bz880 Privacy Policy — How We Protect Your Data

Registration and Identity Data

When you register a bz880 account, we collect: your mobile phone number (used as your primary account identifier); a password of your choosing (stored in hashed, non-reversible form — we never store plain-text passwords); your date of birth (used solely for age verification to confirm you are 21 or older); and, if you voluntarily provide it, your name and email address. We do not require a national ID number at the point of registration — however, we may request identity documentation such as a National Identity Card (NID) or passport during KYC verification, particularly before processing withdrawals above certain thresholds.

Transaction and Gaming Data

bz880 records all financial transactions associated with your account, including: deposit amounts, timestamps, and originating payment method (e.g. bKash, Nagad, Rocket, Upay, or bank); withdrawal requests, amounts, and destination payment details; and bonus credits and wagering activity. We also record game play data including game type, wager amounts, outcomes, session duration, and session frequency. This data is used for account management, fraud prevention, responsible gaming monitoring, and platform performance analysis.

Technical and Device Data

When you access bz880, our servers automatically log certain technical data including: your IP address; device type and operating system; browser type and version; referring URL; pages and features accessed within the platform; and session timestamps. This data is used to maintain platform security, diagnose technical issues, prevent fraud, and analyse aggregate usage patterns to improve the platform. bz880 does not use this technical data to identify you personally beyond what is required for security and fraud prevention purposes.

Account Operation and Service Delivery

The primary purpose for which bz880 processes your personal data is to operate your account and deliver our gaming and betting services. This includes: creating and maintaining your account; processing deposits and withdrawals through bKash, Nagad, Rocket, Upay, and connected banking channels; calculating and crediting bonuses; providing access to live casino, cricket betting, slots, and crash game content; and communicating with you about your account, transactions, and any service updates that directly affect you.

Legal and Regulatory Compliance

bz880 processes personal data as required to meet its legal and compliance obligations. This includes: age verification to enforce the 21+ requirement; KYC identity checks before processing significant withdrawals; anti-money laundering (AML) screening and transaction monitoring; fraud detection and prevention; responsible gaming monitoring to identify at-risk behaviour patterns; and record-keeping obligations required by applicable laws and regulations. We may be required to share data with regulatory authorities or law enforcement agencies in response to lawful requests — see Section 4 for details.

Platform Improvement and Analytics

bz880 uses aggregated, anonymised data derived from account and session activity to analyse platform performance, identify technical issues, and guide product development. For example, understanding which games are most popular among players in Dhaka versus Chittagong helps us prioritise game library updates. No individually identifiable data is used in this analysis — all analytics work with aggregated statistical data only.

How Payment Data is Handled

When you make a deposit or request a withdrawal, bz880 passes transaction data to the relevant payment processor (bKash, Nagad, Rocket, Upay, or your bank). bz880 does not store your full bKash PIN, Nagad PIN, bank card number, or internet banking credentials. We store only the transaction reference, amount, timestamp, and partial masked identifier (e.g. last 4 digits of the mobile number associated with a bKash wallet) for our records. Payment processors operate under their own privacy policies and security standards — we recommend reviewing them directly.

Third-Party Wallet Security

Your bKash, Nagad, Rocket, and Upay wallet security is governed by those providers' own terms and security practices. bz880 strongly recommends that you use a unique PIN for your mobile financial services wallets and that you do not share those PINs with anyone — including bz880 support staff. bz880 will never ask for your payment wallet PIN or password through any channel.

Service Providers and Technology Partners

bz880 works with a limited number of carefully selected third-party service providers who assist us in operating the platform. These include game content providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), payment processing partners, SSL certificate and cybersecurity providers, and platform hosting infrastructure. These service providers are permitted to process your personal data only to the extent necessary to provide their specific service to bz880, and are contractually bound to protect your data and to use it for no other purpose.

Legal and Regulatory Disclosure

bz880 may disclose your personal data to regulatory authorities, law enforcement agencies, or courts when required to do so by applicable law, court order, or legitimate regulatory request. This includes disclosures required for anti-money laundering investigations, fraud investigations, or responses to lawful data requests from authorised authorities. We will notify you of such disclosures where we are legally permitted to do so.

No Marketing Data Sales

bz880 does not sell, lease, or share your personal data with advertisers, marketing agencies, data analytics companies, or any third party for their own commercial or marketing purposes. We do not participate in data broker arrangements. Your personal information remains within the bz880 operational ecosystem and is shared externally only as described in clauses 4.1 and 4.2 above.

How bz880 Uses Cookies

bz880 uses essential cookies and similar browser-based storage technologies to operate the platform. Essential cookies are required for functions such as: maintaining your login session so you do not need to re-authenticate on every page; remembering your language preference between sessions; and preserving your account state (such as an active game session or an open bet slip) if you briefly navigate away. Without essential cookies, the platform cannot function correctly. We do not use third-party advertising cookies or cross-site tracking cookies.

Managing Cookie Preferences

You may configure your mobile browser to block or delete cookies. Please note that blocking essential cookies will impair your ability to log in and use core bz880 features. Instructions for managing cookies vary by browser — consult your browser's help documentation for guidance. If you use multiple devices to access bz880 (for example, both an Android phone in Dhaka and a shared family device), note that cookie settings are device-specific and will need to be configured separately on each device.

Retention During Account Lifetime

bz880 retains your personal data for as long as your account remains active or as necessary to provide you with our services. Account data — including your registration details, transaction history, and gaming records — is retained throughout the active life of your account to enable ongoing service delivery, support your account queries, and fulfil our legal obligations.

Retention After Account Closure

Following account closure, bz880 retains certain categories of data for the minimum periods required by applicable laws and regulations. Financial transaction records are typically retained for a minimum of five years after the date of the transaction to comply with anti-money laundering and financial record-keeping requirements. Identity verification documents are retained for the period required by applicable KYC regulations. After the applicable retention period expires, data is securely deleted or anonymised. If you request account deletion before the end of a mandatory retention period, bz880 will close your account and suppress active processing of your data, but will retain the specific data categories required by law until the mandatory period expires.

Right of Access

You have the right to request a copy of the personal data bz880 holds about you. To submit a data access request, contact bz880 support at [email protected] (plain text only — not a clickable link) with the subject line "Data Access Request" and include your registered mobile number. bz880 will respond to verified data access requests within a reasonable timeframe, typically within 30 calendar days.

Right of Correction

If any personal data bz880 holds about you is inaccurate, incomplete, or out of date, you have the right to request that we correct it. Minor corrections (such as updating your email address) can often be made directly from within your account settings. For corrections to identity documents or date of birth on file, please contact support and provide documentation confirming the accurate information.

Right of Deletion

You may request deletion of your bz880 account and associated personal data at any time by contacting our support team. bz880 will process deletion requests promptly, subject to our legal data retention obligations described in Section 6. Where data must be retained to comply with applicable laws, we will suppress active use of that data and confirm in writing which specific categories are being retained and for how long.

Technical Security Controls

bz880 employs industry-standard technical security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include: SSL (Secure Sockets Layer) encryption for all data transmitted between your device and bz880 servers; encrypted storage of passwords using one-way hashing algorithms; access controls that limit internal staff access to personal data to those with a legitimate operational need; regular security reviews and vulnerability assessments of platform infrastructure; and audit logging of administrative access to sensitive data systems.

Your Responsibility for Account Security

While bz880 implements robust server-side security controls, account security is a shared responsibility. You are responsible for: keeping your bz880 password confidential and not sharing it with anyone; using a strong, unique password that you do not reuse across other services; logging out of bz880 on shared or public devices; and reporting any suspected unauthorised access to your account to bz880 support immediately. bz880 staff will never ask for your password by SMS, phone call, or any other channel. If you receive such a request, treat it as fraudulent and report it to us.

How We Notify You of Changes

bz880 reserves the right to update this Privacy Policy at any time. When we make material changes — changes that significantly affect how we collect, use, or share your personal data — we will endeavour to notify registered players via the platform or by SMS to the registered mobile number. The updated Policy will always be published on this page with a revised "Last Updated" date. Your continued use of bz880 following publication of an updated Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should stop using the platform and contact support to close your account.