ba89 Privacy
Policy

ba89 collects personal data from you in several ways: directly when you register an account or interact with our services, automatically when you use the ba89 platform, and occasionally from third-party sources such as payment processors and identity verification providers. The categories of personal data we collect are described below.

1.1 Registration & Account Data

When you create a ba89 account, we collect the following information:

• Full legal name (as it appears on your government-issued identification document)
• Date of birth (for age verification — ba89 is strictly 18+ only)
• Email address (used as your primary communication channel and account identifier)
• Mobile phone number (used for SMS verification and account security)
• Residential address, including district and division within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar)
• Username and encrypted password
• Preferred currency (Bangladeshi Taka, BDT)

1.2 Identity Verification (KYC) Data

As part of ba89's mandatory Know Your Customer (KYC) process, we collect copies of identity documents and supporting materials, including:

• National Identity Card (NID), valid passport, or other government-issued photo ID
• Proof of residential address (utility bill, bank statement, or official government correspondence dated within the last three months)
• Proof of ownership of payment methods used (e.g., bKash, Nagad, Rocket, Upay, or bank account registered in your name)
• Selfie or live photo for biometric identity confirmation where required

1.3 Financial Transaction Data

When you make deposits or request withdrawals on the ba89 platform, we collect and retain records of all financial transactions, including:

• Transaction amounts in BDT
• Payment method used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank)
• Transaction timestamps and reference numbers
• Account numbers or mobile wallet identifiers (masked where technically possible)

1.4 Gaming & Betting Activity Data

ba89 automatically records all gaming and betting activity conducted through your account. This includes:

• Games played, wagers placed, and results across all product verticals (slots, live casino, sports betting, crash games)
• Bonus offers claimed and wagering progress
• Session duration, bet frequency, and stake history (used for responsible gaming monitoring)
• Sports betting markets selected, odds accepted, and settlement outcomes

1.5 Technical & Usage Data

When you visit ba89.club, our systems automatically collect technical information about your device and browsing behaviour, including:

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Pages visited, time spent on each page, and navigation path through the ba89 platform
• Referring URL (the website or link that directed you to ba89.club)
• Session tokens and authentication logs

1.6 Customer Support Communications

When you contact ba89's customer support team — whether via live chat inside the platform or by email at [email protected] — we retain a record of the communication, including the date and time, the content of your messages, and the resolution provided. These records are used to maintain service quality and to resolve any disputes that may arise.

3.1 Service Providers & Data Processors

ba89 engages a limited number of carefully selected third-party service providers who process personal data on ba89's behalf in order to deliver core platform functionality. These providers are bound by contractual data processing agreements that prohibit them from using your data for any purpose other than providing services to ba89. Current categories of data processors include:

• Payment Processors: Mobile financial service providers (bKash, Nagad, Rocket, Upay) and partner banks (Dutch-Bangla Bank, City Bank, BRAC Bank) that process deposit and withdrawal transactions.
• KYC Verification Partners: Identity verification service providers that assist ba89 in validating the authenticity of identification documents submitted during the KYC process.
• Game Providers: Licensed casino game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) that deliver game content on the ba89 platform. Game providers receive only the minimum session data required to operate the game.
• Sports Data Suppliers: Third-party data feeds that provide live sports results and odds for cricket (BPL, IPL, T20 World Cup), football, and other markets available on ba89.
• Cloud Infrastructure Providers: Secure cloud hosting and content delivery network providers that host ba89's platform infrastructure.
• Analytics Providers: Aggregated, anonymised platform analytics providers used to measure site performance. No personally identifiable information is shared with analytics providers.

3.2 Legal Disclosure

ba89 may disclose your personal data to government authorities, law enforcement agencies, or regulatory bodies where ba89 is legally required to do so — for example, in response to a lawful court order, a regulatory investigation, or a mandatory reporting obligation under anti-money laundering or counter-terrorism financing regulations applicable in Bangladesh. ba89 will notify you of any such disclosure where legally permitted to do so.

3.3 Business Transfers

In the event that ba89 undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may be transferred to the relevant successor entity as part of that transaction. You will be notified of any such transfer and of any material change to this Privacy Policy that may result from it.

3.4 International Data Transfers

Some of ba89's service providers and game technology partners operate servers located outside Bangladesh. Where your personal data is transferred to a country that does not provide an equivalent level of data protection as Bangladesh, ba89 ensures that such transfers are subject to appropriate contractual safeguards, including standard data protection clauses, to protect the integrity and confidentiality of your personal data during transit and storage.

ba89 retains your personal data for as long as is necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable legal, regulatory, tax, or accounting obligations. The table below sets out ba89's standard data retention periods by data category.

When your personal data is no longer required for the purposes for which it was collected and no longer needs to be retained under any legal obligation, ba89 will securely delete or anonymise it. Anonymised data (from which all identifying information has been irreversibly removed) may be retained indefinitely for statistical and analytical purposes.

As a ba89 player, you have the following rights with respect to the personal data ba89 holds about you. These rights may be exercised at any time by contacting the ba89 support team at [email protected]. ba89 will respond to all valid rights requests within 30 calendar days of receipt.

Right of Access

You have the right to request a copy of the personal data that ba89 holds about you. Upon receipt of a verified access request, ba89 will provide you with a summary of the personal data categories held, the purposes for which they are processed, and the third parties with whom they have been shared. ba89 will provide this information free of charge for the first request in any 12-month period.

Right to Rectification

If any personal data ba89 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update basic account information (such as email address or phone number) directly through your ba89 account settings. For corrections to identity or KYC data, contact [email protected] with supporting documentation.

Right to Erasure

You have the right to request that ba89 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other lawful basis applies), or where you object to the processing and ba89 has no overriding legitimate grounds. Note that this right is subject to ba89's legal retention obligations — ba89 cannot erase data that must be retained under applicable financial, AML, or regulatory law. Self-exclusion records, for example, are retained indefinitely to prevent re-registration.

Right to Restriction of Processing

You have the right to request that ba89 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or where you have objected to processing pending ba89's determination of whether its legitimate grounds override your interests.

Right to Object

You have the right to object to ba89's processing of your personal data where ba89 relies on legitimate interest as the legal basis for that processing. You also have an absolute right to object to the processing of your personal data for direct marketing purposes at any time, without being required to provide any justification. Upon receipt of a valid marketing opt-out, ba89 will cease marketing communications within 5 business days.

Right to Data Portability

Where ba89 processes your personal data on the basis of contract performance or your consent, and that processing is carried out by automated means, you have the right to receive the personal data you have provided to ba89 in a structured, commonly used, machine-readable format (such as CSV or JSON), and to transmit that data to another controller.

Exercising Your Rights

To exercise any of the rights listed above, send a written request to [email protected] from the email address registered to your ba89 account. ba89 may need to verify your identity before processing your request. ba89 will not charge a fee for rights requests unless they are manifestly unfounded or excessive, in which case ba89 may charge a reasonable administrative fee or decline the request, explaining the reasons for doing so.