188bd Privacy Policy — How We Protect Your Data

Section 1

Information We Collect

188bd collects personal information from you in several ways — directly when you register and use the platform, automatically through your device and browser when you visit the site, and occasionally from third parties as part of our identity verification and fraud prevention procedures. We collect only the information that is necessary for the purposes described in this Privacy Policy and do not retain data beyond what is required.

Information you provide directly:

• Registration data: Full legal name, date of birth, email address, mobile phone number (required for OTP verification), residential address in Bangladesh, and your chosen username.
• Identity verification documents: Government-issued photo ID (National ID card, passport, or driving licence), proof of address (utility bill, bank statement), and payment method ownership evidence as part of our KYC process.
• Financial data: Details of your chosen payment method (bKash account number, Nagad mobile number, Rocket wallet ID, bank account details). Full card numbers for Visa and Mastercard transactions are processed by our PCI-DSS-compliant payment gateway and are never stored on 188bd servers.
• Communications: Records of any messages, emails, or live chat conversations you have with the 188bd support team, including support tickets and complaint correspondence.
• Preference and profile data: Game preferences, bonus claim history, responsible gaming settings (deposit limits, time-out elections, self-exclusion requests), and language preferences you configure within your account.

Information collected automatically:

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage and behavioural data: Pages visited on the 188bd platform, time spent on each page, game sessions initiated, wagers placed, bet amounts, and navigation paths through the site.
• Location data: General geographic location derived from your IP address. We do not collect GPS-level precise location data.
• Cookie and tracking data: Information collected via cookies, web beacons, and similar technologies as described in Section 4 of this Policy.

Information from third parties:

• Identity verification agencies used to confirm the authenticity of documents submitted during KYC.
• Payment processors and mobile financial service providers (such as bKash, Nagad, and Rocket) who confirm transaction status and payment method ownership.
• Fraud detection and AML screening services that cross-reference account activity against known risk indicators.

Section 3

Data Sharing & Third Parties

188bd does not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes. We share your data only in the limited, specific circumstances described below, and only to the minimum extent necessary for each purpose.

Service providers and data processors: We engage a small number of carefully selected third-party companies to help us operate the 188bd platform. These companies act as data processors on our behalf and are contractually prohibited from using your data for any purpose other than the specific service they provide to us. Categories of service provider include:

• Payment processors: bKash, Nagad, Rocket, Upay, and our card payment gateway partner process transaction data on our behalf. Each is bound by their own regulatory obligations as licensed financial service providers in Bangladesh.
• Identity verification providers: Third-party KYC and AML screening services that verify the authenticity of identity documents and screen against sanctions and watchlists.
• Game content providers: Software studios such as Pragmatic Play, Evolution Gaming, NetEnt, and Microgaming supply game content integrated into the 188bd platform. These providers may process anonymised session data as part of game delivery and fairness certification.
• Customer support tools: Live chat and helpdesk software providers that facilitate support interactions. These providers process conversation data solely to deliver and improve the support service.
• Analytics and security services: Platform analytics providers that process aggregated, anonymised usage data to help us understand how the platform is used and identify security anomalies.

Legal and regulatory disclosures: 188bd may disclose your personal information to law enforcement agencies, regulatory authorities, or other competent bodies where we are legally required to do so — for example, in response to a valid court order, subpoena, or regulatory investigation related to AML, fraud, or underage gambling. We will only disclose the minimum information required to comply with such requests.

Business transfers: In the event that 188bd undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any change to the privacy arrangements that govern your data prior to the transfer taking effect.

Section 5

Data Security Measures

188bd employs a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security programme is reviewed regularly and updated to reflect the evolving threat landscape. Key security measures in place include:

• 256-bit SSL/TLS encryption: All data in transit between your device and 188bd infrastructure is encrypted using TLS 1.2 or higher. The padlock icon in your browser confirms this connection is active whenever you visit the platform.
• Encryption at rest: Sensitive personal data stored in our databases — including identity documents, financial records, and contact details — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within 188bd's systems is restricted on a strict need-to-know basis. Staff are granted only the minimum level of access required to perform their role, and all access is logged and audited.
• Two-step verification (2SV): Players are strongly encouraged to enable 2SV via SMS OTP on their accounts, adding an additional layer of protection against unauthorised login attempts.
• Penetration testing and vulnerability assessment: 188bd's platform infrastructure undergoes regular security testing by independent specialists to identify and remediate potential vulnerabilities before they can be exploited.
• Incident response: 188bd maintains a documented data breach response procedure. In the event of a security incident affecting your personal data, we will notify affected players and relevant authorities within the timeframe required by applicable regulations.
• PCI-DSS compliance: Card payment processing is handled exclusively by our PCI-DSS-compliant payment gateway partner. Full card details are never transmitted to or stored on 188bd servers.

Whilst 188bd takes all reasonable technical and organisational measures to protect your data, no internet-based system can be guaranteed to be completely secure. You also play an important role in keeping your account secure — choose a strong, unique password, enable 2SV, and never share your login credentials with anyone. If you believe your account has been compromised, contact [email protected] immediately.

Section 7

Your Rights Over Your Data

188bd respects your right to understand and control how your personal data is used. The following rights are available to you as a 188bd player. To exercise any of these rights, please contact us using the details provided in Section 8. We will acknowledge your request within 5 business days and provide a substantive response within 30 days.

• Right of access: You have the right to request a copy of all personal data that 188bd holds about you. We will provide this in a clear, readable format, free of charge, within 30 days of your request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You can also update most contact and profile information directly in your account settings without contacting us.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no overriding legal obligation requires its retention. Requests for erasure will be actioned to the extent permitted by our legal retention obligations as described in Section 6.
• Right to restrict processing: In certain circumstances, you may request that we restrict the processing of your data — for example, where you contest the accuracy of the data or where you have objected to processing and we are assessing the grounds for that objection.
• Right to data portability: You have the right to receive a structured, commonly used, machine-readable copy of personal data you have provided to us, and to transmit that data to another controller where processing is based on consent or contractual necessity.
• Right to object: You have the right to object to processing based on legitimate interest or for direct marketing purposes. Where you object to direct marketing, we will cease processing your data for that purpose immediately. Where you object to processing based on legitimate interest, we will assess whether our grounds for processing override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawal can be actioned via your account settings or by contacting [email protected].