and updates about bbu8 services — but only where you have provided explicit consent to receive such communications.

4 Legal Basis for Processing

bbu8 processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing your registration data, identity verification documents, and financial transaction records is necessary to perform the contract between you and bbu8 (i.e., to provide the Platform services you have signed up for).
• Legal obligation: We are required to process and retain certain categories of personal data — particularly identity verification and transaction records — to comply with applicable anti-money laundering and financial crime prevention obligations.
• Legitimate interests: Processing your technical and gaming activity data to detect fraud, secure the Platform, and prevent money laundering serves bbu8's legitimate business interests, provided those interests are not overridden by your privacy rights.
• Consent: Where we rely on your consent — for example to send marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5 Sharing Your Personal Data

bbu8 does not sell your personal data to third parties. We may share your personal information with the following categories of recipient only where strictly necessary:

• Payment processors and financial institutions: To process your deposits and withdrawals through bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These parties receive only the data necessary to process the specific transaction.
• Identity verification providers: Third-party KYC (Know Your Customer) service providers who assist us in verifying the identity and age of players. These providers are bound by strict data processing agreements and may not use your data for any purpose beyond verification.
• Game and software providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session identifiers necessary to deliver game functionality. No personal identification data is shared with game providers beyond what is technically required.
• Legal and regulatory authorities: We may be required to disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required by applicable law or a valid legal process. We will notify you of any such disclosure to the extent permitted by law.
• Professional advisers: Our legal counsel, auditors, and accountants may have access to personal data on a need-to-know basis, subject to professional confidentiality obligations.

All third parties with whom bbu8 shares personal data are required to handle that data in a manner consistent with this Privacy Policy and applicable data protection standards. We do not permit third parties to use your data for their own marketing purposes.

6 Cookies & Tracking Technologies

6.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. bbu8 uses cookies and similar tracking technologies to operate the Platform, maintain your session, remember your preferences, and analyse how the Platform is used.

6.2 Types of Cookies We Use

• Essential cookies: Required for the Platform to function correctly. These include session authentication cookies that keep you logged in during a visit. You cannot opt out of essential cookies without disabling your ability to use the Platform.
• Functional cookies: Remember your preferences such as language settings and display options to improve your experience across sessions.
• Analytical cookies: Collect anonymised data about how players navigate the Platform — such as which pages are visited most frequently and where users encounter errors. This data helps us improve Platform performance and usability.
• Security cookies: Assist with fraud detection and prevention by helping to identify unusual access patterns or bot activity.

6.3 Managing Cookies

You can control or delete cookies through your browser settings. Please note that disabling certain cookies may impair the functionality of the bbu8 Platform, including your ability to log in or access certain features. Refer to your browser's help documentation for instructions on managing cookie preferences.

7 Data Retention

bbu8 retains personal data for as long as is necessary to fulfil the purposes described in this policy or as required by applicable law. The following retention periods apply as a general guide:

• Account and registration data: Retained for the duration of your account's active period and for a minimum of 5 years following account closure, in accordance with applicable financial record-keeping obligations.
• Identity verification documents: Retained for a minimum of 5 years from the date of verification or the date of account closure, whichever is later.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Gaming activity logs: Retained for 3 years from the date of the activity, unless a longer retention period is required for a specific legal purpose.
• Support communications: Retained for 2 years from the date of the communication, unless the subject matter relates to an ongoing dispute or legal process.
• Technical and device data: Retained for up to 12 months from the date of collection, after which it is anonymised or deleted.

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with you as an individual.

8 Data Security

bbu8 employs a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the bbu8 Platform.
• Encrypted storage of sensitive personal data at rest on secured servers.
• Strict role-based access controls limiting internal access to personal data to authorised personnel only.
• Regular security audits and penetration testing of the Platform infrastructure.
• Multi-factor authentication for administrative access to systems holding personal data.
• Automated monitoring and alerting for suspicious access patterns or potential data breaches.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, bbu8 will notify affected players within a reasonable timeframe, describing the nature of the breach, the categories of data involved, and the steps we have taken to address it.

9 Your Data Rights

As a player using the bbu8 Platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please submit a written request to [email protected]. We will respond within 30 days of receiving your request.

• Right of access: You may request a copy of the personal data bbu8 holds about you, together with information about how it is processed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations. Note that data subject to regulatory retention requirements (e.g., identity and transaction records) cannot be erased until the applicable retention period has expired.
• Right to restrict processing: You may request that we temporarily restrict the processing of your data in certain circumstances, for example while a correction request is being evaluated.
• Right to data portability: You may request a machine-readable copy of the personal data you have provided to us, for the purpose of transferring it to another service provider.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
• Right to object: You may object to processing of your personal data where bbu8 relies on legitimate interests as the legal basis, unless bbu8 can demonstrate compelling legitimate grounds that override your interests.

10 Children & Minors

The bbu8 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not attempt to register an account or use any bbu8 service.

If bbu8 becomes aware that personal data has been collected from a person under the age of 21, we will immediately close the associated account, delete the personal data in question to the extent not required for legal retention purposes, and take any additional steps required by applicable law. If you believe that a minor has registered on bbu8, please notify us immediately at [email protected].

11 Third-Party Links

The bbu8 Platform may contain references or informational mentions of third-party services such as payment providers (bKash, Nagad, Rocket, Upay) or game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming). Where links to third-party websites or services appear, please be aware that those sites operate under their own privacy policies, which are entirely independent of this policy.

bbu8 does not accept responsibility or liability for the privacy practices of any third-party site or service. We recommend reviewing the privacy policy of any third party before providing personal information to them.

12 Changes to This Privacy Policy

bbu8 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, the services we offer, or applicable legal requirements. The effective date shown at the top of this page will be updated whenever a material change is made.

Where changes are significant, we will notify registered players via email or through a notification displayed on the Platform prior to the updated policy taking effect. Continued use of the bbu8 Platform after the revised policy comes into effect constitutes your acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically to stay informed about how bbu8 is protecting your data.

13 Contact & Data Requests

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how bbu8 has handled your personal data, please contact our team using the details below. All data rights requests and privacy enquiries are handled by our dedicated data team.

• Email: [email protected] (plain text — not a clickable link)
• Response Time: We aim to respond to all privacy-related requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, in which case we will inform you of the extension within the initial 30-day window.
• Live Chat: Available directly on the bbu8 Platform following login, 24 hours a day, 7 days a week.
• Subject Line Guidance: When emailing with a data rights request, please include "Privacy Request" in the subject line and specify the right you wish to exercise to help us process your request efficiently.