ba998 Privacy Policy

1. Introduction and Scope

This Privacy Policy (the "Policy") describes how ba998 (the "Platform", "we", "us", or "our") collects, processes, stores, and protects the personal data of individuals who access or use the ba998 website at https://ba998.io and all associated services, including sports betting, casino games, live dealer games, promotional offers, and customer support (collectively, the "Services").

This Policy applies to all registered players, prospective players who browse the ba998 website without registering, and any individual who contacts ba998 via support channels. By accessing the ba998 website or creating an account, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

This Policy should be read alongside the ba998 Terms and Conditions and the Responsible Gaming policy, which together constitute the full legal framework governing your use of the ba998 platform.

2. Data Controller

For the purposes of this Privacy Policy, ba998 acts as the data controller in respect of the personal data collected through the ba998 platform. As data controller, ba998 determines the purposes and means of processing your personal data. If you have any questions regarding our role as data controller or wish to exercise any of your data subject rights described in Section 11, please contact us at [email protected].

3. Personal Data We Collect

ba998 collects the following categories of personal data from players and website visitors:

3.1 Identity and Contact Data

• Full legal name
• Date of birth
• Gender (where provided during registration)
• Email address
• Mobile phone number
• Residential address including city, district, and postal code
• Nationality and country of residence

3.2 Identity Verification (KYC) Data

• National Identity Card (NID) number and scan
• Passport number and scan (where submitted)
• Birth certificate (where submitted for age verification)
• Proof of address documents (utility bills, bank statements)
• Selfie or photograph submitted for liveness verification

3.3 Financial and Payment Data

• Mobile wallet numbers associated with bKash, Nagad, Rocket, and Upay accounts
• Bank account reference details where bank transfers are used
• Deposit and withdrawal transaction history
• Account balance and bonus balance history

3.4 Gaming Activity Data

• Bet and wager history across all ba998 products
• Game session durations and frequency
• Bonus and promotion participation records
• Responsible gaming tool settings (deposit limits, self-exclusion status)

3.5 Technical and Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Unique device identifiers
• Session logs including login timestamps and session durations
• Referring URL and pages visited within the ba998 website

3.6 Communications Data

• Contents of support tickets, live chat transcripts, and email correspondence with ba998
• Survey responses and feedback submissions
• Records of marketing communications sent to you and your opt-in or opt-out preferences

4. How We Collect Your Data

ba998 collects personal data through the following means:

• Direct provision by you: Data you supply when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting support, or submitting feedback forms.
• Automated collection: Technical and device data collected automatically when you access the ba998 website, including through cookies, server logs, and similar tracking technologies described in Section 8.
• Payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and banking partners when you initiate a deposit or withdrawal.
• Identity verification partners: Where ba998 uses a third-party KYC verification service to validate identity documents, that service may return a verification result and associated data to ba998.
• Fraud prevention and security partners: Data received from fraud detection services and security monitoring tools used to protect the integrity of the ba998 platform.

5. How We Use Your Data

ba998 uses the personal data it collects for the following purposes:

• Account creation and management: To register your ba998 account, verify your identity and age, and maintain your account throughout its lifecycle.
• Service delivery: To process bets, settle games, credit winnings, process deposits and withdrawals, and deliver all ba998 Services to you.
• Legal and regulatory compliance: To fulfil anti-money laundering (AML) obligations, responsible gaming requirements, age verification obligations, and any other applicable legal requirements.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, and other prohibited activities described in the ba998 Terms and Conditions.
• Customer support: To respond to your queries, resolve disputes, process account closure requests, and deliver self-exclusion or responsible gaming tools.
• Personalisation: To tailor the ba998 experience to your preferences, including personalised game recommendations and relevant promotional offers where you have not opted out of marketing communications.
• Platform improvement: To analyse aggregated usage data for the purpose of improving ba998 products, fixing technical issues, and developing new features.
• Marketing communications: To send you promotional emails, SMS notifications, and platform announcements where you have provided consent or where we have a legitimate interest in doing so. You may opt out at any time by contacting [email protected].

6. Legal Basis for Processing

ba998 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and ba998, including account registration, bet processing, payment handling, and dispute resolution.
• Legal obligation: Processing required to comply with applicable laws, including AML regulations, age verification requirements, and responses to lawful requests from competent authorities.
• Legitimate interests: Processing carried out in pursuit of ba998's legitimate business interests, including fraud prevention, platform security, and platform improvement, where those interests are not overridden by your privacy rights.
• Consent: Processing based on your explicit consent, including marketing communications and the use of non-essential cookies. You may withdraw consent at any time by contacting [email protected].

7. Sharing Your Data with Third Parties

ba998 does not sell your personal data. We may share your data with third parties only in the following circumstances:

• Payment processing partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank receive the payment reference data necessary to process your deposit and withdrawal transactions.
• KYC and identity verification providers: Third-party KYC service providers who assist ba998 in verifying the identity and age of players, as required by responsible gaming and AML obligations.
• Game software providers: Game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player identifier and session token necessary to deliver their games through the ba998 platform. These providers do not receive your full identity data.
• Fraud prevention and security services: Third-party services that assist ba998 in detecting and preventing fraudulent activity, multi-accounting, and other security threats.
• Legal authorities: ba998 will disclose personal data to law enforcement, regulatory authorities, or courts where required to do so by applicable law, court order, or lawful government request.
• Business successors: In the event of a merger, acquisition, or sale of ba998 business assets, your personal data may be transferred to the successor entity, subject to equivalent data protection commitments.

All third-party processors engaged by ba998 are required to handle your personal data in accordance with applicable data protection principles and are prohibited from using your data for any purpose other than the specific service they provide to ba998.

8. Cookies and Tracking Technologies

ba998 uses cookies and similar tracking technologies to operate the platform, remember your session, and analyse website usage. The categories of cookies used by ba998 are as follows:

• Strictly necessary cookies: Essential for the ba998 website to function. These cookies manage your login session, maintain your account security, and enable core platform features. They cannot be disabled.
• Performance and analytics cookies: Used to collect aggregated, anonymised data about how players interact with the ba998 website, helping us identify and resolve technical issues and improve the user experience.
• Functional cookies: Used to remember your preferences such as language settings, device type, and responsible gaming tool configurations.
• Marketing cookies: Used with your consent to deliver relevant promotional content and to measure the effectiveness of ba998 marketing campaigns. These cookies do not share your data with third-party advertisers for their own purposes.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect the functionality of the ba998 platform and may prevent you from accessing your account.

9. Data Security

ba998 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and ba998 servers.
• Encryption of sensitive data at rest within ba998 databases, including identity document scans and payment reference data.
• Cryptographic hashing of account passwords — plain-text passwords are never stored or accessible.
• Role-based access controls ensuring that ba998 staff can only access personal data that is necessary for their specific job function.
• Regular security audits and penetration testing of ba998 systems and infrastructure.
• Incident response procedures to detect, contain, and report data security incidents in a timely manner.

While ba998 takes all reasonable precautions to protect your personal data, no system is completely immune to security threats. You are encouraged to use a strong, unique password for your ba998 account and to notify us immediately at [email protected] if you suspect any unauthorised access to your account.

10. Data Retention

ba998 retains personal data for the following periods:

• Active accounts: Personal data is retained for the full duration of your active ba998 account relationship and for a minimum period of five (5) years following account closure, in order to comply with AML record-keeping requirements and to resolve any disputes that may arise after closure.
• KYC documents: Identity verification documents are retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later.
• Transaction records: Financial transaction records are retained for a minimum of five (5) years to comply with financial record-keeping obligations.
• Support communications: Customer support records are retained for three (3) years from the date of the last communication, unless the matter is subject to ongoing dispute or legal proceedings.
• Marketing consent records: Records of marketing consent and opt-out requests are retained for the duration of your account relationship and for two (2) years following account closure.

Once the applicable retention period has expired, ba998 will securely delete or anonymise your personal data in accordance with its internal data destruction procedures.

11. Your Rights as a Data Subject

As a ba998 player, you hold the following rights in relation to your personal data. These rights may be exercised at any time by submitting a written request to [email protected]:

• Right of access: You have the right to request a copy of the personal data that ba998 holds about you, along with information about how that data is being used.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to ba998's legal retention obligations described in Section 10.
• Right to restriction: You have the right to request that ba998 restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or have objected to processing pending verification of ba998's legitimate interests.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format where processing is based on your consent or on a contract.
• Right to object: You have the right to object to the processing of your personal data where ba998 relies on legitimate interests as the legal basis for processing. You also have an absolute right to object to the processing of your data for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

ba998 will respond to all data subject rights requests within a reasonable timeframe, and in any event within thirty (30) days of receipt of a valid request. ba998 may request proof of identity before processing a data subject rights request to ensure that data is not disclosed to unauthorised parties.

12. Children and Minors

The ba998 Services are strictly intended for individuals aged 21 years and above. ba998 does not knowingly collect personal data from any individual under the age of 21. If ba998 becomes aware that personal data has been collected from an underage individual, that data will be deleted immediately and the associated account will be permanently closed.

If you are a parent or guardian and believe that a minor has registered an account with ba998 or provided personal data to ba998, please contact us immediately at [email protected] so that we can take appropriate action.

13. Changes to This Privacy Policy

ba998 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, ba998 will notify registered players by email or via a prominent notice on the ba998 website prior to the changes taking effect. The updated Policy will display the revised effective date at the top of the document.

Your continued use of the ba998 Services following notification of a change to this Privacy Policy constitutes your acceptance of the amended Policy. If you do not agree with any change, you should cease using the ba998 Services and may request account closure as described in the ba998 Terms and Conditions.

14. Contact Us

If you have any questions, concerns, or requests in relation to this Privacy Policy or the handling of your personal data by ba998, please contact us using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week, including Bangladeshi public holidays
• Response Language: English
• Subject Line for Privacy Requests: Please use the subject line "Privacy Request" or "Data Subject Rights" to ensure your message is directed to the appropriate team.

ba998 is committed to resolving all privacy-related queries and data subject rights requests promptly and transparently. We treat every communication regarding personal data with the highest level of confidentiality and care.