Baba8 Privacy Policy — How your information stays protected

Baba8 only collects the information it needs — nothing more. Data is collected in three main ways:

• Information provided at registration: Full name, mobile number, email address, date of birth, and password.
• For KYC verification: A copy of your National ID or passport, along with a selfie photo.
• Automatically: IP address, device type, browser version, login time, and time spent on the site.

Payment details (bKash PIN, card numbers, etc.) are never stored on baba8's servers. Payments are processed directly through the respective payment gateways, which apply their own security standards.

Baba8 will never ask for information it doesn't need — such as religious identity, political views, or medical history. If you are ever asked for this kind of information, it is not from baba8; please report it to support immediately.

Collected information is used solely for the following purposes:

• Service Delivery: To manage your account, process payments, and provide betting and gaming services.
• Security verification: To detect unauthorized logins, fraudulent activity, and duplicate accounts.
• Support: To assist with your queries and to verify your gaming history.
• Responsible Gaming: To identify unusual gaming patterns and provide support where needed.
• Legal Obligations: To comply with regulatory requirements.
• Improvement: To analyze user behavior and improve the platform experience — using non-personally identifiable data only.

Your information may be used for baba8's marketing purposes — such as sending promotional SMS or email updates. However, you can opt out of such communications at any time.

Baba8 never sells your personal information. However, data may be shared in the following limited circumstances:

• Payment Processors: Only the information necessary to process a transaction is shared with bKash, Nagad, or your bank — strictly for payment purposes.
• Game Providers: When you play third-party games, only the minimum necessary information (typically just your user ID) is shared with the relevant provider.
• Legal Authorities: If baba8 is legally required to disclose information in response to a court order or a valid request from a regulatory authority — members will be informed in advance where legally permitted.
• Security agency: Limited information may be shared in connection with fraud detection or money laundering investigations.

Your data will not be shared for any reason beyond those listed above. Under no circumstances is your information shared with advertisers, marketing agencies, or data brokers.

Baba8 uses multiple layers of security to protect your information:

• Encryption: All data transmissions are secured with TLS 1.3 and AES-256 encryption.
• Access control: Only authorized staff can access a limited amount of user data — and only when their role requires it.
• Regular Audits: Third-party security experts conduct a full security audit at least once a year.
• Penetration Testing: Regular penetration tests are conducted to identify system vulnerabilities the way a real attacker would.
• Two-Factor Authentication (2FA): Available to all members and mandatory for staff.
• Auto Logout: Your account is automatically logged out after a period of inactivity.

That said, no system on the internet is 100% impenetrable — and we think it is only fair to be upfront about that. This is why we also encourage members to do their part: use a strong password, keep 2FA enabled, and only log in from trusted devices.

Baba8 uses cookies to improve your experience on the site. Cookies are small text files stored in your browser.

• Essential cookies: For login sessions and security tokens — the site cannot function properly without these.
• Performance cookies: To monitor page load times and detect errors — using data that cannot be linked to any individual.
• Preference Cookies: To remember your language preference, theme, and other personal settings.
• Analytics cookies: To understand which parts of the site are used most — fully anonymised.

Cookies can be disabled from your browser settings, though some site features may not work as a result. baba8 does not use third-party tracking or advertising cookies.

You have several important rights regarding your personal information, all of which baba8 respects:

Baba8 is strictly for individuals aged 18 and above. We do not knowingly collect information from anyone under the age of 18.

Date of birth is verified at registration, and if there is any doubt, a government-issued ID may be requested to confirm age. If it is later found that a minor has created an account, that account will be closed immediately and any deposited funds will be returned.

If a parent or guardian suspects their child is using baba8, they should contact support immediately — action will be taken promptly.

Baba8's platform integrates certain third-party games and services. These providers have their own privacy policies and operate accordingly.

• When playing third-party games, that provider's own policies may also apply.
• Baba8 works exclusively with trusted, licensed game providers.
• Baba8 is not directly responsible for how your information is used by any third-party services.

If you have any concerns about a third party, contact our support team — you can also request a list of the providers we work with.

Baba8 primarily serves users in Bangladesh. However, certain technical operations — such as server hosting or cybersecurity services — may be handled through international infrastructure.

What this covers:

• Encryption is active whenever data is in transit.
• Adequate data protection standards are ensured in every country or server to which data is transferred.
• Your data is never sent to any country for commercial or advertising purposes.

This Privacy Policy may be updated from time to time to reflect changes in technology or applicable law. Before any significant change takes effect:

• At least 7 Days Ago Members will be notified by email or SMS.
• The "Last Updated" date on this page will change accordingly.
• If you do not agree to the updated policy, you will have the option to close your account and withdraw any remaining funds from your wallet.

Minor changes (such as spelling corrections) may not be announced separately — but the date on this page will always be updated. It's a good habit to check this page from time to time.

Using any online service means sharing some information — there's no way around it. What matters is where that information goes, how it's used, and how well it's protected. At baba8, we don't treat this as just a legal obligation — we see it as the foundation of trust.

Millions of people trust baba8 with their phone numbers, identity documents, and financial transactions. That trust is hard to earn — and can be lost in an instant. That's why we ask ourselves with every decision: does this protect our members' interests?

Many users ask — "Is my KYC information safe?" That's a completely valid concern. National ID images contain highly sensitive data. At baba8, such documents are stored in encrypted, isolated storage that is not directly accessible from the standard application layer. Only a limited number of staff involved in the verification process can view this data — and every access is logged.

On the topic of password security — your actual password is never stored on baba8's servers. Passwords are stored as a "hash" — meaning they are transformed in a way that makes it technically impossible to reverse-engineer the original password. No member of our staff knows your password, nor do they have any means to find out.

A quick note on marketing communications — baba8 may occasionally send you SMS or email updates about new promotions or bonuses. This is based on the consent you gave when registering with your phone number or email. If you'd prefer not to receive these messages, simply click the "opt-out" link at the bottom of any message or contact support — it will be stopped immediately.

Phishing is one of the most real threats in cybersecurity — someone may impersonate baba8 and try to obtain your login details. Remember: baba8 will never ask for your password or OTP via email or SMS. If anyone claims to be baba8 and requests this kind of information, it is a scam. Contact support immediately and do not interact with that message in any way.

A final word — privacy isn't a formality, it's a mindset. That's how baba8 operates every day. If you have any questions or concerns about any part of this policy, don't hesitate to reach out to our support team — you'll get an honest, straightforward answer.