bb89 Privacy Policy

This Privacy Policy is issued by and on behalf of bb89, the online gaming and sports betting platform accessible at bb89.onl (the "Platform"). References to "bb89", "we", "us", and "our" throughout this document refer to the entity responsible for operating and maintaining the Platform and for making decisions about how personal data collected through it is processed.

bb89 operates as a digital gaming platform serving players located in Bangladesh. We are committed to handling your personal information in a transparent, lawful, and responsible manner. This Privacy Policy, together with our Terms and Conditions and Responsible Gaming Policy, governs your relationship with the Platform.

If you have any questions about this Privacy Policy or how bb89 handles your personal data, please contact us at the details provided in Section 14 of this document.

bb89 collects personal data through several channels: directly from you when you register or use the Platform, automatically as you browse the Platform, and from third-party service providers such as payment processors and identity verification services. The categories of data we collect are detailed below.

2.1 Registration and Account Data

When you create a bb89 account, we collect the following information:

• Full legal name
• Date of birth (to verify you meet the 21+ minimum age requirement)
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi) and postal code
• Email address and/or mobile phone number
• Username and encrypted password
• Preferred currency (Bangladeshi Taka, BDT)

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer obligations, we may request and retain copies of:

• Government-issued photo identification (National ID card, passport, or driving licence)
• Proof of address (utility bill, bank statement, or official correspondence dated within 90 days)
• Proof of payment method ownership (screenshot or statement confirming ownership of bKash, Nagad, Rocket, Upay, or bank account used for deposits)
• Source-of-funds documentation where required by our anti-money-laundering procedures

2.3 Transaction and Financial Data

We record details of all financial activity on your account, including deposits, withdrawals, bonus credits, and wager history. This includes transaction amounts in BDT, timestamps (Bangladesh Standard Time, UTC+6), payment method references, and transaction status.

2.4 Technical and Usage Data

When you access the Platform, we automatically collect certain technical information:

2.5 Communications Data

We retain records of communications you send to bb89 via live chat, email, or any other support channel, including the content of messages, timestamps, and resolution notes. This data helps us maintain service quality and resolve disputes accurately.

bb89 uses the personal data it collects for the following purposes. We process your data only where we have a legitimate reason and a valid legal basis for doing so, as set out in Section 4.

• Account management: To create, maintain, and administer your bb89 account, including verifying your identity and managing your account balance.
• Service delivery: To provide access to casino games, sports betting markets, live dealer tables, and other bb89 services you have requested.
• Payment processing: To process deposits and withdrawals via your chosen payment method (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard, or a linked bank account).
• Age and identity verification: To ensure you meet the mandatory 21+ age requirement and to satisfy our KYC obligations under applicable anti-money-laundering standards.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeover attempts, bonus abuse, and other forms of misconduct.
• Responsible gaming: To monitor gaming patterns, enforce deposit limits and self-exclusion orders, and provide responsible gaming interventions where warranted.
• Legal compliance: To fulfil our obligations under applicable law, including responding to lawful requests from regulatory or law enforcement authorities.
• Customer support: To respond to your enquiries, resolve complaints, and maintain a record of support interactions.
• Platform improvement: To analyse aggregated usage data, conduct internal research, and improve the performance and user experience of the Platform.
• Marketing communications: To send you relevant promotional offers, bonus alerts, and seasonal campaign notifications (e.g., BPL season promotions, Eid special offers) — only where you have provided consent and not unsubscribed.

bb89 processes your personal data under the following legal bases:

Where we rely on consent as our legal basis, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal. To withdraw consent, contact bb89 support at [email protected].

bb89 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

5.1 Service Providers

We engage trusted third-party service providers who process personal data on our behalf and under our instructions. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to facilitate deposits and withdrawals.
• Identity verification providers: Third-party KYC service providers who assist in verifying player identity and age.
• Cloud hosting and infrastructure providers: Secure server infrastructure providers who store encrypted data on bb89's behalf.
• Analytics providers: Aggregated, anonymised usage data may be processed by analytics platforms to support platform improvement.
• Customer support tools: Live chat and ticketing platforms used to deliver 24/7 support services.

All service providers are subject to contractual obligations requiring them to protect your personal data and to use it solely for the purposes for which it was shared.

5.2 Legal and Regulatory Disclosure

bb89 may disclose personal data to government authorities, law enforcement agencies, or regulatory bodies where required by applicable law, court order, or where disclosure is necessary to protect bb89's rights, prevent fraud, or ensure the safety of players or the public. In all such cases, bb89 will disclose only the minimum data necessary to comply with the legal obligation.

5.3 Business Transfers

In the event that bb89 is involved in a merger, acquisition, or sale of all or part of its assets, your personal data may be transferred as part of that transaction. You will be notified of any such transfer via the Platform or by email, and the acquiring entity will be required to honour the commitments set out in this Privacy Policy.

Some of bb89's service providers operate infrastructure located outside Bangladesh. Where your personal data is transferred to or processed in a country outside of Bangladesh, bb89 takes steps to ensure that an adequate level of protection is applied to your data, equivalent to the protections available under applicable Bangladeshi data protection standards.

Safeguards we rely on for international transfers include:

• Contractual data processing agreements incorporating standard data protection clauses.
• Transfer only to jurisdictions recognised as providing adequate data protection.
• Technical controls including encryption of data in transit and at rest.

If you would like further information about the specific safeguards in place for any international transfer of your personal data, please contact us at [email protected].

bb89 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

When personal data is no longer required, bb89 securely deletes or anonymises it in accordance with our internal data destruction procedures. Anonymised, aggregated data (which cannot identify any individual) may be retained indefinitely for statistical and research purposes.

bb89 uses cookies and similar tracking technologies (such as web beacons and local storage objects) to operate and improve the Platform. A cookie is a small text file stored on your device by your browser when you visit a website.

8.1 Types of Cookies We Use

8.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when new cookies are set. Please note that disabling strictly necessary cookies will impair your ability to log in and use core Platform features.

For guidance on managing cookies in commonly used browsers, please refer to your browser's help documentation. Refusing non-essential cookies will not affect your ability to access bb89's core gaming services once you are logged in.

As an individual whose personal data is processed by bb89, you have the following rights. bb89 is committed to honouring these rights without undue delay and, in most cases, within 30 days of receiving a valid request.

• Right of access: You have the right to request a copy of the personal data bb89 holds about you, along with information about how it is being used.
• Right to rectification: If any personal data bb89 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You can also update many account details directly through your bb89 account dashboard.
• Right to erasure: In certain circumstances, you have the right to request that bb89 delete your personal data. This right is not absolute — bb89 may be required to retain certain data to comply with legal obligations (e.g., AML/KYC records) even after your account is closed.
• Right to restrict processing: You may request that bb89 restrict the processing of your personal data in specific situations, such as where you contest its accuracy or object to our use of it.
• Right to data portability: Where processing is based on your consent or a contract, you may request that bb89 provide your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to object: You have the right to object to bb89's processing of your personal data where that processing is based on legitimate interests. You also have the right to object at any time to the use of your data for direct marketing purposes.
• Right to withdraw consent: Where bb89 processes your data on the basis of your consent (e.g., for marketing communications or non-essential cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

If you are not satisfied with how bb89 has handled your personal data or responded to a rights request, you have the right to raise a complaint with the relevant data protection authority in your jurisdiction.

The bb89 Platform is strictly intended for adults aged 21 and above. bb89 does not knowingly collect personal data from any person under the age of 21. If you are under 21, you must not register an account, access the Platform, or provide any personal information to bb89.

bb89 employs active age-verification measures at the point of registration. If bb89 discovers or reasonably suspects that a registered account belongs to a person under 21, the account will be closed immediately, all pending transactions will be reversed, and the personal data associated with the account will be deleted, except where retention is required by law.

We encourage parents and guardians to use parental control software to restrict access to online gaming platforms on shared or family devices. bb89 fully supports responsible access controls at the household level.

bb89 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your browser and the bb89 Platform.
• Encryption at rest for all sensitive personal data stored on bb89's servers, including KYC documents and payment information.
• Role-based access controls ensuring that only authorised bb89 personnel with a demonstrated business need can access player personal data.
• Automated intrusion detection and prevention systems that monitor for suspicious access patterns and potential security threats in real time.
• Regular security audits and penetration testing conducted by qualified professionals to identify and remediate vulnerabilities.
• Two-factor authentication (2FA) available to players for enhanced account security and required for all internal administrative access.
• Staff training on data protection obligations, phishing awareness, and secure data handling procedures.

While bb89 applies industry-leading security standards, no digital system can guarantee absolute security. You also play an important role in protecting your account by using a strong, unique password and enabling 2FA. If you suspect any unauthorised access to your account, please contact bb89 support immediately.

The bb89 Platform may from time to time contain references to game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, whose game software is embedded within the Platform. While bb89 takes care to partner only with reputable, certified game studios, bb89 does not control the privacy or data practices of third-party game providers.

Game providers may collect certain technical data (such as session identifiers and gameplay results) directly through their embedded game engines for the purpose of game delivery and fairness verification. We recommend reviewing the privacy policies of any third-party providers whose games you play on bb89 if you have specific questions about their data practices.

bb89 is not responsible for the content, privacy practices, or data security of any third-party entity, and the inclusion of a game provider's software on the Platform does not constitute an endorsement of their privacy practices.

bb89 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or our data processing practices. When we make material changes to this policy, we will notify registered players by posting a prominent notice on the Platform and, where appropriate, by sending a notification to the email address associated with your account.

The effective date at the top of this document will be updated each time the policy is revised. We encourage you to review this Privacy Policy periodically to stay informed about how bb89 protects your personal data. Your continued use of the Platform following the posting of any updated Privacy Policy constitutes your acknowledgement of the revised terms.

If any update to this Privacy Policy materially affects your rights or how bb89 processes your personal data in a way that requires your consent, bb89 will seek that consent before applying the revised processing activity to your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or bb89's handling of your personal data, please reach out to the bb89 data protection team using the contact details below. We aim to respond to all privacy-related enquiries within 5 business days.

When contacting bb89 regarding a data subject rights request, please include your registered email address, a description of your request, and any relevant account reference so that we can locate your records and process your request efficiently. We may ask you to provide proof of identity before fulfilling certain requests, in order to protect your personal data against unauthorised access.