88ab Privacy Policy

1. Introduction

88ab operates the online sports betting and casino platform accessible at https://88ab.im, serving registered players throughout Bangladesh. We recognise that your personal data is valuable and that you place trust in us when you share it. This Privacy Policy sets out in plain, formal terms exactly what data we collect, why we collect it, how we use and protect it, how long we retain it, and what rights you have in relation to it.

This policy applies to all individuals who visit the 88ab website, register an account, deposit funds, place wagers, participate in promotions, or contact our support team. It covers data collected through the website, mobile browsers, and any other digital interface operated by 88ab. Game content provided by third-party studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) is subject to those providers' own privacy practices in addition to this policy.

2. Data Controller

For the purposes of applicable data protection law, 88ab is the data controller in respect of the personal data of its registered players and website visitors. As data controller, 88ab determines the purposes for which and the means by which your personal data is processed. All data-related enquiries, access requests, and complaints should be directed to the 88ab support team at [email protected].

3. Data We Collect

88ab collects the following categories of personal data. We collect only the data that is genuinely necessary for the purposes described in this policy:

3.1 Identity and Registration Data

• Full legal name as it appears on official Bangladeshi identity documents
• Date of birth (required to verify that you meet the 21+ age requirement)
• Bangladeshi mobile phone number used as primary account identifier
• Username and hashed password
• Gender (optional, where provided during registration)
• City of residence (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi)

3.2 KYC and Verification Data

• National ID card (NID) number and document scan
• Passport or birth registration document where requested as alternative verification
• Selfie or live photograph submitted for facial verification during KYC review
• Source-of-funds declaration for high-value withdrawal requests

3.3 Financial and Transaction Data

• Deposit and withdrawal records denominated in Bangladeshi Taka (BDT)
• Mobile banking account references (bKash, Nagad, Rocket, Upay wallet numbers) — stored as masked references, not full account credentials
• Card transaction references for Visa and Mastercard payments
• Account balance history and bonus transaction logs

3.4 Betting and Gaming Activity Data

• Wager history including markets, stake amounts, odds, and outcomes
• Live casino and slots session records
• Bonus and promotion participation history
• Responsible gaming tool usage (deposit limits set, self-exclusion periods activated)

3.5 Technical and Device Data

• IP address and approximate geolocation derived from IP
• Browser type, version, and operating system
• Device type (mobile, tablet, desktop) and screen resolution
• Session timestamps and duration
• Referral URL and navigation path within the platform

3.6 Communications Data

• Content of support tickets and live chat conversations
• Complaints and dispute correspondence
• Survey responses and voluntary feedback submissions
• Promotional communication preferences (opt-in / opt-out status)

4. How We Collect Your Data

88ab collects personal data through the following means:

• Directly from you — when you complete the registration form, submit KYC documents, make a deposit, place a wager, contact support, or update your account profile
• Automatically — through cookies, server logs, and analytics tools when you visit the 88ab website or use the platform
• From third parties — from KYC identity verification partners, payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), fraud detection services, and game providers where data is necessary to complete a transaction or verify your identity

5. Purposes & Legal Basis for Processing

The table below sets out the primary purposes for which 88ab processes your personal data and the legal basis relied upon for each purpose:

Purpose	Legal Basis
Creating and maintaining your 88ab account	Performance of contract
Processing BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard	Performance of contract
Verifying your age (21+) and identity through KYC	Legal obligation; performance of contract
Detecting and preventing fraud, money laundering, and match-fixing	Legal obligation; legitimate interests
Administering responsible gaming tools (deposit limits, self-exclusion)	Legal obligation; legitimate interests
Resolving disputes and responding to support enquiries	Performance of contract; legitimate interests
Sending transactional communications (deposit confirmations, withdrawal notifications)	Performance of contract
Sending promotional communications (bonuses, BPL/IPL offers, seasonal campaigns)	Consent (opt-in required)
Improving platform performance and personalising your experience	Legitimate interests
Complying with legal, regulatory, and law enforcement obligations	Legal obligation

6. Sharing Your Personal Data

88ab does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. We share data only where it is strictly necessary for operational, legal, or security reasons, and only with parties that have committed contractually to protect your data in accordance with applicable law. Data may be shared with the following categories of recipients:

6.1 Payment Processors

To process BDT deposits and withdrawals, 88ab shares the minimum necessary transaction data with mobile banking partners (bKash, Nagad, Rocket, Upay) and card networks (Visa, Mastercard). These partners operate under their own privacy frameworks and are independently responsible for data shared within their networks.

6.2 KYC and Identity Verification Partners

For account verification and age confirmation, 88ab may share identity document data with specialist third-party KYC verification services. All KYC partners are contractually bound to process verification data solely for the purpose of identity confirmation and to delete or return raw document data following successful verification.

6.3 Game Content Providers

Live casino and slots sessions involve third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. Technical session data (player token, stake amounts, session results) is shared with providers in real time for the purpose of game delivery and result reconciliation. No identity or financial data beyond what is technically required for session management is shared with game providers.

6.4 Fraud and Security Services

88ab uses third-party services to detect and prevent fraud, bot activity, and money laundering. These services may process device fingerprints, IP addresses, and behavioural patterns. All fraud and security partners operate under strict data processing agreements.

6.5 Legal and Regulatory Authorities

88ab will disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required by applicable law, court order, or lawful request. Where legally permissible, 88ab will notify the affected player of any such disclosure.

7. Payment Data and Mobile Banking Privacy

88ab takes particular care with payment-related data given the nature of mobile banking in Bangladesh. Key points regarding payment data handling are as follows:

• 88ab does not store full bKash, Nagad, Rocket, or Upay wallet account numbers on its servers. Only masked references (e.g., the last four digits) are retained for transaction reconciliation purposes.
• Card data for Visa and Mastercard transactions is handled via PCI-DSS compliant payment gateways. 88ab does not store raw card numbers.
• All payment transactions are logged with timestamps, amounts, and masked payment references for audit, dispute resolution, and anti-money-laundering compliance.
• Transaction history is available to players via the account dashboard for a rolling 12-month period. Full transaction history is available on request from [email protected].

8. Cookies and Tracking Technologies

88ab uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies are used:

• Essential cookies — required for account login, session management, and secure platform operation. These cannot be disabled without impairing core functionality.
• Analytics cookies — used to understand how players navigate the platform, which pages are visited most frequently, and where technical issues occur. Data collected is aggregated and anonymised.
• Preference cookies — used to remember your platform settings and preferences between sessions.
• Security cookies — used to detect suspicious login attempts, bot traffic, and potential account compromise.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using 88ab's core betting and casino services, but may affect certain personalisation features.

9. Data Retention

88ab retains personal data for the periods set out below. These periods are determined by operational necessity, legal obligation, and regulatory compliance requirements:

• Active account data — retained for the full duration of your account relationship with 88ab
• Transaction and financial records — retained for a minimum of 5 years following account closure, in accordance with anti-money-laundering regulations
• KYC and identity verification documents — retained for a minimum of 5 years following account closure
• Support and communications records — retained for 3 years following the date of the last interaction
• Analytics and behavioural data — anonymised within 12 months of collection; anonymised aggregate data may be retained indefinitely
• Self-exclusion records — retained indefinitely to prevent re-registration during an active exclusion period

Following the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data must be retained beyond the standard period due to an ongoing legal dispute, investigation, or regulatory requirement, 88ab will inform the affected player where legally permissible.

10. Security Measures

88ab implements a layered approach to data security. Key technical and organisational measures in place include:

• TLS/SSL encryption on all data transmitted between your device and the 88ab platform
• Password hashing using industry-standard cryptographic algorithms — plaintext passwords are never stored
• SMS two-factor verification available to all Players at no charge
• Role-based access controls restricting internal data access to authorised personnel on a strict need-to-know basis
• Regular security audits and vulnerability assessments of platform infrastructure
• Incident response procedures designed to detect, contain, and report data breaches in a timely manner
• Staff data protection training covering secure data handling, phishing awareness, and breach reporting obligations

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, 88ab will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach.

11. Your Privacy Rights

As an 88ab player, you have the following rights in relation to your personal data. All requests should be submitted to [email protected] and will be responded to within 30 days:

Please note that certain rights are subject to exceptions. For example, the right to erasure does not apply where 88ab is required by law to retain your data (e.g., transaction records retained for anti-money-laundering compliance). Where a request cannot be fulfilled in full, 88ab will explain the reason clearly in its response.

12. Minors

88ab's services are strictly limited to individuals aged 21 years and above. 88ab does not knowingly collect or process the personal data of individuals under the age of 21. If 88ab becomes aware that personal data has been collected from an individual under 21, the account will be immediately suspended, all associated data will be deleted or anonymised to the extent legally permissible, and the deposit amount (less any withdrawals) may be returned. Parents or guardians who suspect that a minor has created an 88ab account should contact [email protected] immediately. 88ab cooperates fully with requests from guardians and relevant authorities in such cases.

13. Marketing Communications

88ab may send promotional communications to players who have explicitly opted in to receive them. Marketing communications may include information about cricket betting promotions (BPL season, IPL, T20 World Cup), casino bonuses, slots free spins, seasonal offers (Eid, Pohela Boishakh, Victory Day), and other 88ab platform updates.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your communication preferences in the 88ab account settings
• Contacting 88ab support at [email protected] with a clear opt-out request
• Following the unsubscribe instructions included in any marketing message

Withdrawal of marketing consent does not affect your ability to receive transactional communications such as deposit confirmations, withdrawal notifications, security alerts, and support responses, which are sent on the basis of contract performance rather than consent.

14. Third-Party Services and Links

The 88ab platform integrates third-party game content, payment gateways, and analytics services. While 88ab carefully selects and contracts with these providers, each third party operates under its own privacy policy and data practices. 88ab is not responsible for the privacy practices of third-party game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) or payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) beyond the data processing agreements in place. Players are encouraged to review the privacy policies of these providers where relevant.

15. International Data Transfers

Certain third-party service providers used by 88ab (including game studios and platform infrastructure providers) may be located outside Bangladesh. Where personal data is transferred internationally, 88ab takes steps to ensure that an adequate level of protection is maintained through contractual safeguards including standard data processing clauses. 88ab does not transfer personal data to jurisdictions that do not provide adequate data protection without appropriate contractual safeguards in place.

16. Changes to This Privacy Policy

88ab reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. Material changes will be communicated to registered players via a platform notice or notification to the registered mobile number at least 7 days before the changes take effect, except where immediate amendment is required by law or to address an urgent security issue. The "Last Updated" date at the top of this policy reflects the date of the most recent revision. Your continued use of the 88ab platform following the effective date of any amendment constitutes acceptance of the updated Privacy Policy.

17. Contact Us

For all privacy-related enquiries, data access requests, correction requests, erasure requests, complaints, or questions about this Privacy Policy, please contact the 88ab data team:

• Email: [email protected] (plain text — not a clickable link)
• Response Time: All privacy requests acknowledged within 24 hours; substantive response within 30 days (Bangladesh Standard Time, BST UTC+6)
• Support Availability: 24 hours a day, 7 days a week, including BPL match nights and public holidays

88ab is committed to resolving all privacy concerns fairly, transparently, and without undue delay. Where a complaint cannot be resolved through direct contact, you retain the right to escalate the matter to the relevant data protection authority.