Bad888 Privacy Policy — Your data, our responsibility

Bad888 (www.bad888.pro) is a trusted online gaming platform for adult users in Bangladesh and beyond. By creating an account or using our services, you agree to this Privacy Policy. We encourage you to read this page carefully before you start using our services.

This Privacy Policy explains in detail what data bad888 collects, why we collect it, how we use it, who we share it with, and what steps we take to keep it safe. Our goal is to provide a fully transparent service so you can enjoy bad888 with complete peace of mind.

Bad888 complies with Bangladesh and international data protection laws. We believe every user owns their own data — we use it solely to provide our services, nothing more.

Bad888 collects three types of data — information you provide directly, data collected automatically through your use of the platform, and information required for legal verification.

a) Information you provide directly:

• Full name, date of birth, and nationality
• Email address and mobile number
• Residential address
• Copy of national ID, passport, or driving license (for KYC verification)
• Payment information (bKash/Nagad number, crypto wallet address)
• Contact Information for the Support Team

b) Data collected automatically:

• IP address and device information (OS, browser, device model)
• Login time and date
• Gaming history and betting records
• Information on where and how long you spent time on the platform
• Data collected through cookies and similar tracking technologies

Bad888 uses collected data only for specific, legitimate purposes. The table below provides full details:

Bad888 never uses your data beyond its original purpose. If we ever need to use it for a new purpose, we will notify you in advance and obtain your consent where required.

Bad888 does not sell your personal data. However, to operate our services properly, we may share limited information with trusted third parties:

• Payment Provider: Payment gateways such as bKash, Nagad, Rocket, and Upay receive the information needed to process transactions.
• KYC verification service: Licensed third-party providers are used for identity verification.
• Game providers: Minimal data necessary to run the games may be shared with game developers.
• Law enforcement agencies: Data may be disclosed where required by court order or legal obligation.
• Cybersecurity Partner: Specialist service providers for fraud and anti-cheat prevention.

The bad888 website uses cookies to enhance your browsing experience. Cookies are small text files stored in your browser.

Types of cookies we use:

• Essential cookies: Required to maintain login sessions and core platform functionality. The platform cannot operate without these.
• Performance Cookies: Used to understand page traffic and identify issues — helps us improve our services.
• Functional Cookies: To remember your language preferences and settings.
• Marketing Cookies: Used to show you promotional content based on your preferences — only active with your consent.

You can manage or delete cookies at any time through your browser settings. Please note that disabling essential cookies may affect the functionality of some services.

Bad888 uses industry-leading technology to keep your data secure. Our security measures include:

• 256-bit TLS/SSL encryption for all data transfers.
• Stored data is secured with AES-256 encryption.
• Multi-factor authentication (2FA) available.
• 24/7 automated threat monitoring and alert system.
• Regular third-party penetration testing.
• Restricted Staff Access — only authorized personnel can access user data.
• In the event of a data breach, affected users will be notified within 72 hours.

As a registered member of bad888, you have the following rights over your personal data:

• Right to Know: You have the right to know what information bad888 holds about you and how it is used.
• Right of Access: You may request a copy of the data we hold about you.
• Right to Rectification: You may request correction of any inaccurate or outdated information.
• Right to Erasure: You may request deletion of your data in certain circumstances (unless retention is required by law).
• Right to Restrict Processing: You may object to the use of your information for specific purposes.
• Right to Portability: You may request a copy of your data in a structured format.
• Right to Withdraw Consent: You may withdraw your consent to marketing communications or specific data processing at any time.

To exercise any of these rights, please contact our support team. We will respond to your request within 30 business days.

Bad888 does not store your data indefinitely. Each type of information has a defined retention period:

• Account information — retained for the duration of the account and for up to 5 years after closure.
• Financial transaction records — retained for up to 7 years as required by law.
• KYC documents — retained for up to 5 years after account closure.
• Gaming history — retained for up to 3 years.
• Customer support conversations — up to 2 years.
• Log files and technical data — up to 1 year.

After the specified period, data is automatically deleted or anonymized so that no individual can be identified.

Bad888 never knowingly collects data from anyone under the age of 18. Age verification is mandatory during registration. If an account is found to have been created with a false age, it will be closed immediately and any collected data will be deleted.

If you believe your child is using bad888, please contact our support team. We will take immediate action.

Bad888 may update this Privacy Policy as needed. For any significant changes, we will:

• We will update the effective date at the top of this page.
• We will send a notification of any changes to your registered email.
• We will display a notice on the platform.

Continued use of bad888 after any changes constitutes your acceptance of the updated policy. We recommend reviewing this page regularly.

For any questions, complaints, or requests regarding our Privacy Policy, please contact us:

Our data protection team reviews your requests 7 days a week. We typically respond within 3–5 business days. Complex requests may take up to 30 business days.