babu8i Privacy Policy

1 Introduction

babu8i ("we", "us", "our") is committed to protecting the privacy and personal data of every player who uses our online casino and sports betting platform (the "Platform"). This Privacy Policy describes how babu8i collects, uses, stores, shares, and protects personal data in connection with your use of the Platform and any associated services.

This Policy applies to all registered players, prospective players who browse the Platform, and any individual who contacts babu8i through our support channels. It should be read alongside our Terms & Conditions, which govern your overall use of the Platform.

By registering an account or continuing to use the babu8i Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact our support team to close your account.

2 Data Controller

babu8i operates as an offshore-licensed online gaming platform. As the entity that determines the purposes and means of processing your personal data, babu8i acts as the data controller in respect of all personal data collected through the Platform.

If you have any questions about how your data is handled, or wish to exercise any of your privacy rights, you may contact our dedicated Data Protection team at [email protected]. We aim to respond to all data-related enquiries within 5 business days.

3 Personal Data We Collect

babu8i collects the minimum personal data necessary to provide a safe, compliant, and fully functional gaming platform. The categories of data we collect are set out below:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data (except where voluntarily disclosed in a responsible gaming context), or biometric data beyond identity document photographs required for KYC purposes.

4 How Personal Data Is Collected

babu8i collects personal data through the following means:

• Directly from you — when you register an account, submit identity verification documents, make a deposit or withdrawal, contact customer support, or respond to a survey or promotion.
• Automatically — through cookies, web beacons, log files, and similar tracking technologies when you visit or interact with the Platform. This includes your IP address, session duration, pages visited, and device identifiers.
• From third-party service providers — including identity verification agencies, payment processors (such as bKash, Nagad, Rocket, and Upay), fraud prevention services, and analytics providers, who may supply additional data points to supplement what you have provided directly.
• From publicly available sources — including sanctions lists, politically exposed persons (PEP) databases, and publicly available social or government records, used solely for fraud prevention and regulatory compliance purposes.

5 Purposes of Processing & Legal Basis

babu8i processes your personal data for the following purposes, each supported by a lawful basis under applicable data protection law:

Where processing is based on your consent (for example, for marketing communications), you may withdraw that consent at any time by contacting [email protected] or updating your account notification preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

6 Sharing Your Personal Data

babu8i does not sell, rent, or trade your personal data to any third party for commercial purposes. Your data may be disclosed to the following categories of third parties solely to the extent necessary for the purposes described in this Policy:

• Payment processors — including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank, to facilitate deposits and withdrawals.
• Identity verification providers — to verify your age, identity, and the authenticity of documents submitted during the KYC process.
• Game technology providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe, who may receive limited technical session data to deliver games to your device.
• Fraud prevention and security services — who analyse transaction patterns and device signals to detect and prevent fraudulent activity on the Platform.
• Regulatory and law enforcement bodies — where babu8i is required by law, court order, or regulatory direction to disclose personal data.
• Professional advisers — including legal counsel, auditors, and insurers, who are bound by strict confidentiality obligations.

All third-party service providers who process personal data on behalf of babu8i are required to implement appropriate technical and organisational security measures and are permitted to use your data only for the specific purposes for which it was shared.

7 Data Retention

babu8i retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and identity data — retained for the duration of your account and for a minimum of 5 years following account closure, to satisfy AML and regulatory record-keeping obligations.
• Financial transaction records — retained for a minimum of 5 years from the date of each transaction, in line with standard financial regulatory requirements.
• Gaming activity logs — retained for a minimum of 3 years from the date of each gaming session.
• Customer support communications — retained for 2 years from the date of the last communication, unless the subject matter relates to a dispute or legal proceeding, in which case retention is extended for the duration of that matter.
• Marketing preference records — retained for as long as your account remains active. Opt-out records are retained indefinitely to ensure we do not re-contact individuals who have unsubscribed.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

8 Security Measures

babu8i implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encrypted storage of sensitive data, including identity documents and financial information, on secure, access-controlled servers.
• Hashed and salted storage of account passwords — babu8i never stores passwords in plain text and cannot retrieve your password.
• Multi-factor authentication options for player accounts to provide an additional layer of access security.
• Regular penetration testing and security audits by independent cybersecurity specialists.
• Strict internal access controls ensuring that personal data is accessible only to authorised personnel who require it to perform their role.
• Incident response procedures enabling rapid detection and containment of any potential data security breach.

9 Cookies & Tracking Technologies

babu8i uses cookies and similar technologies (including web beacons and local storage) to operate and improve the Platform. Cookies are small text files placed on your device when you visit the Platform. They serve the following functions:

• Essential cookies — required for core Platform functionality such as session management, login state, and security token validation. These cannot be disabled without impairing your ability to use the Platform.
• Functional cookies — store your preferences such as language settings, display options, and last-visited game categories to personalise your experience.
• Analytics cookies — collect aggregated, anonymised data about how players navigate and interact with the Platform, helping us identify performance issues and improve usability.
• Fraud prevention cookies — capture device fingerprint signals used to detect suspicious activity patterns and protect accounts from unauthorised access.

babu8i does not use third-party advertising or retargeting cookies. You may manage your cookie preferences through your browser settings at any time; however, disabling essential cookies may affect the functionality of the Platform.

10 Your Privacy Rights

Subject to applicable law, you hold the following rights in relation to the personal data babu8i holds about you. To exercise any of these rights, please contact [email protected] with your request and sufficient information to verify your identity.