bo88 Privacy Policy

Who We Are

bo88 is an online betting and entertainment platform accessible at bo88.lat, offering sports betting, live casino games, slots, and crash games to registered adult players in Bangladesh. References to "bo88", "we", "us", or "our" throughout this Privacy Policy refer to the bo88 platform and its operating entity.

bo88 acts as the data controller in respect of the personal data collected from players who register and use the platform. As data controller, bo88 determines the purposes and means by which personal data is processed and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

If you have any questions about how bo88 handles your personal data, you can reach our dedicated support team at [email protected] at any time. We aim to respond to all data-related enquiries within 5 business days.

Data We Collect

bo88 collects different categories of personal data depending on how you interact with the platform. The table below sets out the main categories of data we collect and the context in which each category arises:

How We Collect Data

bo88 collects personal data through several distinct channels. Understanding these channels helps you make informed decisions about the information you share with us:

• Direct interactions: Data you provide when registering your account, completing KYC verification, updating your account profile, making a deposit or withdrawal, contacting our support team, or participating in a promotion.
• Automated technologies: Technical and usage data collected automatically when you access the bo88 platform, via cookies, server logs, pixel tags, and similar tracking technologies. See Section 8 for full details on our cookie use.
• Payment processors: Transaction reference data shared with bo88 by our authorised payment partners (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank) when you complete a deposit or withdrawal.
• Identity verification services: During KYC checks, bo88 may use third-party identity verification providers who confirm the validity of the documents you submit. These providers share a verification outcome with us — they do not retain copies of your documents beyond their own regulatory obligations.
• Fraud prevention and AML services: bo88 may receive data from anti-fraud and anti-money-laundering screening services when assessing the risk profile of account activity. This data is used solely for security and compliance purposes.

How We Use Your Data

bo88 uses the personal data it collects for the following specific purposes. We process your data only when we have a valid legal basis to do so (see Section 5):

• Account creation and management: To register your account, verify your identity, maintain your profile, and provide you with access to the bo88 platform and its services.
• Processing transactions: To process your deposits, withdrawals, and any bonus credits, and to maintain accurate financial records of your account activity.
• Platform operation and improvement: To monitor platform performance, identify and fix technical issues, analyse usage patterns, and develop new features and products.
• Customer support: To respond to your enquiries, resolve disputes, and provide assistance with account-related issues via email, live chat, or other communication channels.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, account takeover attempts, multi-accounting, money laundering, and other prohibited activities.
• Legal and regulatory compliance: To comply with applicable legal obligations, including anti-money-laundering (AML) requirements, record-keeping obligations, and any requests from law enforcement or regulatory authorities.
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling behaviour and to enforce self-exclusion requests, deposit limits, and other responsible gaming tools activated by the player.
• Marketing communications: To send you promotional offers, bonus notifications, and news about bo88 products — but only where you have given your explicit consent to receive such communications. You may withdraw this consent at any time.
• Personalisation: To tailor the content and promotions you see on the bo88 platform based on your gaming history and preferences, where you have consented to such personalisation.

Legal Basis for Processing

bo88 relies on the following legal bases when processing your personal data:

• Contract performance: Processing necessary to fulfil our contractual obligations to you under the bo88 Terms & Conditions — including operating your account, processing transactions, and providing customer support.
• Legal obligation: Processing required for bo88 to comply with applicable laws, including AML regulations, identity verification requirements, and data retention obligations.
• Legitimate interests: Processing carried out for bo88's legitimate business interests — such as fraud prevention, platform security, and service improvement — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent — primarily in the context of marketing communications and optional personalisation features. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Sharing Your Data

bo88 does not sell your personal data. We share your data only in the following limited and defined circumstances:

• Payment service providers: We share the minimum necessary transactional data with our authorised payment partners (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank) to process your deposits and withdrawals.
• Identity verification providers: We share document data with our KYC verification partners solely for the purpose of confirming your identity as required by our operating procedures.
• Fraud and AML screening services: We may share account and transaction data with third-party compliance service providers for the purpose of detecting financial crime and meeting regulatory obligations.
• Game providers: Technical session data may be shared with our game content providers (such as Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Ezugi, and Microgaming) as required to deliver their games through our platform.
• Law enforcement and regulators: We may disclose personal data to law enforcement agencies, courts, or regulatory bodies where we are legally required to do so or where disclosure is necessary to protect the rights, property, or safety of bo88 or its players.
• Business transfers: In the event of a merger, acquisition, or sale of bo88's business or assets, your personal data may be transferred as part of that transaction. We will notify you in advance of any such transfer.

Payment Data

bo88 takes particular care with financial data given the sensitivity of payment information. The following principles govern how payment data is handled on our platform:

• bo88 does not store full bank account numbers, mobile banking PINs, or complete card numbers on its own servers. Payment processing is handled by our authorised payment partners via secure, encrypted connections.
• bo88 retains only the transaction reference identifiers, timestamps, amounts, and payment method type (e.g., bKash, Nagad) needed to maintain your account transaction history and to process disputes or reconciliation requests.
• All financial data retained by bo88 is stored in encrypted form on access-controlled servers. Access to payment data is restricted to authorised bo88 personnel on a need-to-know basis.
• Transaction records are retained for a minimum of five years to satisfy bo88's anti-money-laundering record-keeping obligations. After this period, records are securely deleted unless a legal hold requires extended retention.

Cookies & Tracking Technologies

bo88 uses cookies and similar tracking technologies to operate the platform correctly, remember your preferences, and understand how players use the site. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in and security tokens that protect against cross-site request forgery. These cookies cannot be disabled.
• Functional cookies: Used to remember your preferences, such as your chosen language, responsible gaming settings, and display options. Disabling these cookies may affect your platform experience.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate and use the bo88 platform. This data helps us identify performance issues and improve the user experience. Analytics data is not linked to your personal identity.
• Marketing cookies: Used to deliver relevant promotional content and to measure the effectiveness of bo88's marketing campaigns. These cookies are only set if you have provided consent.

You can manage your cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from accessing certain features of the bo88 platform. For more information on managing cookies, refer to your browser's help documentation.

Data Security

bo88 implements a layered approach to data security, combining technical, administrative, and physical controls to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure:

• Encryption in transit: All data exchanged between your device and bo88's servers is encrypted using 256-bit SSL/TLS protocols. The padlock icon in your browser confirms that your connection to bo88.lat is secure.
• Encryption at rest: Sensitive data stored on bo88's servers — including identity documents, financial records, and authentication credentials — is encrypted using industry-standard encryption algorithms.
• Access controls: Access to personal data is restricted to authorised bo88 personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Intrusion detection: bo88 operates continuous monitoring systems that detect and alert to unusual access patterns, potential data breaches, and security anomalies in real time.
• Vulnerability management: bo88's platform undergoes regular security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, bo88 will notify you without undue delay and provide guidance on the steps you can take to protect yourself.

Data Retention

bo88 retains personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The table below summarises our key retention periods:

When personal data reaches the end of its retention period, bo88 securely deletes or anonymises it so that it can no longer be associated with you as an individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

Your Rights

As a bo88 player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with a clear description of your request. We will respond within 10 business days.

Children's Privacy

The bo88 platform is strictly intended for persons aged 21 years or older. bo88 does not knowingly collect personal data from persons under the age of 21. If you are under 21, you must not register an account or use the platform in any capacity.

If bo88 becomes aware that it has inadvertently collected personal data from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe your child has registered with bo88, please contact us immediately at [email protected].

Third-Party Links

The bo88 platform may contain references to the services of third-party payment providers such as bKash, Nagad, and Rocket, as well as game content from providers including Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Ezugi, and Microgaming. When you interact with third-party services through or alongside the bo88 platform, those interactions are governed by the third party's own privacy policies.

bo88 is not responsible for the privacy practices of third-party services and does not endorse or make any representations about the content, security, or privacy standards of external platforms. We encourage you to review the privacy policy of any third-party service before sharing personal information with them directly.

Changes to This Privacy Policy

bo88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made, bo88 will:

• Update the effective date displayed at the top of this document.
• Notify registered players via email or an in-platform notification at least 7 days before the changes take effect, where the changes are material to your rights.
• Where required by applicable law, seek fresh consent before processing your data under the revised terms.

Your continued use of the bo88 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must cease using the platform and request account closure by contacting our support team.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how bo88 handles your personal data, please get in touch using the contact details below:

bo88 takes every data-related enquiry seriously. All formal requests to exercise your data rights will be acknowledged promptly and handled in accordance with the timelines set out in Section 11 of this Policy. If you are not satisfied with our response, you may have the right to raise a complaint with the relevant data protection authority in your jurisdiction.