bm880 Privacy Policy — How We Protect Your Data

Data Controller

bm880 is the data controller responsible for the personal information collected through the Platform. For the purpose of this Policy, "data controller" means the entity that determines the purposes and means of processing personal data. If you have any questions about this Policy or about how bm880 processes your personal information, you may contact the bm880 data privacy team at [email protected]. Please include "Privacy Query" in your subject line so your message is directed to the correct team promptly.

Information We Collect

bm880 collects personal information when you register an account, use the Platform, make deposits or withdrawals, contact our support team, or interact with promotions and bonuses. The categories of personal information we may collect include the following:

How We Use Your Information

bm880 uses the personal information it collects for the following purposes: (a) to create and manage your bm880 account; (b) to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods; (c) to verify your identity and age in compliance with applicable regulations; (d) to detect, investigate, and prevent fraud, money laundering, and other prohibited conduct; (e) to provide customer support and respond to your enquiries; (f) to send you transactional notifications relating to your account, such as deposit confirmations, withdrawal status updates, and security alerts; (g) to administer bonuses, promotions, and the Rewards programme; and (h) to improve the Platform, analyse usage patterns, and develop new features.

bm880 may also use your information to send you marketing communications about promotions, new games, and special offers — but only where you have opted in to receive such communications, or where we have a legitimate interest in doing so and you have not opted out. You may unsubscribe from marketing messages at any time by contacting the bm880 support team. Opting out of marketing communications will not affect your ability to use the Platform or receive transactional notifications relating to your account.

Legal Basis for Processing Your Data

bm880 processes your personal information on the following legal bases: (a) Contract performance — processing necessary to fulfil our obligations under the bm880 Terms and Conditions, including account management, payment processing, and game access; (b) Legal obligation — processing required to comply with anti-money laundering laws, age verification requirements, and other applicable regulations; (c) Legitimate interests — processing carried out for fraud prevention, platform security, and service improvement, where those interests are not overridden by your fundamental rights; and (d) Consent — processing based on your specific, informed consent, such as sending optional marketing communications. Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Sharing Your Information

bm880 does not sell your personal information. We may share your personal information with the following categories of third parties where necessary to operate the Platform and comply with our legal obligations: (a) Payment service providers — bKash, Nagad, Rocket, Upay, and other payment processors require transaction-level data to process your deposits and withdrawals. bm880 shares only the minimum information necessary for each transaction; (b) Identity verification providers — bm880 uses third-party KYC service providers to verify player identity and age. These providers receive a copy of the identity documents you submit and process them in accordance with their own privacy policies; (c) Fraud prevention and security services — bm880 uses third-party services to detect and prevent fraudulent activity, money laundering, and prohibited conduct on the Platform; and (d) Legal and regulatory authorities — bm880 may be required by law, regulation, court order, or government authority to disclose certain personal information. We will comply with any such requirement while seeking to minimise the disclosure to only what is strictly required.

bm880 may also share anonymised or aggregated data — data that cannot reasonably be used to identify you — with analytics partners and business intelligence services for the purpose of improving the Platform and understanding usage trends. Such data is not personal information. All third-party service providers engaged by bm880 are required to process personal data only for the specific purposes described above and in compliance with applicable data protection standards. bm880 does not permit third-party service providers to use your personal information for their own marketing or commercial purposes.

Data Retention

bm880 retains your personal information for as long as your account remains active and for a reasonable period thereafter to comply with legal obligations, resolve disputes, and enforce agreements. Specifically: account registration data and transaction records are retained for a minimum period required under applicable anti-money laundering and financial record-keeping regulations, which may be up to seven (7) years from the date of the relevant transaction or the date of account closure, whichever is later; identity verification documents are retained for the period required under applicable KYC regulations; and support correspondence is retained for up to two (2) years from the date of the last interaction. When personal data is no longer required for its original purpose and no legal obligation to retain it exists, bm880 will securely delete or anonymise it.

Security of Your Personal Information

bm880 implements appropriate technical and organisational measures to protect your personal information against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL encryption for all data in transit, access controls limiting personal data access to authorised personnel only, secure storage of identity verification documents, and regular security assessments of the Platform. While bm880 takes reasonable steps to protect your data, no online platform can guarantee absolute security. You are also responsible for maintaining the security of your own account, keeping your login credentials confidential, and notifying bm880 immediately if you suspect unauthorised access to your account. bm880 will never contact you by SMS, messaging app, or phone call to request your password, PIN, or one-time verification code.

Cookies and Similar Technologies

bm880 uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device by a website to store information about your session and preferences. bm880 uses the following types of cookies: (a) Strictly necessary cookies — required for the Platform to function correctly, such as maintaining your login session and remembering items in your account settings. These cannot be disabled without affecting Platform functionality; (b) Performance cookies — used to collect anonymous information about how visitors use the Platform, such as which pages are visited most frequently and whether error messages are received. This data helps bm880 improve the Platform experience; and (c) Functional cookies — used to remember choices you make on the Platform (such as your preferred language setting) to provide a more personalised experience.

bm880 does not use third-party advertising cookies or behavioural tracking cookies from external ad networks. Most browsers allow you to control cookies through browser settings. You can set your browser to refuse all cookies or to indicate when a cookie is being set. However, disabling strictly necessary cookies will affect your ability to use the Platform. Instructions for managing cookies vary by browser; please refer to your browser's help documentation for guidance. Because bm880 does not use advertising cookies, opting out of third-party ad cookie networks (such as via browser extensions) will have no effect on your bm880 experience.

Your Privacy Rights

Subject to applicable law, you have the following rights in relation to the personal information bm880 holds about you: (a) Right of access — you may request a copy of the personal information bm880 holds about you; (b) Right of rectification — you may ask bm880 to correct any inaccurate or incomplete personal information we hold about you; (c) Right to erasure — in certain circumstances, you may request that bm880 delete your personal information. Note that we may be required to retain certain data for legal compliance purposes even if you request deletion; (d) Right to restrict processing — in certain circumstances, you may ask bm880 to limit how we use your personal information; (e) Right to withdraw consent — where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal; and (f) Right to object to marketing — you may opt out of receiving marketing communications from bm880 at any time.

To exercise any of the rights listed above, please contact the bm880 support team at [email protected] with the subject line "Privacy Rights Request". bm880 will respond to your request within a reasonable timeframe and in accordance with applicable data protection law. We may need to verify your identity before processing your request to ensure that personal data is not disclosed to an unauthorised party. bm880 will not charge a fee for handling straightforward privacy rights requests, but reserves the right to charge a reasonable fee where requests are excessive or repetitive.

Children and Minors

bm880 is strictly for adults aged 21 years and above. bm880 does not knowingly collect or process personal information from any individual under the age of 21. If we become aware that personal information has been collected from a person under the age of 21, we will take immediate steps to delete that information and close the associated account. If you believe that a minor has registered an account on bm880, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action. Parents and guardians are encouraged to use parental control tools and to monitor the online activities of minors in their care.

Changes to This Privacy Policy

bm880 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the services we offer. When we make material changes to this Policy, we will display a prominent notice on the Platform and, where reasonably practicable, notify registered players by sending a message to their registered account. The date at the top of this Policy indicates when it was last updated. We encourage you to review this Policy periodically to stay informed about how bm880 protects your personal information.