balu88 Privacy Policy

Identity Verification Documents

As part of our Know Your Customer (KYC) process, we may request copies of government-issued identification documents such as your National Identity Card (NID) or passport, together with proof of address and proof of payment method ownership. These documents are stored securely and used solely for identity verification purposes.

Specific Uses of Your Data

• To create, maintain, and administer your balu88 account and verify your identity in line with KYC obligations.
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other authorised payment channels, and to maintain accurate transaction records.
• To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other forms of financial crime or platform misuse.
• To monitor compliance with our Terms & Conditions, including age restrictions (21+) and responsible gaming obligations.
• To provide customer support, respond to your enquiries, handle complaints, and resolve disputes.
• To send you transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts. These are service messages and are not optional while your account is active.
• To send promotional communications about balu88 offers, seasonal promotions (such as BPL season offers, Eid bonuses, and Pohela Boishakh specials), and new product features — but only where you have opted in to receive such communications.
• To improve the balu88 platform, personalise your experience, and optimise the performance of our games and betting markets based on aggregated usage patterns.
• To comply with applicable legal, regulatory, and law enforcement obligations, including responding to lawful requests from competent authorities.

Third Parties We May Share Data With

• Payment Service Providers: bKash, Nagad, Rocket, Upay, and other authorised payment processors receive the minimum data required to authenticate and complete your financial transactions. These providers are bound by their own privacy frameworks and are not permitted to use your data for purposes beyond payment processing.
• Identity Verification Partners: Third-party KYC and identity verification services may process your identity and address documents on our behalf to confirm your eligibility to use the platform.
• Game Content Providers: Software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi operate the games available on our platform. These providers may collect technical data (such as session IDs and game results) as part of their service delivery. Their data practices are governed by their own privacy policies.
• IT and Security Service Providers: Cloud hosting, content delivery, and cybersecurity partners process data on our behalf under strict data processing agreements that prohibit any independent use of your personal information.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, courts, or regulatory bodies where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of balu88, our players, or the public.
• Professional Advisers: Lawyers, auditors, and other professional advisers may access your data where necessary for the provision of legal, financial, or compliance advice, subject to professional confidentiality obligations.

Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable core features such as secure login sessions, navigation between pages, and access to protected areas of the platform. You cannot opt out of strictly necessary cookies without impairing platform functionality.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, last visited game category, or display settings — to provide a more personalised experience during your visit.
• Analytics Cookies: We use analytics tools to collect aggregated information about how players use the balu88 platform, including which pages are visited most frequently, how long sessions last, and where users navigate from. This data is used to improve the platform experience and is not used to identify individual users.
• Security Cookies: These cookies support fraud detection and platform integrity functions, helping us identify unusual activity patterns that may indicate account compromise or bot activity.

You can manage cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect platform functionality. For further information on managing cookies, refer to your browser's help documentation.

Retention Periods

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in line with financial crime prevention obligations.
• Transaction Records: Deposit, withdrawal, and betting transaction records are retained for a minimum of five (5) years from the date of each transaction.
• KYC Documents: Identity and address verification documents are retained for the duration of your account relationship and for five (5) years after account closure.
• Customer Support Records: Communications with our support team are retained for a period of three (3) years from the date of the last interaction, or longer where the record is relevant to an unresolved dispute.
• Technical and Usage Data: Log files and session data are retained for up to twelve (12) months for security and fraud monitoring purposes, after which they are deleted or anonymised.
• Marketing Preferences: Records of your consent to or withdrawal from marketing communications are retained for as long as your account is active, to ensure we respect your preferences accurately.

When retention periods expire, your data is securely deleted or irreversibly anonymised so that it can no longer be associated with you as an individual.

Rights You Hold

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is used and with whom it is shared.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data. Please note that we may be required to retain certain data to comply with legal obligations even after an erasure request is received.
• Right to Restriction: You may ask us to restrict the processing of your personal data in specific situations, for example while a rectification request is being assessed.
• Right to Data Portability: Where technically feasible, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time, with immediate effect. You may also object to other forms of processing based on our legitimate interests, subject to overriding legal grounds.
• Right to Withdraw Consent: Where we rely on your consent as the legal basis for processing, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please email [email protected] with the subject line "Privacy Rights Request" and include your full name, registered email address, and a clear description of your request. We may ask you to verify your identity before acting on any request.

Security Measures in Place

• All data in transit between your device and our servers is protected by 256-bit SSL/TLS encryption.
• Account passwords are stored using industry-standard one-way hashing with salting. balu88 staff cannot view or retrieve your password in plain text.
• Access to personal data within balu88 is restricted to employees and contractors who have a legitimate operational need for that access, governed by role-based access controls.
• Our systems are monitored continuously for suspicious activity, and automated alerts are triggered by anomalous login patterns, unusual transaction behaviour, and other potential security indicators.
• Regular security assessments and vulnerability testing are conducted on our platform infrastructure to identify and address potential weaknesses before they can be exploited.
• Third-party service providers who process data on our behalf are required to maintain appropriate security standards under the terms of their data processing agreements with balu88.

While we take every reasonable precaution to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for notifying us immediately at [email protected] if you suspect your account has been compromised.

Privacy Contact Details

Email: [email protected]

Subject line for privacy requests: "Privacy Rights Request"

Support availability: 24 hours a day, 7 days a week, 365 days a year.

Response time for privacy requests: We aim to acknowledge all requests within 48 hours and to provide a substantive response within 10 business days of identity verification being completed.