bvb8 Privacy Policy

1Who We Are

bvb8 is an English-language online casino and sports betting platform operating at the domain bvb8.io. The platform is designed and targeted specifically for players in the Bangladesh market and provides access to casino games, live dealer tables, slot games, and sports betting markets including cricket, football, and kabaddi.

Throughout this Privacy Policy, references to "bvb8", "we", "us", or "our" refer to the entity operating the bvb8 platform at bvb8.io. References to "you", "your", or "the player" refer to any individual who accesses, registers with, or interacts with the bvb8 platform in any capacity.

bvb8 acts as the data controller in respect of all personal data collected through the bvb8.io website and its associated services. This means bvb8 determines the purposes and means by which your personal data is processed.

2Scope of This Policy

This Privacy Policy applies to all personal data collected by bvb8 through:

• The bvb8.io website and all pages, features, and services accessible through it
• The bvb8 account registration and bvb8 Login process
• Customer support communications via email, live chat, or any other channel
• Any promotional, bonus, or marketing communications sent by bvb8
• Identity verification (KYC) processes conducted in connection with your account
• Payment transactions processed through bKash, Nagad, Rocket, Upay, Visa, Mastercard, or any other accepted payment method

This policy does not apply to third-party websites or services that may be linked from the bvb8 platform. bvb8 has no control over, and accepts no responsibility for, the privacy practices of external websites. Players are encouraged to review the privacy policies of any third-party service they use.

3Data We Collect

bvb8 collects the following categories of personal data from players:

bvb8 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health records, or biometric data, except where a selfie photograph is voluntarily submitted as part of the KYC identity verification process.

4How We Collect Data

bvb8 collects personal data through the following channels:

• Directly from you — when you complete the bvb8 Login registration form, submit KYC documents, make a deposit or withdrawal, contact customer support, or respond to a survey or promotion
• Automatically — through cookies, session tracking, and server log files when you visit and interact with the bvb8.io website
• From third-party partners — including identity verification service providers, payment processors (bKash, Nagad, Rocket, Upay), fraud detection agencies, and data enrichment services, where these parties share data with bvb8 in connection with your account or transactions
• From public sources — such as sanctions screening databases and politically exposed persons (PEP) registers, which bvb8 may query as part of its legal compliance obligations

5Legal Basis for Processing

bvb8 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between bvb8 and the player — including operating the account, processing bets, and handling payments — is carried out because it is necessary to deliver the service you have signed up for.
• Legal obligation: bvb8 is subject to legal obligations relating to anti-money laundering (AML), counter-terrorism financing (CTF), and identity verification. Processing of data for these purposes is mandatory and cannot be refused.
• Legitimate interests: bvb8 processes certain data — such as IP addresses and device information — on the basis of its legitimate interest in maintaining platform security, detecting fraud, and preventing abuse. bvb8 has assessed that these interests do not override players' fundamental privacy rights.
• Consent: Where bvb8 sends optional marketing communications or processes data for non-essential analytics, this is done on the basis of your consent. You may withdraw consent at any time by contacting support or adjusting your account communication preferences.

6How We Use Your Data

bvb8 uses the personal data it collects for the following specific purposes:

• Creating and managing your bvb8 player account following the bvb8 Login registration process
• Verifying your identity and confirming that you meet the minimum age requirement of 21 years
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other accepted payment methods
• Delivering the games, betting markets, and other platform services you access
• Detecting, investigating, and preventing fraudulent transactions, bonus abuse, money laundering, and other prohibited conduct
• Administering bonuses, promotions, and loyalty programmes, including seasonal promotions tied to events such as BPL, Eid, and T20 World Cup
• Monitoring responsible gaming indicators and applying player-requested tools such as deposit limits, loss limits, and self-exclusion
• Providing customer support and resolving complaints and disputes
• Sending transactional communications — including deposit confirmations, withdrawal updates, and security alerts — that are necessary for account management
• Sending optional promotional and marketing communications where you have consented to receive them
• Complying with applicable legal and regulatory obligations
• Improving the bvb8 platform through aggregated, anonymised usage analytics

7Data Sharing & Third Parties

bvb8 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. Personal data is shared only in the following limited and controlled circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive transaction data strictly necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are subject to their own regulatory obligations.
• Identity verification providers: Third-party KYC and AML service providers may receive identity document data and personal details to complete verification checks on behalf of bvb8.
• Fraud prevention and security services: Specialist providers assist bvb8 in detecting and preventing fraudulent activity, account takeovers, and money laundering. Data shared with these providers is used solely for this purpose.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session and game-play data necessary to deliver their games. These providers do not receive your identity documents or financial details.
• Legal and regulatory authorities: bvb8 will disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by law, or where bvb8 believes in good faith that such disclosure is necessary to protect the rights, property, or safety of bvb8, its players, or others.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of bvb8's business, personal data may be transferred to the acquiring entity as part of that transaction. Players will be notified via the email address on their account before any such transfer takes effect.

All third parties with whom bvb8 shares personal data are contractually required to maintain appropriate technical and organisational security measures and to process your data only for the specified purpose.

8Payment Data & bKash / Nagad

Given that bvb8 is built primarily for the Bangladesh market, a significant proportion of players use mobile financial services — most commonly bKash, Nagad, and Rocket — for deposits and withdrawals. The following specific provisions apply to payment data:

• bvb8 records the mobile number associated with your bKash, Nagad, or Rocket wallet for the purpose of processing transactions and verifying that payments originate from an account registered in your own name.
• bvb8 does not store your full bKash/Nagad/Rocket PIN or password. Authentication for these services takes place entirely within the respective mobile app or USSD session and is never processed by bvb8 directly.
• Transaction reference numbers issued by bKash, Nagad, or Rocket are stored by bvb8 to facilitate transaction reconciliation and dispute resolution.
• All transaction records are retained for a minimum of five years in accordance with standard financial record-keeping obligations.
• Deposits and withdrawals are processed in Bangladeshi Taka (BDT). bvb8 does not process transactions in any other currency.

9Cookies & Tracking Technologies

The bvb8 platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your logged-in session after bvb8 Login, and to gather anonymised performance analytics. The following types of cookies may be used:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in during your visit and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies: Store your preferences such as language settings and responsible gaming reminder intervals so that these settings persist across sessions.
• Analytics cookies: Collect aggregated, anonymised data about how players navigate the bvb8 platform — such as which pages are most visited and how long sessions last. This data is used solely to improve the platform and is never linked to individual identifiable players.
• Security cookies: Used to detect and prevent fraudulent activity, including identifying unusual bvb8 Login patterns that may indicate an account takeover attempt.

bvb8 does not use cookies to serve targeted third-party advertising. No advertising network or ad-technology company is given access to bvb8 player data through the cookie infrastructure.

Most web browsers allow you to manage or delete cookies through your browser settings. Note that disabling essential cookies may prevent you from accessing certain features of the bvb8 platform, including your account.

10Data Security

bvb8 takes the security of personal data extremely seriously. The following technical and organisational measures are in place to protect your data:

• Encryption in transit: All data transmitted between your device and bvb8.io is protected using TLS 1.2 or higher (SSL encryption). The padlock icon in your browser confirms this protection is active.
• Encryption at rest: Stored personal data, identity documents, and financial records are encrypted at rest using industry-standard AES-256 encryption.
• Access controls: Access to personal data is restricted to bvb8 employees and contractors who genuinely need it to perform their job functions. All personnel with data access are subject to confidentiality obligations.
• Two-factor authentication: bvb8 recommends and supports two-step SMS verification on all player accounts to provide an additional layer of protection beyond the standard bvb8 Login password.
• Intrusion detection: bvb8's infrastructure includes automated systems designed to detect and alert on unusual access patterns, potential intrusion attempts, and DDoS activity.
• Security testing: bvb8 conducts periodic security assessments of its platform infrastructure and code to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no method of electronic data transmission or storage is completely immune to security threats. In the event of a data breach that poses a risk to players, bvb8 will notify affected individuals as promptly as practicable and will take all reasonable steps to contain and remediate the incident.

11Data Retention

bvb8 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The following general retention periods apply:

When a retention period expires, personal data is securely deleted or permanently anonymised so that it can no longer be attributed to any identifiable individual. bvb8 does not archive personal data beyond the periods stated above for any commercial or speculative purpose.

12Your Rights

As a player on the bvb8 platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact bvb8 support at [email protected] with the subject line "Data Rights Request" and include your registered account username.

• Right of access: You may request a copy of all personal data that bvb8 holds about you. bvb8 will respond to verified access requests within 30 days.
• Right to rectification: If any personal data bvb8 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections such as updating a phone number or email address can be made directly from your account settings.
• Right to erasure: In certain circumstances — for example, where data is no longer necessary for the purpose for which it was collected and no legal retention obligation applies — you may request that bvb8 delete your personal data. Note that bvb8 cannot erase data it is legally required to retain, such as KYC documents and transaction records.
• Right to restriction: You may request that bvb8 restricts processing of your personal data in certain circumstances, such as while a dispute about data accuracy is being resolved.
• Right to data portability: You may request that bvb8 provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to withdraw consent: Where processing is based on your consent — for example, receipt of marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
• Right to object: You may object to processing carried out on the basis of bvb8's legitimate interests. bvb8 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.

13Children & Minors

The bvb8 platform is strictly intended for adults aged 21 years and above. bvb8 does not knowingly collect personal data from any individual under the age of 21. The bvb8 Login registration process requires players to confirm they are 21 or older, and identity verification is conducted to enforce this requirement.

If bvb8 becomes aware that personal data has been collected from an individual who does not meet the minimum age requirement, the account will be immediately suspended, all funds will be returned to the original payment source, and all personal data relating to that individual will be deleted as promptly as practicable, subject to any mandatory legal retention obligations.

14Cross-Border Data Transfers

The bvb8 platform serves players in Bangladesh, and the majority of data processing operations are designed with the Bangladesh market in mind. However, certain third-party service providers — including game content studios such as Pragmatic Play, Evolution Gaming, and Microgaming, as well as international fraud prevention and KYC service providers — may be located in jurisdictions outside Bangladesh.

Where personal data is transferred to a third party located in another country, bvb8 ensures that appropriate safeguards are in place. This includes requiring third-party data processors to maintain contractual data protection obligations that are no less stringent than those applied by bvb8 itself.

bvb8 takes reasonable steps to ensure that any cross-border transfer of personal data is conducted in a manner that preserves the security and confidentiality of that data. Players who have concerns about international data transfers may contact support at [email protected] for further information about the specific safeguards in place.

15Changes to This Policy

bvb8 reserves the right to update or amend this Privacy Policy at any time. When material changes are made — for example, changes to the categories of data collected, the purposes for which data is used, or the third parties with whom data is shared — bvb8 will notify registered players by email to the address associated with their account and/or via an on-screen notice upon their next bvb8 Login.

The "Last Updated" date displayed at the top of this document will be revised whenever changes are made. bvb8 recommends that players review this Privacy Policy periodically to stay informed about how their personal data is handled. Where changes are minor and do not materially affect players' rights, bvb8 may update the policy without individual notification, relying on the "Last Updated" date as notice of revision.

Your continued use of the bvb8 platform following the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with any material changes to this policy, you should cease using the platform and may request account closure by contacting support.

16Contact & Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way bvb8 handles your personal data, please contact the bvb8 support team using the details below. All privacy-related enquiries are handled with priority and treated in strict confidence.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Use "Privacy Enquiry" or "Data Rights Request" to ensure your message is routed to the correct team
• Response Time: bvb8 aims to acknowledge all privacy enquiries within 24 hours (Bangladesh Standard Time, UTC+6) and to provide a substantive response within 10 business days

bvb8 is committed to resolving all data-related concerns fairly and transparently. If you submit a data rights request, bvb8 may ask you to verify your identity before processing the request, to ensure that personal data is not disclosed to or acted upon by an unauthorised party.