babul8 Privacy
Policy

1.1 Information You Provide Directly

When you register an account on babul8.net, you provide us with personal information voluntarily. This includes:

• Identity data: Full legal name, date of birth, gender, and nationality.
• Contact data: Email address, mobile phone number, and residential address.
• Account credentials: Username and password (passwords are stored in hashed, irreversible form — never in plain text).
• Identity verification documents: Copies of your National Identity Card (NID), passport, or driving licence, and proof of address documents submitted as part of our KYC process.
• Payment information: Mobile financial service account details (bKash, Nagad, Rocket, Upay number), bank account numbers, and card details (Visa, Mastercard) used for deposits and withdrawals. Full card numbers are not stored by babul8 — card processing is handled by certified payment processors.
• Communication records: Messages, emails, and live chat transcripts exchanged with the babul8 support team.

1.2 Information Collected Automatically

When you access and use babul8.net, certain technical and behavioural data is collected automatically by our systems:

• Device data: Device type, operating system, browser type and version, screen resolution, and device identifiers.
• Network data: IP address, internet service provider (ISP), and approximate geographic location derived from IP address (city/region level — not GPS).
• Usage data: Pages visited, features used, games played, bet history, session duration, click-stream data, and referral source (the URL that directed you to babul8.net).
• Cookie and tracking data: Data collected via cookies, local storage, and similar tracking technologies as described in Section 4 of this policy.

1.3 Information from Third Parties

babul8 may receive personal data about you from trusted third-party sources in limited circumstances:

• Payment processors: Transaction confirmation data and fraud-risk signals from payment service providers including mobile financial service operators and card networks.
• Identity verification providers: Verification outcomes and risk scores from third-party KYC service providers engaged to assist with identity checks.
• Anti-fraud and AML services: Data from third-party fraud detection and anti-money-laundering screening services used to protect the integrity of the platform and its users.

3.1 Performance of a Contract

The primary basis for most data processing at babul8 is the performance of the contract you enter into with us when you register an account and agree to these Terms & Conditions. This covers processing that is strictly necessary to create and maintain your account, verify your eligibility, process your deposits and withdrawals, deliver the games and betting services you use, and handle your customer support requests. Without this processing, babul8 would be unable to provide its core services.

3.2 Legal Obligation

Certain processing activities are required by law and cannot be avoided regardless of your preferences. These include KYC identity verification, anti-money-laundering transaction monitoring, responsible gaming compliance monitoring, and record-keeping obligations that require babul8 to retain transaction data for defined minimum periods. Processing under this legal basis is not subject to your consent or objection.

3.3 Legitimate Interests

babul8 processes some data on the basis of its legitimate business interests, where those interests are not overridden by your fundamental rights and freedoms. Legitimate interest processing at babul8 includes: securing the platform against fraud and abuse, analysing aggregated usage data to improve the product, enforcing these Terms, and communicating with you about service-related matters (not marketing). Where legitimate interests are the basis for processing, we conduct and document a balancing assessment to ensure your interests are adequately protected.

3.4 Consent

Where babul8 processes your data for purposes that go beyond those required for service delivery or legal compliance — in particular, sending you personalised promotional offers and marketing communications — we rely on your freely given, specific, informed, and unambiguous consent. You may withdraw your consent to marketing communications at any time by contacting the babul8 support team or by following the unsubscribe instructions included in any marketing email or SMS. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

4.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device across multiple requests within the same session, and across sessions if you consent to persistent cookies. Alongside traditional cookies, babul8 may also use local storage, session storage, and pixel tags for similar functional purposes.

4.2 Categories of Cookies Used by babul8

• Strictly Necessary Cookies: These cookies are essential for the babul8 platform to function. They maintain your login session, protect against cross-site request forgery (CSRF), and enable core features such as the game client and cashier. These cookies cannot be disabled without breaking core site functionality.
• Functional Cookies: These cookies remember your preferences such as language settings, display preferences, and previously used deposit methods. They improve your experience but are not strictly required for the platform to operate.
• Analytical Cookies: These cookies collect anonymised information about how users interact with babul8.net — for example, which pages are most visited, where users spend the most time, and which features are used most frequently. This data helps babul8 identify areas for improvement and optimise the platform experience.
• Marketing Cookies: With your consent, babul8 may use cookies to track interactions with promotional content and tailor future offers to your demonstrated interests and betting preferences. These cookies are only activated if you consent to marketing personalisation.

4.3 Third-Party Cookies

Some cookies on babul8.net may be set by trusted third-party service providers — including analytics platforms, payment processors, and game providers — when their embedded components are loaded as part of the babul8 experience. babul8 does not control the cookie policies of third-party providers but selects partners who maintain standards consistent with this Privacy Policy. Third-party providers may include analytics services and certified game studios such as Evolution Gaming, Pragmatic Play, Spribe, and Ezugi.

4.4 Managing Your Cookie Preferences

You can manage and delete cookies at any time via your browser settings. Most modern browsers allow you to block all cookies, accept only first-party cookies, or delete existing cookies on demand. Please note that disabling strictly necessary cookies will impair or completely prevent your use of the babul8 platform. Instructions for managing cookies in popular browsers are typically found under "Settings" → "Privacy" or "Settings" → "Security" in your browser of choice.

5.1 Service Providers and Data Processors

babul8 engages carefully selected third-party service providers who process personal data on our behalf in order to deliver the services you use. These providers operate strictly under babul8's instructions and are contractually bound to protect your data. Categories of service providers include:

• Payment processors and mobile financial service operators (bKash, Nagad, Rocket, Upay, Visa, Mastercard network processors).
• Identity verification and KYC technology providers.
• Anti-fraud and anti-money-laundering screening services.
• Cloud infrastructure and data hosting providers.
• Game software providers whose titles are hosted on or embedded within the babul8 platform (e.g., Evolution Gaming, Pragmatic Play, Spribe, Ezugi, Microgaming, NetEnt).
• Customer support platform providers.
• Platform analytics service providers (using anonymised or pseudonymised data wherever possible).

5.2 Legal and Regulatory Disclosures

babul8 will disclose personal data to law enforcement agencies, regulatory authorities, financial intelligence units, or courts where it is legally required to do so, or where disclosure is necessary to protect the vital interests of babul8 or its users. Such disclosures include compliance with anti-money-laundering reporting obligations, responding to valid legal process (such as court orders or official investigations), and cooperating with sports integrity bodies in matters of suspected match-fixing or corruption.

5.3 Business Transfers

In the event that babul8 undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. babul8 will provide reasonable notice of any such transfer and will ensure that any successor entity is bound to honour this Privacy Policy or provide you with comparable privacy protections prior to any change in data controller.

5.4 No Sale of Data

babul8 does not sell, rent, license, or otherwise commercially exploit your personal data to any third-party data broker, marketing company, or advertising network. This commitment applies unconditionally and without exception.

6.1 Retention During Active Account Period

While your babul8 account remains active, we retain all personal data necessary to manage your account, process transactions, comply with our KYC and AML obligations, and deliver the services you use. This includes your identity data, contact information, payment history, betting history, and communication records with the support team.

6.2 Retention Following Account Closure

Following closure of your babul8 account — whether voluntary or enforced — babul8 retains your personal data for a minimum period of five (5) years from the date of account closure. This retention period is required by applicable anti-money-laundering regulations, which mandate that records of customer identity and financial transactions be preserved for audit and investigation purposes. After the mandatory retention period expires, your data will be securely deleted or anonymised.

6.3 Marketing Data Retention

If you have consented to receive marketing communications from babul8, we retain the data necessary to send those communications (name, email address, mobile number, and betting preference profile) until you withdraw your consent. Upon receipt of a valid withdrawal of consent, babul8 will suppress your contact details from all future marketing communications within a commercially reasonable timeframe (typically within 5 business days).

6.4 Secure Deletion

When personal data is no longer required and its retention period has expired, babul8 applies secure deletion procedures to ensure that data cannot be recovered or reconstructed. For data held in digital form, this includes cryptographic erasure and overwriting procedures consistent with industry best practices.

7.1 Right of Access

You have the right to request a copy of the personal data babul8 holds about you. This is commonly known as a Subject Access Request (SAR). Upon receiving a verified SAR, babul8 will provide you with a copy of your personal data in a structured, commonly used format within a reasonable timeframe, and without charge in most circumstances.

7.2 Right to Rectification

If any personal data babul8 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly through your babul8 account settings. For changes to identity documents or other sensitive records, please contact the support team to initiate a formal correction request.

7.3 Right to Erasure

You may request that babul8 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. Please note that babul8 cannot fully comply with erasure requests where retention is required by law — for example, transaction records subject to mandatory AML retention periods will be retained for the legally required duration regardless of an erasure request.

7.4 Right to Restrict Processing

In certain circumstances — for example, where you contest the accuracy of data babul8 holds or object to its processing — you have the right to request that babul8 restrict processing of your data while the matter is resolved. During a restriction period, babul8 will continue to store your data but will not actively process it beyond what is necessary for the restricted purpose.

7.5 Right to Data Portability

Where babul8 processes your personal data on the basis of your consent or the performance of a contract, and where processing is carried out by automated means, you have the right to receive your data in a structured, machine-readable format and to request that it be transmitted to another data controller where technically feasible.

7.6 Right to Object

You have the right to object to babul8 processing your personal data where that processing is based on legitimate interests. You may also object at any time to processing for direct marketing purposes, including profiling related to direct marketing. Where a valid objection is raised, babul8 will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

7.7 How to Exercise Your Rights

To exercise any of the rights described above, please contact the babul8 support team via live chat on babul8.net or by emailing [email protected] (plain text — not a clickable link). babul8 may need to verify your identity before processing a data rights request. We aim to respond to all verified requests within 30 days of receipt.

8.1 Technical Security Measures

babul8 employs the following technical controls to safeguard personal data:

• Transport Layer Security (TLS): All data in transit between your device and babul8.net is encrypted using TLS 1.2 or higher. HTTP connections are redirected to HTTPS.
• Password Hashing: Account passwords are stored using a strong, salted cryptographic hash function. Plain-text passwords are never stored or logged.
• Access Controls: Access to personal data within babul8's systems is restricted on a strict need-to-know basis. Staff access to user data is role-controlled and logged.
• Intrusion Detection: babul8 operates continuous network and application monitoring to detect and respond to suspicious access patterns, brute-force attacks, and other intrusion attempts in real time.
• Data Minimisation in Logs: System and application logs are configured to exclude sensitive personal data fields (such as full payment account numbers) wherever possible.

8.2 Organisational Security Measures

Technical controls are complemented by strong organisational policies, including regular security awareness training for all staff who handle personal data, background screening for personnel in sensitive data-handling roles, a formal incident response plan for responding to data security events, and regular review and testing of data protection procedures.

8.3 Data Breach Response

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected individuals, babul8 will notify affected users without undue delay once the breach has been identified and assessed. Notification will include a description of the nature of the breach, the categories and approximate number of individuals affected, the likely consequences of the breach, and the measures babul8 has taken or proposes to take to address it. babul8 encourages all users to use a strong, unique password for their babul8 account and to enable any additional account security features available within their account settings.

9.1 Age Restriction Policy

babul8 is an 18+ platform. Access to all gambling and betting services on babul8.net is strictly prohibited for any person under the age of 18 years. By registering an account, you confirm that you are at least 18 years of age. babul8 does not knowingly collect, process, or store personal data belonging to individuals under the age of 18.

9.2 Age Verification

As part of our mandatory KYC process, babul8 verifies the age and identity of all account holders prior to permitting real-money deposits or withdrawals. Any account found to belong to a person under the age of 18 will be immediately suspended, all funds will be returned (less any bonuses or promotions claimed), and the account will be permanently closed. babul8 reserves the right to retain records of the incident for compliance and audit purposes.

9.3 Parental Controls

If you are a parent or guardian and believe that a minor in your care has accessed or registered on babul8.net, please contact the babul8 support team immediately at [email protected]. We will investigate the matter promptly, close any identified underage account, and erase the minor's personal data from our systems as quickly as legally permissible. We strongly encourage parents and guardians to use internet filtering tools and parental control software to restrict access to gambling websites on devices used by minors.

9.4 Responsible Gaming Resources

babul8 is committed to promoting responsible gambling among all adult players. If you or someone you know is experiencing difficulties related to gambling, we encourage you to visit our Responsible Gaming page for information on self-exclusion tools, deposit limits, time-out features, and external support organisations available to players in Bangladesh.

10.1 Updates to This Policy

babul8 reserves the right to amend this Privacy Policy at any time. When material changes are made, babul8 will post the updated policy on this page with a revised effective date. For significant changes that materially affect how we process your personal data, babul8 will endeavour to provide more prominent notice — for example, via an in-platform notification or an email to the address registered on your account. Your continued use of babul8.net following the posting of an updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with any update to this policy, you should discontinue use of the platform and contact the support team to close your account.

10.2 Governing Language

This Privacy Policy is written and published in English. In the event of any conflict or inconsistency between this English-language version and any translation, the English version shall prevail.

10.3 Contact for Privacy Matters

If you have any questions, concerns, or requests relating to this Privacy Policy or babul8's data protection practices, you are welcome to contact us through the following channel:

• Support email: [email protected] (plain text — not a clickable link)
• Live chat: Available 24/7 via the babul8.net platform
• Response time: babul8 aims to acknowledge all privacy-related enquiries within 2 business days and to resolve substantive requests within 30 days.

10.4 Complaints

If you are dissatisfied with babul8's response to a privacy concern or believe that babul8 has processed your personal data in a manner inconsistent with this Privacy Policy or applicable data protection law, you have the right to raise a complaint through appropriate channels. babul8 takes all privacy complaints seriously and will investigate each complaint thoroughly. We encourage you to contact us directly in the first instance so that we have the opportunity to address your concern before escalation.