badu88 Privacy Policy

This Privacy Policy ("Policy") is issued by badu88 ("we", "us", "our", "the Platform") and applies to all users ("you", "your", "Player") of the badu88 website accessible at https://badu88.club and all associated services, including sports betting, live casino, slot games, specialty games, and promotional features.

badu88 is committed to protecting the privacy and security of all personal data that we collect and process in connection with your use of the platform. This Policy explains what personal data we collect, the legal basis on which we process it, how we use and share it, and the rights you have in relation to it.

By registering an account with badu88, making a deposit, or using any feature of the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not accept this Policy, please discontinue your use of the platform and contact our support team to request account closure.

This Policy should be read alongside the badu88 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

badu88 collects the following categories of personal data in connection with the operation of our platform. We collect only what is necessary for the stated purposes and do not engage in unnecessary or excessive data collection.

badu88 does not intentionally collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data) except where required by law or explicitly provided by you in a support context (for example, a responsible gaming self-declaration).

badu88 collects personal data through several channels in the ordinary course of operating the platform:

• Direct submission: Data you provide when registering an account, completing KYC identity verification, making deposits or withdrawals, contacting our support team, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you visit and interact with the badu88 website, via cookies, session logs, and server-side analytics tools. See Section 6 for full details on cookies.
• Third-party verification providers: Identity and age verification data obtained from authorised third-party KYC service providers when we conduct verification checks on your submitted documents.
• Payment processors: Transaction confirmation data received from payment service providers such as bKash, Nagad, Rocket, Upay, and partner banks when you initiate deposits or withdrawals. Full payment credentials remain within the payment processor's secure environment.
• Fraud prevention partners: Risk signals and flagged-account data shared by anti-fraud and anti-money-laundering screening services that badu88 uses to protect the integrity of the platform.

badu88 does not purchase personal data lists from data brokers or marketing agencies. All personal data we hold originates from your direct interaction with the platform or from the authorised service providers described above.

badu88 uses your personal data for the following specific purposes. Where a legal basis for processing is identified, it is stated alongside each purpose.

• Account creation and management — To register and maintain your badu88 player account, verify your identity, and manage your account settings. Legal basis: contractual necessity.
• Transaction processing — To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, and other approved payment methods. Legal basis: contractual necessity.
• Identity and age verification (KYC) — To verify that you meet the minimum age requirement of 18 years and that you are who you claim to be, in compliance with anti-money-laundering obligations. Legal basis: legal obligation; contractual necessity.
• Fraud prevention and security — To detect, investigate, and prevent fraudulent transactions, account takeover attempts, collusion, and other prohibited conduct described in our Terms & Conditions. Legal basis: legitimate interest; legal obligation.
• Responsible gaming monitoring — To identify patterns of play that may indicate problem gambling behaviour and to implement responsible gaming tools such as deposit limits, cooling-off periods, or self-exclusion as requested or warranted. Legal basis: legitimate interest; legal obligation.
• Customer support — To respond to your queries, complaints, and requests, and to maintain records of communications for quality assurance and dispute resolution purposes. Legal basis: contractual necessity; legitimate interest.
• Platform improvement — To analyse usage data in aggregate to improve the performance, security, and user experience of the badu88 platform. Legal basis: legitimate interest.
• Promotional communications — To send you information about badu88 promotions, bonuses, and seasonal offers (such as Eid, BPL season, or Pohela Boishakh specials) where you have opted in to receive such communications. Legal basis: consent.
• Legal compliance — To comply with applicable legal obligations, including responding to lawful requests from regulatory or law enforcement authorities. Legal basis: legal obligation.

badu88 does not sell your personal data to any third party. We share personal data only with the following categories of recipients, and only to the extent strictly necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and other authorised payment service providers receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by strict data protection obligations.
• Identity verification providers: Third-party KYC and anti-money-laundering screening services receive your identity documents and personal details solely for the purpose of conducting required verification checks.
• Game software providers: Game providers such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe may receive limited technical data (such as your session token and game round ID) necessary to deliver their game content. These providers do not receive your full personal profile or financial data.
• IT and hosting providers: Cloud infrastructure and platform hosting partners who store and process data on our behalf under strict data processing agreements. These providers act only on badu88's instructions.
• Legal and regulatory authorities: badu88 will disclose personal data to government bodies, law enforcement agencies, or courts when required to do so by applicable law or in response to a lawful request. We will notify affected users where permitted to do so.
• Professional advisors: Legal, financial, and compliance advisors engaged by badu88 may have access to personal data strictly limited to what is required to deliver their professional services, subject to professional confidentiality obligations.

All third parties with whom badu88 shares personal data are required to implement appropriate technical and organisational security measures and to use the data solely for the purpose for which it was shared. badu88 conducts due diligence on third-party data processors before engagement and reviews these relationships periodically.

badu88 uses cookies and similar tracking technologies to operate the platform effectively and to improve your experience. The following types of cookies are used:

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your session state, keep you logged in, and enable core security features. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies: These cookies remember your preferences (such as preferred language, display settings, and notification preferences) so that you do not need to re-enter them on each visit.
• Analytics cookies: badu88 uses internal analytics tools to understand how players interact with the platform — including which pages are most visited, how long sessions last, and where users encounter difficulties. This data is processed in aggregate and anonymised where possible. No third-party analytics vendors are used that would share your data with their own networks.
• Security cookies: These cookies record technical signals (such as device fingerprints and IP addresses) used to detect and prevent fraudulent access, account takeover attempts, and bot activity.

badu88 does not use advertising or retargeting cookies, and does not participate in cross-site behavioural advertising networks. You will not be served badu88 advertisements based on your browsing behaviour on other websites.

You may control cookie behaviour through your browser settings. Please be aware that disabling strictly necessary cookies will prevent core platform features from functioning correctly, including login and account management.

badu88 retains personal data for the periods set out below, after which data is securely deleted or anonymised. Specific retention periods reflect the purpose for which the data is held and applicable legal requirements:

Where personal data is retained beyond account closure for legal compliance purposes, it is stored in a restricted-access environment and is not used for any operational purpose such as marketing or platform improvement.

As a badu88 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team in writing at [email protected]. We will acknowledge your request within 5 business days and respond substantively within 30 days.

• Right of access: You may request a copy of all personal data that badu88 holds about you. We will provide this in a commonly used, machine-readable format where feasible.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Basic account details (name, contact information) can often be updated by contacting the support team directly.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent (for consent-based processing). Note that this right is subject to overriding legal retention obligations, particularly for financial and compliance data as outlined in Section 7.
• Right to restrict processing: You may request that badu88 restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or where you have objected to processing pending resolution of that objection.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that badu88 provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to object: You may object to the processing of your personal data where badu88 relies on legitimate interest as the legal basis, unless badu88 can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent (for example, receiving marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To opt out of marketing, contact our support team or follow the unsubscribe instructions in any promotional communication.

badu88 implements a comprehensive range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes the following measures:

• TLS/SSL encryption: All data transmitted between your device and the badu88 platform is encrypted using Transport Layer Security (TLS). This applies to account login, game sessions, and all financial transactions.
• Password hashing: Account passwords are stored using strong one-way cryptographic hashing algorithms. badu88 staff do not have access to your plaintext password at any time.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff members are granted the minimum level of data access necessary to perform their job functions, and all access is logged and audited.
• Two-factor authentication (2FA): Players are strongly encouraged to enable two-factor authentication on their badu88 accounts. Internal administrative access to player data systems requires multi-factor authentication.
• Infrastructure security: badu88's platform is hosted in secure data centre environments with physical access controls, network perimeter defences, intrusion detection systems, and regular vulnerability scanning.
• Incident response: badu88 maintains a documented security incident response procedure. In the event of a personal data breach that is likely to result in significant risk to affected individuals, badu88 will notify affected players and relevant authorities within a reasonable timeframe.

While badu88 employs industry-standard security measures, no online platform can guarantee absolute security against all possible threats. You are responsible for maintaining the security of your own account credentials and for using the platform from secure devices and networks.

The badu88 platform is strictly intended for adults aged 18 years and above. badu88 does not knowingly collect, process, or store personal data from any individual under the age of 18.

During the registration process, all players are required to confirm that they are 18 years of age or older. badu88 conducts age verification as part of its KYC procedures and will suspend any account where there is reasonable suspicion that the account holder does not meet the minimum age requirement.

If badu88 becomes aware that personal data has been collected from a minor — whether through a false declaration during registration or any other means — we will take immediate steps to suspend the account, delete the personal data, and return any real-money balance to the payment method used for deposit, subject to verification that the funds are returned to an adult.

badu88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will take reasonable steps to notify active account holders — typically via email or an in-platform notification — prior to the changes taking effect.

The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to stay informed of how badu88 handles your personal data.

Your continued use of the badu88 platform following any update to this Policy constitutes your acceptance of the revised terms. If you do not accept a material change to this Policy, you should cease using the platform and contact our support team to request account closure in accordance with the Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or badu88's data practices, please contact our support team using the details below. All privacy-related requests should be submitted in writing to ensure a clear record and prompt handling.

• Email: support@badu88.club (plain text — not a clickable link)
• Subject line for data requests: Please use "Privacy Request – [Your Username]" as your email subject line so our team can route your request immediately to our data compliance team.
• WhatsApp: +880 1700 000 000
• Support hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Response time: badu88 aims to acknowledge all privacy-related requests within 5 business days and provide a substantive response within 30 days.

badu88 takes all privacy concerns seriously and is committed to resolving them fairly and promptly. If you feel that your concern has not been addressed satisfactorily, you may escalate by marking a follow-up email "Formal Privacy Complaint" and a senior member of our compliance team will review your case personally.