babue88 Privacy Policy

babue88 collects personal data through several channels: directly from you when you register an account or interact with the platform, automatically when you use the platform, and from third-party service providers where necessary for identity verification and fraud prevention. The categories of personal data we collect are set out below.

babue88 does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data beyond what is strictly necessary to administer responsible gaming tools (for example, recording a self-exclusion request). Where sensitive data is collected for responsible gaming purposes, it is processed only for that specific purpose and is not used for any other commercial purpose.

babue88 does not sell your personal data to any third party. We share personal data only in the circumstances described below, and only to the extent strictly necessary for the specified purpose. All third-party service providers who process data on babue88's behalf are bound by appropriate data processing agreements that require them to handle your data securely and in accordance with this Privacy Policy.

• Payment gateway providers: To process your deposits and withdrawals, babue88 must share relevant financial transaction data with our certified payment gateway partners who facilitate bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard transactions. These partners receive only the data required to complete the specific transaction and are not permitted to use it for any other purpose.
• Identity verification services: To fulfil our KYC obligations, babue88 may share Identity Data with third-party identity verification services that cross-reference the information you have provided against official records. These services are contractually prohibited from retaining or reusing your data beyond the scope of the verification check.
• Game studios and software providers: Live casino games and slots hosted on babue88 are powered by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. During an active game session, limited technical data (session token, game result) is exchanged with the relevant studio's systems to render the game and record outcomes. These studios operate their own certified secure environments and are responsible for the data processed within their game engines.
• Fraud and security services: babue88 may share Technical Data (IP address, device fingerprint) with anti-fraud and cybersecurity service providers to protect the platform and its players from malicious activity.
• Legal and regulatory disclosure: babue88 may be required to disclose personal data to government authorities, law enforcement agencies, or other competent bodies where required by applicable law, court order, or regulatory directive. In such cases, babue88 will disclose only the minimum data necessary to comply with the legal requirement and, where permitted, will notify the affected player of the disclosure.
• Business transfers: In the event that babue88 undergoes a merger, acquisition, or transfer of business assets, your personal data may be transferred to the acquiring entity as part of that transaction. Affected players will be notified of any such transfer and of any material change to data processing arrangements that results from it.

babue88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide. Specific circumstances — such as an ongoing dispute, a regulatory investigation, or a legal hold — may require us to retain data for longer than these standard periods.

• Active account data: Identity Data, Contact Data, and Account Activity Data are retained for the full duration of your active account relationship with babue88. You may request account closure and data deletion at any time, subject to the exceptions described below.
• Financial and transaction records: Records of all deposits, withdrawals, and wagers are retained for a minimum of 5 years from the date of each transaction. This retention period exists to comply with anti-money laundering record-keeping requirements and to support dispute resolution for historical transactions.
• KYC documents: Identity verification documents (NID copies, passport scans, address proof) are retained for a minimum of 5 years following account closure. This period aligns with standard financial services record-keeping practices for player due-diligence files.
• Support communications: Records of customer support interactions, including dispute correspondence, are retained for 3 years from the date of the interaction or from the date of resolution, whichever is later.
• Self-exclusion records: Where a player has requested self-exclusion, the record of that request — including the player's identity and the effective period — is retained indefinitely to prevent circumvention by re-registration.
• Anonymised analytics data: Aggregated, anonymised analytics data from which individual players cannot be identified may be retained indefinitely for platform improvement and business reporting purposes.

All personal data held by babue88 is stored on secure servers. babue88 implements appropriate technical and organisational measures to protect stored data against unauthorised access, accidental loss, destruction, or disclosure.

babue88 takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect it against unauthorised access, loss, misuse, disclosure, alteration, or destruction. While no online platform can guarantee absolute security, babue88's security programme is designed to manage risk to an appropriately low level.

• SSL/TLS encryption: All data transmitted between your browser or mobile device and babue88.net is encrypted using industry-standard SSL/TLS protocols. The babue88 domain is HTTPS-only; unencrypted HTTP connections are not permitted.
• Password hashing: Player passwords are never stored in plain text. babue88 uses a strong, salted hashing algorithm to store password credentials. Even in the unlikely event of a database breach, stored password hashes cannot be directly used to access accounts.
• OTP two-factor verification: Sensitive account actions — including login from a new device, password reset, and withdrawal requests — are protected by one-time password (OTP) verification delivered to your registered mobile number. This ensures that access requires both your password and physical possession of your registered phone.
• Access controls: Access to player personal data within babue88's internal systems is restricted on a need-to-know basis. Staff who require access to personal data for legitimate operational purposes are bound by confidentiality obligations and receive data protection training.
• Fraud monitoring: babue88 operates real-time fraud monitoring systems that flag unusual account activity — such as logins from unfamiliar IP addresses, rapid consecutive withdrawal requests, or patterns consistent with account takeover attempts — for immediate review.
• Security audits: babue88's platform security and game fairness are subject to periodic independent audits. The outcomes of these audits inform ongoing security improvements.
• Incident response: In the event of a personal data breach that is likely to result in risk to affected players, babue88 will notify affected players promptly and take immediate steps to contain and remediate the breach. babue88 will cooperate fully with any applicable regulatory or law enforcement investigation.