bfbu88 Privacy Policy

bfbu88 is an online entertainment platform offering sports betting, live casino games, slot games, and related gaming services primarily to players located in Bangladesh. The bfbu88 platform is accessible at bfbu88.app.

For the purposes of this Privacy Policy, bfbu88 is the data controller — meaning we determine the purposes and means by which your personal data is collected and processed. All questions, requests, and concerns relating to your personal data should be directed to us using the contact details provided in clause 15 of this document.

By registering an account on bfbu88, logging in to an existing account, making a deposit, or otherwise accessing any feature of the bfbu88 platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein.

bfbu88 collects the following categories of personal data from players, either directly during registration and account use, or automatically through technical systems during platform interaction:

bfbu88 does not collect special categories of sensitive personal data (such as racial or ethnic origin, religious beliefs, biometric data, or health information) except where a player voluntarily discloses such information in the context of a responsible gaming self-referral or support communication.

bfbu88 collects personal data through the following channels:

• Direct registration: When you create a bfbu88 account, you provide your name, mobile number, date of birth, and set a password. This information is collected directly at the point of input.
• Identity verification (KYC): When we request proof of identity or age, you upload documentation directly to our secure verification portal. These documents are processed by our compliance team and, where applicable, a third-party identity verification service provider.
• Deposits and withdrawals: When you initiate a payment transaction via bKash, Nagad, Rocket, Upay, or a bank transfer, payment-related data is exchanged between bfbu88 and your payment provider to facilitate the transaction.
• Platform usage: Technical and usage data is collected automatically as you browse the bfbu88 website and interact with games, betting markets, and account features. This data is captured via server-side logging, first-party cookies, and platform analytics systems.
• Support communications: When you contact bfbu88 support via email at [email protected], the content of your communications and any attachments you provide are retained as part of your support record.
• Responsible gaming tools: When you activate a deposit limit, cooling-off period, or self-exclusion, the details of that request are recorded and associated with your account to ensure the tool is applied correctly.

bfbu88 processes your personal data on one or more of the following legal bases, depending on the nature and purpose of the processing activity:

• Contractual necessity: Processing is necessary to perform the contract between you and bfbu88 — specifically, to operate your account, accept deposits, settle bets, process withdrawals, and provide access to games and betting markets.
• Legal obligation: Processing is necessary to comply with applicable legal and regulatory obligations, including anti-money-laundering (AML) requirements, know-your-customer (KYC) verification, fraud prevention, and responsible gaming obligations.
• Legitimate interests: Processing is necessary for bfbu88's legitimate business interests, including platform security monitoring, fraud detection, system integrity testing, and improving the quality of our products and services — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is not justified by the above bases — for example, for certain optional marketing communications — bfbu88 will obtain your explicit consent before processing. You may withdraw consent at any time by contacting [email protected].

bfbu88 uses the personal data we collect for the following specific purposes:

• Account management: Creating and maintaining your bfbu88 account, authenticating your identity at login, and managing account settings and preferences.
• Service delivery: Providing access to sports betting markets (including BPL, IPL, T20 World Cup, and international cricket fixtures), live casino games, slots, and all other platform features.
• Payment processing: Facilitating deposits and withdrawals through bKash, Nagad, Rocket, Upay, and supported bank partners. Verifying that payment accounts are registered in your name.
• Identity and age verification: Confirming that all players are aged 18 or above and that the identity information provided matches official documentation, in accordance with our responsible gaming and anti-fraud policies.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, account takeovers, multi-accounting, bonus abuse, and other prohibited activities.
• Anti-money-laundering compliance: Monitoring transaction patterns to identify and report activity that may indicate money laundering or the use of criminally derived funds, in accordance with applicable AML obligations.
• Responsible gaming: Monitoring player activity to identify potential signs of problem gambling, administering self-exclusion and deposit limit tools, and maintaining records of responsible gaming interventions.
• Customer support: Responding to support enquiries, resolving complaints, and maintaining records of customer communications for quality assurance and dispute resolution purposes.
• Platform improvement: Analysing aggregated and anonymised usage data to understand how players interact with the bfbu88 platform, identify areas for improvement, and develop new features.
• Marketing communications: Sending promotional offers, bonus notifications, and seasonal campaign communications (such as Eid, Pohela Boishakh, and BPL season promotions) to players who have consented to receive such communications.

bfbu88 shares personal data with third parties only where necessary and only under the conditions described below. We do not share your data with third parties for their own independent marketing or commercial purposes.

• Payment providers: Your payment-related data (including mobile wallet account numbers and bank account details) is shared with your chosen payment provider — bKash, Nagad, Rocket, Upay, DBBL, City Bank, or BRAC Bank — solely to facilitate deposit and withdrawal transactions.
• Identity verification services: Where bfbu88 uses a third-party KYC service provider to assist with identity document verification, your identity documents and verification data may be shared with that provider under a strict data processing agreement.
• Game studios: When you play a game supplied by a third-party studio (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), certain technical data — including session identifiers and bet amounts — is exchanged with that studio's game servers to enable gameplay. Game studios are contractually prohibited from using this data for any purpose beyond game delivery.
• Legal and regulatory authorities: bfbu88 may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory authorities where we are legally required to do so, or where disclosure is necessary to prevent or detect fraud, money laundering, or other criminal activity.
• IT and infrastructure providers: bfbu88 engages third-party service providers for data hosting, cloud infrastructure, and cybersecurity services. These providers process personal data solely on bfbu88's instructions and under contractual data protection obligations.

All third parties with whom bfbu88 shares personal data are required to handle that data in accordance with applicable data protection standards. bfbu88 conducts due diligence on all data processors before engaging their services and reviews those arrangements on a periodic basis.

bfbu88 uses first-party cookies and similar tracking technologies on the bfbu88.app website to support the operation of the platform and to improve the player experience. We do not use third-party advertising or cross-site tracking cookies.

The following types of cookies are used on the bfbu88 platform:

• Essential cookies: These cookies are strictly necessary for the platform to function. They manage your authenticated session, maintain your login state, remember your currency preference, and support core security features. The platform cannot function without these cookies and they cannot be disabled.
• Functional cookies: These cookies remember your platform preferences — such as your preferred language setting, game display options, and responsible gaming tool configurations — so that you do not need to re-enter them on each visit.
• Analytics cookies: bfbu88 uses first-party analytics to understand how players navigate the platform, which games are most popular, and how different features are used. This data is collected in aggregate and anonymised form and is used solely to improve the platform.

bfbu88 treats financial data with the highest level of care. All deposit and withdrawal transactions are processed over encrypted connections. bfbu88 stores only the minimum financial data necessary to verify transactions, process withdrawals, and comply with AML obligations.

bfbu88 does not store full bank account credentials, bKash PINs, Nagad PINs, or any other authentication credentials belonging to your payment provider account. Payment authentication is handled entirely within your payment provider's own secure environment and is never transmitted to or stored by bfbu88.

Transaction records — including deposit amounts, withdrawal amounts, dates, and payment method identifiers — are retained for a minimum of five (5) years following the date of the transaction, in accordance with applicable anti-money-laundering record-keeping requirements.

bfbu88 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following indicative retention periods apply:

• Account registration data: Retained for the duration of your active account plus five (5) years following account closure, to comply with AML record-keeping requirements.
• Identity verification documents: Retained for five (5) years following the date of verification or account closure, whichever is later.
• Transaction records: Retained for a minimum of five (5) years following the date of each transaction.
• Support communications: Retained for three (3) years following the resolution of the relevant support case or complaint.
• Technical and usage data: Retained for up to twelve (12) months in identifiable form, after which it is anonymised for long-term analytics purposes.
• Responsible gaming records: Retained for the duration of the self-exclusion or restriction period plus five (5) years, to ensure that exclusion obligations can be enforced.
• Marketing consent records: Retained for as long as the consent remains valid and for three (3) years following withdrawal of consent, as evidence of the consent previously given.

At the end of each applicable retention period, personal data is securely deleted using industry-standard data destruction methods, or anonymised such that it can no longer be attributed to any individual player.

bfbu88 implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in transit: All data exchanged between your browser or device and the bfbu88 platform is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to all pages, login forms, payment flows, and API communications.
• Encryption at rest: Sensitive personal data stored on bfbu88 servers — including identity documents and financial records — is encrypted using AES-256 encryption at rest.
• Access controls: Access to player personal data is restricted to bfbu88 personnel who require it to perform their specific job functions. Access is granted on a need-to-know basis and is subject to regular review.
• Multi-factor authentication: Internal systems containing player data require multi-factor authentication for all staff access.
• Penetration testing: bfbu88 conducts periodic security assessments and penetration testing of its platform and data infrastructure to identify and remediate vulnerabilities.
• Incident response: bfbu88 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to affected players, bfbu88 will notify affected individuals as soon as reasonably practicable.

As a bfbu88 player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact bfbu88 at [email protected] with the subject line "Data Rights Request". bfbu88 will respond to all verified requests within a reasonable timeframe.

• Right of access: You have the right to request a copy of all personal data that bfbu88 holds about you, along with information about how that data is being processed.
• Right to rectification: If any personal data bfbu88 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: In certain circumstances, you have the right to request that bfbu88 delete your personal data. This right is subject to limitations where retention is required by law — for example, where AML record-keeping obligations apply.
• Right to restriction of processing: You have the right to request that bfbu88 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of your data is being contested.
• Right to data portability: Where processing is based on your consent or on a contract with you, you have the right to receive your personal data in a structured, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on bfbu88's legitimate interests. bfbu88 will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time by contacting [email protected]. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

The bfbu88 platform is strictly restricted to individuals aged 18 years and above. bfbu88 does not knowingly collect, store, or process personal data from any person under the age of 18. The registration process includes an age declaration and is followed by identity verification procedures specifically designed to confirm that players meet the minimum age requirement.

If bfbu88 becomes aware that personal data has been collected from a person under the age of 18 — whether through our own detection processes or through notification by a third party — we will immediately close the relevant account, delete all associated personal data to the extent permitted by law, and void any betting or gaming activity conducted on that account.

The bfbu88 platform may, in limited contexts, reference or display information sourced from third-party providers — such as live sports data feeds, game studio interfaces, or payment provider portals. When you are redirected to a third-party environment (for example, the bKash or Nagad payment portal), you are subject to that provider's own privacy policy and data practices, which are independent of bfbu88.

bfbu88 is not responsible for the privacy practices of any third-party platform, website, or service. We encourage you to review the privacy policies of any third-party service you interact with in connection with your bfbu88 account.

bfbu88 does not embed third-party advertising networks, social media tracking pixels, or affiliate tracking scripts on the bfbu88.app website. Any data collected by third-party game studios during gameplay is governed by those studios' own data processing arrangements with bfbu88, as described in clause 6.

bfbu88 reviews this Privacy Policy on a regular basis and will update it when our data practices change, when new legal obligations apply, or when we introduce new platform features that involve the collection or processing of personal data in a new way.

When material changes are made to this Privacy Policy, bfbu88 will publish the updated version on this page and update the effective date displayed at the top of the document. Where changes are particularly significant — for example, the introduction of a new data processing purpose — bfbu88 may also notify registered players via their registered mobile number or email address.

Your continued use of the bfbu88 platform following the publication of an updated Privacy Policy constitutes your acknowledgement of and agreement to the revised terms. We recommend bookmarking this page and checking it periodically, especially if you have been absent from the platform for an extended period.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bfbu88 handles your personal data, please contact us using the details below. All privacy-related communications should be submitted in English.

• Data Controller: bfbu88
• Support Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Rights Requests: "Data Rights Request"
• Subject Line for Privacy Complaints: "Privacy Complaint"
• Response Hours: Bangladesh Standard Time (BST, UTC+6) business hours
• Target Response Time: Within five (5) BST business days for general enquiries; within thirty (30) calendar days for formal data rights requests

bfbu88 is committed to resolving all privacy-related concerns promptly, fairly, and transparently. If you are not satisfied with our response to a privacy complaint, you may escalate the matter by submitting a formal written complaint to [email protected] with the subject line "Privacy Complaint — Escalation".