bpc88 Privacy Policy — How We Collect, Use & Protect Your Personal Data

1 Introduction and Data Controller Identity

bpc88 ("we", "us", "our", "the Company") is the data controller responsible for the personal data of all registered players and visitors to the bpc88 platform at https://bpc88.ws (the "Platform"). We are committed to protecting and respecting your privacy in accordance with applicable data protection principles.

This Privacy Policy describes in detail how bpc88 collects, processes, stores, shares, and protects your personal information when you register an account, make deposits or withdrawals, play games, contact our support team, or otherwise interact with our Platform. Reading this document carefully will help you make informed decisions about the information you share with us.

2 Scope of This Privacy Policy

This Privacy Policy applies to all personal data processed by bpc88 in connection with:

• Registration and maintenance of player accounts on the Platform.
• Deposits, withdrawals, and all payment transactions processed through supported payment methods including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard.
• Use of all games available on bpc88, including cricket betting, live casino, slots, poker, and fishing games.
• All communications between you and the bpc88 support team, including live chat, email, and any complaint or dispute correspondence.
• Your browsing activity on https://bpc88.ws, including pages visited, links clicked, and time spent on the Platform.

This Privacy Policy does not apply to third-party websites or services that may be linked to or from the Platform. bpc88 is not responsible for the privacy practices of any third-party service, and we encourage you to review the privacy policies of those services independently.

3 Personal Data We Collect

bpc88 collects only the personal data that is necessary and proportionate to delivering a safe, compliant, and enjoyable gaming experience. The categories of personal data we may collect include:

Identity and Registration Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify that you meet the 21+ age requirement).
• National Identity Card (NID) number, passport number, or driver's licence number where provided for KYC verification.
• Username chosen at registration.

Contact and Location Data

• Email address and mobile phone number.
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Cox's Bazar), district, and postcode within Bangladesh.

Financial and Transaction Data

• Account numbers associated with your bKash, Nagad, or Rocket wallet, or bank account details where relevant.
• Records of all deposits, withdrawals, and bonus transactions conducted on the Platform, denominated in Bangladeshi Taka (৳).
• KYC documents confirming ownership of the payment method used.

Technical and Device Data

• IP address, geolocation data derived from IP, device identifiers, browser type and version, operating system, and screen resolution.
• Login timestamps, session duration, and access logs.

Behavioural and Usage Data

• Games played, bet amounts, win/loss records, and betting patterns.
• Navigation data showing how you move through the Platform.
• Responsible gaming interactions, including any deposit limits, cooling-off periods, or self-exclusion requests you make.

4 How We Collect Your Data

bpc88 collects personal data through the following channels:

• Direct submission: Information you provide when you register, complete your profile, submit KYC documents, make a deposit or withdrawal request, or contact our support team.
• Automated collection: Technical data collected automatically when you access or use the Platform, via server logs, cookies, and similar tracking technologies.
• Payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, and other payment processors when you conduct financial transactions on the Platform.
• Identity verification providers: Where bpc88 uses a third-party KYC service to verify the authenticity of identity documents, that provider may return confirmation data to us.
• Fraud detection tools: Automated systems that analyse usage patterns and flag anomalies may generate data points about account behaviour that are stored on your record.

5 Legal Basis for Processing

bpc88 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual necessity: Processing is necessary to perform the contract between you and bpc88 — i.e., to operate your account, process transactions, and deliver the gaming services you have signed up for.
• Legal obligation: Processing is necessary to comply with applicable legal requirements, including anti-money-laundering (AML) obligations, age verification requirements (21+ only), and record-keeping obligations.
• Legitimate interests: Processing is necessary for bpc88's legitimate interests, such as fraud prevention, platform security, responsible gaming monitoring, and improvement of our services, provided those interests are not overridden by your rights.
• Consent: Where processing is based on consent (such as sending you promotional communications), you may withdraw your consent at any time by contacting our support team.

6 How We Use Your Personal Data

bpc88 uses the personal data we collect for the following specific purposes:

• To create, verify, and manage your player account on the Platform.
• To process deposits, withdrawals, and bonus transactions accurately and securely.
• To comply with KYC and AML obligations, including verifying your identity and the source of funds where required.
• To enforce the 21+ age restriction and prevent underage gambling.
• To detect, investigate, and prevent fraudulent activity, collusion, and other prohibited conduct.
• To operate our responsible gaming tools, including monitoring betting patterns for signs of problem gambling and administering self-exclusion requests.
• To communicate with you about your account, including transaction confirmations, security alerts, and support responses.
• To send you promotional communications about bpc88 bonuses and offers (only where you have consented, or where permitted under applicable rules for existing players).
• To improve the Platform's functionality, usability, and game offering based on aggregated usage data.
• To comply with any legal obligation to retain or disclose records.

7 Cookies and Tracking Technologies

bpc88 uses cookies and similar tracking technologies (such as web beacons and pixel tags) to enhance your experience on the Platform, maintain session integrity, and collect analytical data.

Types of Cookies Used

• Essential cookies: Required for the Platform to function correctly. They enable you to log in, navigate between pages, and maintain your session. These cannot be disabled without severely impairing Platform functionality.
• Analytics cookies: Collect anonymised data about how visitors use the Platform, such as which pages are visited most frequently and how long sessions last. This data helps bpc88 improve the Platform's design and content.
• Security cookies: Used to detect fraudulent activity, protect against CSRF attacks, and support our fraud detection systems.
• Preference cookies: Store your Platform preferences, such as language settings and last-used deposit method, so you do not have to re-enter them on each visit.

You can manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the Platform, but may affect your experience.

8 Sharing Your Data with Third Parties

bpc88 does not sell or rent your personal data to any third party. We may share your personal data only in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard receive only the transactional data necessary to process your deposits and withdrawals. They process this data under their own privacy policies.
• KYC and identity verification providers: Where bpc88 uses a third-party service to verify the authenticity of KYC documents, only the specific data required for that verification is shared.
• Fraud detection and security partners: Aggregated or pseudonymised data may be shared with security technology providers for the purpose of fraud prevention and platform integrity monitoring.
• Legal and regulatory authorities: bpc88 may be required to disclose personal data to law enforcement or regulatory bodies in response to a valid legal request, court order, or statutory obligation.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of bpc88's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and your rights under this Privacy Policy will be maintained.

9 International Data Transfers

bpc88 primarily processes personal data on servers located in data centres that support our Platform operations. Where personal data is transferred to, or accessed from, a location outside Bangladesh, bpc88 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to the protections described in this Privacy Policy.

Such safeguards may include contractual clauses that obligate the recipient to maintain equivalent data protection standards, or the use of service providers that operate under internationally recognised security frameworks. If you have questions about the specific safeguards in place for any particular transfer, you may contact us at [email protected].

10 Data Retention

bpc88 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention schedules are as follows:

• Account and identity data: Retained for the lifetime of your account and for a period of five (5) years following permanent account closure, in accordance with standard AML record-keeping practices.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction.
• Communications and support records: Retained for three (3) years from the date of the last communication, unless the communication relates to a dispute that is still open.
• Technical and usage data: Retained for a rolling period of thirteen (13) months, after which it is anonymised or deleted.
• Responsible gaming records: Self-exclusion and restriction records are retained for the duration of the exclusion and for five (5) years thereafter to prevent circumvention of exclusion requests.

When data reaches the end of its retention period and there is no ongoing legal obligation to retain it, bpc88 will securely delete or anonymise it.

11 Data Security Measures

bpc88 employs a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and bpc88 servers.
• Encryption of sensitive data fields at rest within our databases, including financial data and identity document references.
• Role-based access controls ensuring that bpc88 staff can only access personal data to the extent required for their specific job function.
• Real-time intrusion detection and monitoring systems that flag anomalous access patterns.
• Regular security audits and penetration testing of the Platform infrastructure.
• Multi-factor authentication requirements for administrative access to production systems.

While bpc88 takes every reasonable precaution to secure your data, no system is entirely immune to all possible security threats. In the event of a data breach that poses a risk to your rights and interests, bpc88 will notify affected players without undue delay through the registered contact details on their account.

12 Children and Minors

The bpc88 Platform is strictly for adults aged 21 years and above. bpc88 does not knowingly collect personal data from any person under the age of 21. Our registration process requires every applicant to confirm their date of birth, and KYC verification is used to validate that confirmation where appropriate.

If bpc88 discovers or has reason to believe that personal data has been collected from a person under 21 years of age, we will immediately close the relevant account, void all associated transactions and balances, and delete the personal data in question from our systems as soon as it is technically practicable to do so.

13 Your Privacy Rights

As a bpc88 player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Privacy Rights Request" along with your registered account username:

• Right of Access: Request a copy of all personal data bpc88 holds about you. We will respond within 30 calendar days.
• Right to Rectification: Request correction of any inaccurate or incomplete personal data held by bpc88.
• Right to Erasure: Request deletion of your personal data, subject to any applicable legal retention obligations.
• Right to Restrict Processing: Request that bpc88 restrict the processing of your personal data in certain circumstances.
• Right to Data Portability: Request your personal data in a structured, machine-readable format.
• Right to Object: Object to processing of your personal data for direct marketing or other legitimate interest purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

bpc88 will not charge a fee for exercising any of these rights in ordinary circumstances. Where a request is manifestly unfounded or excessive, bpc88 reserves the right to charge a reasonable administrative fee or to decline the request, with written explanation provided.

14 Changes to This Privacy Policy

bpc88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, bpc88 will notify registered players via the email address on their account and/or through a prominent notice on the Platform before the changes take effect.

The "Last Updated" date at the top of this document indicates when the most recent revision was made. We encourage you to review this Privacy Policy periodically. Your continued use of the Platform after notification of a change constitutes your acceptance of the updated Privacy Policy.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bpc88 processes your personal data, please reach out to our support team using the contact details below. Our team is available 24 hours a day, 7 days a week, aligned to Bangladesh Standard Time (BST, UTC+6):

• Email: [email protected] (plain text — not a clickable link)
• Subject line for privacy requests: "Privacy Rights Request — [Your Username]"
• Response time: Within 30 calendar days for formal data subject requests; within 24 hours for general privacy enquiries.
• Coverage: Serving players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

This Privacy Policy was last reviewed and updated on 1 January 2026. All previous versions are superseded by this version. bpc88 — Bangladesh's trusted online casino and sports betting platform.