casino88 Privacy
Policy & Data Rights

1. Information We Collect

casino88 collects personal data from players in Bangladesh and across South Asia in order to operate a safe, compliant, and high-quality online gambling platform. We collect data through several channels: directly from you when you register or interact with the platform, automatically through your use of the site, and from third-party sources such as payment processors and identity verification services.

1.1 Data You Provide Directly

When you register a casino88 account, place a bet, make a deposit or withdrawal, or contact our support team, you voluntarily provide personal information including:

• Identity Data: Full legal name, date of birth, gender, and nationality as stated on government-issued identification documents.
• Contact Data: Email address, mobile phone number (Bangladesh or South Asian), and correspondence address.
• Financial Data: Mobile wallet account numbers (bKash, Nagad, Rocket, Upay), bank account details (for Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank transactions), and international card details (Visa, Mastercard — last four digits and expiry only; full card numbers are never stored by casino88).
• KYC Documents: Scans or photographs of your National Identity Card (NID), passport, driving licence, utility bills, or bank statements submitted during identity verification.
• Account Preferences: Deposit limits, session time settings, self-exclusion preferences, bonus opt-in or opt-out choices, and responsible gaming settings you configure.
• Support Communications: The content of emails, live chat transcripts, and WhatsApp messages exchanged with casino88's support team.

1.2 Data Collected Automatically

When you visit or use casino88, certain technical and behavioural data is automatically collected by our systems. This includes:

• Device & Technical Data: IP address, browser type and version, operating system, device type (mobile/tablet/desktop), screen resolution, and time zone setting.
• Usage Data: Pages visited, games launched, betting markets accessed, session duration, click paths, search queries within the platform, and features used.
• Transaction Logs: A complete record of all deposits, withdrawals, bonus claims, wagers placed, game outcomes, and balance movements on your account.
• Cookie and Tracking Data: Session identifiers, analytics identifiers, and preference tokens stored via cookies or similar browser-based technologies (see Section 5 for full details).

1.3 Data from Third Parties

In certain circumstances, casino88 may receive personal data about you from third-party sources, including:

• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) confirming transaction details and account ownership.
• Identity verification service providers confirming the authenticity of submitted KYC documents.
• Fraud prevention and anti-money laundering (AML) screening services that cross-reference your identity against sanctions lists and risk databases.
• Affiliate partners who referred you to casino88, who may share a limited set of referral data (click identifier only — no personal information) for commission tracking purposes.

2. How We Use Your Data

casino88 uses the personal data we collect for the following clearly defined purposes. We do not use your data for any purpose not listed below without first seeking your explicit consent or as otherwise required by applicable law.

2.1 Marketing Communications

casino88 will only send you promotional emails, SMS messages, or WhatsApp notifications about bonuses, new games, cricket betting markets, or seasonal offers (such as Eid specials, BPL promotions, or Pohela Boishakh bonus events) if you have explicitly opted in to receive marketing communications during registration or via your account settings. You may withdraw your consent to marketing at any time by updating your notification preferences in the account dashboard or by emailing support@casino88. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

3. Legal Basis for Processing

casino88 processes personal data only when a valid legal basis exists for doing so. The legal bases on which we rely are:

• Contractual Necessity: Processing is necessary to perform the contract between you and casino88 — for example, to create your account, process your deposits via bKash or Nagad, pay out your winnings, or enforce the Terms & Conditions.
• Legal Obligation: Processing is required to comply with applicable legal or regulatory requirements, including Know Your Customer (KYC) obligations, anti-money laundering (AML) laws, and age verification requirements that apply to online gambling platforms serving players in Bangladesh and South Asia.
• Legitimate Interest: Processing is necessary for casino88's legitimate business interests, provided those interests are not overridden by your privacy rights. This includes fraud detection, platform security, analytics for service improvement, and responsible gaming monitoring. We conduct a balancing test before relying on this basis.
• Consent: For activities where no other legal basis applies — principally opt-in marketing communications and non-essential analytics cookies — we rely on your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time without detriment to your account status.

4. Data Sharing & Disclosure

casino88 does not sell, rent, or commercially transfer your personal data to any third party. We share personal data with third parties only in the limited circumstances described below, and in each case we ensure that appropriate data protection safeguards are in place.

4.1 Service Providers

We share personal data with carefully selected third-party service providers who assist us in operating the casino88 platform. These providers act as data processors on our behalf and are contractually prohibited from using your data for any purpose other than providing the specific service we have engaged them for. They include:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and international card networks (Visa, Mastercard) — share only the transaction data necessary to process your deposit or withdrawal.
• Identity Verification Providers: Third-party KYC and AML screening services that verify the authenticity of your identity documents and screen your details against international sanctions databases.
• Game Content Providers: Software studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive only a pseudonymous player identifier and game session data — never your full name, contact details, or financial data.
• Cloud Hosting & Infrastructure: Secure cloud service providers who host casino88's servers and databases in encrypted, access-controlled environments.
• Customer Support Tools: Live chat and ticketing software providers used by casino88's support team — receive contact data and support conversation content only.

4.2 Legal Disclosures

casino88 may disclose personal data to law enforcement agencies, regulatory authorities, courts, or other governmental bodies where we are legally required to do so, or where disclosure is necessary to:

• Comply with a valid legal process (court order, subpoena, or regulatory request).
• Investigate, prevent, or take action against suspected fraud, money laundering, or other illegal activity on the platform.
• Protect the rights, property, or safety of casino88, its players, or the general public.
• Enforce casino88's Terms & Conditions where a legal dispute has arisen.

Where casino88 is not legally prohibited from doing so, we will notify you before disclosing your personal data to a governmental authority.

4.3 Business Transfers

In the event that casino88 undergoes a merger, acquisition, corporate restructuring, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified via your registered email address before your personal data becomes subject to a materially different privacy policy as a result of such a transaction.

5. Cookies & Tracking Technologies

casino88 uses cookies and similar browser-based tracking technologies to ensure the platform functions correctly, to remember your preferences, and to gather anonymised analytics that help us improve the player experience. This section explains what types of cookies we use and how you can manage them.

5.1 Types of Cookies Used

5.2 Managing Your Cookie Preferences

You can control which non-essential cookies casino88 sets on your device by adjusting your browser settings. Most modern browsers allow you to block or delete cookies, or to receive an alert before a cookie is stored. Instructions for managing cookies are available in the help documentation of your browser. Please be aware that disabling functional cookies may impair some features of the casino88 platform, such as the automatic retention of your deposit limit preferences.

6. Data Retention

casino88 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply:

Once the applicable retention period expires, casino88 will securely delete or anonymise the relevant personal data so that it can no longer be associated with any identified individual. Where anonymisation is used instead of deletion, the anonymised data may be retained indefinitely for aggregate statistical analysis.

7. Your Data Rights

casino88 respects your rights over your personal data. As a player on our platform, you are entitled to exercise the following rights at any time by contacting us at support@casino88 with the subject line "Data Rights Request":

• Right of Access: You have the right to request a copy of all personal data casino88 holds about you. We will provide this in a structured, commonly used, and machine-readable format within 30 calendar days of receiving a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic contact information directly in your account settings without submitting a formal request.
• Right to Erasure ("Right to be Forgotten"): You may request that casino88 delete your personal data. We will honour this request where no overriding legal obligation requires us to retain the data (for example, AML and financial record-keeping laws require us to retain transaction data for up to 7 years regardless of an erasure request).
• Right to Restrict Processing: You may request that casino88 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to Data Portability: You have the right to receive the personal data you have provided to casino88 in a structured, machine-readable format, and to have that data transmitted directly to another service provider where technically feasible.
• Right to Object: You have the right to object to processing carried out on the basis of casino88's legitimate interests. If you object, casino88 will cease processing unless it can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing performed prior to withdrawal.

casino88 will not charge a fee for processing data rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. We will respond to all valid requests within 30 calendar days. Where a request is complex or numerous, we may extend this period by a further 60 days, and we will notify you of the extension and the reason for it within the initial 30-day window.

8. Data Security

casino88 implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Encryption: All data transmitted between your device and casino88's servers is protected using Transport Layer Security (TLS 1.2 or higher). Our SSL certificate is always current and valid.
• Data at Rest Encryption: Personal data and financial records stored in casino88's databases are encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within casino88's internal systems is strictly limited to staff members who require that access to perform their role. All internal access is logged and audited.
• Password Security: Player passwords are stored as salted hashes — never in plain text. casino88 staff cannot retrieve your password; only a reset mechanism is available.
• Two-Factor Authentication: casino88 encourages all players to enable two-factor authentication (2FA) on their accounts as an additional layer of security beyond the password.
• Intrusion Detection: casino88's infrastructure is continuously monitored for suspicious activity, including unauthorised login attempts, anomalous transaction patterns, and network intrusion indicators.
• Vulnerability Management: casino88 conducts regular security assessments and applies software patches promptly to address known vulnerabilities in our platform infrastructure.

8.1 Security Breach Notification

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, casino88 will notify you without undue delay — and in any event within 72 hours of becoming aware of the breach — via your registered email address. The notification will describe the nature of the breach, the categories and approximate number of individuals affected, the likely consequences, and the measures casino88 has taken or proposes to take to address the breach.

9. Third-Party Services

casino88's platform integrates third-party services — principally game content providers and payment processors — to deliver the full range of betting, casino, and live dealer experiences available on the platform. When you interact with games from providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, those interactions take place within a secure API integration managed by casino88.

casino88 transmits only a pseudonymous session token and anonymised game-play data to game providers. Your full name, contact details, payment information, and KYC documents are never shared with game studios. Game providers are contractually bound to use the session data we share solely for the purpose of delivering game content and recording game outcomes, and are prohibited from using that data for any independent commercial purpose.

9.1 Payment Partners

When you make a deposit via bKash, Nagad, Rocket, Upay, or a bank transfer, the payment is processed by the respective payment provider under their own terms and privacy policy. casino88 shares only the minimum data necessary to process and verify the transaction — specifically, your registered mobile number or account reference and the transaction amount. Full payment credentials (PIN numbers, OTPs, full card numbers) are entered directly into the payment provider's interface and are never seen or stored by casino88.

9.2 External Links

casino88's platform does not contain links to external third-party websites. All navigation links on casino88 direct players to pages within the casino88 domain. casino88 accepts no responsibility for the privacy practices of any third-party websites that players may access independently outside of the casino88 platform.

10. Contact & Data Queries

If you have any questions, concerns, or requests relating to this Privacy Policy or casino88's handling of your personal data, please contact our dedicated data support team using the details below. All data-related queries are handled in strict confidence and responded to within 30 calendar days.

• Email: support@casino88 (use subject line: "Privacy / Data Rights Request")
• WhatsApp: +880 1700-000000 (available 09:00–22:00 BST, UTC+6)
• Live Chat: Available 24/7 via your casino88 account dashboard

10.1 Changes to This Privacy Policy

casino88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the features and services available on the platform. When we make a material change to this Privacy Policy, we will notify you by posting a prominent notice on the casino88 platform and, where appropriate, by sending a notification to your registered email address. The "Last Updated" date at the top of this document will be revised accordingly.

Your continued use of the casino88 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any changes, you have the right to close your account and request deletion of your data in accordance with Section 7 of this policy.

10.2 Governing Language

This Privacy Policy is written in English, which is the governing language for all legal and contractual matters between you and casino88. In the event of any conflict or inconsistency between an English version of this policy and any translated version, the English version shall prevail.