b889 Privacy Policy — How We Protect Your Personal Data

b889 ("b889", "we", "us", "our") operates the online betting and gaming platform accessible at https://b889.io. b889 is the data controller in respect of personal data collected through the platform and is responsible for determining the purposes and means by which your personal data is processed.

This Privacy Policy applies to all individuals who visit the b889 website, register an account, make a deposit, place a bet, or otherwise interact with b889's services. It covers personal data collected via the b889 website, any associated mobile-optimised version of the platform, and all communications between b889 and its players.

b889 serves the Bangladesh market. All services are provided in English, and all account balances and transactions are denominated in Bangladeshi Taka (BDT, ৳). This Privacy Policy is written in English and the English version is the authoritative version in all circumstances.

b889 collects personal data through several channels: directly from you during the registration and verification process, automatically as you use the platform, and occasionally from third-party sources such as payment processors and fraud-prevention services. The categories of data we collect are described below.

b889 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than photographs submitted voluntarily for identity verification), or health data, except where the collection of such data is strictly necessary for responsible gaming compliance purposes (for example, where a player discloses a gambling-related health condition in a self-exclusion request).

b889 uses the personal data it collects for the following purposes. Where a specific purpose requires your consent, we will ask for it explicitly at the point of collection.

• Account Management: To create, maintain, and administer your b889 account, including processing registrations, account updates, and account closures.
• Identity Verification (KYC): To verify your identity and age in compliance with our responsible gaming obligations and anti-money-laundering requirements. b889 does not accept players under the age of 21, and KYC is the primary mechanism through which this is enforced.
• Payment Processing: To process deposits made via bKash, Nagad, Rocket, Upay, bank transfer, Visa, and Mastercard, and to process withdrawal requests to verified payment accounts.
• Service Delivery: To make the b889 platform and all its features — including sports betting, live casino, slots, and crash games — available to you in a functional and personalised manner.
• Customer Support: To respond to your support requests, resolve account issues, and handle complaints in a timely and accurate manner.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, account takeover, and other security threats to the platform and its players.
• Responsible Gaming Compliance: To monitor betting patterns for indicators of problem gambling, to apply responsible gaming tools you have requested, and to enforce self-exclusion periods.
• Legal and Regulatory Compliance: To fulfil legal obligations, including record-keeping requirements and the reporting of suspicious financial activity to relevant authorities where required.
• Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving platform performance, user experience, and the range of products offered.
• Marketing Communications (with consent): To send you promotional offers, bonus notifications, and news about b889 services, where you have opted in to receive such communications. You may withdraw marketing consent at any time via your account settings or by contacting support.

b889 processes your personal data on one or more of the following legal bases, depending on the specific processing activity in question:

• Contractual Necessity: Much of our data processing is necessary for the performance of the contract we have with you as a registered b889 player. This includes processing your registration details, verifying your identity, processing deposits and withdrawals, and delivering the betting and gaming services you have signed up for.
• Legal Obligation: Certain processing activities are required by law. These include anti-money-laundering (AML) checks, age verification, record-keeping for financial transactions, and the reporting of suspicious activity where legally mandated.
• Legitimate Interests: b889 processes some data on the basis of its legitimate business interests, where those interests are not overridden by your rights and interests. This includes fraud detection, platform security monitoring, aggregated analytics for service improvement, and responsible gaming monitoring.
• Consent: Where no other legal basis applies, b889 will ask for your explicit consent before processing your data. The most common example is marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

b889 uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse usage patterns, and in some cases deliver relevant promotional content. A cookie is a small text file placed on your device by the b889 website when you visit it.

b889 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, remember your language and currency preferences, and enable core security features. These cookies cannot be disabled without significantly impairing your ability to use the b889 platform.
• Functional Cookies: These cookies remember choices you make — such as your preferred game lobby layout or notification settings — to provide a more personalised experience. Disabling functional cookies will not prevent you from using the platform but may affect your experience.
• Analytics Cookies: b889 uses aggregated analytics data to understand how players navigate the platform, which features are most used, and where technical issues occur. This data is anonymised before analysis and is not used to identify individual players.
• Security Cookies: These cookies support our fraud detection and account security systems. They help identify suspicious login attempts and unusual betting patterns that may indicate unauthorised account access.

You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent the b889 platform from functioning correctly. b889 does not use third-party advertising cookies or sell cookie data to advertising networks.

b889 does not sell, rent, or trade your personal data to any third party. We share personal data with external parties only in the following limited circumstances:

• Payment Service Providers: We share necessary transaction data with payment processors including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard to facilitate deposits and withdrawals. These providers are contractually bound to use your data only for payment processing purposes.
• Identity Verification Partners: b889 may use third-party KYC service providers to assist with identity document verification. Any third-party KYC provider used by b889 is subject to a data processing agreement that restricts their use of your data to the verification purpose only.
• Fraud Prevention and Security Services: We may share technical data (such as IP addresses and device fingerprints) with fraud detection and cybersecurity service providers to protect the platform and its players from fraudulent activity.
• Game Content Providers: When you play games provided by third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, or Spribe, those studios' game engines process certain technical session data necessary to deliver the game. This processing is governed by those studios' own data practices, which are subject to our supplier agreements.
• Legal Authorities: b889 will disclose personal data to law enforcement agencies, regulatory bodies, or other governmental authorities where required to do so by applicable law, court order, or where we have a good-faith belief that such disclosure is necessary to prevent fraud, money laundering, or other criminal activity.
• Business Transfers: In the event that b889's business or assets are acquired by or merged with another organisation, player personal data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and their rights in relation to their data.

b889 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to any legal retention obligations that require us to keep data for a specified minimum period. The following retention guidelines apply:

• Account Data: Retained for the duration of your active b889 account, plus a period of five years following account closure, to satisfy anti-money-laundering record-keeping requirements and to handle any late-arising disputes or claims.
• Financial Transaction Records: Retained for a minimum of seven years from the date of each transaction, in line with financial record-keeping standards applicable to online payment processing.
• KYC and Identity Documents: Retained for five years following the date of verification or account closure (whichever is later), in accordance with identity verification compliance requirements.
• Customer Support Records: Retained for three years from the date of the last interaction, to allow for follow-up, dispute resolution, and quality assurance purposes.
• Marketing Consent Records: Retained for the duration of your opt-in consent, plus three years from the date of withdrawal of consent, as evidence that marketing was conducted on a lawful basis.
• Technical and Analytics Data: Anonymised analytics data may be retained indefinitely in aggregated form. Non-anonymised technical data such as server logs is retained for a maximum of 12 months.

When data reaches the end of its defined retention period, it is securely deleted from b889's systems or irreversibly anonymised such that it can no longer be linked to any individual. Players may request early deletion of their data subject to the limitations described in the Your Rights section below.

b889 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following measures:

• SSL/TLS Encryption in Transit: All data transmitted between your device and the b889 platform is encrypted using SSL/TLS protocols. This ensures that sensitive information such as login credentials, payment details, and personal data cannot be intercepted by third parties during transmission.
• AES-256 Encryption at Rest: Personal data stored on b889's servers is encrypted using AES-256 encryption, ensuring that data remains protected even in the event of a physical or logical breach of storage systems.
• Access Controls: Access to personal data within the b889 organisation is restricted on a strict need-to-know basis. Staff access rights are reviewed regularly, and access to sensitive data categories requires elevated authorisation levels.
• Two-Factor Authentication: b889 offers two-factor authentication (2FA) for all player accounts and mandates it for internal staff access to production systems containing personal data.
• Regular Security Audits: b889 conducts regular internal and external security assessments of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: b889 maintains a documented data breach response procedure. In the event of a personal data breach that is likely to result in risk to affected individuals, b889 will notify affected players and relevant authorities in accordance with applicable legal requirements.

As a b889 player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact b889's support team at [email protected]. All requests will be acknowledged within five business days and fulfilled within 30 calendar days of receipt, subject to identity verification.

• Right of Access: You have the right to request a copy of the personal data that b889 holds about you, along with information about how that data is used and with whom it has been shared.
• Right to Rectification: If any personal data b889 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For certain data categories (such as your registered name or date of birth), rectification requests will require supporting documentation.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and there is no other legal basis for continued processing. Please note that b889 may be required to retain certain data to satisfy legal obligations even following an erasure request.
• Right to Restriction of Processing: In certain circumstances, you may request that b889 restrict the processing of your personal data — for example, while a rectification request is being assessed.
• Right to Object: You have the right to object to processing based on legitimate interests. Where you object, b889 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.

The b889 platform is strictly intended for adults aged 21 and above. b889 does not knowingly collect personal data from individuals under the age of 21, and we do not permit anyone under 21 to register an account, make deposits, or participate in any betting or gaming activity on the platform.

Age verification is conducted at the point of registration and may be repeated at any point during the account lifecycle where b889 has reason to question a player's age. Where b889 discovers that personal data has been collected from an individual under the age of 21, the associated account will be closed immediately, all bets will be voided, and any deposited funds (net of withdrawals already made) will be returned to the originating payment source. The personal data of the underage individual will then be deleted from b889's systems as promptly as possible, subject to any legal record-keeping obligations.

The b889 platform may contain references to third-party services such as payment providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and game content studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe). Where interaction with these third parties requires you to visit an external website or application, b889 is not responsible for the privacy practices of those external services.

b889 recommends that you review the privacy policies of any third-party services you interact with in connection with your b889 account. This is particularly relevant for mobile wallet applications such as bKash and Nagad, which are operated independently of b889 and are governed by their own data protection policies.

b889 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform. When material changes are made, b889 will notify registered players via email or via an on-platform notification prior to the changes taking effect.

The effective date displayed at the top of this policy will be updated each time the policy is revised. Continued use of the b889 platform following notification of an update constitutes your acknowledgement of the revised Privacy Policy. If you do not accept the updated policy, you should cease using the platform and contact support to arrange account closure.

b889 recommends that you review this Privacy Policy periodically to stay informed about how your personal data is being handled. The most current version of this policy is always available at https://b889.io/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way b889 handles your personal data, please contact our support team using the details below. Our support team is available 24 hours a day, seven days a week, in English, with service coverage aligned to Bangladesh Standard Time (BST, UTC+6).

For requests to exercise your data rights (access, rectification, erasure, portability, restriction, or objection), please include your full name as registered on your b889 account, your registered email address, and a description of your request. b889 may request identity verification before processing any data rights request to ensure we are responding to the genuine account holder.

b889 aims to respond to all privacy-related enquiries within five business days and to fulfil all data rights requests within 30 calendar days of receipt, in line with the commitments outlined in Section 9 of this policy. Where a request is complex or involves a large volume of data, we may extend this timeframe by a further 30 days, in which case we will notify you of the extension and the reason for it.