bm880 Privacy Policy
At bm880, we take your privacy seriously. This Privacy Policy explains what personal data we collect when you use the bm880 platform, how we use and protect that data, and the rights you hold over your information. We are committed to handling all player data with transparency, care, and full respect for your privacy preferences.
How bm880 Protects Your Data
These summary cards highlight our core privacy commitments. The full details are set out in the policy document below, which you should read in its entirety.
What We Collect
We collect registration information (name, date of birth, email, mobile number), payment details, identity documents for KYC, device and browser data, and records of your betting and gaming activity on the bm880 platform.
How We Use It
Your data is used to operate and personalise your bm880 account, process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, verify your identity, detect fraud, and comply with applicable legal obligations.
Who We Share It With
We share personal data only with trusted service providers (payment processors, game studios, identity verification partners) who are contractually bound to protect your data. We never sell your personal data to third parties.
How We Secure It
bm880 employs SSL/TLS encryption for all data in transit, encrypted storage for sensitive personal and financial data, role-based access controls, and regular security audits to safeguard your information against unauthorised access.
Your Rights
You have the right to access, correct, and request deletion of your personal data. You may also object to or restrict certain types of processing, and withdraw consent where processing is consent-based, at any time by contacting bm880 support.
Retention & Deletion
bm880 retains your personal data for as long as your account is active and for a defined period thereafter as required by legal and regulatory obligations. Once the retention period expires, your data is securely deleted or anonymised.
Your Data Rights at bm880
bm880 recognises the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with your account details and a clear description of your request.
Right of Access
Request a copy of all personal data bm880 holds about you, including account information, transaction history, and KYC documents.
Right to Rectification
Request correction of any inaccurate or incomplete personal data held on your bm880 account without undue delay.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Right to Restriction
Request that bm880 restrict the processing of your personal data in certain circumstances, for example while a complaint is being investigated.
Right to Portability
Request a copy of your personal data in a structured, machine-readable format so you can transfer it to another service provider where technically feasible.
Right to Object
Object to the processing of your personal data for direct marketing purposes at any time. bm880 will cease such processing upon receipt of a valid objection request.
- 1 About This Policy
- 2 Data We Collect
- 3 How We Collect Data
- 4 Legal Basis
- 5 How We Use Your Data
- 6 Sharing Your Data
- 7 Cookies & Tracking
- 8 Data Security
- 9 Data Retention
- 10 International Transfers
- 11 Children & Minors
- 12 Marketing Communications
- 13 Your Rights
- 14 Third-Party Links
- 15 Policy Changes
- 16 Contact Us
1 About This Policy
This Policy applies to all personal data collected and processed by bm880 in connection with the operation of the bm880 online casino and sports betting platform at bm880.io, including all associated pages, mobile-optimised interfaces, customer support channels, and promotional communications.
bm880 is the data controller responsible for personal data collected via the platform. This means bm880 determines the purposes for which personal data is processed and the manner in which it is processed. Where bm880 engages third-party service providers to process data on its behalf, those providers act as data processors and are bound by contractual obligations requiring them to process data only on bm880's instructions and to apply appropriate security measures.
This Policy should be read alongside the bm880 Terms & Conditions and the Responsible Gaming Policy, both of which form part of the overall agreement between you and bm880. In the event of any conflict between this Policy and the Terms & Conditions on matters of data protection, this Policy shall prevail.
2 Personal Data We Collect
bm880 collects the following categories of personal data from players and platform visitors. The categories marked as mandatory are required to provide the bm880 service; optional data is collected where you choose to provide it or where it is generated as a natural by-product of your use of the platform.
| Category | Examples | Required? |
|---|---|---|
| Identity Data | Full legal name, date of birth, National ID number, Passport number | Mandatory (KYC) |
| Contact Data | Email address, mobile number, residential address | Mandatory |
| Financial Data | bKash wallet number, Nagad number, Rocket number, bank card details (masked), transaction history | Mandatory |
| Account Data | Username, account balance, bonus history, deposit and withdrawal records, betting and game history | Mandatory |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, session duration | Automatic |
| Usage Data | Pages visited, game sessions played, betting patterns, click-stream data, time spent on platform | Automatic |
| Communications Data | Live chat transcripts, support email correspondence, survey responses | When applicable |
| Document Data | Copies of identity documents, proof of address, payment method screenshots submitted for KYC | Mandatory (KYC) |
bm880 does not intentionally collect special categories of sensitive personal data (such as health data, racial or ethnic origin, religious beliefs, or biometric data) unless this is strictly necessary for a specific legal purpose and you have provided explicit consent.
3 How We Collect Your Data
bm880 collects personal data through the following means:
- Direct collection: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting bm880 support, participating in promotions, or responding to surveys.
- Automatic collection: Technical and usage data collected automatically via server logs, cookies, web beacons, and similar tracking technologies when you access or use the bm880 platform. See Section 7 (Cookies & Tracking) for further details.
- Third-party sources: Identity verification data received from KYC and fraud-prevention service providers; payment confirmation data received from payment processors including bKash, Nagad, Rocket, Upay, Visa, and Mastercard; device and fraud-risk signals from security partners.
- Publicly available sources: In limited circumstances, bm880 may verify information you provide against publicly available records, for example to confirm that a residential address exists.
4 Legal Basis for Processing
bm880 processes your personal data on one or more of the following legal bases, depending on the specific purpose of processing:
- Performance of a contract: Processing that is necessary to operate your bm880 account, process transactions, settle bets, and provide the games and betting services you have requested.
- Legal obligation: Processing required to comply with applicable anti-money laundering (AML) obligations, age verification requirements, and other legal or regulatory duties imposed on bm880.
- Legitimate interests: Processing carried out for bm880's legitimate business interests, including fraud detection and prevention, platform security, business analytics, and improving the quality of the bm880 service — provided those interests are not overridden by your privacy rights.
- Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent, including the sending of direct marketing communications by email or SMS. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
5 How We Use Your Personal Data
bm880 uses your personal data for the following specific purposes:
- Account management: Creating, maintaining, and administering your bm880 player account, including processing deposits and withdrawals, updating your account information, and handling account-related support requests.
- Identity and age verification (KYC): Verifying that you meet the 21+ age eligibility requirement and confirming the accuracy of the identity information provided during registration.
- Fraud prevention and AML compliance: Monitoring account activity for signs of fraudulent behaviour, money laundering, match-fixing, bonus abuse, or other prohibited conduct. Where suspicious activity is detected, bm880 may report it to relevant authorities as required by law.
- Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and any other payment method made available on the platform.
- Responsible gaming: Monitoring betting patterns to identify potential problem gambling behaviours and, where appropriate, reaching out to players with information about responsible gaming tools and support resources.
- Customer support: Responding to your enquiries, complaints, and support requests via live chat and email.
- Platform improvement: Analysing aggregated usage data to understand how players use the bm880 platform and to improve game offerings, user experience, and platform performance.
- Marketing communications: Where you have consented, sending you promotional emails, SMS notifications, and platform notifications about bm880 bonuses, promotions, new game launches, and seasonal offers relevant to the Bangladesh market (e.g., BPL season promotions, Eid offers, Pohela Boishakh bonuses).
- Legal and regulatory compliance: Maintaining records as required by applicable law and cooperating with lawful requests from competent authorities.
6 Sharing Your Personal Data
bm880 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Your personal data may be shared with the following categories of recipients, strictly for the purposes described in this Policy:
- Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other payment service providers, to facilitate deposits and withdrawals on your behalf.
- Identity verification providers: Third-party KYC and age-verification service providers engaged by bm880 to verify the identity documents and personal information you submit.
- Game studios and content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other game providers, who may receive limited technical and session data necessary to operate their games within the bm880 platform.
- Fraud prevention and security partners: Providers of fraud detection, AML screening, and cybersecurity services who process data on bm880's behalf to protect the integrity of the platform.
- IT and infrastructure providers: Cloud hosting, data storage, and platform infrastructure providers who store and process bm880 data under strict data processing agreements.
- Legal and regulatory authorities: Where required by applicable law, court order, or regulatory requirement, bm880 may disclose your personal data to competent governmental or law enforcement authorities.
- Professional advisors: Legal counsel, auditors, and accountants, where necessary for the operation and governance of the bm880 business, subject to professional confidentiality obligations.
All third-party data processors engaged by bm880 are required to enter into written data processing agreements that obligate them to process personal data solely on bm880's documented instructions and to apply security measures appropriate to the sensitivity of the data.
7 Cookies & Tracking Technologies
bm880 uses cookies and similar tracking technologies on the bm880 platform to provide essential platform functionality, analyse platform usage, and (where you have consented) deliver personalised content and marketing. The following types of cookies are used:
- Essential cookies: Strictly necessary for the operation of the bm880 platform, including session management, login authentication, and security features. These cookies cannot be disabled without significantly impairing the functionality of the platform.
- Analytics cookies: Used to collect aggregated, anonymised data about how players navigate the bm880 platform, which pages are visited most frequently, and how long users spend on different sections. This data is used solely to improve platform performance and user experience.
- Functional cookies: Store your platform preferences (such as language settings and notification preferences) so that the platform can provide a more personalised experience on return visits.
- Marketing cookies: Used, where you have consented, to track your activity across sessions in order to serve you relevant promotional content about bm880 games, bonuses, and offers. These cookies are only active where you have provided explicit consent.
You can manage your cookie preferences through the settings available on the bm880 platform. Please note that disabling essential cookies may prevent some parts of the platform from functioning correctly. For marketing cookies, you may withdraw consent at any time by contacting bm880 support or adjusting your account notification preferences.
8 Data Security
bm880 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
- SSL/TLS encryption: All data transmitted between your device and the bm880 platform is encrypted using industry-standard SSL/TLS protocols, ensuring that your personal and financial data cannot be intercepted in transit.
- Encrypted data storage: Sensitive personal data, including identity documents and financial data, is stored in encrypted form at rest using strong encryption algorithms.
- Access controls: Access to personal data within bm880's systems is restricted on a strict need-to-know basis. All bm880 staff with access to personal data are required to complete data protection training and are bound by confidentiality obligations.
- Two-factor authentication: bm880 offers two-factor authentication (2FA) for player accounts as an additional layer of security against unauthorised access.
- Security monitoring: bm880's systems are continuously monitored for suspicious activity and known attack vectors. Regular penetration testing and security audits are conducted to identify and address vulnerabilities.
- Incident response: bm880 maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, bm880 will notify affected players within a reasonable timeframe.
9 Data Retention
bm880 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, as set out in this Policy, and for as long as required by applicable legal and regulatory obligations. The following general retention periods apply:
- Active account data: Retained for the full duration of your bm880 account and for a minimum of 5 years following account closure.
- KYC and identity documents: Retained for a minimum of 5 years following account closure to satisfy anti-money laundering and know-your-customer record-keeping obligations.
- Transaction records: Retained for a minimum of 5 years following the date of each transaction.
- Support communications: Retained for 2 years following the resolution of the relevant support interaction, unless the communication relates to a formal complaint or legal matter, in which case it is retained for the duration of that matter plus 5 years.
- Technical and usage data: Typically retained in identifiable form for up to 13 months, after which it is aggregated and anonymised.
- Marketing consent records: Retained for the duration of the marketing relationship plus 3 years to demonstrate compliance with consent obligations.
At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual. Where anonymisation is used rather than deletion, the resulting anonymised data may be retained indefinitely for analytical and reporting purposes.
10 International Data Transfers
The bm880 platform serves players in Bangladesh. In operating the platform, it may be necessary to transfer your personal data to service providers and partners located outside Bangladesh, including in jurisdictions that may not provide the same level of data protection as Bangladesh.
Where such transfers are necessary, bm880 ensures that appropriate safeguards are in place before the transfer takes place. These safeguards may include:
- Contractual clauses requiring the overseas recipient to apply data protection standards equivalent to those applied by bm880.
- Transferring data only to recipients in countries or jurisdictions that maintain adequate data protection standards.
- Applying additional technical safeguards such as encryption to data transferred to overseas recipients.
If you would like further information about the safeguards applied to any particular international transfer of your personal data, please contact bm880 support at [email protected].
11 Children and Minors
The bm880 platform is strictly for adults aged 21 years or older. bm880 does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the bm880 account registration and KYC process, and any account found to have been registered by a person under the minimum age will be immediately closed and all associated balances forfeited.
If bm880 becomes aware that it has inadvertently collected personal data from a minor, that data will be deleted without delay. If you believe that a minor has registered an account on the bm880 platform, please contact bm880 support immediately at [email protected].
12 Marketing Communications
bm880 may send you promotional emails, SMS notifications, and in-platform messages about bm880 bonuses, new game launches, seasonal promotions (including BPL cricket offers, Eid bonuses, and Pohela Boishakh promotions), and other offers we think may interest you — but only where you have given explicit consent to receive such communications.
You can opt out of marketing communications at any time by:
- Clicking the "unsubscribe" link included in any marketing email sent by bm880.
- Adjusting your notification preferences in your bm880 account settings.
- Contacting bm880 support at [email protected] and requesting removal from all marketing lists.
Please note that opting out of marketing communications does not affect the sending of service-related messages, such as transaction confirmations, account security alerts, KYC status updates, and support responses. These are sent on the basis of contract performance or legitimate interest and are not subject to marketing opt-out preferences.
13 Exercising Your Data Rights
To exercise any of the data rights described in this Policy — including the right of access, rectification, erasure, restriction, portability, or objection — please submit a written request to bm880 support using the contact details set out in Section 16. To protect the security of your personal data, bm880 will verify your identity before processing any data rights request.
bm880 will respond to all valid data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, in which case bm880 will notify you of the extension and the reasons for it within the initial 30-day period.
There is no fee for exercising your data rights in ordinary circumstances. However, bm880 reserves the right to charge a reasonable administrative fee or decline to act on requests that are manifestly unfounded or excessive, particularly where they are repetitive in nature.
14 Third-Party Links and Services
The bm880 platform may contain references to third-party game providers and payment services. Where you interact with third-party services integrated into the bm880 platform (for example, playing a game powered by Pragmatic Play or Evolution Gaming, or completing a payment via bKash or Nagad), those third parties may independently collect personal data about you in accordance with their own privacy policies.
bm880 is not responsible for the privacy practices of third-party service providers operating their own independent data collection activities. bm880 recommends that you review the privacy policies of any third-party services you use in connection with the bm880 platform. This Privacy Policy applies only to data collected and processed by bm880 in its capacity as data controller.
15 Changes to This Privacy Policy
bm880 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the structure of the bm880 business. When material changes are made to this Policy, bm880 will notify registered players by email and/or by posting a prominent notice on the bm880 platform prior to the changes taking effect.
The effective date at the top of this Policy reflects the date of the most recent revision. Your continued use of the bm880 platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with the updated Policy, you must discontinue use of the platform and may request account closure by contacting bm880 support.
bm880 encourages you to review this Privacy Policy periodically to stay informed about how we protect your personal data. The current version of this Policy is always available at bm880.io/privacy-policy.
16 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way bm880 processes your personal data, please contact the bm880 Data Protection team using the following details:
- Email: [email protected]
- Live Chat: Available 24/7 via the bm880 platform
- Support Hours: Bangladesh Standard Time (UTC+6)
bm880 aims to resolve all privacy-related enquiries promptly and will acknowledge receipt of your request within 3 business days. For formal data rights requests, please refer to Section 13 of this Policy for the applicable response timeframes.
Ready to Start Playing?
Your data is safe with bm880. Join thousands of players across Bangladesh enjoying cricket betting, live casino, slots, and more — all with instant bKash and Nagad payments. For adults aged 21 and above.