ba889 Privacy Policy

This Privacy Policy ("Policy") applies to all players who access or use the ba889 online casino and sports betting platform, available at ba889.io (the "Platform"). The Policy describes how ba889 ("we", "us", "our", "the Operator") collects, stores, processes, and protects personal data relating to registered players and visitors.

By creating a ba889 account or by continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein. This Policy is incorporated by reference into the ba889 Terms & Conditions and should be read alongside them.

ba889 acts as the data controller in respect of all personal data collected from players via the Platform. As data controller, ba889 determines the purposes and means by which personal data is processed. All data controller responsibilities described in this Policy are discharged by the ba889 operations team, which may be contacted at [email protected] for any privacy-related enquiry.

Where ba889 engages third-party service providers — such as payment gateway operators, game studios, or analytics providers — those providers act as data processors under written agreements with ba889 and are contractually required to handle personal data only on ba889's documented instructions.

ba889 collects personal data falling into the following categories. Collection is limited to data that is proportionate and necessary for the stated purpose:

• Identity Data: Full legal name, date of birth, nationality, and copies of government-issued identification documents submitted during account verification (KYC).
• Contact Data: Email address and mobile phone number, including the mobile number associated with your bKash, Nagad, or Rocket mobile financial services account.
• Financial Data: References to payment instruments used for deposits and withdrawals, including mobile wallet account references (bKash, Nagad, Rocket, Upay), masked card numbers (last 4 digits only for Visa and Mastercard), and transaction identifiers.
• Account Data: Username, encrypted password, account balance history, betting and gaming activity records, bonus redemption history, and responsible gaming preference settings.
• Technical Data: IP address, device identifier, browser type and version, operating system, time zone (Bangladesh Standard Time, UTC+6), and connection logs.
• Usage Data: Pages visited on the Platform, casino games and sports betting markets accessed, session start and end timestamps, feature usage patterns, and click-path data.
• Communications Data: Records of all communications between you and the ba889 support team, including live chat transcripts and email correspondence.
• Cookie and Tracking Data: Data collected via cookies, web beacons, and similar tracking technologies, as described in Section 10 of this Policy.

ba889 collects personal data through the following channels:

• Direct submission by the player: Data provided during account registration, identity verification, deposit and withdrawal requests, support enquiries, and responsible gaming tool configuration.
• Automated technical collection: IP address, device data, session logs, and usage data collected automatically when you access and interact with the Platform.
• Payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Visa, and Mastercard when a deposit or withdrawal is processed. ba889 does not receive or store full payment credentials.
• Game studio providers: Session and outcome data from certified third-party game studios, including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, for the purpose of bet settlement and responsible gaming monitoring.
• Cookies and analytics tools: Behavioural and analytics data collected via cookies and similar technologies, as described in Section 10.

ba889 processes personal data only for specific, documented purposes. The following table describes the primary purposes for which your data is used and the lawful basis for each:

• Account creation and management: To establish and maintain your ba889 account, verify your identity, enforce the 21+ age restriction, and provide access to casino games and sports betting markets.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain financial records as required by applicable law.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, bonus abuse, multi-accounting, and other prohibited conduct as defined in the Terms & Conditions.
• Responsible gaming compliance: To monitor player behaviour for signs of problem gambling, enforce deposit limits and self-exclusion settings, and facilitate access to support resources as described on the ba889 Responsible Gaming page.
• Customer support: To respond to enquiries, resolve disputes, and provide assistance through the 24/7 ba889 support team operating in Bangladesh Standard Time (BST, UTC+6).
• Platform improvement: To analyse aggregated usage data for the purpose of improving the player experience, fixing technical issues, and optimising the ba889 platform.
• Promotional communications: To send information about ba889 bonuses, promotions, and seasonal offers (such as BPL cricket season promotions, Eid offers, and Pohela Boishakh campaigns) to players who have not opted out of marketing communications. Players may opt out at any time by contacting [email protected].
• Legal and regulatory compliance: To comply with applicable legal obligations, respond to lawful requests from competent authorities, and maintain records as required by law.

ba889 does not sell, rent, or trade your personal data. Data may be shared with third parties only in the circumstances described below, and always subject to appropriate data protection safeguards:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the minimum data necessary to process your financial transactions. These providers operate under their own privacy policies and applicable financial regulations.
• Game studio providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified studios receive session tokens and anonymised player references required to deliver game content and settle bets. These providers do not receive your full identity or financial data.
• Identity verification services: Where enhanced KYC checks are required, ba889 may use a third-party identity verification service provider. Such providers are bound by contractual data processing agreements with ba889.
• Analytics and platform infrastructure providers: Service providers engaged to support Platform hosting, security monitoring, and analytics may process technical and usage data on ba889's behalf under strict data processing agreements.
• Legal and regulatory authorities: ba889 may disclose personal data to competent authorities, law enforcement agencies, or courts where required to do so by applicable law, or where disclosure is necessary to prevent or investigate fraud, money laundering, or other criminal activity.

ba889 implements a multi-layered security framework to protect player personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures in place include:

• 256-bit SSL/TLS encryption for all data in transit between your device and ba889 servers.
• Encryption at rest for sensitive data fields including passwords (stored as salted cryptographic hashes), payment references, and identity document copies.
• Role-based access controls limiting internal access to personal data to ba889 staff members whose job functions require it.
• Continuous intrusion detection monitoring and automated alerting for anomalous access patterns.
• Regular security assessments and penetration testing of the ba889 platform infrastructure.
• Secure, geographically redundant data storage with automated backup procedures.

In the event of a personal data breach that poses a risk to player rights or interests, ba889 will notify affected players without undue delay and will take immediate remedial action. Players are also encouraged to protect their own ba889 account security by using a strong, unique password and not sharing ba889 Login credentials with any third party.

ba889 retains personal data only for as long as is necessary for the purposes described in this Policy, or as required by applicable legal and regulatory obligations. The specific retention periods for each data category are set out in the data collection table provided earlier in this Policy. As a general guide:

• Identity and financial data is retained for a minimum of 5 to 7 years from account closure to meet financial record-keeping obligations.
• Technical and usage data is retained for up to 13 months to support security monitoring and responsible gaming functions.
• Communications data is retained for 3 years from the date of last contact to support dispute resolution and quality assurance.
• Cookie and analytics data is retained for up to 12 months in line with standard analytics data retention practices.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an individual player. Players may request early deletion of their data as described in Section 9, subject to ba889's legal obligations to retain certain records.

As a player on the ba889 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the ba889 support team at [email protected] with your full account username, registered email address, and a description of your request. ba889 will respond to all verified requests within 10 business days:

• Right of Access: You have the right to request a copy of all personal data that ba889 holds about you, together with information on how that data is being used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by ba889. Players may update basic account information directly through the account settings panel.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to ba889's legal retention obligations.
• Right to Restrict Processing: You have the right to request that ba889 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where processing is unlawful.
• Right to Data Portability: You have the right to receive a copy of personal data you have provided to ba889 in a structured, commonly used, machine-readable format, where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on ba889's legitimate interests, subject to ba889's overriding grounds for processing.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

ba889 uses cookies and similar tracking technologies to operate the Platform effectively and to improve the player experience. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your login session, remember your account preferences, and enable secure payment flows. These cookies cannot be disabled without rendering the Platform inoperable.
• Analytics Cookies: ba889 uses privacy-respecting analytics tools to collect aggregated, anonymised data on how players use the Platform. This data helps us understand which features are most useful and where improvements are needed. Analytics cookies are retained for up to 12 months.
• Functionality Cookies: These cookies remember player preferences such as display settings and language selection, improving the consistency of the player experience across sessions.
• Security Cookies: Used to detect and prevent fraudulent activity, including bot detection and session integrity verification.

Players may manage or disable non-essential cookies through their browser settings. Please note that disabling certain cookies may affect the functionality of some ba889 Platform features. ba889 does not use third-party advertising cookies or behavioural targeting cookies to serve advertisements on external websites.

The ba889 platform integrates third-party services to deliver core functionality, including game content from certified studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) and payment processing from bKash, Nagad, Rocket, Upay, Visa, and Mastercard. These third-party services operate under their own privacy policies, which ba889 does not control.

ba889 does not embed or endorse third-party advertising networks, social media tracking pixels, or affiliate tracking tools that would result in your browsing behaviour being shared with external advertisers. Any links to third-party websites that may appear within ba889 content are for informational reference only; ba889 is not responsible for the privacy practices of third-party websites.

The ba889 platform is strictly intended for adults aged 21 years and above. ba889 does not knowingly collect personal data from individuals under the age of 21. Age verification is performed as part of the account registration and KYC processes, and ba889 reserves the right to request documentary proof of age at any stage.

If ba889 becomes aware that personal data has been collected from an individual under the age of 21, that data will be deleted immediately, the associated account will be suspended, and any funds held in the account will be returned to the payment source. Parents and guardians who believe that a minor may have accessed the ba889 platform should contact [email protected] immediately.

ba889 primarily stores and processes player data on servers serving the Bangladesh region. Where personal data is transferred to or processed by third-party service providers in other countries — for example, game studio infrastructure or payment gateway processing hubs — ba889 ensures that appropriate safeguards are in place, including contractual data processing agreements that require the recipient to apply data protection standards consistent with those described in this Policy.

ba889 does not transfer player data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate safeguards. Players who have questions about specific international data transfers may contact [email protected] for further information.

ba889 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, ba889 will notify registered players via the email address associated with their account and will update the "Last updated" date at the top of this Policy. The revised Policy will take effect 7 days after notification unless a player objects and closes their account within that period.

Players are encouraged to review this Privacy Policy periodically to remain informed of how ba889 handles their personal data. Continued use of the ba889 platform after the effective date of any amendment constitutes acceptance of the revised Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or ba889's handling of your personal data, please contact the ba889 privacy team using the details below. All privacy-related enquiries are handled by ba889 staff operating in Bangladesh Standard Time (BST, UTC+6), 24 hours a day, 7 days a week.

• Support Email: [email protected] (plain text — not a clickable link)
• Response Time: Within 10 business days for formal data rights requests; within 2–5 minutes via live chat for general enquiries
• Operating Hours: 24 hours a day, 7 days a week
• Time Zone: Bangladesh Standard Time (BST, UTC+6)