Privacy Policy — bhal88

1 Introduction

bhal88 ("we", "us", "our", or "the Platform") operates the online casino and sports betting platform available at bhal88.app, including all associated pages, features, games, and services. This Privacy Policy governs the collection, processing, storage, and disclosure of personal data relating to individuals who access or use the bhal88 platform ("you" or "the Player").

By registering an account on bhal88, making a deposit, placing a wager, or otherwise using any part of the bhal88 platform, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Privacy Policy, you must discontinue use of the bhal88 platform immediately.

bhal88 is the data controller in respect of the personal data it holds about registered players and website visitors. As data controller, bhal88 determines the purposes and means of processing personal data and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

This Privacy Policy should be read alongside bhal88's Terms & Conditions and Responsible Gaming Policy, both of which contain additional provisions relevant to your relationship with the platform.

2 Data We Collect

bhal88 collects personal data that falls into the following categories. Not all categories will apply to every user — the data collected depends on how you interact with the platform.

2.1 Identity & Contact Data

• Full legal name as it appears on a government-issued identification document
• Date of birth (used for mandatory age verification — bhal88 is strictly 18+ only)
• Residential address, city, and postal code
• Email address (used as your primary account identifier and for account communications)
• Mobile telephone number (used for SMS notifications and two-factor authentication)
• Copies of identity documents submitted during KYC verification (e.g., National ID card, passport)

2.2 Financial & Payment Data

• Mobile wallet identifiers associated with bKash, Nagad, Rocket, or Upay accounts used for deposits or withdrawals
• Bank account details where bank transfer is used as a payment method (e.g., Dutch-Bangla Bank, City Bank)
• Transaction history, including deposit amounts, withdrawal requests, and transaction timestamps
• Account balance information

bhal88 does not store full payment card numbers. Payment processing is handled by third-party payment processors subject to their own security standards.

2.3 Account & Activity Data

• Username and hashed password
• Account registration date and time
• Game session records, including games played, wager amounts, win/loss outcomes, and session duration
• Sports betting history, including markets selected, odds accepted, stakes placed, and settlement results
• Bonus and promotion participation records
• Responsible gaming settings applied to the account (deposit limits, session limits, self-exclusion status)

2.4 Technical & Device Data

• IP address at the time of registration and each subsequent login
• Device type, operating system, and browser version
• Screen resolution and device language settings
• Cookie identifiers and session tokens
• Referring URL (the page or link that directed you to bhal88.app)
• Pages visited within the bhal88 platform and time spent on each

2.5 Communications Data

• Records of correspondence with bhal88 support staff via live chat, email, or any other channel
• Feedback, complaints, and dispute records
• Marketing communication preferences (opt-in or opt-out status)

3 How We Collect Data

bhal88 collects personal data through the following means:

• Direct submission: Data you provide when completing the registration form, submitting KYC documents, initiating a deposit or withdrawal, contacting support, or updating your account profile.
• Automated collection: Technical and device data collected automatically as you navigate the bhal88 platform, including via cookies, web beacons, log files, and similar tracking technologies. See Section 7 for full details on cookies.
• Payment processors: Transaction confirmation data received from third-party payment providers such as bKash, Nagad, Rocket, and Upay when a payment is initiated or settled.
• Identity verification services: Where bhal88 uses a third-party KYC or age-verification service, that service may return verification results and document authenticity scores to bhal88 in connection with your submitted documents.
• Fraud prevention and AML partners: Risk-scoring data or flagging alerts received from fraud detection and anti-money laundering screening services in connection with account activity or specific transactions.

4 How We Use Your Data

bhal88 uses the personal data it holds for the following purposes. Each purpose is linked to a lawful basis for processing, which is detailed in Section 5.

bhal88 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a separate lawful basis for doing so.

5 Legal Basis for Processing

bhal88 processes personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual necessity: Processing required to enter into or perform the contract between bhal88 and the Player — including account registration, payment processing, and delivery of gaming services.
• Legal obligation: Processing required to comply with applicable laws and regulations, including age verification requirements, anti-money laundering (AML) obligations, record-keeping requirements, and responses to lawful requests from competent authorities.
• Legitimate interests: Processing carried out to pursue bhal88's legitimate business interests where those interests are not overridden by your rights and freedoms — including fraud prevention, platform security, responsible gaming monitoring, and general platform analytics.
• Consent: Where bhal88 relies on your consent as the basis for processing — most notably for optional marketing communications — you may withdraw that consent at any time by contacting [email protected] or updating your communication preferences in your account settings. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

6 Data Sharing & Disclosure

bhal88 does not sell your personal data to third parties. bhal88 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual data protection safeguards:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and City Bank receive the minimum data necessary to process your deposit or withdrawal transaction.
• KYC and identity verification providers: Third-party services engaged by bhal88 to verify your identity and age as part of the mandatory KYC process.
• Fraud prevention and AML screening services: Specialist providers that assist bhal88 in detecting suspicious financial activity and meeting its anti-money laundering compliance obligations.
• Game content providers: Casino game studios and platform providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive session identifiers and gameplay data necessary to deliver game content and verify game outcomes. These providers operate under their own data protection frameworks.
• IT infrastructure and hosting providers: Cloud and hosting service providers that store or process data on bhal88's behalf under strict data processing agreements.
• Legal and regulatory authorities: Where bhal88 is required to disclose personal data in response to a lawful court order, regulatory investigation, or other legally binding request, it will do so in compliance with applicable law. Where permitted, bhal88 will notify the affected player of such a disclosure.

7 Cookies & Tracking Technologies

bhal88 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse how the platform is used. The following types of cookies may be set when you visit bhal88.app:

• Essential cookies: Required for the platform to function. These include session authentication tokens, load-balancing cookies, and security cookies. These cannot be disabled without affecting platform functionality.
• Functional cookies: Used to remember your preferences — such as your preferred display language, notification settings, and recently viewed game categories — so that you do not need to re-enter them on each visit.
• Analytics cookies: Used to collect aggregated, anonymised information about how visitors navigate the bhal88 platform, which pages are most visited, and where users encounter difficulties. This information is used solely to improve the platform.
• Marketing cookies: Where you have consented to receiving marketing communications, these cookies help bhal88 understand which promotional content is most relevant to your interests. You may withdraw this consent at any time via your account settings.

You may manage cookie preferences through your browser settings. Please note that disabling essential cookies may prevent you from accessing certain features of the bhal88 platform, including the ability to log in to your account.

8 Data Retention

bhal88 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account data and KYC documents: Retained for the duration of your active account relationship with bhal88, and for a minimum of five years after account closure. This retention period reflects AML compliance and record-keeping obligations.
• Transaction and financial records: Retained for a minimum of five years from the date of the transaction, in line with financial record-keeping requirements.
• Game session and activity records: Retained for a minimum of three years from the date of the session, to support dispute resolution, responsible gaming monitoring, and regulatory compliance.
• Support and communications records: Retained for a minimum of two years from the date of the last communication, to support ongoing dispute resolution and quality assurance.
• Marketing data: Retained until you withdraw consent or until bhal88 determines that the data is no longer relevant, whichever is earlier.
• Technical and log data: Typically retained for 12 months from the date of collection, unless a specific incident requires data to be preserved for a longer period.

On expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with bhal88's internal data disposal procedures.

9 Data Security

bhal88 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the bhal88 platform, ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Cryptographic password hashing: Passwords are stored using industry-standard one-way hashing algorithms. bhal88 staff cannot read your password in plain text, and bhal88 will never ask you to share your password by email or live chat.
• Access controls: Access to personal data held by bhal88 is restricted to staff members whose role requires it. All staff with data access are subject to confidentiality obligations and regular data protection training.
• Two-factor authentication (2FA): bhal88 offers optional 2FA for player accounts. Enabling 2FA provides an additional layer of protection against unauthorised account access.
• Regular security assessments: bhal88's platform infrastructure is subject to periodic security reviews to identify and remediate vulnerabilities.

Despite these measures, no online platform can guarantee absolute security. In the event of a personal data breach that poses a risk to your rights and freedoms, bhal88 will notify affected players and relevant authorities in accordance with applicable law.

You also play an important role in keeping your account secure. You must keep your login credentials confidential, use a strong and unique password, and notify bhal88 immediately via [email protected] if you suspect that your account has been accessed without your authorisation.

10 Your Rights

As a data subject, you have a number of rights in relation to the personal data that bhal88 holds about you. bhal88 is committed to facilitating the exercise of these rights in a timely and transparent manner. Your rights include:

• Right of access: You have the right to request a copy of the personal data bhal88 holds about you, together with information about how that data is used. bhal88 will respond to verified access requests within 30 days.
• Right to rectification: If any personal data held by bhal88 is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account information (such as your contact email or phone number) directly through your bhal88 account settings.
• Right to erasure ("right to be forgotten"): In certain circumstances, you have the right to request that bhal88 delete your personal data. This right is subject to bhal88's legal retention obligations — where bhal88 is required by law to retain data for a specified period, erasure requests relating to that data cannot be fulfilled until the retention period has expired.
• Right to restriction of processing: You may request that bhal88 restrict the processing of your personal data in certain circumstances, for example while a dispute about data accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing based on bhal88's legitimate interests, and to opt out of direct marketing at any time. Opting out of marketing will not affect your ability to use the bhal88 platform.
• Rights related to automated decision-making: Where bhal88 makes decisions about you based solely on automated processing (including profiling) that produce significant effects, you have the right to request human review of that decision.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request". bhal88 may ask you to verify your identity before processing your request. There is no charge for exercising your rights in most circumstances.

11 Children's Privacy

bhal88 is strictly an adults-only platform. Access to and use of bhal88 is prohibited for individuals under the age of 18. bhal88 does not knowingly collect personal data from children. Age verification is a mandatory step in the bhal88 registration process, and bhal88 may request documentary proof of age at any point.

If bhal88 discovers or has reason to believe that personal data has been collected from an individual under the age of 18, it will immediately suspend the associated account, delete the personal data collected, and return any funds held in the account in accordance with its responsible gaming and KYC procedures.

Parents or guardians who believe that their child has registered on bhal88 are urged to contact bhal88 immediately at [email protected] so that appropriate action can be taken without delay.

12 Third-Party Links

The bhal88 platform may contain references to third-party services — including payment providers such as bKash and Nagad, and game content providers such as Pragmatic Play, Evolution Gaming, and Spribe. While bhal88 takes reasonable care in selecting its third-party partners, it is not responsible for the privacy practices of those third parties.

If you are redirected to a third-party interface — for example, a mobile wallet payment screen — you should review the privacy policy of that third party before submitting personal data. bhal88's Privacy Policy does not govern the collection or use of data by third-party services operating their own interfaces.

13 Policy Amendments

bhal88 reserves the right to update this Privacy Policy at any time to reflect changes in its data processing practices, changes in applicable law, or changes to the bhal88 platform and services. Where a material change is made to this policy, bhal88 will notify registered players via the email address associated with their account and will display a prominent notice on the bhal88 platform for a reasonable period following the change.

Non-material changes — such as formatting corrections, clarifications of existing provisions, or updates to contact details — may take effect immediately upon publication without individual notification. The "Last updated" date at the top of this page will always reflect the date on which the current version took effect.

Your continued use of bhal88 following the effective date of a revised Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised policy, you must discontinue use of the bhal88 platform and may request account closure by contacting the support team.

14 Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or about the way bhal88 handles your personal data, please contact the bhal88 Data Protection team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data enquiries: "Privacy Policy Enquiry" or "Data Rights Request"
• Live Chat: Available 24/7 via the bhal88 platform
• WhatsApp: +880 1700 000 000 (plain text — not a clickable link)

bhal88 aims to respond to all written privacy complaints within 10 business days of receipt. Where a complaint is complex or requires investigation, bhal88 will acknowledge receipt within 5 business days and provide a substantive response as soon as reasonably practicable.

All support and data protection communications are handled in English. Response time commitments are measured in Bangladesh Standard Time (BST, UTC+6).