babu89 Privacy Policy

1 Introduction

babu89 ("we", "us", "our") is committed to protecting the privacy and personal data of every player who uses our online casino and sports betting platform. This Privacy Policy describes the types of information we collect, the purposes for which we use it, the conditions under which we may share it, and the rights you hold as a data subject.

This policy applies to all data collected through the babu89 website, mobile-optimised interface, customer support channels, and any other service operated under the babu89 brand. It should be read in conjunction with our Terms & Conditions, which govern the overall relationship between you and babu89.

We review and update this Privacy Policy periodically to reflect changes in our data practices, legal obligations, or platform features. The effective date at the top of this page indicates when the current version came into force. We encourage you to revisit this page from time to time.

2 Data Controller

For the purposes of applicable data protection legislation, babu89 acts as the data controller in respect of all personal data collected from registered players and website visitors. As data controller, babu89 determines the purposes and means by which personal data is processed.

If you have any questions about this policy or wish to exercise any of your data rights described in Section 10, you may contact our data protection team at the email address provided in Section 15. All data-related correspondence will be treated confidentially and responded to within the statutory timeframes.

3 Data We Collect

babu89 collects personal data through several channels. The categories of data we collect, and the context in which we collect them, are described below.

babu89 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health records. If any such data is incidentally disclosed during a support interaction, it will not be stored or used for any purpose beyond resolving the immediate query.

4 How We Use Your Data

babu89 uses the personal data we collect for the following purposes:

• Account Management: Creating, maintaining, and securing your babu89 player account, including password recovery and two-factor authentication where applicable.
• Identity & Age Verification: Confirming that all players are aged 18 or above and that the identity provided during registration is accurate. This is a legal and regulatory obligation.
• Payment Processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, and partner banking institutions. Transaction data is shared with payment processors only to the extent necessary to complete the transaction.
• Fraud Prevention & Security: Detecting and preventing unauthorised account access, duplicate account creation, money laundering, and other prohibited activities. This includes automated screening of transactions and behavioural analysis.
• Regulatory Compliance: Meeting obligations under applicable anti-money laundering (AML) legislation, know-your-customer (KYC) requirements, and any lawful request from a regulatory authority or law enforcement agency.
• Customer Support: Responding to queries, resolving disputes, investigating complaints, and maintaining a record of past interactions to provide consistent service.
• Responsible Gaming: Monitoring player behaviour to identify potential signs of problem gambling and offering appropriate tools or interventions in line with our Responsible Gaming commitments.
• Platform Improvement: Analysing aggregated usage data to identify technical issues, improve user experience, and enhance platform performance. This analysis is conducted on anonymised or pseudonymised datasets wherever possible.
• Marketing Communications: Sending promotional emails or in-platform notifications about offers, bonuses, and new features — but only where you have given explicit consent to receive such communications. You may withdraw marketing consent at any time by contacting support.

babu89 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a new lawful basis for the processing.

5 Legal Basis for Processing

babu89 processes personal data only where a valid legal basis exists under applicable data protection law. The legal bases we rely upon are as follows:

• Contract Performance: Processing that is necessary to fulfil our obligations under the Terms & Conditions you accepted at registration — including account creation, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with KYC, AML, and other applicable regulatory obligations, including mandatory reporting to authorities where required by law.
• Legitimate Interests: Processing undertaken for purposes such as fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics, where our interests are balanced against and do not override your privacy rights.
• Consent: Processing undertaken solely on the basis of your freely given, specific, and informed consent — most notably in relation to direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Data Sharing & Third Parties

babu89 does not sell, rent, or trade your personal data. We may share your data with the following categories of third party, strictly for the purposes described in this policy:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. These entities receive only the minimum data required to authorise and record a financial transaction.
• Identity Verification Providers: Third-party KYC and AML compliance services used to verify your identity and screen transactions against sanctions lists and fraud databases.
• Game Content Providers: Licensed game studios such as Evolution Gaming, Pragmatic Play, and Ezugi may receive pseudonymised session data necessary to deliver their games and settle outcomes. These providers operate under strict data processing agreements with babu89.
• IT Infrastructure Providers: Hosting, cloud storage, and cybersecurity service providers who process data on our behalf under binding data processing agreements and are prohibited from using your data for their own purposes.
• Legal & Regulatory Authorities: Government agencies, law enforcement bodies, courts, or regulators where disclosure is required by a valid legal obligation, court order, or regulatory instruction. babu89 will notify affected players of such disclosures where legally permitted to do so.

All third parties with whom babu89 shares personal data are contractually obligated to implement appropriate technical and organisational security measures and to use the data only for the specified purpose.

7 International Data Transfers

babu89 is operated under an international gaming licence, and some of the third-party service providers described in Section 6 may be located in countries outside Bangladesh. Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection, babu89 ensures that appropriate safeguards are in place prior to any such transfer.

These safeguards include, where applicable: standard contractual clauses approved by recognised data protection authorities; binding corporate rules; and transfers to jurisdictions that have been assessed as providing an adequate level of protection. If you would like further information about the specific safeguards applied to a particular international transfer, please contact our data protection team.

8 Data Retention

babu89 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Active Account Data: Retained for the duration of the account relationship and for a period of five (5) years following account closure, to satisfy AML record-keeping obligations.
• KYC & Verification Documents: Retained for a minimum of five (5) years from the date of verification, in compliance with applicable financial crime prevention regulations.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer Support Records: Retained for three (3) years from the date of the interaction, unless the matter is subject to ongoing legal proceedings.
• Marketing Consent Records: Retained for three (3) years from the date consent was given or withdrawn, whichever is later.
• Technical & Log Data: Retained for up to twelve (12) months from the date of collection, after which it is deleted or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to an identifiable individual.

9 Cookies & Tracking Technologies

babu89 uses cookies and similar tracking technologies to operate the platform, maintain your session, and gather anonymised analytics data. The categories of cookies we use are:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. They cannot be disabled without preventing you from using the platform.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and recently played games. Disabling these cookies may affect your experience.
• Analytical Cookies: Collect anonymised data about how players navigate the platform — pages visited, session duration, error rates — to help us improve performance. babu89 uses self-hosted analytics tools; no data is shared with third-party advertising networks.

babu89 does not use advertising or retargeting cookies. Most browsers allow you to manage cookie preferences through their settings. Restricting cookies may affect the functionality of the babu89 platform. Please refer to your browser's help documentation for guidance on managing cookie settings.

10 Your Data Rights

Subject to applicable data protection law, you have the following rights in respect of the personal data that babu89 holds about you:

• Right of Access: You may request a copy of all personal data we hold about you, along with information about how it is being used.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal obligations such as AML retention requirements.
• Right to Restriction: You may request that we restrict the processing of your data in certain circumstances — for example, while you contest its accuracy.
• Right to Data Portability: You may request a copy of data you have provided to babu89 in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You may object to processing based on legitimate interests or carried out for direct marketing purposes. Where marketing is the basis, we will cease processing immediately upon receipt of your objection.
• Right to Withdraw Consent: Where processing is based solely on your consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out prior to withdrawal.

11 Children's Privacy

babu89 is strictly an adult gaming platform. We do not knowingly collect personal data from any individual under the age of 18. All registration flows require the applicant to confirm they are aged 18 or above, and identity verification is used to enforce this requirement.

If babu89 discovers or is notified that personal data has been collected from a person under the age of 18, we will immediately suspend the associated account, delete the data in question, and refer the matter to our responsible gaming team. Parents or guardians who suspect that a minor has registered on babu89 should contact support immediately so that the account can be investigated and closed.

12 Security Measures

babu89 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the babu89 platform.
• AES-256 encryption for personal data stored in our databases.
• Role-based access controls ensuring that staff can only access data necessary for their specific job function.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Continuous monitoring for unusual access patterns, brute-force attempts, and other indicators of compromise.
• Formal incident response procedures that include mandatory notification timelines in the event of a data breach affecting your personal data.

While babu89 takes all reasonable precautions to protect your data, no internet-based service can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying babu89 immediately if you suspect any unauthorised use of your account.

13 Third-Party Links

The babu89 platform may contain references to third-party game providers and payment services that operate their own separate platforms and privacy policies. babu89 is not responsible for the privacy practices of any third-party service, and the inclusion of a reference to a third-party provider on the babu89 platform does not constitute an endorsement of that provider's data handling practices.

We encourage you to review the privacy policies of any third-party service you interact with through or alongside the babu89 platform, particularly licensed game studio providers and mobile payment operators such as bKash and Nagad.

14 Changes to This Privacy Policy

babu89 may update this Privacy Policy from time to time to reflect changes in applicable law, our data processing practices, or the features available on the platform. Material changes — those that significantly affect your rights or how your data is used — will be communicated to you via an in-platform notice or by email to your registered address at least 14 days before the change takes effect.

The version date displayed at the top of this page will be updated each time a new version is published. Your continued use of babu89 following the effective date of any revised policy constitutes your acknowledgment of the changes. If you object to any material change, you must cease using the platform and contact support to request account closure and data deletion.

15 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how babu89 has handled your personal data, please contact our data protection team. We aim to resolve all privacy-related enquiries within 30 calendar days.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the data protection supervisory authority in your jurisdiction. babu89 will cooperate fully with any investigation conducted by a competent supervisory authority.

For general platform information, please visit our About Us page. For questions about your rights as a player, our FAQ provides answers to common queries. For concerns about gambling habits, please visit our Responsible Gaming page.