b889 Privacy Policy

Section 1

📂 Information We Collect

b889 collects personal data from you in several ways: directly when you register an account and interact with the platform, automatically through your use of our website and mobile interface, and occasionally from trusted third-party sources such as payment processors and identity verification partners. We only collect data that is necessary for the purposes described in this Privacy Policy.

Data You Provide Directly

When you create and manage your b889 account, we collect the following categories of personal information:

• Identity data: Your full legal name, date of birth, gender, and government-issued identification number (National ID, passport, or driving licence number) as required during KYC verification.
• Contact data: Your email address, mobile phone number, and residential address including city, district, and postal code.
• Account credentials: Your chosen username and a hashed (never plaintext) version of your password. b889 cannot read your password — it is stored as a one-way cryptographic hash.
• Payment data: Your preferred payment method details, including bKash wallet number, Nagad account, Rocket number, bank account details, or Visa/Mastercard card information. Full card numbers are never stored on b889 servers — they are tokenised by our payment processor at the point of entry.
• Communication data: Any messages you send to b889 via email, live chat, or support ticket — including the content of those communications and metadata such as timestamps.
• Responsible gaming preferences: Any deposit limits, session time limits, cooling-off periods, or self-exclusion requests you configure on your account.

Data We Collect Automatically

When you access b889.app, our systems automatically record certain technical data about your session:

• Device and browser data: Your device type, operating system, browser name and version, screen resolution, and language settings.
• Network data: Your IP address, approximate geographic location derived from IP (city and country level), and internet service provider.
• Usage data: Pages visited, games played, betting markets accessed, session duration, click paths, and feature interactions within the b889 platform.
• Transaction data: A complete record of all deposits, withdrawals, bonus claims, wager amounts, game outcomes, and account balance changes associated with your account.

Data From Third Parties

b889 may receive supplementary data about you from the following categories of third-party sources: identity verification providers (to cross-check KYC documents), payment processors (to confirm transaction status and flag potentially fraudulent activity), and fraud prevention databases. Data received from these sources is handled with the same level of care as data collected directly from you.

Section 2

⚙️ How We Use Your Data

b889 processes your personal data for a number of specific, lawful purposes. We do not use your data for any purpose beyond those described in this section without first notifying you and, where required, obtaining your consent.

Purpose	Data Used	Lawful Basis
Account registration and management	Identity, contact, credential data	Contractual necessity
Processing deposits and withdrawals	Payment data, identity data	Contractual necessity
Age and identity verification (KYC)	Identity data, document scans	Legal obligation
Fraud prevention and security monitoring	Network data, transaction data, device data	Legitimate interest
Customer support and dispute resolution	Communication data, account data	Contractual necessity
Responsible gaming tools and interventions	Usage data, responsible gaming preferences	Legal obligation / legitimate interest
Promotional communications (opt-in)	Contact data, usage data	Consent
Platform analytics and improvement	Usage data, device data (anonymised)	Legitimate interest
Legal and regulatory compliance	All categories as required	Legal obligation

Marketing Communications

b889 will only send you promotional emails, SMS notifications, or in-platform bonus offers if you have explicitly opted in to receive marketing communications at the point of registration or subsequently via your account preferences. You may withdraw this consent at any time by updating your notification settings or by contacting [email protected]. Withdrawing marketing consent does not affect your ability to use your b889 account.

Automated Decision-Making

b889 uses automated systems to flag accounts for fraud review, to apply responsible gaming interventions (such as displaying reality-check notifications), and to personalise game recommendations. Where an automated decision has a significant effect on your account — for example, a temporary suspension pending fraud review — you have the right to request human review of that decision by contacting our support team.

Section 3

🤝 Data Sharing & Disclosure

b889 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only in the specific circumstances described below, and only to the minimum extent necessary for the relevant purpose.

Service Providers and Partners

b889 engages a limited number of trusted third-party service providers to support platform operations. These providers are contractually bound to process your data only on b889's instructions and in accordance with appropriate data protection standards. Categories of service providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard processing networks — to facilitate deposits and withdrawals in BDT (৳).
• Identity verification providers: Third-party KYC platforms used to verify government-issued identification documents submitted by players during the account verification process.
• Game software providers: Licensed studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session tokens and anonymised player IDs to deliver game content. These studios do not receive your name, contact details, or payment information.
• Fraud prevention services: Specialist providers that screen transactions and account activity against known fraud indicators and blacklists.
• Email and communication platforms: Used to deliver account notifications, KYC status updates, and (where consented) promotional communications.

Legal and Regulatory Disclosure

b889 may disclose your personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, valid legal process, or a binding government order. b889 will, where legally permitted, notify you of any such disclosure request before complying.

Business Transfers

In the event that b889 undergoes a merger, acquisition, or sale of all or part of its assets, your personal data may form part of the transferred assets. In such circumstances, b889 will notify registered players via email and on-platform notification, and the acquiring entity will be required to honour the terms of this Privacy Policy or provide players with a reasonable opportunity to close their accounts.

Section 4

🍪 Cookies & Tracking

b889.app uses cookies and similar tracking technologies to deliver a functional, personalised, and secure experience. A cookie is a small text file placed on your device by our web server when you visit the platform. Cookies do not contain executable code and cannot transmit viruses. The following categories of cookies are used on b889:

Cookie Type	Purpose	Duration
Strictly Necessary	Maintain your login session, remember your account preferences, and protect against cross-site request forgery (CSRF). Without these, the platform cannot function.	Session / up to 30 days
Functional	Remember your language preference, game display settings, and responsible gaming configurations between sessions.	Up to 12 months
Analytics	Collect anonymised data on page views, session duration, and feature usage to help b889 identify and fix usability issues and improve platform performance.	Up to 24 months
Fraud Prevention	Fingerprint device characteristics to detect and prevent multiple-account creation, automated bot activity, and suspicious login patterns.	Up to 12 months

Managing Cookies

You can control and delete cookies through your browser settings. Most modern browsers allow you to block third-party cookies, clear all cookies on close, or receive a notification before a cookie is stored. Note that disabling strictly necessary cookies will impair the functionality of your b889 account — you may be unable to remain logged in or complete transactions.

Instructions for managing cookies in the most common browsers: in Google Chrome, navigate to Settings → Privacy and Security → Cookies and other site data. In Mozilla Firefox, navigate to Settings → Privacy and Security → Cookies and Site Data. In Safari on iOS, navigate to Settings → Safari → Privacy and Security.

Section 5

🗓️ Data Retention

b889 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law. The following retention periods apply to the primary categories of data we hold:

• Account and identity data: Retained for the lifetime of your active account, plus a minimum of 5 years following account closure. This period reflects b889's compliance obligations and the standard timeframe for dispute resolution.
• Transaction records: All deposit, withdrawal, wager, and bonus records are retained for a minimum of 5 years following the date of each transaction to support financial audit trails and regulatory compliance requirements.
• KYC documentation: Copies of identity documents submitted during verification are retained for 5 years from the date of submission or account closure, whichever is later.
• Support communications: Email and live chat logs are retained for 3 years from the date of the communication, unless they relate to an unresolved dispute — in which case they are retained until the dispute is fully resolved plus one additional year.
• Marketing consent records: Records of your marketing opt-in or opt-out decisions are retained for the lifetime of your account plus 3 years to evidence compliance with applicable marketing regulations.
• Analytics and usage data: Aggregated, anonymised analytics data may be retained indefinitely as it cannot be linked to any individual player.
• Self-exclusion records: Where you have requested a self-exclusion, b889 retains a record of that exclusion indefinitely to prevent re-registration during the exclusion period and to support responsible gaming audit requirements.

When your personal data is no longer required, b889 will securely delete or anonymise it in a manner that prevents recovery or reconstruction. Paper documents containing personal data are shredded; digital records are overwritten using industry-standard secure deletion protocols.

Section 6

⚖️ Your Privacy Rights

As a b889 player, you hold a number of rights in relation to the personal data we hold about you. b889 is committed to respecting and facilitating these rights. To exercise any of the rights described below, contact our data team at [email protected] with your full name, registered email address, and a clear description of your request. b889 will respond within 30 calendar days of receiving a valid request.

Right of Access

You have the right to request a copy of all personal data b889 holds about you. This is sometimes called a Subject Access Request (SAR). Upon receipt of a valid SAR, b889 will provide you with a structured, commonly readable export of your account data, transaction history, and communication records within 30 days.

Right to Rectification

If any personal data b889 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account details (such as your email address and phone number) directly via your account settings. For changes to identity data (name, date of birth), please contact support with supporting documentation.

Right to Erasure

In certain circumstances, you have the right to request that b889 delete your personal data. This right applies where the data is no longer necessary for the purpose it was collected, where you withdraw consent (and no other lawful basis exists), or where you object to processing and b889 has no overriding legitimate interest. Note that this right is subject to exceptions — b889 may be required to retain certain data (such as transaction records and KYC documents) to comply with legal obligations, even after an erasure request.

Right to Restrict Processing

You may request that b889 temporarily suspend the processing of your data in certain situations — for example, while the accuracy of your data is being contested, or while an objection to processing is being assessed. During a restriction period, b889 will continue to store your data but will not actively process it beyond what is strictly necessary.

Right to Data Portability

Where b889 processes your data on the basis of your consent or contractual necessity, and the processing is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format (such as JSON or CSV) and to request that b889 transmit this data directly to another service provider where technically feasible.

Right to Object

You have the right to object to b889 processing your personal data on the basis of legitimate interest — including for direct marketing purposes. Where you object to marketing, b889 will cease all promotional communications immediately. Where you object to other legitimate-interest processing, b889 will review the objection and cease processing unless compelling legitimate grounds can be demonstrated that override your interests.

Section 7

🛡️ Data Security

Protecting your personal data is a core operational priority at b889. We implement a layered security architecture that combines technical, procedural, and organisational safeguards to minimise the risk of unauthorised access, disclosure, alteration, or destruction of your data.

Technical Safeguards

• 256-bit SSL/TLS encryption: All data transmitted between your browser or app and b889's servers is encrypted using TLS 1.2 or higher. The padlock icon in your browser confirms this connection is active.
• Password hashing: Your b889 password is never stored in readable form. It is processed through a modern cryptographic hashing algorithm (bcrypt with a unique salt per account) before storage. b889 staff cannot read your password under any circumstances.
• Payment tokenisation: Card numbers and mobile banking credentials are immediately tokenised by our PCI-DSS compliant payment processor. b889's servers never receive or store your full card number.
• Two-factor authentication (2FA): b889 provides optional 2FA for all registered accounts. We strongly recommend enabling this feature to protect against unauthorised access even if your password is compromised.
• Intrusion detection: b889's infrastructure is monitored 24/7 by automated intrusion detection systems that alert our security team to anomalous network activity, repeated failed login attempts, and other indicators of attack.
• Regular security audits: b889 commissions periodic third-party penetration tests and vulnerability assessments to identify and remediate security weaknesses before they can be exploited.

Organisational Safeguards

Access to personal data within b889's internal systems is governed by strict role-based access controls. Only staff members who genuinely require access to personal data to perform their job functions are granted that access, and all access is logged and audited. Staff with access to personal data undergo mandatory data protection training.

Data Breach Response

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, b889 will notify affected players without undue delay — and in any event within 72 hours of becoming aware of the breach — via the email address registered on your b889 account. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the remedial steps b889 has taken or intends to take.

Section 8

📬 Contact & Updates

If you have any questions, concerns, or requests relating to this Privacy Policy or to the manner in which b889 processes your personal data, please contact our data team using the details below. We aim to respond to all privacy-related enquiries within 5 business days.

Data Contact:
[email protected]
Subject line: "Privacy Enquiry — [Your Registered Email]"

Updates to This Policy

b889 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our data processing practices, platform features, or applicable legal requirements. When material changes are made, b889 will notify registered players by email at least 7 days before the updated policy takes effect. The "Effective" date at the top of this document will be revised accordingly.

Your continued use of b889.app following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any change, you have the right to close your account and request deletion of your data as described in Section 6.

Previous versions of this Privacy Policy are archived and available upon request by emailing [email protected].