www888 Privacy Policy

1Introduction

www888 operates an online casino and sports betting platform specifically designed for players in Bangladesh. In the course of providing our services — which include cricket betting, live casino games, slot games, and loyalty program management — we necessarily collect and process certain personal data about our players and site visitors.

This Privacy Policy describes our practices in relation to the collection, use, storage, disclosure, and protection of personal data. It is intended to be read alongside our Terms & Conditions, which together form the complete agreement governing your use of the www888 platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions in relation to data matters, this Privacy Policy shall prevail.

www888 is committed to handling your data responsibly, transparently, and in accordance with applicable international data protection principles. We do not sell personal data to third-party marketers and we do not use your data for purposes beyond those described in this policy.

2Data Controller

For the purposes of this Privacy Policy, www888 acts as the data controller in respect of personal data collected through the www888 platform. As data controller, www888 determines the purposes for which and the means by which personal data is processed.

All enquiries relating to this Privacy Policy, including requests to exercise your data rights, should be directed to our support team at the contact details provided in Section 14 of this document.

3Data We Collect

www888 collects personal data across several categories depending on the nature of your interaction with the platform. The following table summarises the main categories of data we collect and examples of specific data points within each category.

www888 does not intentionally collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data for identification purposes) except where expressly required for KYC compliance under our gaming licence obligations.

4How We Collect Data

www888 collects personal data through the following channels and mechanisms:

• Direct collection: Data you provide voluntarily when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or update your account profile.
• Automated collection: Technical and usage data collected automatically when you visit the www888 website, including through cookies, server logs, and similar tracking technologies. See Section 8 for full details on cookies.
• Third-party payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Visa, and Mastercard when you initiate a deposit or withdrawal on the platform.
• Identity verification partners: Results and risk scores from regulated KYC and anti-fraud service providers used to verify the identity documents you submit.
• Fraud prevention services: Device fingerprinting data and behavioural analytics from fraud detection systems that monitor for suspicious activity across the platform.

5Purposes of Processing

www888 processes your personal data only for specific, legitimate purposes. The table below sets out the primary purposes for which we use your data and the corresponding legal basis for each processing activity.

• Account management: To create, maintain, and administer your www888 player account, including verifying your identity and age before account activation.
• Service delivery: To process deposits and withdrawals in BDT, settle sports bets, credit casino game winnings, and manage your participation in the www888 loyalty program.
• KYC and compliance: To verify your identity, age, and source of funds in accordance with the anti-money laundering and know-your-customer requirements attached to our gaming licence.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, and other unlawful activity on the platform.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance in relation to your www888 account.
• Responsible gaming: To monitor your gambling behaviour, apply deposit limits or self-exclusion restrictions you have requested, and identify patterns that may indicate problem gambling requiring intervention.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates by email or SMS — but only where you have provided your consent to receive such communications. You may withdraw consent at any time.
• Platform improvement: To analyse aggregate usage patterns, identify technical issues, and improve the overall performance and user experience of the www888 platform.
• Legal obligations: To comply with applicable laws, court orders, regulatory requirements, and the obligations of our international gaming licence, including reporting obligations to licensing authorities.

6Legal Basis for Processing

www888 relies on the following legal bases for processing your personal data, consistent with internationally recognised data protection principles:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions agreement with you — including account creation, game operation, and financial transaction processing.
• Legal obligation: Processing required to comply with applicable laws and our gaming licence conditions, including KYC verification, anti-money laundering checks, and regulatory reporting.
• Legitimate interests: Processing carried out for www888's legitimate business interests, including fraud detection, platform security, and responsible gaming monitoring, where such interests are not overridden by your rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for direct marketing communications. Consent may be withdrawn at any time by contacting [email protected] or updating your communication preferences in your account settings.

7Data Sharing & Disclosure

www888 does not sell your personal data to any third party for their own marketing or commercial purposes. We share personal data only in the circumstances described below, and only to the minimum extent necessary for each purpose.

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the financial data necessary to process your deposit and withdrawal transactions. Each provider operates under their own privacy and data protection policies.
• KYC and identity verification providers: Regulated third-party services receive your identity documents and personal information to perform age verification, identity checks, and document authentication as required under our licence.
• Fraud prevention and security services: Anti-fraud vendors may receive technical and behavioural data to detect and prevent fraudulent activity across the platform.
• IT and infrastructure providers: Hosting, cloud storage, and cybersecurity service providers who process data on our behalf under strict data processing agreements that prohibit any secondary use of your data.
• Regulatory and legal authorities: We may disclose personal data to licensing authorities, law enforcement agencies, or courts where required by law, by court order, or by the conditions of our gaming licence — including disclosures related to anti-money laundering investigations.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the www888 business, player data may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection obligations being maintained.

8Cookies & Tracking Technologies

The www888 website uses cookies and similar tracking technologies to provide a functional and personalised user experience. A cookie is a small text file stored on your device by your web browser when you visit a website. www888 uses the following categories of cookies:

• Strictly necessary cookies: Essential for the operation of the platform. These include session authentication cookies that keep you logged in to your www888 account and security tokens that protect against cross-site request forgery attacks. These cookies cannot be disabled without affecting core platform functionality.
• Performance and analytics cookies: Used to collect anonymised data about how players navigate the www888 platform — such as which pages are visited most frequently and how long sessions last. This data helps us improve platform performance and user experience.
• Functional cookies: Used to remember your preferences and settings within the www888 platform, such as your preferred language setting, display preferences, and responsible gaming tool configurations.
• Fraud detection and security cookies: Used by our fraud prevention systems to identify devices associated with suspicious activity and to distinguish legitimate players from automated bots or scripted account access attempts.

You can manage or delete cookies through your browser settings. However, disabling strictly necessary cookies will prevent you from logging in to your www888 account and may impair other core platform features. Disabling performance cookies will not affect platform functionality but will limit our ability to improve the service based on usage data.

9Data Retention

www888 retains personal data only for as long as is necessary for the purposes described in this policy, or as required by applicable law and our gaming licence obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of your registered www888 account and for a minimum period of five (5) years following account closure, to satisfy anti-money laundering record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of verification, or longer if required by the conditions of our gaming licence or by applicable law.
• Transaction records: All deposit and withdrawal transaction records in BDT are retained for a minimum of five (5) years from the date of the transaction.
• Support communications: Customer support tickets, email correspondence, and live chat records are retained for three (3) years from the date of the interaction, or longer if related to a formal complaint or legal dispute.
• Marketing consent records: Records of your marketing consent or opt-out status are retained for as long as necessary to demonstrate compliance with your stated preferences.
• Technical and usage data: Anonymised or aggregated usage data may be retained indefinitely for analytical purposes. Individually identifiable technical data is retained for no longer than twelve (12) months.

When personal data is no longer required and no legal obligation requires its continued retention, www888 will securely delete or anonymise it in a manner that prevents recovery or reconstruction.

10Data Security

www888 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• Industry-standard TLS/SSL encryption for all data transmitted between your device and the www888 platform.
• Encryption of sensitive data at rest, including financial records and KYC documents, using AES-256 or equivalent encryption standards.
• Strict role-based access controls ensuring that www888 staff can only access personal data necessary for their specific job function.
• Regular security audits and vulnerability assessments of the platform infrastructure.
• Two-factor authentication options for player accounts to reduce the risk of unauthorised access.
• Continuous monitoring of platform traffic for anomalous patterns consistent with account takeover attempts or data exfiltration.

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, www888 will notify affected players and relevant regulatory authorities as required by applicable law, without undue delay.

11Your Data Rights

As a player on the www888 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request". www888 will respond within 30 days of receiving a valid request.

• Right of access: You have the right to request a copy of the personal data www888 holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request that any inaccurate or incomplete personal data held by www888 be corrected. You can update certain account details directly through your account settings.
• Right to erasure: You may request that www888 delete your personal data where it is no longer necessary for the purposes it was collected, subject to overriding legal retention obligations — such as the five-year anti-money laundering record-keeping requirement.
• Right to restriction of processing: You may request that www888 restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring purposes. You also have an absolute right to object to processing for direct marketing at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

12Children's Privacy

The www888 platform is strictly intended for adults aged 18 years and above. www888 does not knowingly collect personal data from individuals under the age of 18. If we discover that an account has been registered by a person under 18, we will immediately close the account, forfeit any associated balances in accordance with our Terms & Conditions, and securely delete all personal data associated with that account to the extent permitted by our legal retention obligations.

If you are a parent or guardian and believe that a person under 18 in your care has registered an account on www888, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

13Policy Updates

www888 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform. When we make material changes to this policy, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered players by email.

We encourage you to review this Privacy Policy periodically to stay informed about how www888 is protecting your personal data. Your continued use of the www888 platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms.

14Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which www888 handles your personal data, please contact our support team. All data-related correspondence should be sent to:

If you are not satisfied with our response to a privacy complaint, you may have the right to escalate your concern to the relevant data protection authority in your jurisdiction. www888 will cooperate fully with any such supervisory authority investigation.