bub88 Privacy Policy

When you interact with the bub88 platform, we collect personal information in several distinct ways. The categories below describe the full scope of data we may hold about you as a registered member or visitor.

We may also collect information from third-party sources where this is necessary for identity verification or fraud prevention purposes. This includes verification data returned by KYC service providers and fraud-scoring signals from payment processors. In all such cases, the third-party provider is contractually required to handle your data in compliance with applicable data protection standards.

If you contact bub88 through any channel — live chat, email, or a future support portal — the content of that communication is retained for quality assurance, training, dispute resolution, and regulatory compliance purposes for a period defined in the Data Retention section of this policy.

bub88 uses the personal data we collect for the following specific and documented purposes. We do not use your data for any purpose that has not been identified below, and we do not use your data to make automated decisions that produce significant legal or similarly serious effects without human oversight.

• Account creation and management: Processing your registration, verifying your identity, maintaining your account profile, and enabling you to log in securely.
• Service delivery: Processing deposits and withdrawals via bKash, Nagad, Rocket, and Upay; crediting winnings to your wallet; applying and tracking bonus offers; providing access to casino games, sports betting, slots, and card games.
• Regulatory compliance: Conducting Know Your Customer (KYC) checks; performing anti-money laundering (AML) screening; verifying age eligibility; responding to lawful requests from competent authorities.
• Fraud prevention and security: Detecting and investigating suspicious activity; preventing multiple-account abuse; protecting the integrity of games and betting markets; safeguarding the financial interests of both bub88 and its members.
• Customer support: Responding to your queries, resolving disputes, processing complaints, and providing technical assistance.
• Platform improvement: Analysing aggregated usage patterns to improve game selection, site performance, payment processing speed, and responsible gaming tools.
• Responsible gaming: Monitoring wagering patterns to identify potential problem gambling behaviour; enforcing deposit limits, time-out periods, and self-exclusion elections; providing proactive support where patterns indicate risk.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates by email or in-platform message — but only where you have consented to receive such communications or where we have a legitimate interest in keeping you informed of relevant offers. You may withdraw consent at any time.

bub88 processes your data under several legal bases depending on the purpose: contractual necessity (to deliver the services you have signed up for), legal obligation (to comply with applicable regulatory requirements), legitimate interests (to protect the platform and improve our services), and consent (for direct marketing communications).

In the course of delivering our services, bub88 may share specific categories of your personal data with the following types of third parties:

• Payment processors: bKash, Nagad, Rocket, and Upay receive the minimum transaction data required to process your deposits and withdrawals. Each of these providers operates under its own privacy framework and is subject to applicable financial regulations.
• Identity verification providers: Third-party KYC service providers receive identity and document data solely for the purpose of verifying your age and identity as required by our platform policies. These providers are contractually prohibited from using your data for any other purpose.
• Game content providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Spribe may receive anonymised session identifiers or game-specific data necessary to deliver their content on the bub88 platform. These providers do not receive your identity or financial data.
• IT and infrastructure providers: Hosting, security, and cloud service providers that support the technical operation of bub88 may access personal data as part of their service delivery. All such providers are bound by strict data processing agreements.
• Legal and regulatory authorities: bub88 will disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required by applicable law, a valid court order, or where disclosure is necessary to protect the rights, property, or safety of bub88, its members, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of all or a portion of bub88's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and any material change to data handling practices that may result.

bub88 does not transfer your personal data to recipients in jurisdictions that do not provide an adequate level of data protection without implementing appropriate safeguards such as standard contractual clauses or binding corporate rules.

bub88 uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, maintain your authenticated session, and gather analytics data that helps us improve the user experience for all members across Bangladesh.

A cookie is a small text file placed on your device when you visit a website. Cookies cannot carry viruses or install malicious software on your device. The cookies bub88 uses fall into the following categories:

Strictly necessary cookies cannot be disabled because they are essential to the secure operation of the platform. All other cookie categories may be managed through your browser settings. Most modern browsers allow you to view, block, and delete cookies via the browser's privacy or settings menu. Please be aware that disabling functional or analytics cookies may affect your experience on the bub88 platform.

bub88 does not use cookies to deliver third-party advertising or to track your browsing activity across websites other than bub88.app. All analytical data collected via cookies is processed in aggregated, anonymised form where possible.

bub88 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal and regulatory obligations, and to resolve any disputes or enforce our agreements. We do not retain data longer than is necessary, and we apply a structured review process to ensure that data is deleted or anonymised when retention is no longer justified.

The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your active membership and for a period of five years following account closure. This retention period reflects our obligations under applicable financial crime prevention standards.
• Transaction records: Financial transaction data, including deposit and withdrawal records, is retained for a minimum of five years from the date of each transaction in accordance with anti-money laundering record-keeping requirements.
• Communications and support records: Live chat transcripts and support email exchanges are retained for up to three years from the date of the interaction for quality assurance and dispute resolution purposes.
• Behavioural and analytics data: Aggregated and anonymised usage data is retained indefinitely for platform analytics. Personally identifiable behavioural data is retained for up to two years from the date of collection.
• Responsible gaming records: Self-exclusion elections, deposit limit settings, and time-out records are retained for the duration of the restriction and for five years thereafter to prevent circumvention via new account registrations.

When data has reached the end of its retention period, bub88 will securely delete or irreversibly anonymise it. Deletion is carried out using industry-standard secure erasure procedures. Where data cannot be immediately deleted due to backup or archival constraints, it will be isolated from active processing systems until it can be securely removed.

As a bub88 member, you hold a number of rights over the personal data we process about you. bub88 is committed to honouring these rights promptly and without unnecessary barriers. To exercise any of the rights listed below, contact our support team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 48 hours and aim to fulfil it within 30 days.

• Right of access: You may request a copy of all personal data bub88 holds about you, along with information about how it is being used and who it has been shared with.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it.
• Right to erasure: You may request that bub88 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to overriding legal retention obligations — for example, we cannot delete transaction records that we are required to retain under anti-money laundering law.
• Right to restrict processing: In certain circumstances, you may request that we pause the processing of your data — for example, while an accuracy dispute is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that bub88 provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling. You also have an absolute right to object to processing of your personal data for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

bub88 will not charge a fee for processing a data rights request unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. We reserve the right to request verification of your identity before processing any data rights request to protect the security of your information.

bub88 implements a layered approach to data security, combining technical controls, operational procedures, and staff training to protect your personal information against unauthorised access, accidental loss, destruction, or disclosure.

Our current security measures include, but are not limited to:

• Transport encryption: All data in transit between your browser or mobile device and bub88 servers is encrypted using TLS 1.2 or higher with 256-bit AES encryption. Our SSL certificate is maintained and renewed automatically to ensure continuous protection.
• Data at rest encryption: Sensitive data fields stored in our databases — including identity documents, payment method identifiers, and password hashes — are encrypted at rest using industry-standard algorithms. Passwords are stored exclusively as salted cryptographic hashes and are never recoverable in plain text.
• Access controls: Access to personal data within bub88's internal systems is restricted on a strict need-to-know basis. Staff members are granted the minimum level of access required to perform their role, and all privileged access events are logged and audited.
• Intrusion detection: Our infrastructure is monitored continuously for anomalous access patterns, brute-force login attempts, and other indicators of compromise. Automated alerts are configured to trigger immediate investigation of suspicious activity.
• Vulnerability management: bub88 conducts regular security assessments and applies security patches promptly following the release of updates by software and infrastructure vendors.
• Incident response: In the event of a personal data breach that is likely to result in a risk to your rights or freedoms, bub88 will notify affected members without undue delay and will take immediate remedial action to contain the breach and prevent recurrence.

While bub88 takes every reasonable technical and organisational measure to protect your data, no internet transmission or electronic storage system is 100% immune to risk. You also play an important role in protecting your data — please use a strong, unique password for your bub88 account and never share your login credentials with anyone.

bub88 reviews this Privacy Policy periodically to reflect changes in our data practices, updates to applicable laws and regulations, and feedback from members. When we make material changes to this policy — meaning changes that affect how we collect, use, or share your personal data in a way that is meaningfully different from what was previously described — we will take the following steps:

• Update the effective date shown at the top of this page and in the hero section;
• Send an email notification to all registered members at the email address associated with their bub88 account;
• Display a prominent in-platform notice for a period of at least 14 days following publication of the updated policy.

For minor changes — such as corrections of typographical errors, clarifications of existing language that do not alter the substance of our data practices, or updates to contact information — we may update this page without sending individual notifications. In all cases, the current version of this Privacy Policy is the version that governs the processing of your personal data, and it will always be accessible at https://bub88.app/privacy-policy.

Your continued use of the bub88 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to this policy, you should discontinue use of the platform and contact support to request account closure and deletion of your personal data where applicable.

This Privacy Policy is governed by and construed in accordance with applicable data protection principles. Any disputes arising from this policy or our data practices should be directed in the first instance to [email protected]. We are committed to resolving all privacy-related concerns fairly and promptly.