babu8i Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") describes how babu8i ("babu8i", "the Platform", "We", "Us", "Our") collects, processes, stores, and protects personal information provided by users ("Player", "You", "Your") of the babu8i website located at babu8i.pro and all associated pages, services, and features (collectively, the "Platform").

babu8i is committed to handling your personal information responsibly, transparently, and in accordance with internationally recognised data protection principles. We take the privacy and security of every babu8i player seriously, and this Policy is written in plain, accessible English so that you can understand exactly how your data is used.

By registering an account, accessing the Platform, or otherwise providing your personal information to babu8i, you acknowledge that you have read and understood this Policy. If you do not agree with any aspect of this Policy, please discontinue your use of the Platform and contact our support team to close your account and request data deletion where applicable.

This Policy should be read alongside babu8i's Terms and Conditions and Responsible Gaming Policy, all of which form part of your agreement with the Platform. The Platform is strictly for adults aged 21 and above.

Our Privacy Principles

babu8i processes personal data according to six core principles that guide every decision we make about your information.

2. Information We Collect

babu8i collects personal information through several channels: directly from you when you register or use the Platform, automatically through your device and browser interactions, and from third-party service providers such as payment processors. The categories of personal data we collect are described below.

2.1 Registration & Account Information

• Full legal name as it appears on your national identity document.
• Date of birth to verify you meet the 21+ age requirement.
• Residential address in Bangladesh (street, city, district, postal code).
• Mobile phone number linked to your bKash, Nagad, or other registered payment method.
• Email address used for account communications and security notifications.
• Username and encrypted password for account login authentication.

2.2 Identity Verification (KYC) Documents

• Copy of your National Identity Card (NID), valid passport, or driving licence.
• Proof of address document such as a utility bill or bank statement dated within 90 days.
• Proof of payment method ownership (e.g., screenshot of bKash or Nagad account registration).
• Any additional documentation requested to comply with anti-money-laundering (AML) obligations.

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts in BDT, timestamps, and payment reference numbers.
• Payment method identifiers (e.g., registered bKash mobile number, last four digits of a card).
• Bonus claim history and wagering activity records.
• Account balance history maintained for audit and compliance purposes.

2.4 Technical & Usage Data

• IP address, device type, operating system, and browser version.
• Pages visited, features used, session duration, and clickstream data on the Platform.
• Game history, bet amounts, game results, and session logs.
• Cookies and similar tracking technologies as described in Section 7 of this Policy.

2.5 Communications Data

• Records of messages sent to and received from babu8i customer support via email or live chat.
• Feedback, complaints, and dispute records.
• Marketing preference settings and responses to promotional communications.

3. How We Use Your Data

babu8i uses personal data only for defined, legitimate purposes. We do not sell your personal data to third parties. We do not use your data for purposes unrelated to the operation, improvement, and legal compliance of the Platform. The specific purposes for which we process your data are:

4. Sharing Your Information

babu8i does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary to achieve the stated purpose.

4.1 Payment Service Providers

To process deposits and withdrawals, babu8i shares relevant transaction data with approved payment partners including bKash, Nagad, Rocket, Upay, and card processing networks such as Visa and Mastercard. These partners process your data solely to facilitate your transactions and are bound by their own privacy and data security obligations.

4.2 Game Content Providers

Third-party game studios — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi — may receive limited technical data (such as your session token and game activity) necessary to deliver their games and maintain game integrity. These providers do not receive your full identity or payment details.

4.3 Legal & Regulatory Disclosure

babu8i may disclose personal data to law enforcement authorities, financial intelligence units, or other regulatory bodies when required to do so by applicable law, court order, or where disclosure is necessary to prevent or investigate financial crime, fraud, or other serious offences. We will notify you of any such disclosure where we are legally permitted to do so.

4.4 Service Providers & Technical Partners

babu8i engages trusted third-party service providers to assist with Platform operations, including cloud hosting, data analytics, cybersecurity monitoring, and customer support tooling. These providers act as data processors on our behalf and are contractually obligated to process your data only on our instructions and to maintain appropriate security standards. They do not use your data for their own independent purposes.

5. Data Security & Protection

Protecting your personal information is a core operational priority at babu8i. We implement a layered security framework that includes both technical and organisational measures designed to prevent unauthorised access, disclosure, alteration, or destruction of your data.

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the babu8i Platform is encrypted in transit using industry-standard TLS protocols, identical to those used by major financial institutions.
• Encrypted Data Storage: Sensitive personal data — including identity documents, payment references, and account credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to babu8i employees and contractors who require it to perform their job functions. All access is logged, reviewed, and governed by role-based access control policies.
• Password Security: Account passwords are stored as salted cryptographic hashes. babu8i employees cannot view your password in plain text under any circumstances.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their accounts for an additional layer of login security. OTP verification is used for sensitive account actions including withdrawal requests.
• Security Monitoring: The Platform is continuously monitored for unusual activity, intrusion attempts, and potential data breaches. Incident response procedures are in place to address any security events promptly.
• Regular Security Audits: babu8i conducts periodic internal and third-party security assessments of its infrastructure, codebase, and data handling practices.

Despite these measures, no online platform can guarantee absolute security. In the unlikely event of a data breach that affects your personal information, babu8i will notify affected players promptly and take all reasonable steps to mitigate the impact.

6. Data Retention & Deletion

babu8i retains personal data only for as long as it is necessary to fulfil the purposes described in this Policy, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account registration and for a period of five (5) years following account closure, to meet financial record-keeping and AML compliance obligations.
• KYC / Identity Documents: Retained for a minimum of five (5) years from the date of verification, as required by applicable financial regulations. Documents are securely deleted once the retention period expires.
• Transaction Records: Deposit, withdrawal, and betting transaction records are retained for five (5) years following the date of the transaction.
• Customer Support Records: Correspondence and support tickets are retained for two (2) years from the date of resolution.
• Marketing Data: Marketing preferences and opt-in records are retained until you withdraw consent or close your account, plus a short additional period for compliance auditing.
• Technical & Usage Logs: Server and access logs are retained for up to twelve (12) months for security monitoring and fraud prevention purposes, then securely deleted.

When data reaches the end of its retention period, it is securely deleted or anonymised in accordance with recognised data destruction standards. Anonymised, aggregated data (which cannot be used to identify any individual) may be retained indefinitely for statistical analysis and Platform improvement purposes.

7. Cookies & Tracking

babu8i uses cookies and similar technologies (such as local storage and session tokens) to operate and improve the Platform. Cookies are small text files stored on your device that allow the Platform to recognise your browser across sessions and deliver a consistent, personalised experience.

7.1 Types of Cookies We Use

You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent certain Platform features from functioning correctly. babu8i does not use third-party advertising cookies or cross-site tracking technologies.

8. Your Privacy Rights

babu8i respects your rights over your personal data. As a registered player, you may exercise the following rights at any time by contacting our support team at [email protected]:

• Right of Access: You may request a copy of the personal data babu8i holds about you. We will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you may request that we correct it. Account details can also be updated directly within your account dashboard.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected and where no legal retention obligation applies. Note that we are required to retain certain financial and KYC records for a minimum period as described in Section 6.
• Right to Restrict Processing: You may request that we limit the way we use your personal data in certain circumstances, such as while a correction request is being assessed.
• Right to Data Portability: You may request a copy of your personal data in a commonly used, machine-readable format for transfer to another service provider where technically feasible.
• Right to Withdraw Consent: Where data processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. We will honour all such requests immediately.

To exercise any of the above rights, send a written request to [email protected] from the email address registered to your babu8i account. We may ask you to verify your identity before processing your request. We aim to respond to all privacy rights requests within 30 days. If the request is particularly complex, we may extend this period by a further 30 days and will notify you accordingly.

9. Protection of Minors

babu8i is strictly an adult platform. We do not knowingly collect personal data from any individual under the age of 21. Age verification is a mandatory step in the registration and KYC process. If we discover that personal data has been collected from a person under 21 years of age, we will immediately suspend the account, void any associated transactions, and permanently delete the relevant personal data.

If you are a parent or guardian and believe that a minor in your care has registered on babu8i, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

10. Third-Party Links

The babu8i Platform may contain references to third-party payment services (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and game studio providers. When you interact with these services — for example, initiating a bKash payment — you will be subject to the privacy policy of that third party. babu8i is not responsible for the privacy practices of third-party services and recommends that you review their respective privacy policies before providing any personal data to them.

11. Changes to This Policy

babu8i may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or Platform functionality. When we make material changes, we will notify registered players by email and by placing a prominent notice on the Platform at least seven (7) days before the changes take effect.

The "Last Updated" date displayed at the top of this page indicates when the most recent revision was made. Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how we protect your information.

12. Privacy Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or the way babu8i handles your personal data, please contact our Data Protection team:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Use "PRIVACY REQUEST" for data rights enquiries to ensure prompt routing to the correct team.
• Response Time: Privacy-related enquiries are acknowledged within 48 hours and resolved within 30 days.
• Support Hours: 06:00 – 24:00 Bangladesh Standard Time (BST, UTC+6), seven days a week.
• Language: All privacy correspondence is handled in English.

babu8i treats all privacy requests with the highest level of confidentiality. Your identity will be verified before any personal data is disclosed, corrected, or deleted to protect you against fraudulent requests by third parties.