buby88 Privacy Policy

buby88 ("we", "us", "our") is committed to protecting the privacy and personal data of everyone who uses the buby88 platform at buby88.net. This Privacy Policy sets out in clear, accessible language the types of personal data we collect from players, the purposes for which that data is used, the parties with whom it may be shared, how long we retain it, and the rights you hold in relation to your data.

This Privacy Policy applies to all players who access buby88 from Bangladesh, including players in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. It applies regardless of whether you access the platform via a desktop browser, a mobile browser, or any other means.

buby88 acts as the data controller in respect of all personal data collected through the platform. This means we are responsible for deciding how and why your personal data is processed. We take this responsibility seriously and implement appropriate technical and organisational measures to protect your data from unauthorised access, loss, or misuse.

We may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable legal requirements. When material changes are made, we will notify registered players by posting a notice on the platform or sending an email to the address registered on your account. The date at the top of this page always reflects when the Policy was last revised. Your continued use of buby88 after any change takes effect constitutes your acceptance of the updated Privacy Policy.

If you have questions about any aspect of this Privacy Policy, or if you wish to exercise any of your data rights, please contact us at [email protected]. We will respond to all privacy-related enquiries within a reasonable timeframe, typically within 5 business days (Bangladesh Standard Time, UTC+6).

buby88 collects personal data in several different ways: directly from you when you register an account or interact with the platform, automatically through your use of the site, and in limited circumstances from third-party sources such as payment processors and identity verification providers. Below we describe each category of data in detail.

Registration and Identity Data

When you create a buby88 account, we collect the personal information you provide during the registration process, including your full legal name, date of birth, residential address, email address, and Bangladeshi mobile number. This data is necessary to create your account, verify your identity, and comply with our age verification obligations (18+ only).

Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, we may request documentary proof of your identity, address, and payment method ownership. Acceptable identity documents include National Identity Cards (NID), passports, and driving licences. Documentary verification data is stored securely and used solely for the purposes of identity verification, fraud prevention, and regulatory compliance.

Financial and Transaction Data

We collect data relating to all financial transactions conducted through your buby88 account, including deposit amounts, withdrawal requests, payment method identifiers (such as bKash wallet numbers, Nagad account numbers, Rocket account numbers, Upay account numbers, bank account details, and masked card numbers), and transaction timestamps. This data is necessary for processing payments, detecting fraud, and maintaining accurate financial records.

Gaming Activity Data

We collect detailed records of your gaming activity on buby88, including the games you play, the amounts wagered, game outcomes, bonus activations, and session durations. This data is used for account management, fair play monitoring, responsible gaming assessments, and dispute resolution.

Technical and Device Data

When you access buby88, our servers automatically collect certain technical data including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and pages visited. This data helps us maintain platform security, detect suspicious access patterns, and improve the technical performance of the site.

Communications Data

If you contact our support team by email or through any messaging channel, we retain records of that communication including your contact details, the content of your messages, and any attachments you provide. This data is used to manage your support requests and to maintain a history of player interactions for quality and compliance purposes.

Responsible Gaming Data

If you use any of buby88's responsible gaming tools — such as deposit limits, session time limits, cool-off periods, or self-exclusion — we record the settings you choose and the dates on which they are applied or modified. This data is used exclusively to enforce the responsible gaming measures you have requested and to protect your wellbeing as a player.

buby88 processes your personal data for a number of specific, legitimate purposes. We do not use your data for any purpose that is incompatible with those listed below. For each purpose, we identify the lawful basis on which we rely to process your data.

Marketing Communications

buby88 will only send you promotional emails, SMS notifications, or other marketing communications if you have explicitly opted in to receive them during registration or through your account settings. You may withdraw your consent to marketing communications at any time by updating your communication preferences in your account settings or by contacting us at [email protected]. Withdrawing consent to marketing does not affect your ability to use the buby88 platform or receive service-related communications (such as account verification messages, payment confirmations, and security alerts), which are sent on the basis of contract performance and are not optional.

Automated Decision-Making

buby88 uses automated systems to assist with certain decisions, including fraud detection, bonus abuse identification, and responsible gaming alerts. These systems analyse patterns in account activity data and flag cases for human review where thresholds are exceeded. Where a fully automated decision produces a significant effect on your account — such as a temporary suspension triggered by a fraud detection alert — you have the right to request human review of that decision by contacting our support team.

buby88 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for each specific purpose.

Payment Processors

To process deposits and withdrawals, we share relevant financial data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These providers receive only the transaction data necessary to execute the specific payment requested and are contractually prohibited from using that data for any other purpose.

Identity Verification Providers

To fulfil our KYC obligations, we may share identity document data and registration data with third-party identity verification service providers. These providers verify the authenticity of documents and cross-reference data against relevant databases. They act as data processors under our instruction and may not use your data for their own purposes.

Game Technology Providers

Games on buby88 are powered by third-party software studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive a player session token and anonymised gaming data necessary to operate the game environment. They do not receive your name, address, financial details, or any other personally identifying information beyond what is technically required to authenticate your game session.

Legal and Regulatory Disclosure

buby88 may disclose your personal data to law enforcement agencies, regulatory bodies, or courts if required to do so by applicable law, a valid legal order, or where we have a good-faith belief that disclosure is necessary to prevent fraud, protect the safety of individuals, or enforce our Terms & Conditions. We will notify you of such a disclosure where we are legally permitted to do so.

Business Transfers

In the event that buby88 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify registered players of any such transfer and of any material changes to data processing arrangements that result from it before the transfer takes effect.

buby88 uses cookies and similar tracking technologies to provide a functional, secure, and consistent experience on the platform. A cookie is a small text file placed on your device by your browser when you access a website. The cookies used by buby88 fall into the following categories:

Third-Party Cookies

buby88 does not permit third-party advertising networks to place tracking cookies on the platform. Game providers (such as Pragmatic Play and Evolution Gaming) may set functional cookies within embedded game frames that are necessary to operate the game session. These cookies are scoped to the game frame and do not give game providers access to your broader buby88 account data.

Managing Cookies

You can control cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies on a site-by-site basis. Please note that disabling strictly necessary or security cookies will impair your ability to use the buby88 platform, as these cookies are essential to maintaining a secure, authenticated session. Disabling analytics or functional cookies will not prevent you from accessing or using the platform, but may affect the personalisation of your experience.

buby88 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, as described in this Privacy Policy, and to comply with our legal and regulatory obligations. When personal data is no longer required for any active purpose, we securely delete or anonymise it.

Active Accounts

For active player accounts, we retain all personal data associated with the account for the duration of the account's active status. This includes registration data, KYC documents, financial transaction records, gaming activity logs, and communications history. Retaining this data during the life of an active account is necessary to provide the services you have contracted for, to manage your account correctly, and to comply with financial record-keeping obligations.

Closed and Dormant Accounts

Following the closure of a player account — whether initiated by you or by buby88 — we retain your personal data for a minimum period of five (5) years from the date of account closure. This retention period reflects our obligations to maintain financial records, respond to any regulatory enquiries that may arise after account closure, and manage any residual disputes or legal claims. After the five-year retention period has elapsed, your data is securely deleted or irreversibly anonymised.

Self-Excluded Accounts

Where an account is subject to a self-exclusion arrangement, we retain sufficient identity data — specifically your name, date of birth, and registered contact details — for the entire duration of the self-exclusion period and for a minimum of five years thereafter. This retention is necessary to enforce the self-exclusion and to prevent the creation of a new account by the same individual during the exclusion period. Retaining this data is in your direct interest as a responsible gaming safeguard.

Communication Records

Records of customer support communications are retained for a period of three (3) years from the date of the most recent interaction in that communication thread. This retention period allows us to maintain a consistent service history and to reference prior interactions in the event of a subsequent dispute or repeat enquiry.

Technical and Analytics Data

Anonymised analytics data and aggregated technical logs are retained for up to twenty-four (24) months for the purpose of platform performance analysis. Where technical logs contain identifiable IP addresses or session tokens, those identifiers are deleted or anonymised within ninety (90) days unless they are associated with an active fraud investigation or security incident requiring a longer retention period.

As a data subject, you hold a number of rights in relation to the personal data that buby88 holds about you. We are committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact us at [email protected] with the subject line "Data Rights Request" and we will respond within 5 business days.

Right of Access

You have the right to request a copy of the personal data that buby88 holds about you. Upon receiving a valid access request, we will provide you with a structured summary of your data in a readable format, free of charge. Where requests are manifestly unfounded or excessive, we reserve the right to charge a reasonable administrative fee or to decline the request, with an explanation.

Right to Rectification

If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. For minor account details such as contact information, you may be able to update these directly through your account settings. For identity document corrections, please contact our support team with documentary evidence of the correct information.

Right to Erasure

You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other lawful basis applies), or where you object to processing and we have no overriding legitimate grounds to continue. Please note that this right is not absolute — we may be required to retain certain data to comply with legal obligations (such as financial record-keeping requirements) even after an erasure request is received. Where we are unable to fulfil an erasure request in full, we will explain the reasons why.

Right to Restriction of Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data (pending verification), where processing is unlawful but you prefer restriction to erasure, or where you have objected to processing and we are assessing whether our legitimate grounds override your rights. During a restriction period, we will continue to store your data but will not process it for other purposes without your consent, except for legal proceedings or protecting the rights of another person.

Right to Data Portability

Where we process your personal data on the basis of your consent or to perform a contract with you, and where the processing is carried out by automated means, you have the right to receive that data in a structured, commonly used, machine-readable format (such as CSV or JSON). You may also request that we transmit that data directly to another data controller where technically feasible.

Right to Object

You have the right to object at any time to the processing of your personal data where that processing is based on our legitimate interests. If you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or unless the processing is necessary for the establishment, exercise, or defence of legal claims. You may also object to processing for direct marketing purposes at any time, with no requirement to provide justification — we will cease marketing communications immediately upon receipt of such an objection.

Rights Related to Automated Decision-Making

Where buby88 uses automated systems to make decisions that produce a significant effect on your account (as described in Section 3), you have the right to request human review of that decision, to express your point of view, and to contest the outcome. To exercise this right, contact us at [email protected] within 30 days of receiving notification of the automated decision.

buby88 takes the security of your personal data seriously and implements a layered set of technical and organisational security measures designed to protect your data from unauthorised access, accidental loss, alteration, or disclosure. The key security measures we employ include:

• SSL/TLS Encryption: All data transmitted between your browser and buby88 servers is encrypted using industry-standard TLS 1.2 or higher. The buby88.net domain operates exclusively over HTTPS; unencrypted HTTP connections are automatically redirected to the secure version.
• Data Encryption at Rest: Sensitive personal data stored on buby88 servers — including KYC documents, payment method identifiers, and account credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within buby88's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data required to perform their specific job function. All internal access is logged and subject to regular audit.
• Password Hashing: Account passwords are never stored in plain text. buby88 uses strong one-way cryptographic hashing algorithms to store password credentials. Even buby88 staff cannot retrieve your password — only a password reset is possible in the event of a forgotten credential.
• Two-Step Verification: buby88 offers optional two-step SMS verification for player accounts, sending a one-time code to your registered Bangladeshi mobile number when a login is detected from an unrecognised device or location. We strongly recommend enabling this feature.
• Fraud Detection Systems: buby88 operates automated fraud detection systems that monitor account activity, login patterns, and transaction behaviour in real time, flagging anomalies for immediate review by our security team.
• Regular Security Reviews: buby88's platform infrastructure and data security practices are subject to periodic internal security reviews. Identified vulnerabilities are remediated according to a risk-based prioritisation framework.
• Data Breach Response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, buby88 will notify affected players without undue delay, describing the nature of the breach, the data affected, and the steps we are taking to mitigate the impact.

While buby88 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are also responsible for taking appropriate steps to protect your account, including using a strong, unique password, keeping your login credentials confidential, and notifying us immediately at [email protected] if you suspect that your account has been compromised.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way buby88 handles your personal data, we encourage you to contact us directly. Our team is available 24 hours a day, 7 days a week, and will respond to privacy-related enquiries in English within 5 business days (Bangladesh Standard Time, UTC+6).

How to Reach Us

All privacy-related enquiries, data rights requests, and data breach reports should be submitted by email to the buby88 Data Protection contact:

Email: [email protected] (subject line: "Privacy Enquiry" or "Data Rights Request")

Platform: buby88.net — you may also submit a privacy enquiry through the support chat available when logged into your buby88 account.

Data Protection Officer

buby88 has designated a Data Protection Officer (DPO) responsible for overseeing our data protection strategy and ensuring compliance with applicable data protection obligations. The DPO reviews this Privacy Policy periodically, assesses the impact of new data processing activities, and acts as the primary point of contact for player data rights requests. All correspondence marked "Data Rights Request" or "Privacy Enquiry" is routed directly to the DPO team for handling.

Response Timeframes

buby88 is committed to the following response timeframes for privacy-related communications:

• General privacy enquiries: Response within 2 business days (Bangladesh Standard Time, UTC+6).
• Data rights requests (access, rectification, erasure, portability, restriction, objection): Acknowledgement within 2 business days; substantive response within 5 business days. Where a request is complex or involves a large volume of data, we may extend this period by up to a further 10 business days, notifying you of the extension and the reason before the original deadline expires.
• Data breach notifications: Where a breach is confirmed that affects your personal data and poses a meaningful risk to your rights, we will notify you without undue delay and in any event within 72 hours of becoming aware of the breach.
• Automated decision-making review requests: Acknowledgement within 2 business days; human review completed and communicated within 10 business days.

Complaints

If you are not satisfied with the way buby88 has handled a privacy concern or a data rights request, you have the right to escalate your complaint. In the first instance, please ask that your complaint be reviewed by a senior member of the buby88 Data Protection team by clearly stating "Escalation Request" in your follow-up email to [email protected]. We will acknowledge escalated complaints within 1 business day and provide a final written response within 10 business days.

If you remain dissatisfied after exhausting buby88's internal complaints process, you may seek independent resolution through any consumer dispute mechanism available in your jurisdiction. buby88 respects the right of players to pursue external remedies and will cooperate with any legitimate external review process in good faith.