bn80 Privacy Policy

This Privacy Policy ("Policy") explains how bn80 ("bn80", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "Player") who register for and use the bn80 online casino and sports betting platform accessible at https://bn80.io (the "Platform").

By registering an account on the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy forms part of the bn80 Terms & Conditions and should be read alongside them.

bn80 is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles. We collect only what is necessary, use it only for defined purposes, protect it with robust technical safeguards, and respect your rights over your own information at all times.

For the purposes of this Policy, bn80 is the data controller responsible for the personal data collected through the Platform. As data controller, bn80 determines the purposes and means by which personal data is processed and is accountable for ensuring that such processing is carried out lawfully, fairly, and transparently.

All data protection enquiries, access requests, correction requests, and deletion requests should be directed to the bn80 data protection contact at: [email protected]. We will acknowledge all formal data requests within 5 business days and provide a substantive response within 30 calendar days of receipt.

bn80 collects the following categories of personal data from players on the Platform:

bn80 does not collect sensitive personal data such as biometric data (beyond liveness-check selfies used solely for identity verification), health data, political opinions, religious beliefs, or criminal records unless specifically required by a regulatory or legal obligation. Where such data is exceptionally required, you will be explicitly informed and asked for consent separately.

bn80 collects your personal data through the following channels:

• Direct submission: Information you actively provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated collection: Technical and gameplay data that is automatically generated and recorded by our platform systems when you log in, browse, place bets, or interact with any game on the Platform.
• Cookies and tracking technologies: Session cookies, persistent cookies, and local storage objects used to maintain your login session, remember your preferences, and analyse how the Platform is used. See Section 8 for full details.
• Third-party identity verification providers: When you submit KYC documentation, our third-party identity verification partner may return additional validation data (such as document authenticity scores) to us as part of the verification process.
• Payment processors: When you make a deposit via bKash, Nagad, Rocket, or a bank transfer, our payment partners share transaction confirmation data (transaction ID, amount, timestamp, and payment method reference) with us to credit your account.
• Fraud prevention and AML screening services: We may receive risk-scoring or watchlist-matching results from third-party fraud prevention and anti-money laundering screening services to fulfil our compliance obligations.

bn80 processes your personal data exclusively for the following defined purposes. We do not use your data for any purpose not listed below without first obtaining your explicit consent:

• Account management: Creating, maintaining, and operating your bn80 player account, including authentication, password recovery, and account settings management.
• Payment processing: Facilitating deposits via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and supported bank transfers, and processing withdrawal requests back to your registered payment method.
• Identity verification (KYC): Confirming that you meet the minimum age requirement of 21 years, verifying that the payment methods you use belong to you, and ensuring the accuracy of your registration details.
• Fraud prevention and security: Detecting and preventing fraudulent account activity, collusion, bonus abuse, money laundering, and unauthorised access to your account.
• Responsible gaming compliance: Monitoring gameplay patterns to identify signs of problem gambling behaviour, enforcing self-exclusion requests and deposit limits, and flagging accounts that may require intervention.
• Customer support: Responding to your enquiries, complaints, and formal dispute submissions via [email protected] or live chat.
• Platform improvement: Analysing aggregated, anonymised usage data to improve game performance, platform stability, user experience, and customer journey design.
• Marketing communications (opt-in only): Sending promotional offers, bonus notifications, and platform news to players who have explicitly opted in to receive such communications.
• Legal and regulatory compliance: Retaining records as required by applicable anti-money laundering (AML) laws, financial crime regulations, and any other legal obligations applicable to the operation of the Platform.

bn80 relies on the following legal bases to process your personal data, depending on the specific purpose involved:

• Contractual necessity: Processing required to fulfil our contractual obligations to you under the bn80 Terms & Conditions, including account management, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC identity verification, AML transaction monitoring, and record-keeping obligations.
• Legitimate interests: Processing carried out in furtherance of bn80's legitimate business interests in fraud prevention, platform security, responsible gaming monitoring, and anonymised analytics — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing carried out with your freely given, specific, informed, and unambiguous consent — specifically, the sending of marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

bn80 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Data sharing with third parties is limited strictly to the following categories of recipients and the purposes described:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, and Mastercard receive the minimum data necessary to process your transactions — typically your account reference, transaction amount, and payment method identifier.
• Identity verification providers: A third-party KYC/AML service provider processes your identity documents and returns a verification result. This provider is bound by strict data processing agreements and may not use your data for any purpose other than the verification service it provides to bn80.
• Game software providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other game providers receive a pseudonymous player session token to operate their games within the bn80 platform. These providers do not receive your full personal profile.
• Fraud prevention and AML screening services: Transaction and identity data is shared with third-party risk screening services for the purpose of detecting fraudulent activity and complying with anti-money laundering obligations.
• Law enforcement and regulatory authorities: bn80 will disclose personal data to law enforcement agencies, courts, or regulatory authorities when required to do so by applicable law, court order, or legal process.
• Professional advisors: Lawyers, auditors, and insurers engaged by bn80 may have access to personal data to the extent necessary to provide their professional services to bn80, and are bound by professional confidentiality obligations.

All third-party service providers engaged by bn80 are required to enter into data processing agreements that obligate them to process personal data only on bn80's instructions, maintain appropriate security standards, and not share data with any further parties without prior authorisation from bn80.

bn80 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the Platform. The following categories of cookies are used:

Strictly necessary cookies cannot be disabled as they are essential for the Platform to function. Functional and analytics cookies may be disabled through your browser settings or by contacting [email protected], though disabling them may affect your experience on the Platform.

bn80 does not use third-party advertising cookies or behavioural tracking cookies. No cookie data from the bn80 Platform is shared with social media platforms or advertising networks.

bn80 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected or as required by applicable law. The following retention periods apply:

• Active account data: Retained for the full duration of your active registration on the Platform and for a period of 5 years following account closure, in accordance with standard financial record-keeping requirements.
• KYC and identity documents: Retained for a minimum of 5 years from the date of submission, as required by anti-money laundering regulations applicable to online financial services platforms.
• Transaction records: All deposit and withdrawal records are retained for a minimum of 5 years from the date of the transaction.
• Customer support communications: Retained for 2 years from the date of the last communication in a support case, unless the case is subject to a formal dispute or legal proceeding, in which case records are retained until the matter is fully resolved.
• Gameplay and betting records: Retained for 2 years from the date of the session, or 5 years in cases involving a formal dispute about game outcome or payout.
• Marketing consent records: Retained for 3 years from the date consent was given, or until consent is withdrawn, whichever is earlier.
• Technical/log data: Server access logs and security logs are retained for 90 days, after which they are permanently deleted.

Upon expiry of the applicable retention period, personal data is securely and irreversibly deleted from all bn80 systems using industry-standard data destruction methods. Where complete deletion is not immediately possible due to backup schedules, data is isolated and protected until it can be securely destroyed at the next scheduled purge cycle.

bn80 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our key security controls include:

• 256-bit TLS/SSL encryption on all pages of the Platform and all API communications between Platform components.
• One-way cryptographic hashing (bcrypt) of all account passwords. bn80 staff cannot view or decrypt stored passwords under any circumstances.
• Two-factor authentication (2FA) via OTP sent to your registered Bangladesh mobile number at each login.
• Network-level firewalls, intrusion detection systems (IDS), and distributed denial-of-service (DDoS) mitigation controls.
• Role-based access controls (RBAC) limiting internal staff access to personal data strictly to those with a legitimate operational need.
• Regular penetration testing and vulnerability scanning of Platform infrastructure by qualified security professionals.
• Encrypted storage of all personal and financial data at rest using AES-256 encryption.
• Comprehensive audit logging of all internal administrative access to personal data, with logs reviewed regularly for anomalies.

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, bn80 will notify affected individuals without undue delay once the breach has been identified and assessed. Notification will be sent to the email address associated with your account and will describe the nature of the breach, the data affected, and the steps bn80 has taken in response.

As a registered bn80 player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact [email protected] with your registered email address and a clear description of your request.

• Right of access: You may request a copy of all personal data bn80 holds about you. We will provide this in a structured, commonly used, machine-readable format within 30 days of your request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or supplement it. Account-level information (name, email, mobile number) can also be updated directly within your account dashboard.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to exceptions where retention is required by law (e.g., AML record-keeping obligations).
• Right to restrict processing: You may request that we temporarily halt processing of your personal data — for example, while you contest the accuracy of data we hold or where you have objected to processing based on legitimate interests.
• Right to data portability: You may request that we transmit your personal data directly to you or to another controller in a structured, machine-readable format, where technically feasible and where the processing is based on consent or contractual necessity.
• Right to object: You may object at any time to processing of your personal data carried out on the basis of legitimate interests. bn80 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time by emailing [email protected]. Withdrawal does not affect the lawfulness of prior processing.

bn80 will respond to all data rights requests within 30 calendar days of receipt. In complex or high-volume cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day period.

The bn80 Platform is strictly intended for adults aged 21 and above. bn80 does not knowingly collect personal data from individuals under the age of 21. Registration on the Platform requires you to confirm that you are 21 years of age or older, and identity verification (KYC) procedures are in place to validate this declaration.

If bn80 becomes aware that personal data has been collected from an individual under the age of 21, that account will be immediately suspended, all associated personal data will be securely deleted, and any funds held in the account will be returned to the registered payment method after an AML review. If you believe that a minor has registered on the Platform, please notify us immediately at [email protected].

bn80 operates the Platform for players based primarily in Bangladesh. In the course of providing our services, your personal data may be processed by third-party service providers (including game software providers and identity verification partners) whose servers are located outside Bangladesh.

Where personal data is transferred to a third-party processor located outside Bangladesh, bn80 takes appropriate steps to ensure that your data continues to receive an equivalent level of protection. These steps include requiring the receiving party to enter into data processing agreements incorporating standard contractual clauses, and conducting due diligence reviews of the recipient's security and data protection practices.

bn80 does not transfer personal data to jurisdictions that are known to provide materially inadequate data protection standards without first implementing additional safeguards appropriate to the risk level of the transfer. If you have questions about the specific safeguards applied to any particular international transfer, you may contact us at [email protected].

bn80 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we provide. The effective date at the top of this Policy reflects when the current version was last updated.

Where changes to this Policy are material — meaning they significantly alter how we collect, use, or share your personal data, or meaningfully affect your rights — bn80 will notify you by sending an email to your registered email address and by displaying a prominent notice on the Platform for a period of not less than 14 days prior to the changes taking effect.

For non-material changes (such as corrections of typographical errors, clarification of existing practices, or minor structural updates), the revised Policy will be posted on this page without individual notification. We encourage you to review this Policy periodically to stay informed of how we protect your data.

Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes to this Policy, you should cease using the Platform and may request account closure and deletion of your personal data by emailing [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bn80 processes your personal data, please contact our data protection team using the details below. We are committed to resolving all privacy-related enquiries promptly and transparently.

• Email: [email protected] — please use the subject line "Privacy Enquiry" for fastest routing.
• Response time: We aim to acknowledge all privacy enquiries within 5 business days (Bangladesh Standard Time, UTC+6) and to provide a full substantive response within 30 calendar days.
• Language: All privacy communications are handled in English. Please submit your enquiry in English for the fastest response.
• Operating hours: Our support team is available 24 hours a day, 7 days a week including Bangladeshi public holidays (Eid, Victory Day, Independence Day, Pohela Boishakh, and others).