ba778 Privacy Policy

Section 1

Data We Collect

ba778 collects personal data from players in Bangladesh to deliver a safe, accountable, and fully functional online casino and sports betting experience. We collect data through two primary channels: information you provide directly to us, and information collected automatically when you interact with the ba778 platform.

Information You Provide Directly: When you register a ba778 account, make a deposit or withdrawal, contact our support team, or participate in any promotional activity, you may provide the following categories of personal data:

• Full legal name as it appears on your government-issued identity document
• Date of birth (to confirm you are aged 18 or over)
• Email address and mobile phone number
• Residential address including district, division, and postal code
• Payment method details — including bKash mobile number, Nagad number, Rocket number, Upay account, or bank account details for Dutch-Bangla Bank, City Bank, BRAC Bank, or other supported institutions
• Identity verification documents such as a National ID card, passport, or driver's licence
• Proof of address documents such as a utility bill or bank statement
• Communications sent to ba778 via email or live chat support

Information Collected Automatically: When you access and use the ba778 platform — whether via desktop browser or mobile device — we automatically collect certain technical and behavioural data, including:

• IP address and approximate geographic location (country and city level)
• Device type, operating system, and browser version
• Session start and end times, and duration of platform use
• Pages visited, games launched, and in-platform navigation patterns
• Wagering activity including game selections, bet amounts, and outcomes
• Deposit and withdrawal transaction records including timestamps and amounts in BDT (৳)
• Cookie identifiers and similar tracking technology data (see Section 4 for full detail)

Section 2

How We Use Your Data

ba778 processes your personal data on the basis of one or more of the following lawful grounds: (a) the performance of a contract with you (your ba778 account agreement); (b) compliance with a legal obligation; (c) our legitimate business interests, where these are not overridden by your privacy rights; or (d) your explicit consent where we have requested it.

The following table summarises the primary purposes for which ba778 uses your personal data, together with the lawful basis for each processing activity:

ba778 will not use your personal data for any purpose that is incompatible with the purposes described in this Privacy Policy without first providing you with notice and, where required, obtaining your consent. You may at any time withdraw consent for marketing communications by contacting [email protected].

Section 3

Data Sharing & Disclosure

ba778 does not share your personal data with third parties except in the circumstances described below. Where we do share data, we ensure that appropriate data protection safeguards are in place through contractual agreements, data processing agreements, or other legally recognised mechanisms.

Service Partners and Processors: ba778 works with a number of trusted third-party service providers who process personal data on our behalf to deliver specific operational functions. These include:

• Payment processors — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard, to facilitate deposits and withdrawals in BDT (৳)
• Identity verification providers — specialist KYC and document verification services used to confirm player identity and age
• Game content providers — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed studios, who may receive session data necessary to operate their game platforms
• Customer support platform — the live chat and email ticketing system used by the ba778 support team
• Analytics providers — platform performance and user experience analytics services, operating under strict data minimisation and pseudonymisation requirements
• Fraud and AML detection tools — automated systems that analyse transaction and behavioural data to detect suspicious patterns

Legal and Regulatory Disclosure: ba778 may disclose your personal data to government authorities, law enforcement agencies, financial intelligence units, or regulatory bodies where we are required to do so by applicable law, court order, or lawful authority. This may include disclosure related to anti-money laundering investigations, tax compliance, or fraud prosecutions. ba778 will not notify you of such disclosures where doing so would compromise the integrity of an investigation or is otherwise prohibited by law.

Business Transfers: In the event that ba778 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. ba778 will take reasonable steps to ensure that the successor entity is bound by privacy obligations no less protective than those described in this Privacy Policy.

Section 4

Cookies & Tracking

ba778 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain session security, and analyse how the platform is used. A cookie is a small text file stored on your device by your web browser when you visit a website. Cookies cannot execute programmes or deliver viruses to your device.

ba778 uses the following categories of cookies:

ba778 does not use advertising or third-party retargeting cookies. Your browsing activity on the ba778 platform is not shared with advertising networks for the purpose of serving targeted advertisements on other websites.

You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary or fraud and security cookies may impair your ability to log in or use certain ba778 features. For guidance on managing cookies in your specific browser, refer to your browser's official help documentation.

Section 5

Data Retention

ba778 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve any disputes or enforce our agreements. The retention periods applicable to the main categories of personal data held by ba778 are summarised below:

• Account registration data (name, date of birth, contact details, address): Retained for the duration of the active account relationship plus a minimum of five (5) years following account closure, to satisfy anti-money laundering record-keeping requirements.
• Identity verification documents (KYC documents such as national ID, passport, utility bills): Retained for a minimum of five (5) years following account closure or the last transaction, in line with AML compliance obligations.
• Financial transaction records (deposit and withdrawal history, amounts in BDT ৳, payment method references): Retained for a minimum of five (5) years following each transaction for regulatory compliance purposes.
• Wagering and game activity logs: Retained for a minimum of three (3) years following account closure for responsible gaming monitoring, dispute resolution, and fraud detection purposes.
• Customer support communications: Retained for two (2) years following the closure of each support case, or longer where the matter relates to an ongoing dispute or investigation.
• Marketing communication preferences and consent records: Retained for the duration of the account relationship and for one (1) year following account closure as evidence of consent status.
• Cookie and analytics data: Anonymised or pseudonymised analytics data is retained for up to twenty-four (24) months. Session-specific security cookies expire at the end of each authenticated session.

Once the applicable retention period expires and there is no other legal obligation requiring continued retention, ba778 will securely delete or anonymise your personal data in a manner that prevents recovery or reconstruction. Where data is anonymised rather than deleted, the resulting anonymised dataset cannot be traced back to any individual and is therefore no longer subject to this Privacy Policy.

Section 6

Data Security

ba778 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework is designed to be proportionate to the nature and sensitivity of the data we hold and the risks associated with its processing.

Technical Safeguards in place at ba778 include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the ba778 platform, ensuring that your account credentials, payment details, and personal information cannot be intercepted in transit
• Encrypted data storage for sensitive fields including passwords (hashed using industry-standard algorithms), payment method references, and identity document images
• Access controls and role-based permissions — ba778 staff access to personal data is limited to those with a legitimate operational need, and all access is logged and auditable
• Multi-factor authentication for internal staff systems that handle personal data
• Regular security assessments including vulnerability scanning and penetration testing of the ba778 platform infrastructure
• Intrusion detection and monitoring systems that generate alerts for anomalous access patterns or potential data breach events
• Secure payment gateway integration — ba778 does not store full payment card numbers or full mobile banking PINs; payment data is tokenised and processed via certified payment processors

Organisational Safeguards include:

• Mandatory data protection training for all ba778 staff who handle personal data
• Contractual data processing agreements with all third-party service providers who process personal data on ba778's behalf
• An incident response procedure for identifying, containing, and reporting data security incidents in a timely manner

Despite these measures, no online platform can guarantee absolute security against all possible threats. In the event of a data security incident that poses a material risk to your rights and interests, ba778 will notify affected players as promptly as practicable and take all reasonable steps to contain the incident and prevent further harm.

Section 7

Your Privacy Rights

As a ba778 player, you hold a number of rights in relation to the personal data we hold about you. ba778 is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact the ba778 data team at [email protected] with a clear description of your request and sufficient information to verify your identity.

1. Right of Access: You have the right to request a copy of the personal data that ba778 holds about you, together with information about the purposes for which it is processed, the categories of data held, and the third parties with whom it has been shared. ba778 will respond to verified access requests within a reasonable timeframe.
2. Right to Rectification: If any personal data that ba778 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update certain account information directly within your ba778 account settings.
3. Right to Erasure: You may request that ba778 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (where consent was the basis for processing), or where you object to processing and there is no overriding legitimate interest. Please note that ba778 may be required to retain certain data for legal compliance purposes — particularly financial transaction and KYC records — even following a deletion request.
4. Right to Restrict Processing: You have the right to request that ba778 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being evaluated.
5. Right to Object: Where ba778 processes your personal data on the basis of legitimate interests, you have the right to object to that processing. ba778 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
6. Right to Withdraw Consent: Where ba778 processes your personal data on the basis of your consent — for example, for marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
7. Right to Data Portability: Where processing is based on consent or contract performance and is carried out by automated means, you may request that ba778 provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.

Section 8

Policy Updates & Contact

ba778 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, regulatory guidance, or platform features. The effective date at the top of this page indicates when the current version was last reviewed and came into effect.

Where changes to this Privacy Policy are material — meaning they significantly affect your rights or the way ba778 uses your data — ba778 will notify registered players by displaying a prominent notice on the ba778 platform and, where appropriate, by sending a notification to the registered email address on file. Your continued use of the ba778 platform following such notice constitutes your acknowledgement of the updated Privacy Policy.

For all privacy-related queries, data subject rights requests, concerns about how ba778 handles your personal data, or to report a suspected privacy incident, please contact the ba778 data protection team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Response language: English
• Support hours: 24/7, Bangladesh Standard Time (BST, UTC+6)

ba778 aims to respond to all privacy-related requests and queries within a reasonable timeframe. Complex requests — such as full data access requests or erasure requests involving regulatory retention obligations — may take longer to process, and ba778 will keep you informed of progress where appropriate.