Privacy Policy —
Your Data at 88pg

When you create an account, place a bet, make a deposit, or interact with any feature of the 88pg platform, we collect certain categories of personal information. The categories listed below represent all of the data types that 88pg may gather, depending on how you use the platform. We collect only the information that is necessary for a specific, legitimate operational purpose — we do not collect data speculatively or in excess of what is required.

Where 88pg collects data from minors — or has reason to believe that data submitted during registration belongs to a person under the age of 18 — that data will be deleted immediately and the associated account will be closed. If you are a parent or guardian and believe your child has submitted data to 88pg, please contact us at [email protected] without delay.

88pg processes your personal data only where there is a lawful basis for doing so. The primary lawful bases we rely on are: performance of a contract (operating your account and delivering the services you have requested), compliance with a legal obligation (anti-money laundering checks, age verification, fraud prevention), and legitimate interests (improving platform performance, detecting abuse, and ensuring platform security). In limited cases, we rely on your consent, which you may withdraw at any time.

The following table sets out each processing purpose, the data categories involved, and the lawful basis on which we rely:

We do not use automated decision-making in a way that produces legal or similarly significant effects on you as an individual, except where required by applicable law or where you have provided explicit consent. Where automated tools are used in fraud detection or responsible gaming monitoring, a human review process is available upon request.

If you have consented to receive marketing communications from 88pg — such as promotional emails about new games, seasonal offers tied to BPL, IPL, T20 World Cup, Eid, or Pohela Boishakh — you may withdraw that consent at any time by clicking the unsubscribe link in any marketing email or by contacting our support team. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal.

88pg uses cookies, local storage, and similar tracking technologies to deliver a functional and personalised experience on the platform. A cookie is a small text file stored on your device by your browser when you visit a website. Cookies allow 88pg to remember your session, preferences, and certain platform settings between visits.

The table below describes the categories of cookies used on the 88pg platform and their purpose:

You can manage or delete cookies through your browser settings at any time. Most modern browsers allow you to block all cookies, block third-party cookies only, or delete cookies on a per-site basis. Please be aware that disabling strictly necessary or security cookies may prevent you from logging in or using core platform features on 88pg.

88pg does not sell your personal data to any third party under any circumstances. We share personal data with third parties only where it is strictly necessary for the operation of the platform, required by law, or where you have given your explicit consent. All third-party service providers who process data on behalf of 88pg are subject to contractual data processing agreements that require them to maintain confidentiality and process data only for the purposes specified by 88pg.

The categories of third parties with whom 88pg may share your data, and the reason for doing so, are as follows:

• Payment Processors: bKash, Nagad, Rocket, Upay, and card payment network operators (Visa, Mastercard) receive the minimum financial reference data required to process your deposit or withdrawal transactions. They are independent data controllers for their own processing activities, governed by their own privacy policies.
• Identity Verification Providers: Where KYC (Know Your Customer) verification is required, we may share identity document images and biographical data with a certified third-party verification service to confirm your identity and age. This service is bound by strict data processing terms.
• Game Software Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive only the session data necessary to initialise and operate their games within the 88pg platform. They do not receive your full personal profile.
• Platform Infrastructure Providers: Cloud hosting and server infrastructure providers who store platform data are contractually bound to maintain data security and are prohibited from accessing or using your data for their own purposes.
• Fraud Prevention and AML Services: In order to detect and prevent fraud, money laundering, and multi-account abuse, 88pg may use specialist fraud prevention tools that analyse behavioural and technical data. Results of such analysis are used internally by 88pg only.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or legitimate regulatory enquiry, 88pg may disclose personal data to law enforcement agencies or other governmental authorities. 88pg will only disclose the minimum data required to satisfy a lawful demand and will notify the affected player where legally permitted to do so.

88pg does not currently transfer personal data to recipients outside of the region in which the platform is operated, except where a specific service provider (such as a cloud infrastructure provider) stores data in a jurisdiction with equivalent data protection standards. In such cases, appropriate safeguards are contractually in place.

88pg retains personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods below represent our standard practice; in specific circumstances (such as an ongoing dispute, regulatory investigation, or legal proceeding), data may be retained for longer.

When a retention period expires and there is no continuing legal basis for retaining the data, 88pg will securely delete or anonymise the relevant information. Anonymised data — from which no individual can be identified — may be retained indefinitely for aggregate statistical purposes, such as understanding platform usage trends in cities like Dhaka, Chittagong, Sylhet, and Khulna.

If you request deletion of your account and personal data, we will action that request within 30 days, subject to our obligation to retain specific data categories for the periods described above. We will confirm in writing which data has been deleted and which data we are legally required to retain and for how long.

As a player on the 88pg platform, you have a number of rights with respect to the personal data we hold about you. These rights are set out below. To exercise any of these rights, please contact the 88pg support team at [email protected] with a clear description of your request. We will respond within 30 days of receiving a valid, verifiable request.

We may need to verify your identity before processing a data rights request, to ensure that we do not disclose personal data to an unauthorised party. Identity verification typically involves confirming your registered email address, mobile number, or submitting a copy of a government-issued ID. We do not charge a fee for standard data rights requests.

88pg implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures are reviewed and updated regularly in response to the evolving threat landscape and industry best practices.

• Transport Security: All data transmitted between your device and the 88pg platform is encrypted using TLS 1.2 or higher. The platform enforces HTTPS across all pages with HSTS headers to prevent protocol downgrade attacks.
• Data at Rest: Personal data and financial records stored on 88pg servers are encrypted using AES-256 encryption. Database access is restricted to authenticated internal systems only, with no public-facing database endpoints.
• Access Controls: Internal access to personal data is governed by role-based access control (RBAC). Staff members can only access the minimum data required for their specific job function. All access events are logged and subject to periodic audit.
• Password Security: Player passwords are stored as salted cryptographic hashes. 88pg staff cannot read your password in plaintext under any circumstances. We recommend you use a strong, unique password and never share it with anyone.
• Fraud and Anomaly Detection: Automated systems monitor login attempts, IP addresses, device fingerprints, and betting patterns in real time to detect and flag suspicious behaviour. Accounts flagged by these systems are reviewed by a qualified security analyst.
• Penetration Testing: 88pg engages independent security specialists to conduct regular penetration tests of the platform's infrastructure, web application layer, and API endpoints. Critical findings are remediated on a priority basis.

While 88pg takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You play an important role in keeping your account safe by using a strong password, logging out of shared devices after each session, and notifying us immediately if you suspect any unauthorised use of your 88pg account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 88pg handles your personal data, please contact our support team in the first instance. We take all privacy enquiries seriously and aim to respond to every message within 48 hours of receipt, operating 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6).

For formal data protection enquiries — including requests to exercise your rights under Section 6, complaints regarding data handling practices, or notifications of a potential security concern — please send a written communication to the following address:

Please include your registered username, the email address associated with your 88pg account, and a clear description of your request or concern. To protect your privacy, we may ask you to verify your identity before we act on your request. This verification step ensures that personal data is only disclosed to or modified at the instruction of the account holder.

If you are not satisfied with the way 88pg has handled your privacy concern after raising it directly with our team, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. 88pg will cooperate fully with any legitimate regulatory investigation into our data processing activities.

88pg reserves the right to update this Privacy Policy from time to time to reflect changes in legal requirements, platform features, or our internal data handling practices. When material changes are made, we will update the effective date at the top of this page and, where practicable, notify registered players by email. Your continued use of the 88pg platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how we protect your data.