bad888 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how bad888 ("bad888", "we", "us", "our") collects, uses, stores, and protects personal data relating to players and visitors ("you", "your") who access or use the bad888 Platform at bad888.net ("the Platform"). This Policy forms part of the bad888 Terms and Conditions and is incorporated by reference into that agreement.

By registering an account on the bad888 Platform, making a deposit, or otherwise using any service we provide, you acknowledge that you have read this Policy and consent to the collection and use of your personal data as described herein. If you do not agree to this Policy, you must cease using the Platform immediately.

bad888 is committed to handling your personal data with care, transparency, and respect. This Policy has been written in plain English so that players in Bangladesh can understand exactly what data we hold, why we hold it, and what choices they have. If any part of this Policy is unclear, please contact the bad888 support team before using the Platform.

2. Who We Are

bad888 is an offshore online gaming and sports betting platform accessible at bad888.net. The Platform is designed for and marketed to adult players located in Bangladesh. All data processing activities described in this Policy are conducted by or on behalf of bad888 as the data controller for information collected through the Platform.

For all privacy-related enquiries, including requests to access, correct, or delete your personal data, you may contact the bad888 data team via the support email address listed in Section 15 of this Policy.

3. Data We Collect

bad888 collects the following categories of personal data from players and Platform visitors:

Category	Examples	When Collected
Identity Data	Full legal name, date of birth, national ID number, copy of government-issued photo ID	Account registration and KYC verification
Contact Data	Mobile phone number, email address, residential address (city, district, division)	Account registration and profile updates
Financial Data	bKash account number, Nagad account number, Rocket number, bank account details, deposit and withdrawal history	Deposits, withdrawals, and KYC
Transaction Data	Deposit amounts, withdrawal requests, bet history, bonus redemptions, game session records	Ongoing Platform use
Technical Data	IP address, device type, browser type and version, operating system, screen resolution, session duration	Each Platform visit
Usage Data	Pages visited, games played, features accessed, click-paths, search queries within the Platform	Each Platform visit
Communications Data	Live chat transcripts, support email exchanges, feedback submissions	When you contact support
Responsible Gaming Data	Deposit limit settings, self-exclusion status, cooling-off period records, problem gambling referral notes	When responsible gaming tools are used

bad888 does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health records (except where voluntarily disclosed in the context of a responsible gaming assessment), or biometric data.

4. How We Collect Your Data

4.1 Directly From You

The majority of personal data held by bad888 is provided directly by you when you register an account, submit KYC documents, make a deposit or withdrawal, contact customer support, participate in a promotion, or update your account profile. You are not obligated to provide this information; however, failure to provide mandatory data will prevent bad888 from creating or maintaining your account.

4.2 Automatically Through Platform Use

When you visit the bad888 Platform, certain technical and usage data is collected automatically through cookies, server logs, and similar tracking technologies. This data helps bad888 maintain Platform security, diagnose technical errors, analyse user behaviour to improve the service, and detect fraudulent activity. See Section 8 for a detailed explanation of our cookies practices.

4.3 From Third Parties

In limited circumstances, bad888 may receive data about you from third-party sources, including: payment processors (e.g., bKash, Nagad) who confirm the status of a transaction; identity verification service providers who assist with KYC checks; and fraud detection partners who flag high-risk account behaviour. Data received from third parties is handled under the same standards as data collected directly from you.

5. How We Use Your Data

bad888 uses the personal data it collects for the following purposes:

• Account Management: To create, verify, maintain, and close your bad888 account; to authenticate your identity at login; and to enforce the one-account-per-person rule.
• Payment Processing: To process deposits via bKash, Nagad, Rocket, Upay, and bank transfer; to verify withdrawal requests; and to maintain accurate financial records for your account.
• KYC and Fraud Prevention: To verify your age and identity as required; to detect and prevent fraudulent, collusive, or abusive account activity; and to identify and block underage players.
• Platform Delivery: To provide access to casino games, live dealer tables, sports betting markets, and all other Platform features you have requested.
• Customer Support: To respond to your queries, resolve disputes, process complaints, and improve the support experience based on interaction records.
• Responsible Gaming: To apply and monitor deposit limits, self-exclusion requests, and other responsible gaming tools you have activated; and to identify behavioural patterns that may indicate problem gambling.
• Security: To monitor for unauthorised account access, detect suspicious login activity, and maintain the integrity of the Platform.
• Legal Compliance: To meet any applicable legal obligations including record-keeping, anti-money laundering checks, and responding to legitimate requests from authorities.
• Marketing (where consented): To send you information about bad888 promotions, bonuses, and new features via email or SMS, where you have explicitly opted in to receive such communications.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve Platform performance, game selection, and user experience.

6. Legal Bases for Processing

bad888 processes your personal data under the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and bad888 — including account creation, payment processing, and game access.
• Legitimate Interests: Processing carried out to pursue bad888's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your privacy rights.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including age verification, anti-money laundering procedures, and record-keeping obligations.
• Consent: Processing based on your freely given, specific, and informed consent — most notably for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7. Sharing Your Data

7.1 Payment Processors

To process your deposits and withdrawals, bad888 shares the minimum necessary financial and identity data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. Each provider is bound by its own applicable data protection obligations and receives only the data required to complete the specific transaction.

7.2 Game Providers

To deliver casino games and live dealer services, bad888 passes a session token and limited account identifier to game providers including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe. These providers do not receive your full identity data and are contractually prohibited from using session data for any purpose other than game delivery and integrity monitoring.

7.3 Identity Verification Partners

For KYC purposes, bad888 may share identity documents and personal details with accredited identity verification service providers. These providers process your data solely to verify your identity and age and are bound by strict confidentiality obligations.

7.4 Legal Disclosures

bad888 may disclose your personal data to law enforcement agencies, courts, or other governmental bodies where required to do so by applicable law, by a valid court order, or where bad888 believes in good faith that such disclosure is necessary to prevent fraud, money laundering, or harm to any person.

7.5 No Sale of Data

bad888 does not sell, rent, lease, or otherwise commercially transfer your personal data to any third party for that party's own marketing, advertising, or commercial purposes. Data shared with the third parties described above is shared solely to deliver the services you have requested or to meet legal obligations.

8. Cookies and Tracking

The bad888 Platform uses cookies and similar tracking technologies to maintain session state, remember your preferences, detect fraudulent activity, and analyse Platform performance. Cookies are small text files stored on your device by your browser when you visit the Platform.

bad888 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during your visit. These cookies cannot be disabled without preventing your access to the Platform.
• Functional Cookies: Remember your preferences such as preferred language settings, last-visited game category, and responsible gaming notification frequency. Disabling these cookies may reduce Platform functionality.
• Analytics Cookies: Collect anonymised data about how players navigate the Platform — including pages visited, games played, and session duration. This data is used to improve Platform design and performance. bad888 uses internal analytics tools only; data from analytics cookies is not shared with advertising networks.
• Security Cookies: Used to detect suspicious login patterns, prevent account takeover attempts, and identify devices associated with fraudulent activity.

You may configure your browser to block or delete cookies at any time; however, blocking strictly necessary cookies will prevent you from logging into your bad888 account. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

9. Data Security

bad888 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data in transit between your device and the bad888 servers.
• Encryption of sensitive data fields (including financial account numbers) at rest in bad888's databases.
• Role-based access controls ensuring that only authorised bad888 personnel with a legitimate need can access player personal data.
• Regular security assessments and penetration testing of Platform infrastructure.
• Multi-factor authentication options for player accounts to prevent unauthorised login.
• Intrusion detection systems monitoring Platform infrastructure for anomalous activity around the clock.

While bad888 takes all reasonable precautions to protect your data, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in a high risk to your rights, bad888 will notify affected players without undue delay and take immediate steps to contain the breach and mitigate its impact.

10. Data Retention

bad888 retains personal data for as long as necessary to fulfil the purposes described in this Policy, unless a longer retention period is required by applicable legal obligations. The following general retention periods apply:

• Active account data: Retained for the lifetime of your bad888 account.
• Closed account data: Identity, KYC, and financial transaction records are retained for a minimum of 5 years following account closure for anti-money laundering and fraud prevention purposes.
• Support communications: Live chat transcripts and email correspondence are retained for 2 years from the date of the interaction.
• Technical and usage logs: Retained for 12 months on a rolling basis, after which they are aggregated or deleted.
• Marketing consent records: Retained until you withdraw consent and for a period of 2 years thereafter as evidence of the consent history.

When personal data is no longer required, bad888 will securely delete or anonymise it in a manner that prevents recovery or re-identification.

11. Your Rights

As a player on the bad888 Platform, you have the following rights in respect of your personal data. To exercise any of these rights, contact the bad888 support team using the details in Section 15. bad888 will respond to all valid data rights requests within 30 calendar days of receipt.

• Right of Access: You may request a copy of the personal data bad888 holds about you. bad888 will provide this in a structured, commonly used format.
• Right to Rectification: You may request that inaccurate or incomplete personal data held about you be corrected or completed. Minor profile corrections (e.g., phone number updates) can be made directly within your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to bad888's legal retention obligations, which may require certain data to be kept for a defined period even after account closure.
• Right to Restriction: You may request that bad888 restrict processing of your data in certain circumstances — for example, while the accuracy of data is contested or while a complaint is being investigated.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that your data be provided in a machine-readable format for transfer to another service provider.
• Right to Object: You may object to processing carried out on the basis of bad888's legitimate interests, including profiling for Platform improvement purposes. You may also object to the use of your data for direct marketing at any time — see Section 12.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

12. Marketing Communications

bad888 may send you promotional emails and SMS messages about bonuses, new games, seasonal offers (such as Eid promotions, Pohela Boishakh specials, or BPL cricket betting offers), and other Platform news — but only where you have explicitly opted in to receive such communications during registration or subsequently through your account notification preferences.

You may opt out of marketing communications at any time by: unchecking the relevant preferences in your bad888 account settings; clicking the unsubscribe link at the bottom of any promotional email; or contacting the bad888 support team directly. Opting out of marketing will not affect transactional communications such as deposit confirmations, withdrawal notifications, or account security alerts, which are sent regardless of marketing preference as they relate to the delivery of your account services.

13. Children's Privacy

The bad888 Platform is strictly for persons aged 18 years and over. bad888 does not knowingly collect, process, or retain personal data from anyone under the age of 18. If bad888 discovers that personal data has been collected from a person under 18, that account will be closed immediately and all associated data will be deleted without delay, subject to any legal retention obligations related to underage access incidents.

Parents and guardians who believe their child has registered on or accessed the bad888 Platform must contact the support team immediately using the details in Section 15. bad888 takes underage access extremely seriously and will act on all such reports without delay.

14. Changes to This Policy

bad888 reserves the right to update this Privacy Policy at any time to reflect changes in Platform operations, data processing practices, or applicable legal requirements. Material updates will be communicated to registered players via the email address held on account, via an in-Platform notification banner, or both, no less than 7 days before the revised Policy takes effect.

The effective date at the top of this Policy will be updated whenever a revision is made. We encourage you to review this Policy periodically to stay informed about how bad888 protects your personal data. Continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

15. Contact Us

For all privacy-related enquiries, data rights requests, or concerns about how bad888 handles your personal information, please contact the bad888 support team through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly from within your bad888 account dashboard — the fastest way to reach us.
• Support Email: [email protected] (displayed as plain text — not a clickable link). Include "Privacy Request" in your subject line for fastest routing.
• Response Time: bad888 acknowledges all privacy requests within 24 hours and aims to resolve them within 30 calendar days. Complex requests involving large data exports or cross-system deletion may take up to 45 days; you will be informed if this applies to your request.

By continuing to use the bad888 Platform, you confirm that you have read and understood this Privacy Policy and agree to the collection and use of your personal data as described herein. If you have any doubts about any provision in this Policy, please contact bad888 support before using the Platform. 18+ only. Please gamble responsibly.