bn088 Privacy Policy — How We Handle Your Personal Data

bn088 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all users who access or register on https://bn088.pro. This Privacy Policy describes the types of personal information we collect, the purposes for which we use it, the circumstances under which we disclose it to third parties, and the rights available to you in relation to your personal data. This policy applies to all registered players, visitors, and any other individuals whose personal data we process in connection with the bn088 platform.

By using the bn088 platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to request account closure. This Privacy Policy should be read alongside our Terms and Conditions, which govern the contractual relationship between you and bn088.

Our Privacy Principles

Before the detailed policy sections, these six principles summarise how we approach data at bn088. They are not legally exhaustive — the full policy below governs — but they represent the spirit of how we handle your information.

bn088 collects personal data in three primary ways: information you provide directly when registering or using the platform, information generated automatically by your use of the platform, and information received from third parties such as payment processors and identity verification services. The specific data points within each category are described below.

Information You Provide Directly

• Registration data: full legal name, date of birth, registered mobile number, and chosen password. This is required to create a bn088 account.
• KYC documentation: government-issued photo ID (National Identity Card, passport, or equivalent), and where required, proof of address. Submitted when completing identity verification before withdrawals.
• Payment information: mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers), bank account details where bank transfer is used. bn088 does not store full card numbers.
• Communications: messages sent to customer support, feedback submissions, and any other direct correspondence with bn088. These are retained to provide support context and quality assurance.

Information Generated Automatically

• Device and technical data: IP address, device type (phone model, operating system version), browser type, screen resolution, and network type (4G, Wi-Fi). Used for security monitoring, fraud detection, and platform optimisation.
• Usage and behavioural data: pages visited, games played, betting activity, session duration, login timestamps, and platform interaction patterns. Used to personalise the experience, detect unusual activity, and improve the product.
• Cookie data: session cookies, authentication tokens, and analytics identifiers. See Section 7 for full details on cookies and how to manage them.

Information From Third Parties

• Identity verification results: pass/fail outcomes and risk scores from KYC verification providers. bn088 uses these to confirm identity documents are genuine and to satisfy anti-money laundering obligations.
• Payment confirmation data: transaction reference numbers and status codes from payment processors (bKash, Nagad, Rocket, Upay, bank gateways). Used to reconcile deposits and withdrawals and investigate any disputed transactions.
• Fraud and risk signals: information from fraud prevention partners indicating whether an IP address, device, or payment method has been associated with fraudulent activity on other platforms. Used solely for platform security and account protection.

The table below maps the primary purposes for which bn088 uses personal data to the data categories involved. We do not use personal data for automated decision-making that produces legal effects without human review. We do not use your data for targeted advertising on third-party platforms.

bn088 processes personal data on the following legal bases. Where more than one basis applies to a particular processing activity, we rely on the most appropriate one for that context:

• Contractual necessity: processing required to perform the contract between you and bn088 — for example, creating your account, processing deposits and withdrawals, and providing access to games. Without this processing, bn088 cannot deliver its services.
• Legal obligation: processing required to comply with applicable law, including anti-money laundering regulations, KYC requirements, and the retention of transaction records for audit purposes.
• Legitimate interests: processing carried out in pursuit of bn088's legitimate business interests where these are not overridden by your data protection interests — for example, fraud detection, platform security monitoring, and product improvement analytics.
• Consent: where processing is based on your freely given, specific, informed, and unambiguous consent — for example, receiving optional promotional communications. You may withdraw consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

bn088 does not sell your personal data to third parties. We do not share your personal data with advertisers, data brokers, or social media platforms. We share personal data only in the following limited and specific circumstances:

• Payment processors: we share the payment identifiers necessary to process your deposit or withdrawal (e.g. your bKash or Nagad account number) with the relevant payment gateway. These processors are contractually bound to use your data only to complete the transaction and are prohibited from using it for any other purpose.
• KYC and identity verification providers: we share KYC documents and personal identifiers with third-party identity verification services for the purpose of age and identity verification. These providers process data strictly in accordance with their own privacy policies and applicable data protection law.
• Fraud prevention and security partners: we may share device data, IP addresses, and risk signals with fraud prevention services to protect the platform and its users from account takeover, bonus abuse, and financial crime. Data shared with these partners is used solely for security purposes.
• Legal authorities: we may disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to protect the safety of our users or the integrity of the platform. We will notify you of any such disclosure unless prohibited from doing so by law.

All third parties with whom bn088 shares personal data are required to implement appropriate technical and organisational security measures and to process personal data only for the purposes for which it was shared. bn088 does not transfer personal data outside of Bangladesh unless the receiving jurisdiction provides an equivalent level of data protection.

bn088 takes the privacy of your financial data very seriously. When you make a deposit or request a withdrawal, the payment details you provide are transmitted directly to the relevant payment gateway using SSL/TLS encryption. bn088 does not store full mobile wallet credentials or complete bank account numbers in our databases. We store only the minimum payment identifiers needed to reconcile transactions — typically the last four digits of an account number or a tokenised reference provided by the payment gateway.

Transaction records — including the date, amount, payment method type, and transaction status — are retained for a minimum of five years from the date of the transaction to comply with financial record-keeping obligations. These records are accessible to authorised bn088 personnel for dispute resolution and audit purposes, and may be disclosed to regulatory or law enforcement authorities where legally required.

bn088 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device that allow us to recognise your browser, maintain your session, and understand how you use the platform. We use three categories of cookie:

• Essential cookies: required for the platform to function. These include session authentication cookies that keep you logged in during your session and security cookies that help detect and prevent fraudulent activity. These cannot be disabled without breaking core platform functionality.
• Functional cookies: used to remember your preferences such as language settings, display options, and previously used payment methods to speed up future transactions. Disabling these will not break the platform but may reduce convenience.
• Analytics cookies: used to understand aggregate platform usage patterns — pages visited most, game categories explored, session durations. This data is processed in anonymised or pseudonymised form and is used solely to improve platform performance and content. bn088 does not use analytics data for behavioural advertising.

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that blocking essential cookies will prevent you from logging in or using the platform. Clearing cookies will log you out of any active session.

bn088 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law. The following retention periods apply as a general guide: active account data is retained for the duration of the account's activity plus 5 years following account closure; KYC documents are retained for a minimum of 5 years from the date of submission or account closure, whichever is later; transaction records are retained for a minimum of 5 years from the transaction date; customer support correspondence is retained for 3 years from the date of the last interaction.

When retention periods expire, bn088 will securely delete or anonymise personal data so that it can no longer be associated with an identifiable individual. Where deletion is technically complex (for example, data held in encrypted backup archives), we will ensure the data is rendered inaccessible and will complete deletion at the next scheduled maintenance cycle. You may request early deletion of your personal data subject to legal retention obligations — see Section 9 for details of your rights.

You have the following rights in relation to the personal data bn088 holds about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and your registered mobile number. We will respond within 30 days. Where a request is complex or numerous, we may extend this period by a further 30 days, in which case we will notify you.

• Right of access: you may request a copy of the personal data bn088 holds about you, together with information about how it is used and with whom it is shared. We will provide this in a clear, intelligible format within 30 days of your request.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it. We will process valid rectification requests within 14 days.
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (where consent was the basis for processing), or where the data has been unlawfully processed. Erasure requests are subject to legal retention obligations — data we are required by law to retain cannot be deleted early.
• Right to restrict processing: you may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or where you have objected to processing and we are assessing whether our legitimate interests override your rights.
• Right to object: you may object to processing based on legitimate interests at any time. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary for legal claims.

bn088 will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee. We may also request proof of identity before processing a data rights request to ensure we are responding to the correct individual.

bn088 implements a layered security architecture to protect personal data from unauthorised access, disclosure, alteration, and destruction. Our security measures include: SSL/TLS encryption for all data in transit between your device and bn088 servers; encryption of sensitive data at rest including KYC documents and payment identifiers; role-based access controls limiting access to personal data to only those bn088 personnel who require it for their job function; session timeout mechanisms that automatically log out inactive accounts; and continuous monitoring for unusual login patterns or account activity that may indicate compromise.

In the event of a personal data breach that poses a risk to your rights and freedoms, bn088 will notify affected users without undue delay and will take immediate steps to contain and remediate the breach. bn088 conducts regular internal security reviews and updates its security practices in response to the evolving threat landscape. You can help protect your account by using a strong, unique password, keeping your registered mobile number active, and contacting support immediately if you suspect unauthorised access.

The bn088 platform is strictly intended for adults aged 21 and above. bn088 does not knowingly collect, store, or process personal data belonging to any individual under the age of 21. Registration by anyone under the age of 21 is prohibited under our Terms and Conditions. If a parent or guardian believes that their child under the age of 21 has provided personal data to bn088 without their knowledge or consent, they should contact us immediately at [email protected]. Upon verification of such a report, bn088 will promptly delete the relevant personal data and permanently close the associated account, and will refund any balance to the payment method used, subject to identity verification.

bn088 reserves the right to update or modify this Privacy Policy at any time. Changes take effect immediately upon publication on the platform. The date at the top of this page reflects when the policy was last updated. We recommend that you review this policy periodically to stay informed of any changes. Where a material change is made — one that significantly affects how we collect, use, or share your personal data — we will endeavour to notify registered users via their registered mobile number or by displaying a prominent notice on the platform at the time of login.

If you do not agree with any change to this Privacy Policy, you should stop using the platform and may request account closure by contacting [email protected]. Your continued use of the platform following publication of any change constitutes your acceptance of the updated policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how bn088 handles your personal data, please contact our support team at [email protected]. Please include "Privacy Enquiry" or "Data Rights Request" in the subject line, along with your registered mobile number, to help us direct your query to the appropriate team member.

Our support team is available 24 hours a day, 7 days a week. We aim to acknowledge all privacy-related enquiries within 24 hours (Bangladesh Standard Time, UTC+6) and to provide a substantive response within 30 days. For complex data rights requests that require more time, we will keep you informed of progress and provide a final response no later than 60 days from the date of your initial request.