bit288 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how bit288 ("we", "us", "our", "the Platform") collects, processes, stores, and protects personal information provided by or collected from users ("you", "your", "the Player") who access and use the bit288 website, platform, and associated services.

By registering an account, making a deposit, or otherwise accessing any part of the bit288 platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with the terms of this Policy, you must not use the bit288 platform.

This Policy should be read alongside the bit288 Terms & Conditions, which govern the overall use of the platform. In the event of any conflict between this Policy and the Terms & Conditions on matters relating to data handling, this Privacy Policy shall take precedence.

2 Data We Collect

bit288 collects personal data through several channels: directly from you during registration and account use, automatically through your use of the platform, and from third-party service providers involved in payment processing or identity verification. The categories of data we collect include:

• Identity Data: Full legal name, date of birth, gender, and nationality as provided during account registration or identity verification.
• Contact Data: Email address, phone number, and residential address (city, district, and country — for example, Dhaka, Chittagong, Sylhet, or other locations across Bangladesh).
• Account Data: Username, account ID, account preferences, login history, session duration data, and communication preferences.
• Financial Data: Payment method details (bKash number, Nagad number, Rocket number, Upay account, Visa or Mastercard details as applicable), deposit and withdrawal history, transaction amounts in Bangladeshi Taka (৳ / BDT), and bonus redemption records.
• Verification Data: Copies of government-issued identity documents, proof of address documents, and selfie images submitted for Know Your Customer (KYC) verification purposes.
• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, time zone setting (Bangladesh Standard Time, UTC+6), and referring URL.
• Usage Data: Pages visited on the platform, games played, betting history, stakes placed, wagering patterns, session timestamps, and feature interactions.
• Communications Data: Records of your correspondence with the bit288 support team, including live chat transcripts and emails.

You are not required to provide all categories of data to browse the public-facing portions of the bit288 website. However, account registration, deposits, withdrawals, and participation in games require the provision of the data categories listed above.

3 How We Use Your Data

bit288 uses the personal data it collects for clearly defined purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we process your data are as follows:

• To create and manage your bit288 player account and provide access to all platform features.
• To process deposits and withdrawals through your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, or Mastercard) and to maintain accurate financial records.
• To verify your identity and age in compliance with responsible gaming obligations. bit288 is an 18+ platform and age verification is mandatory.
• To detect and prevent fraud, money laundering, collusion, bonus abuse, and other prohibited conduct as described in the bit288 Terms & Conditions.
• To provide customer support via live chat or email and to maintain records of support interactions for quality assurance.
• To send you transactional communications including deposit confirmations, withdrawal notifications, password reset emails, and account security alerts.
• To send promotional communications about bonuses, new games, and special offers — subject to your marketing preferences and the terms of Section 12 of this Policy.
• To analyse platform usage patterns in aggregate in order to improve the performance, layout, and feature set of the bit288 platform.
• To comply with applicable legal and regulatory obligations, including responding to lawful requests from authorities.

4 Legal Basis for Processing

bit288 processes your personal data on the following legal grounds, depending on the specific purpose and nature of the processing activity:

• Contractual Necessity: Processing required to perform the contract between you and bit288 — including account management, payment processing, game access, and customer support.
• Legal Obligation: Processing required to comply with applicable laws, including age verification requirements, anti-money-laundering obligations, and responding to lawful requests from competent authorities.
• Legitimate Interests: Processing carried out in the legitimate interests of bit288 — including fraud prevention, platform security, responsible gaming monitoring, and improving our services — provided those interests are not overridden by your fundamental rights and interests.
• Consent: Where we rely on your consent to process data — such as for sending promotional communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5 Data Sharing & Disclosure

bit288 does not sell, rent, or otherwise trade your personal data to unaffiliated third parties for their own marketing purposes under any circumstances. However, we do share data with carefully selected third-party partners and service providers where necessary to deliver and operate our platform. These include:

• Payment Processors: Your payment account details and transaction data are shared with the relevant payment service providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard) solely for the purpose of processing your deposits and withdrawals.
• Identity Verification Providers: KYC document data may be shared with third-party identity verification services engaged by bit288 to fulfil age and identity verification requirements.
• Game Content Providers: Usage data relating to game sessions may be processed by licensed game providers (including Evolution Gaming, Pragmatic Play, Spribe, Ezugi, NetEnt, and Microgaming) to facilitate game delivery and settlement of results. These providers process data under their own privacy frameworks, subject to contractual obligations with bit288.
• IT & Hosting Providers: Data is stored on servers managed by trusted hosting infrastructure providers operating under strict data security and confidentiality obligations.
• Legal & Regulatory Authorities: bit288 may disclose personal data to law enforcement, regulatory bodies, or courts of competent jurisdiction where required to do so by law or in response to a valid legal process.

All third-party service providers engaged by bit288 are required to process personal data solely in accordance with our instructions and are prohibited from using your data for any purpose beyond the specific service they provide to bit288.

6 Payment Data

bit288 gives particular attention to the security and handling of payment-related data given its sensitive nature. When you make a deposit or request a withdrawal using bKash, Nagad, Rocket, Upay, Visa, or Mastercard, your payment details are transmitted via SSL-encrypted connections directly to the relevant payment processor.

bit288 does not store full card numbers, CVV codes, or full mobile banking PINs on its own servers. Where partial payment identifiers (such as the last four digits of a card or a masked mobile wallet number) are retained for the purposes of transaction records and withdrawal verification, these are stored in encrypted form.

• All payment data transmissions use TLS 1.2 or higher encryption protocols.
• Payment method records are retained for a minimum of five years for financial audit and anti-money-laundering compliance purposes.
• bit288 may request proof of payment method ownership (such as a screenshot of a bKash account in your name) as part of the withdrawal verification process.

7 Cookies & Tracking Technologies

bit288 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device when you visit the bit288 website. They allow the platform to remember your session, preferences, and certain usage data across visits.

The categories of cookies used by bit288 are as follows:

• Strictly Necessary Cookies: Required for the platform to function correctly. These include session authentication cookies that keep you logged in during a play session. These cannot be disabled without severely affecting platform functionality.
• Performance & Analytics Cookies: Used to understand how players interact with the platform — including which pages are visited most frequently, how long sessions last, and where errors occur. This data is processed in aggregate and anonymised form.
• Functionality Cookies: Used to remember your preferences such as language settings, preferred game categories, and display options, so the platform behaves consistently across sessions.
• Responsible Gaming Cookies: Used to enforce session time reminders and other responsible gaming tool settings that you have configured in your account.

bit288 does not use third-party advertising cookies or cross-site tracking technologies that share your browsing behaviour with external advertising networks. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent you from logging in to your account.

8 Data Retention

bit288 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or audit obligations. The following general retention principles apply:

• Active Account Data: Data associated with an active player account is retained for the duration of the account's existence on the bit288 platform.
• Closed Account Data: Following account closure (whether voluntary or due to a Terms breach), bit288 retains certain account and transaction records for a minimum period of five years to satisfy financial audit, anti-money-laundering, and dispute resolution obligations.
• KYC Verification Documents: Identity and address verification documents are retained for a minimum of five years following the date of submission or account closure, whichever is later.
• Support Communications: Live chat transcripts and email correspondence are retained for a period of two years from the date of the interaction for quality assurance and dispute resolution purposes.
• Technical & Usage Data: Anonymised or aggregated usage and analytics data may be retained indefinitely for platform improvement purposes, as it no longer constitutes personal data once anonymised.

When personal data is no longer required, bit288 will securely delete or anonymise it in accordance with our data management procedures.

9 Data Security

bit288 implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and the bit288 platform.
• Encrypted storage of sensitive data fields including passwords, partial payment identifiers, and identity document files.
• Role-based access controls limiting access to personal data to only those bit288 staff members who require it to perform their job function.
• Regular security audits and vulnerability assessments of the bit288 platform infrastructure.
• Logging and monitoring of access to personal data stores to detect and respond to any unusual activity.
• Staff training on data protection obligations and best practices.

Despite these measures, no online platform can guarantee absolute security. In the unlikely event of a data breach that poses a risk to your rights and interests, bit288 will notify affected players promptly in accordance with its incident response procedures.

10 Your Rights

As a player on the bit288 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact the bit288 support team at [email protected] with the subject line "Data Rights Request". bit288 will respond to all verifiable requests within a reasonable timeframe.

• Right of Access: You have the right to request a copy of the personal data that bit288 holds about you, along with information about how it is being used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. You may update certain details directly through your account settings.
• Right to Erasure: In certain circumstances, you have the right to request deletion of your personal data. Note that this right may be limited where we are required by law to retain certain records (such as financial transaction history).
• Right to Restrict Processing: You have the right to request that we limit the processing of your personal data in certain circumstances, such as where you contest its accuracy or object to its use.
• Right to Data Portability: Where technically feasible and legally applicable, you may request that we provide your personal data in a structured, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring purposes.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time through your account settings or by contacting support.

11 Children's Privacy

bit288 is strictly an adult-only platform. We do not knowingly collect personal data from any person under the age of 18. If you are under 18, you must not register an account, make a deposit, or use any service offered by bit288.

If bit288 discovers or receives credible information that a registered account belongs to a person under the age of 18, the account will be closed immediately, all associated winnings will be voided, and any deposits received will be returned to the payment method used, subject to successful verification of the payment details.

Parents and guardians who believe a minor may have accessed the bit288 platform using their details are encouraged to contact [email protected] immediately so that appropriate action can be taken without delay.

12 Marketing Communications

With your consent, bit288 may contact you by email or SMS to inform you about bonuses, promotions, new game launches, seasonal offers tied to events such as BPL cricket season, Eid, and Pohela Boishakh, and other platform news.

You can opt out of receiving marketing communications at any time using any of the following methods:

• Clicking the "Unsubscribe" link included at the bottom of every promotional email sent by bit288.
• Updating your communication preferences directly within your bit288 account settings.
• Contacting the bit288 support team via live chat or at [email protected] and requesting removal from the promotional mailing list.

Please note that opting out of marketing communications will not stop bit288 from sending you transactional messages that are directly related to the operation of your account — such as deposit confirmations, withdrawal notifications, security alerts, and important policy update notices. These communications are necessary for the contractual relationship between you and bit288 and cannot be opted out of while your account remains active.

13 Amendments to This Policy

bit288 reserves the right to update or amend this Privacy Policy at any time. When material changes are made to the Policy, we will notify registered players by posting a prominent notice on the platform and, where practicable, by sending a notification to the email address associated with your account. The revised Policy will display an updated "Last Updated" date at the top of this page.

Your continued use of the bit288 platform after the effective date of any amendment to this Policy constitutes your acknowledgement and acceptance of the updated terms. We encourage you to review this Policy periodically to stay informed about how bit288 handles your personal data.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bit288 handles your personal data, please contact us using the details below. All privacy-related enquiries will be handled with strict confidentiality.

bit288 is committed to resolving all privacy-related concerns fairly and promptly. If you are not satisfied with our response to a privacy enquiry, you retain the right to escalate the matter to the appropriate data protection authority in your jurisdiction.