Privacy Policy — bn8080 Platform

01 Data Controller

The bn8080 platform, accessible at https://bn8080.app, is responsible for the collection, processing, and storage of personal data submitted by players who register and use the platform. For the purposes of this Privacy Policy, bn8080 acts as the data controller in respect of all personal data it holds about registered players and website visitors based in Bangladesh.

As data controller, bn8080 determines the purposes and means by which your personal data is processed. bn8080 is committed to processing personal data lawfully, fairly, and transparently, and in accordance with the data protection principles described in this policy.

If you have any questions about how bn8080 processes your personal data, or if you wish to exercise any of the rights described in this policy, please contact the bn8080 data team at the address set out in Section 14 of this document.

02 Personal Data We Collect

bn8080 collects personal data in the following categories. The specific data collected from any individual player depends on the level of platform access and the services used.

2.1 Registration Data

When you create a bn8080 account, we collect the information you provide in the registration form, including:

• Full legal name
• Date of birth
• Residential address (including district, city, and postal code within Bangladesh)
• Email address
• Mobile telephone number (typically the number associated with your bKash or Nagad mobile wallet)
• Username and encrypted password

2.2 Identity Verification (KYC) Data

To comply with our Know Your Customer obligations and to verify your age and identity before processing withdrawals, we may collect:

• Copies of government-issued identity documents (National ID Card, Passport, or Driving Licence)
• Proof of address documents (utility bill, bank statement, or similar)
• Proof of payment method ownership (screenshots of bKash or Nagad wallet registration details)

2.3 Financial Transaction Data

When you make deposits or withdrawals, bn8080 records transaction details necessary to process and reconcile those transactions, including the payment method used (bKash, Nagad, Rocket, or Upay), the transaction reference number, the amount in Bangladeshi Taka (৳), the date and time in Bangladesh Standard Time (BST, UTC+6), and the transaction status.

2.4 Gaming and Betting Activity Data

bn8080 maintains logs of all gaming and sports betting activity conducted through your account, including game titles played, wagers placed, outcomes, bonus usage, and session durations. This data is used for account management, responsible gaming monitoring, dispute resolution, and fraud prevention.

2.5 Technical and Device Data

When you access the bn8080 platform, our servers automatically collect certain technical information, including your IP address, browser type and version, device type and operating system, referring URL, and pages visited during your session. This data is used for security purposes, to optimise platform performance, and to detect unusual or potentially fraudulent access patterns.

2.6 Communications Data

If you contact bn8080 customer support — whether by email, live chat, or any other channel — the content of those communications is recorded and stored to assist with resolving your query and for quality assurance purposes.

03 How We Collect Your Data

bn8080 collects personal data through the following means:

bn8080 does not purchase personal data lists from third-party data brokers or marketing companies. All personal data held by bn8080 is collected directly from the data subject or from technical systems operated by bn8080.

04 How We Use Your Personal Data

bn8080 uses personal data collected from players for the following purposes:

• Account creation and management: To register your account, maintain your player profile, and provide you with access to the bn8080 platform and its full range of games and betting markets.
• Identity and age verification: To confirm that you are aged 18 or above and that the information provided at registration is accurate, in compliance with responsible gaming obligations.
• Financial transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and to maintain accurate financial records in Bangladeshi Taka (৳).
• Fraud prevention and security: To monitor account activity for signs of fraud, money laundering, or other prohibited conduct, and to protect the integrity of the bn8080 platform and its player community.
• Responsible gaming: To monitor player activity for indicators of problem gambling behaviour and to administer self-exclusion, deposit limits, and cooling-off periods where requested or where bn8080 determines it is necessary.
• Customer support: To respond to enquiries, investigate complaints, resolve disputes, and maintain records of customer support interactions.
• Legal and regulatory compliance: To fulfil obligations under applicable anti-money-laundering requirements, to respond to lawful requests from competent authorities, and to enforce these Terms & Conditions.
• Platform improvement: To analyse aggregated, anonymised usage data in order to improve the design, performance, and content of the bn8080 platform.
• Marketing communications: Where you have provided consent, to send you information about bn8080 promotions, bonuses, and new game releases relevant to the Bangladesh market. You may opt out at any time.

05 Legal Basis for Processing

bn8080 processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing is necessary to perform the contract between bn8080 and the player — specifically, to provide the gaming and betting services that the player has registered to access.
• Legal obligation: Processing is required to comply with applicable legal obligations, including anti-money-laundering record-keeping requirements and age verification obligations.
• Legitimate interests: Processing is necessary for the legitimate interests pursued by bn8080, including fraud prevention, platform security, and the protection of other players, provided those interests are not overridden by the player's own rights and interests.
• Consent: Where bn8080 relies on consent as the legal basis for processing — most notably for marketing communications — that consent may be withdrawn at any time by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

06 Data Sharing with Third Parties

bn8080 does not sell or rent your personal data to any third party. Personal data is shared with third parties only in the following limited circumstances:

• Payment service providers: Transaction data is shared with bKash, Nagad, Rocket, Upay, and other payment processing partners strictly as necessary to process your deposits and withdrawals. These providers process data only as permitted under our agreements with them and are not authorised to use your data for their own commercial purposes.
• Game content providers: To deliver casino games and live dealer content, bn8080 works with certified game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may process limited technical data — such as session tokens — to deliver gameplay. No personally identifiable registration data is shared with game studios.
• Identity verification services: bn8080 may use third-party KYC verification tools to assist with the identity verification process. Any provider used for this purpose is bound by strict data processing agreements and is not permitted to retain your identity documents beyond the purposes of verification.
• Legal and regulatory authorities: Where required by applicable law, court order, or a lawful request from a competent government or regulatory authority, bn8080 may disclose personal data to those authorities.
• Fraud prevention agencies: Where bn8080 has reasonable grounds to suspect fraud, money laundering, or other criminal activity, relevant data may be shared with specialist fraud prevention services or law enforcement bodies.

All third-party service providers that process personal data on behalf of bn8080 are required to maintain appropriate technical and organisational security measures and to process data only for the specific purposes authorised by bn8080.

07 Payment Data & Financial Privacy

bn8080 takes the privacy of financial data with particular seriousness. The following specific measures apply to payment-related personal data:

• bn8080 does not store full mobile wallet PIN codes or banking passwords. Payment authentication takes place within the payment provider's own secure environment (bKash, Nagad, Rocket, or Upay).
• Transaction records held by bn8080 include the payment method type, the registered mobile number or account identifier associated with the payment method, the transaction amount in BDT, and the transaction reference. This information is retained to satisfy financial record-keeping obligations and to support dispute resolution.
• Players must ensure that the mobile wallet or bank account used for deposits at bn8080 is registered in their own name. Deposits originating from third-party payment accounts are a breach of the bn8080 Terms & Conditions and may result in account suspension.
• All payment data in transit is encrypted using TLS. Stored financial records are protected by access controls that restrict visibility to authorised bn8080 personnel only.

08 Cookies & Tracking Technologies

The bn8080 platform uses cookies and similar technologies to ensure the platform functions correctly, to remember your preferences, and to understand how players interact with the site. The following categories of cookies are used:

You may manage cookie preferences through your browser settings. Please note that disabling functional or analytics cookies will not affect your ability to access the bn8080 platform, though some personalisation features may be unavailable. Disabling strictly necessary or security cookies may impair core platform functionality and is not recommended.

09 Data Retention

bn8080 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and registration data: Retained for the duration of the active account relationship and for a minimum of five years following permanent account closure, to satisfy anti-money-laundering and fraud prevention obligations.
• KYC and identity verification documents: Retained for a minimum of five years from the date of verification, in line with applicable record-keeping requirements.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction.
• Gaming and betting activity logs: Retained for a minimum of three years from the date of each session or wager.
• Customer support communications: Retained for a minimum of two years from the date of the final communication in any given support thread.
• Marketing consent records: Retained for as long as you remain opted in to marketing communications, plus one year from the date of opt-out, to demonstrate compliance with consent requirements.

At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification of the individual data subject.

10 Your Data Subject Rights

As an individual whose personal data is processed by bn8080, you hold the following rights. To exercise any of these rights, please contact the bn8080 data team using the contact details set out in Section 14.

• Right of Access: You have the right to request a copy of the personal data that bn8080 holds about you and to receive information about how that data is being processed.
• Right to Rectification: If any personal data held by bn8080 about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure: In certain circumstances — for example, where your data is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and there is no other lawful basis for processing — you may request that bn8080 delete your personal data. Please note that this right is subject to overriding legal obligations such as anti-money-laundering record-keeping requirements.
• Right to Restriction of Processing: You may request that bn8080 restrict the processing of your personal data in certain circumstances, for example while the accuracy of data is being contested or while an objection to processing is being assessed.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: Where processing is based on legitimate interests, you have the right to object to that processing. bn8080 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

bn8080 will respond to all valid data subject requests within 30 days of receipt. In complex cases, this period may be extended by a further 30 days; you will be notified if an extension is required.

11 Data Security Measures

bn8080 implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between player devices and the bn8080 platform.
• Encrypted storage of sensitive personal data, including password hashes and identity document files.
• Role-based access controls that restrict access to personal data to authorised bn8080 personnel with a legitimate business need.
• Regular security assessments and vulnerability testing of the bn8080 platform infrastructure.
• Audit logging of access to personal data records, enabling detection of unauthorised access attempts.
• Incident response procedures to enable rapid identification and containment of any data security incident.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, bn8080 will notify affected players promptly using the contact details registered on their accounts, and will take all reasonable steps to mitigate the impact of the breach.

While bn8080 takes robust measures to protect your data, no internet-based platform can guarantee absolute security. Players are also responsible for protecting their own account credentials — see the Account Security section of the Terms & Conditions for guidance.

12 Minors & Under-18 Access

The bn8080 platform is strictly for adults aged 18 and above. bn8080 does not knowingly collect personal data from individuals under the age of 18. The age verification measures described in Section 4 of this policy are applied precisely to prevent minors from accessing the platform.

If bn8080 becomes aware that personal data has been collected from an individual who was under 18 at the time of registration, that account will be closed immediately, any funds in the account will be handled in accordance with the bn8080 Terms & Conditions, and the personal data of the minor will be deleted from bn8080 systems as soon as is practicable, subject to any overriding legal obligations.

If you believe that a minor may have registered an account at bn8080, please contact our support team immediately at the address set out in Section 14. bn8080 takes the protection of minors from gambling harm with the utmost seriousness.

13 Changes to This Privacy Policy

bn8080 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform and services. The effective date displayed at the top of this document will be updated whenever a new version of the policy is published.

Where changes to this policy are material — for example, where a new category of personal data is collected, or where data is shared with a new category of third party — bn8080 will endeavour to notify registered players by email to their registered address or via a prominent notice on the bn8080 platform prior to the change taking effect.

Your continued use of the bn8080 platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the updated policy. If you do not agree with any changes, you should cease using the platform and may request account closure by contacting our support team.

We encourage all players to review this Privacy Policy periodically to remain informed about how bn8080 is protecting and using their personal data.

14 Contact & Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or have concerns about how bn8080 has handled your personal data, please contact the bn8080 data team using the following details:

• Email: support at bn8080 dot app
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Response Time: All privacy-related requests are acknowledged within 72 hours and resolved within 30 days.

When submitting a data subject access request or any other rights request, please provide your registered email address and username so that our team can locate your account records efficiently. bn8080 may request proof of identity before fulfilling a data access or deletion request to ensure the security of your personal data.