Privacy Policy

1. Overview & Scope

This Privacy Policy applies to all personal data collected and processed by bay888 in connection with the operation of the online gaming platform at bay888.lat. It applies to all registered players and to any person who visits or uses the bay888 website, regardless of whether they have completed the registration process.

This Policy applies to personal data collected from players located in Bangladesh, including individuals based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. Where the processing of your personal data is subject to specific regional data protection legislation, bay888 will comply with the applicable requirements of that legislation.

This Privacy Policy should be read alongside the bay888 Terms & Conditions, which govern the overall relationship between you and the platform. Together, these two documents form the complete legal framework for your use of bay888.

2. Data We Collect

bay888 collects the following categories of personal data from its players:

Category	Examples	Purpose
Identity Data	Full legal name, date of birth, gender, nationality	Account registration, age verification, KYC compliance
Contact Data	Email address, mobile phone number, residential address	Account communication, withdrawal processing, customer support
Financial Data	Mobile wallet numbers (bKash, Nagad, Rocket, Upay), transaction history, deposit and withdrawal amounts in BDT	Payment processing, fraud prevention, AML compliance
Technical Data	IP address, browser type and version, device type, operating system, time zone, screen resolution	Platform security, fraud detection, service optimisation
Usage Data	Pages visited, games played, betting history, session duration, click patterns, search queries within the platform	Service improvement, personalisation, responsible gaming monitoring
Verification Data	Copies of government-issued photo ID (e.g., National ID Card, passport), proof of address documents	KYC verification, age confirmation, AML/CFT compliance
Communications Data	Content of emails, chat messages, and support tickets submitted to bay888	Customer support, dispute resolution, quality assurance
Marketing Preferences	Your opt-in or opt-out status for promotional communications, preferred notification channels	Sending relevant offers and promotions where consent has been given

bay888 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, or data concerning health — except where such information is voluntarily disclosed by a player in the course of a support interaction, in which case it will be handled with the highest degree of care and used only to resolve the specific matter raised.

3. How We Collect Your Data

bay888 collects personal data through the following means:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or entering a promotion.
• Automated collection: Data collected automatically when you access or use the bay888 platform, including IP address, device identifiers, browser information, and gameplay activity logs. This data is collected via server logs, cookies, and similar tracking technologies.
• Payment providers: Confirmation and reference data received from bKash, Nagad, Rocket, and Upay when a deposit or withdrawal transaction is initiated by you. bay888 does not receive your full PIN or wallet password from these providers.
• Third-party verification services: Where bay888 uses third-party identity verification services to assist with KYC compliance, those providers may supply the results of document checks and database matches to bay888.
• Publicly available sources: In limited circumstances, bay888 may cross-reference information you have provided against publicly available data sources for fraud prevention purposes.

4. How We Use Your Data

bay888 uses the personal data it collects for the following purposes:

• Account management: Creating, maintaining, verifying, and closing your player account; communicating important account-related information to you.
• Service delivery: Enabling you to access and use the bay888 gaming platform, including cricket betting, live casino, slots, and all other available products.
• Payment processing: Processing your deposits and withdrawals in BDT via your selected payment method, reconciling transactions, and maintaining accurate financial records.
• Identity and age verification: Confirming that you meet the minimum age requirement of 18 years and that the personal details you have provided are accurate.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, account takeover attempts, and other prohibited conduct on the platform.
• Legal and regulatory compliance: Meeting bay888's obligations under applicable anti-money laundering (AML), counter-terrorist financing (CTF), and other legal or regulatory frameworks.
• Customer support: Responding to your enquiries, resolving complaints, and improving the quality of our support services.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling, implementing deposit limits or cooling-off periods where appropriate, and reaching out to players who may require support.
• Platform improvement: Analysing aggregated usage data to improve the performance, design, and content of the bay888 platform.
• Marketing (with consent): Sending you promotional offers, bonus notifications, and platform updates where you have given your prior consent to receive such communications.

5. Legal Basis for Processing

bay888 processes your personal data on the following legal grounds, depending on the nature of the processing activity:

• Contractual necessity: Processing that is required to fulfil our obligations under the Terms & Conditions you entered into when registering your account — for example, processing deposits and withdrawals, managing your account, and delivering gaming services.
• Legal obligation: Processing that is required to comply with applicable laws and regulations, including AML/CFT obligations, age verification requirements, and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: Processing carried out to pursue bay888's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, informed, and specific consent — in particular, the sending of direct marketing communications. You may withdraw your consent at any time by contacting [email protected] or by using the unsubscribe option in any marketing email you receive from bay888.

6. Sharing Your Data

bay888 does not sell your personal data. We may share your personal data with the following categories of third parties, strictly as necessary for the purposes described in this Policy:

• Payment service providers: bKash, Nagad, Rocket, Upay, and other licensed mobile financial services providers in Bangladesh, for the purpose of processing your deposit and withdrawal transactions.
• Identity verification providers: Third-party KYC and AML screening services that assist bay888 in verifying the identity and eligibility of players.
• Game providers: Licensed game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — whose platforms are integrated into the bay888 gaming lobby. These providers may process technical and gameplay data in the course of delivering their games.
• IT and infrastructure providers: Cloud hosting, data storage, cybersecurity, and technical support providers who process data on bay888's behalf under strict data processing agreements.
• Legal and regulatory authorities: Regulatory bodies, law enforcement agencies, courts, or other public authorities where bay888 is required by law to disclose personal data, or where such disclosure is necessary to protect the legal rights of bay888 or its players.
• Professional advisers: Lawyers, accountants, auditors, and insurers who require access to personal data in the course of providing professional services to bay888, subject to professional confidentiality obligations.

7. Cookies & Tracking Technologies

bay888 uses cookies and similar tracking technologies (such as web beacons and pixel tags) on the bay888.lat website. Cookies are small text files stored on your device when you visit a website. They allow the platform to recognise your device, remember your preferences, and collect usage data to improve the service.

The following categories of cookies are used on bay888:

• Strictly necessary cookies: Essential for the operation of the platform. These cookies enable core functions such as session management, login authentication, and security features. They cannot be disabled without impairing your ability to use the site.
• Functional cookies: Allow the platform to remember choices you have made, such as your preferred language or display settings, to provide a more personalised experience.
• Analytics cookies: Used to collect aggregated, anonymised data about how players use the bay888 platform — including which pages are visited most frequently and how long sessions last. This data is used solely to improve platform performance and user experience.
• Session cookies: Temporary cookies that expire when you close your browser. These are used to maintain the continuity of your session while you are actively using the platform.

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the bay888 platform. bay888 does not use advertising cookies or serve third-party behavioural advertising on the platform.

8. Data Retention

bay888 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the duration of your account registration with bay888, plus a minimum period of five (5) years following account closure, to comply with AML record-keeping requirements.
• Transaction records: Financial transaction data, including deposit and withdrawal history, is retained for a minimum of five (5) years from the date of the transaction.
• KYC and identity verification documents: Retained for a minimum of five (5) years following the completion of the verification process or account closure, whichever is later.
• Customer support communications: Retained for a period of three (3) years from the date of the last interaction, unless a longer period is required for ongoing dispute resolution or legal proceedings.
• Marketing consent records: Retained for the duration of your consent status, plus one (1) year following withdrawal of consent, to demonstrate compliance with consent obligations.

When personal data is no longer required for the purpose for which it was collected and no longer required to be retained by law, bay888 will securely delete or anonymise that data in accordance with its internal data disposal procedures.

9. Data Security

bay888 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the bay888 platform.
• Secure, access-controlled server infrastructure hosted by reputable cloud service providers.
• Role-based access controls ensuring that personal data is accessible only to bay888 personnel who require it for their specific job function.
• Regular security assessments and vulnerability testing of the bay888 platform and supporting infrastructure.
• Strict internal data handling policies and staff training on data protection obligations.
• Incident response procedures to ensure that any data breach is identified, contained, and — where legally required — reported to the appropriate authorities promptly.

While bay888 takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials. If you believe your account has been compromised, please contact bay888 immediately at [email protected].

10. Your Rights

As a player on the bay888 platform, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data bay888 holds about you at any time. bay888 will respond to access requests within 30 days of receipt.
• Right to rectification: If any personal data bay888 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: In certain circumstances, you may request the deletion of your personal data — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw your consent and there is no other legal basis for the processing. Note that bay888 may be required to retain certain data by law, in which case erasure may not be possible in full.
• Right to restrict processing: You may request that bay888 restrict the processing of your personal data in certain circumstances, such as while a dispute regarding data accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request that bay888 provide your personal data to you in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where bay888 processes your data on the basis of your consent (in particular, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object: You have the right to object to processing of your personal data where that processing is based on bay888's legitimate interests, including profiling for direct marketing purposes.

To exercise any of the above rights, please submit your request in writing to [email protected]. Please include sufficient information to allow bay888 to verify your identity before processing your request. bay888 will aim to respond to all rights requests within 30 calendar days of receipt.

11. Marketing Communications

bay888 may send you promotional emails, SMS notifications, or in-platform messages about bonuses, new games, seasonal promotions (such as Eid and BPL season offers), and platform updates — but only where you have given your prior consent to receive such communications at the time of registration or at a subsequent point.

You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link included in any marketing email you receive from bay888.
• Updating your notification preferences within your bay888 account settings.
• Contacting bay888 support at [email protected] and requesting removal from all marketing lists.

Please note that even if you opt out of marketing communications, bay888 will continue to send you transactional and service-related communications that are necessary for the operation of your account, such as deposit confirmations, withdrawal notifications, security alerts, and updates to these Terms or this Privacy Policy.

12. Children's Privacy

The bay888 platform is strictly intended for adults aged 18 years and over. bay888 does not knowingly collect or process personal data from any individual under the age of 18. If bay888 discovers or has reason to believe that a registered player is under 18, the account will be immediately suspended, all gameplay and transactions will be voided, and any data collected from that individual will be deleted as promptly as possible.

If you have reason to believe that a minor has registered an account on bay888, please contact us immediately at [email protected] so that the matter can be investigated and appropriate action taken without delay.

13. Changes to This Privacy Policy

bay888 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, bay888 will update the effective date stated at the top of this page and, where practicable, notify registered players via email or an in-platform message.

Your continued use of the bay888 platform after any revised Privacy Policy has been published constitutes your acknowledgement and acceptance of the updated Policy. We encourage you to review this page periodically to stay informed about how bay888 handles your personal data. If you do not agree with any changes to this Policy, you should discontinue use of the platform and may request account closure at any time.

14. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which bay888 handles your personal data, please contact our support team using the details below. bay888 is committed to resolving all privacy-related enquiries promptly and transparently.

This Privacy Policy was last reviewed and updated on 1 January 2026. Please check this page regularly to ensure you are reading the most current version.