bb6588 Privacy Policy

01 Introduction and Scope

This Privacy Policy ("Policy") is published by bb6588 ("we", "us", "our", "the Company"), the operator of the online casino and sports betting platform accessible at https://bb6588.app and all associated subdomains, mobile interfaces, and applications (collectively, the "Platform").

This Policy describes how bb6588 collects, uses, stores, shares, and protects personal data belonging to users ("you", "your") who register an account, browse the Platform, interact with our customer support team, or otherwise engage with any bb6588 service. It also sets out the rights you hold in relation to your personal data and the channels through which you may exercise those rights.

By registering a bb6588 account, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not consent to any part of this Policy, you should not register an account or use the Platform.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference into your agreement with bb6588.

02 Data We Collect

bb6588 collects the following categories of personal data in connection with your use of the Platform:

bb6588 does not collect or store your full bKash PIN, Nagad PIN, Rocket PIN, or any other mobile wallet authentication credential. Payment authentication is handled entirely within your own mobile wallet application. bb6588 receives only a transaction confirmation reference from the payment provider.

bb6588 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data, except where identity documentation submitted for KYC purposes incidentally contains such information. Such information is not extracted, processed, or retained beyond the purposes of identity verification.

03 How We Collect Your Data

bb6588 collects personal data through the following methods:

• Direct submission: Data you provide actively when registering an account, completing KYC verification, updating your profile, making deposits or withdrawals, contacting customer support, or responding to surveys and promotions.
• Automated technical collection: Data collected automatically when you access the Platform, including IP addresses, device identifiers, browser characteristics, and session activity, collected via server logs and similar tracking technologies.
• Cookies and local storage: Small data files placed on your device when you visit the Platform. See Section 7 for full details on how bb6588 uses cookies.
• Payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Visa, and Mastercard processing networks when you make a deposit or withdrawal. bb6588 does not receive your full payment credentials from these providers.
• Identity verification partners: Where bb6588 uses a third-party KYC service provider to validate identity documents, that provider may return a verification result and a risk score to bb6588. The original document images are handled according to that provider's own data retention policy.
• Third-party game studios: Game studios such as Pragmatic Play, NetEnt, Microgaming, Evolution Gaming, and Ezugi may pass session and game outcome data back to bb6588 for the purposes of account crediting, dispute resolution, and responsible gaming monitoring.

04 Purpose and Legal Basis for Processing

bb6588 processes your personal data only where a lawful basis exists. The primary purposes and their corresponding legal bases are set out below:

• Contract performance: Processing necessary to create and manage your account, process deposits and withdrawals, settle bets, provide customer support, and generally deliver the services you have requested from bb6588.
• Legal obligation: Processing required to comply with applicable anti-money-laundering (AML) regulations, identity verification obligations, fraud prevention requirements, and any lawful order issued by a competent authority in Bangladesh or another relevant jurisdiction.
• Legitimate interests: Processing carried out to protect the security and integrity of the Platform, detect and prevent fraud and bonus abuse, improve Platform functionality, conduct internal analytics, and manage the business operations of bb6588 — provided that such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where bb6588 sends optional marketing communications by email or on-Platform notification, this is done on the basis of your prior consent. You may withdraw consent at any time as described in Section 13.

05 How We Use Your Data

bb6588 uses the personal data it collects for the following specific purposes:

• Creating, verifying, and managing your bb6588 account, including processing registration information and conducting KYC checks.
• Processing financial transactions, including deposits via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and withdrawals to your registered payment method.
• Settling sports bets and casino wagers and maintaining an accurate record of your gaming activity and transaction history.
• Providing customer support through live chat and email, including investigating and resolving disputes and complaints.
• Monitoring account activity to detect and prevent fraud, money laundering, bonus abuse, collusion, and other prohibited conduct described in the Terms & Conditions.
• Administering responsible gaming tools, including deposit limits, self-exclusion, session reminders, and cooling-off periods, and monitoring for signs of problem gambling behaviour.
• Sending transactional communications necessary to the operation of your account, such as deposit confirmations, withdrawal updates, and security alerts.
• Sending promotional and marketing communications where you have given consent, including bonus offers, seasonal promotions tied to events such as the BPL, IPL, Eid, or Pohela Boishakh.
• Improving the bb6588 Platform through analysis of aggregated, anonymised usage data and gaming activity patterns. Individual users are not identifiable in such analyses.
• Complying with applicable legal obligations and responding to lawful requests from regulatory and law enforcement authorities.

06 Sharing Your Data

bb6588 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Your data may be shared only in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the minimum data necessary to process your deposit or withdrawal transaction. Each payment provider operates under its own privacy policy and data security standards.
• Identity verification providers: Third-party KYC service providers receive identity documents you submit and return a verification result to bb6588. These providers are contractually bound to process data solely for the purpose of identity verification and to maintain appropriate security measures.
• Game studio partners: Pragmatic Play, NetEnt, Microgaming, Evolution Gaming, Ezugi, and other integrated game studios receive a session token and anonymised player reference necessary to launch games and return outcomes. Personal identifying information beyond the session token is not shared with game studios.
• Technology infrastructure providers: Hosting, cloud storage, content delivery, and cybersecurity service providers who process data on bb6588's behalf under data processing agreements that prohibit independent use of your data.
• Legal and regulatory authorities: Where bb6588 is required by law, court order, or regulatory instruction to disclose personal data, it will do so to the extent strictly necessary and will notify you where permitted by applicable law.
• Business transfers: In the event of a merger, acquisition, or sale of all or a material part of bb6588's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy practices of the acquiring entity prior to the transfer taking effect where possible.

07 Cookies and Tracking Technologies

bb6588 uses cookies and similar client-side technologies to operate core Platform features and to understand how the Platform is used. The following categories of cookies are in use:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing identifiers. These cookies cannot be disabled without breaking core functionality. No consent is required for strictly necessary cookies.
• Functional cookies: Store your preferences such as language settings and responsible gaming tool configurations so that these do not need to be re-entered on every visit.
• Analytics cookies: Collect aggregated, anonymised data about how users navigate the Platform — which pages are visited most, where users exit, and how long sessions last. This data is used to improve the Platform. bb6588 uses analytics tools that process data within controlled server environments and do not transmit personal data to unauthorised third parties.
• Marketing cookies: Used only where you have provided prior consent to receive personalised promotional offers. These cookies track which promotions you have viewed or interacted with to avoid sending duplicate offers.

You can manage or delete cookies through your browser settings at any time. Disabling strictly necessary cookies will prevent you from logging in or using core Platform features. Disabling analytics or marketing cookies will not affect your ability to place bets or use gaming services.

08 Data Retention

bb6588 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal, regulatory, or compliance obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account and for a minimum of five years following account closure, to satisfy anti-money-laundering record-keeping requirements.
• Transaction and gaming activity data: Retained for a minimum of five years from the date of each transaction or gaming session, consistent with financial record-keeping standards applicable to the jurisdiction.
• KYC documents: Retained for a minimum of five years from the date of verification or account closure, whichever is later. Documents are stored in encrypted form with access restricted to authorised compliance personnel.
• Customer support communications: Retained for up to three years from the date of the interaction, to support dispute resolution and service improvement activities.
• Marketing consent records: Retained for the duration of your consent and for one year following withdrawal of consent, as evidence of the consent given.
• Technical and usage data: Retained in anonymised and aggregated form indefinitely for Platform analytics. Individual IP address logs are retained for up to 12 months and then deleted or anonymised.

When the applicable retention period expires, bb6588 will securely delete or anonymise personal data such that it can no longer be associated with an identifiable individual.

09 Data Security

bb6588 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS/SSL encryption: All data transmitted between your device and the bb6588 Platform is encrypted using industry-standard Transport Layer Security (TLS). This protects login credentials, payment data, and personal information in transit.
• Encrypted data storage: Sensitive personal data stored on bb6588 servers — including KYC documents and financial records — is encrypted at rest using strong encryption standards.
• Access controls: Access to personal data within bb6588's internal systems is restricted to authorised personnel on a need-to-know basis. All internal data access is logged and subject to periodic audit.
• Intrusion detection and monitoring: bb6588 operates continuous monitoring of its infrastructure to detect and respond to unauthorised access attempts, abnormal traffic patterns, and potential data breaches.
• Secure password handling: User passwords are hashed using a strong one-way cryptographic function before storage. bb6588 does not store plaintext passwords and cannot recover a forgotten password — only a reset mechanism is available.

While bb6588 takes all reasonable steps to protect your personal data, no internet-based system can guarantee absolute security against all threats. In the event of a data breach that is likely to result in a significant risk to your rights, bb6588 will notify affected users promptly and take immediate steps to contain and investigate the breach.

10 Your Rights

As a user of the bb6588 Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact bb6588 at [email protected] with a clear description of your request and sufficient information to verify your identity.

• Right of access: You have the right to request confirmation of whether bb6588 holds personal data about you and, if so, to receive a copy of that data along with information about how it is used.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data bb6588 holds about you. You may also update certain account information directly through your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing), or where you object to processing and no overriding legitimate interest exists. Note that certain data must be retained for legal compliance and cannot be deleted on request.
• Right to restriction: You may request that bb6588 restrict the processing of your personal data in certain circumstances, such as while the accuracy of data is contested or an objection is pending review.
• Right to data portability: Where processing is based on consent or contract, you may request that bb6588 provide your personal data in a structured, commonly used, machine-readable format for transfer to another provider.
• Right to object: You have the right to object to processing carried out on the basis of bb6588's legitimate interests, including profiling for fraud detection purposes. bb6588 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. See Section 13 for details on opting out of marketing.

bb6588 aims to respond to all data rights requests within 30 days of receipt. Where a request is complex or bb6588 receives a high volume of requests, this period may be extended by up to an additional 30 days, in which case you will be notified of the extension and the reason.

11 Children and Minors

The bb6588 Platform is strictly intended for adults aged 18 years and above. bb6588 does not knowingly collect personal data from individuals under the age of 18. If bb6588 discovers or is notified that a user is under 18, the account will be immediately closed, all data will be deleted or anonymised, and any funds in the account will be handled in accordance with the Terms & Conditions.

If you are a parent or guardian and believe that a minor has registered a bb6588 account or provided personal data to the Platform without your knowledge, please contact us immediately at [email protected]. bb6588 will investigate and take appropriate action, including account closure and data deletion, as quickly as possible.

12 Third-Party Links and Integrated Services

The bb6588 Platform integrates third-party services including payment gateways (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and game studios (Pragmatic Play, NetEnt, Microgaming, Evolution Gaming, Ezugi, Spribe, and others). Interactions with these services are governed in part by the privacy policies of those third parties.

bb6588 has no control over the content, privacy practices, or data handling of third-party operators once you leave the bb6588 Platform environment or interact directly with a third-party interface. bb6588 is not responsible for the privacy practices of any third-party service and encourages you to review the relevant privacy policies before providing data directly to any third party.

13 Marketing Communications

With your consent, bb6588 may send you promotional communications by email or via on-Platform notifications. These may include information about new game launches, deposit bonus offers, free spin promotions, seasonal campaigns (such as BPL season offers, Eid bonuses, or Pohela Boishakh promotions), and general Platform news.

You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link included in any marketing email sent by bb6588;
• Updating your notification preferences in your bb6588 account settings; or
• Contacting support at [email protected] with a clear request to stop receiving marketing communications.

Opting out of marketing communications does not affect transactional messages that are necessary to the operation of your account, such as deposit confirmations, withdrawal status updates, account security alerts, or KYC verification notifications. These operational messages will continue to be sent regardless of your marketing preferences.

14 Changes to This Privacy Policy

bb6588 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, Platform features, or business practices. The version number and effective date displayed at the top of this document will be updated with each revision.

Where a change is material — meaning it significantly affects how your data is used or the rights available to you — bb6588 will provide advance notice via a prominent notice on the Platform or by email to your registered address before the revised Policy takes effect. For minor changes, the updated Policy will be published on this page and your continued use of the Platform following the effective date will constitute acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically to stay informed about how bb6588 handles your personal data. If you have any questions about a specific change, our support team is available to explain it in plain English.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bb6588 handles your personal data, please contact our Data Protection team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the live chat widget on the bb6588 Platform
• Response Time: Data-related requests acknowledged within 48 hours; substantive responses provided within 30 days

When submitting a data rights request by email, please include your registered email address, a description of your request, and a copy of a government-issued ID to allow us to verify your identity before processing the request. bb6588 will not process data rights requests from unverified individuals to protect against fraudulent requests for third-party data.