ballo88 Privacy Policy
At ballo88, the privacy and security of your personal data is a matter we take seriously. This Privacy Policy explains exactly what information we collect, why we collect it, how we use and protect it, and what rights you have as a player based in Bangladesh.
256-Bit SSL Encryption
All data transmitted between your device and the ballo88 platform is protected by industry-standard 256-bit SSL encryption. This applies to account login sessions, payment transactions, and KYC document uploads alike.
No Data Sold to Third Parties
ballo88 does not sell, rent, or trade your personal information to third-party advertisers or data brokers under any circumstances. Your data is used solely to operate and improve the ballo88 platform and your experience on it.
Local Payment Privacy
Payment details processed via bKash, Nagad, Rocket, and Upay are handled in strict accordance with the data policies of those respective payment providers. ballo88 stores only the minimum transaction reference data required for account reconciliation.
Cookie Transparency
ballo88 uses cookies and similar tracking technologies strictly for platform functionality, session management, and performance analytics. No cross-site behavioural advertising cookies are deployed without your knowledge.
Your Rights, Respected
As a ballo88 player, you have the right to access, correct, export, and request deletion of your personal data at any time. ballo88 will respond to all valid data rights requests within 30 calendar days of receipt.
Marketing Opt-Out
ballo88 will only send promotional communications — including SMS messages, emails, and in-platform notifications — to players who have actively opted in. You may withdraw consent for marketing communications at any time by contacting [email protected].
Section 1
Information We Collect
1.1 Information You Provide Directly
When you register an account, use ballo88 services, or contact our support team, you provide us with personal information directly. The categories of information collected at each stage are as follows:
- Account Registration: Full legal name, date of birth, residential address in Bangladesh, mobile phone number (used as primary account identifier), and preferred username.
- KYC Verification: Scanned copies or photographs of government-issued identity documents such as a Bangladesh National Identity Card (NID), passport, or birth certificate. Where address verification is required, utility bills or bank statements may also be collected.
- Payment Information: Mobile wallet account numbers (bKash, Nagad, Rocket, Upay), bank account details (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank), and card details for Visa or Mastercard transactions. Full card numbers are not stored on ballo88 servers — card payment processing is handled by PCI-DSS compliant third-party payment gateways.
- Support Communications: Any messages, emails, or chat transcripts exchanged between you and the ballo88 customer support team, including any attachments or screenshots you voluntarily provide.
- Responsible Gaming Declarations: Self-declared deposit limits, time-out requests, and self-exclusion applications submitted via the responsible gaming tools or by email to [email protected].
1.2 Information Collected Automatically
When you access the ballo88 platform — whether via a web browser on a desktop or mobile device — certain technical data is collected automatically as part of normal platform operation. This includes:
- Device and Browser Data: Device type (mobile/desktop/tablet), operating system and version, browser type and version, screen resolution, and preferred language settings.
- Network Data: IP address, approximate geographic location derived from IP address (city and country level only — not GPS or precise location), internet service provider (ISP) name, and connection type.
- Session and Usage Data: Pages visited within the ballo88 platform, games launched, bet amounts and game session durations, login timestamps, session duration, and navigation paths through the site.
- Cookie and Tracking Data: Data collected via cookies, local storage, and similar technologies as described in the Cookies section of this policy.
1.3 Information from Third Parties
ballo88 may receive limited personal data about you from trusted third-party sources in certain circumstances, including:
- Payment Providers: Transaction status, reference numbers, and verification outcomes from bKash, Nagad, Rocket, Upay, and card processing partners.
- Identity Verification Services: Outcomes from third-party KYC and AML screening services used to verify the authenticity of identity documents and cross-reference against sanctions watchlists.
- Fraud Prevention Partners: Risk signals and device fingerprint data from fraud detection services used to protect the integrity of the ballo88 platform.
Section 2
How We Use Your Data
ballo88 processes your personal data only for specific, legitimate purposes. The table below summarises the primary purposes for which we use each category of personal data, along with the legal basis for that processing.
| Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account creation and management | Name, date of birth, phone number, username, password hash | Contract performance — necessary to provide the ballo88 service you have requested |
| Identity and age verification (KYC) | NID / passport scan, date of birth, residential address | Legal obligation — age verification and AML compliance requirements |
| Processing deposits and withdrawals | Payment account numbers, transaction references, Wallet balance | Contract performance — necessary to execute financial transactions you have initiated |
| Fraud prevention and platform security | IP address, device data, session data, transaction patterns | Legitimate interest — protecting ballo88 and its players from fraudulent activity |
| Customer support | Support communications, account data, transaction history | Contract performance — resolving queries and disputes related to your account |
| Responsible gaming compliance | Deposit limits, session data, self-exclusion declarations | Legal obligation and legitimate interest — player protection duties |
| Platform analytics and improvement | Usage data, session data, device/browser data (anonymised) | Legitimate interest — improving platform performance and user experience |
| Promotional communications | Name, phone number, email address, game preferences | Consent — only where you have actively opted in to receive marketing |
| Legal and regulatory compliance | Identity documents, transaction records, account history | Legal obligation — retention of records as required by applicable law |
ballo88 does not use your personal data to make solely automated decisions that produce significant legal effects on you without human review. Where automated tools are used (for example, in fraud detection or responsible gaming monitoring), flagged cases are reviewed by a human member of the ballo88 compliance team before any account action is taken.
Section 3
Sharing & Disclosure
3.1 Service Providers
ballo88 shares limited personal data with carefully selected third-party service providers who assist in the operation of the platform. These providers act as data processors on behalf of ballo88 and are contractually prohibited from using your data for any purpose other than providing the specific service for which they were engaged. Categories of service providers include:
- Payment processors: bKash, Nagad, Rocket, Upay, and card payment gateway operators — for the purpose of executing deposit and withdrawal transactions.
- KYC and identity verification providers: Third-party services used to verify the authenticity of government-issued identity documents and cross-reference against international sanctions and politically exposed persons (PEP) lists.
- Fraud detection and cybersecurity providers: Services that analyse device and network signals to detect account takeover attempts, bonus abuse, and multi-accounting patterns.
- Game content providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive the minimum session data necessary to operate their respective games within the ballo88 platform environment.
- Cloud infrastructure and hosting providers: Server and database infrastructure used to host the ballo88 platform and store account data securely.
- Customer support software providers: Platforms used to manage live chat, email ticketing, and support communications.
3.2 Legal and Regulatory Disclosure
ballo88 may be required to disclose personal data to governmental authorities, law enforcement agencies, or financial intelligence units where compelled to do so by a valid legal order, court judgment, or statutory obligation. In such cases, ballo88 will disclose only the minimum data required to comply with the legal obligation and will notify the affected Player where permitted by law.
3.3 Business Transfers
In the event of a merger, acquisition, asset sale, or restructuring of the ballo88 business, personal data held by ballo88 may be transferred to the acquiring entity as part of the transaction. In such an event, ballo88 will ensure that the receiving entity is bound by data protection obligations at least equivalent to those described in this Privacy Policy, and will notify affected Players of the change in data controller as soon as practicable.
3.4 What We Will Never Do
ballo88 expressly commits to the following data sharing prohibitions:
- We will never sell your personal data to third-party advertisers, data brokers, or marketing networks.
- We will never share your financial details (bKash number, bank account, card data) with third parties other than the specific payment processor required to execute your transaction.
- We will never share your identity documents with any party not directly involved in your KYC verification process.
- We will never share your personal data with other gambling platforms or competitor businesses.
Section 5
Data Security Measures
ballo88 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes the following measures:
5.1 Encryption
All data transmitted between your device and the ballo88 platform is encrypted using TLS 1.2 or TLS 1.3 protocols with 256-bit AES encryption. Data at rest — including account records, KYC documents, and transaction histories — is stored in encrypted database volumes. Passwords are never stored in plaintext; ballo88 uses industry-standard hashing algorithms with salting to protect password data.
5.2 Access Controls
Access to personal data within ballo88's internal systems is restricted on a strict need-to-know basis. Staff members access only the data required to perform their specific job function. All internal access is logged and subject to periodic audit. Administrative access to production systems requires multi-factor authentication (MFA).
5.3 Vulnerability Management
ballo88's technical team conducts regular vulnerability assessments and penetration testing of the platform's infrastructure. Critical security patches are applied on a priority basis. The platform undergoes periodic third-party security audits to validate the effectiveness of implemented controls.
5.4 Incident Response
In the event of a confirmed personal data breach that is likely to result in a risk to affected players, ballo88 will notify impacted Players within 24 hours of becoming aware of the breach, describing the nature of the incident, the categories of data affected, the likely consequences, and the steps taken to address the situation. Players are encouraged to change their passwords immediately if they receive such a notification.
5.5 Your Responsibility
While ballo88 takes extensive technical and organisational measures to protect your data, account security also depends on the precautions you take. You are responsible for keeping your login credentials confidential, using a strong and unique password, logging out after each session on shared devices, and notifying ballo88 immediately if you suspect unauthorised access to your account. ballo88 cannot be held liable for losses arising from a Player's failure to maintain adequate personal security practices.
Section 6
Your Privacy Rights
As a player on the ballo88 platform, you have the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line identifying the right you wish to exercise. ballo88 will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. There is no fee for exercising any of these rights.
Right of Access
Request a copy of all personal data ballo88 holds about you, along with information about how it is being processed. Submit a Subject Access Request (SAR) via email.
Right to Rectification
Request correction of any inaccurate or incomplete personal data held in your ballo88 account. For name or date-of-birth corrections, updated KYC documents may be required.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations (see Section 7).
Right to Restriction
Request that ballo88 restrict the processing of your personal data in certain circumstances — for example, while you dispute the accuracy of the data held or while a complaint is under review.
Right to Data Portability
Request a copy of your personal data in a structured, commonly used, machine-readable format (e.g., CSV or JSON) so that you can transfer it to another service if you wish.
Right to Object
Object to ballo88 processing your personal data based on legitimate interest grounds, including profiling for responsible gaming monitoring or fraud detection purposes.
Right to Withdraw Consent
Where processing is based on your consent (e.g., marketing communications), withdraw that consent at any time by contacting [email protected]. Withdrawal does not affect the lawfulness of prior processing.
Section 7
Data Retention Policy
ballo88 retains personal data only for as long as is necessary for the purpose for which it was collected, or for as long as required by applicable law. The following retention schedule applies to the principal categories of personal data processed by ballo88:
| Data Category | Retention Period | Reason for Retention |
|---|---|---|
| Account registration data (name, date of birth, phone number) | Duration of account + 5 years post-closure | Legal obligation — AML and identity verification record-keeping requirements |
| KYC identity documents (NID, passport, address proof) | Duration of account + 5 years post-closure | Legal obligation — regulatory compliance and dispute resolution |
| Transaction records (deposits, withdrawals, bet history) | Duration of account + 7 years post-closure | Legal obligation — financial record-keeping and audit trail requirements |
| Support communications (emails, chat transcripts) | 3 years from date of communication | Legitimate interest — dispute resolution and service quality monitoring |
| Responsible gaming records (self-exclusion, deposit limits) | Duration of account + 5 years post-closure | Legal obligation — player protection compliance and audit purposes |
| Session and usage analytics (anonymised) | 12 months (rolling) | Legitimate interest — platform performance improvement; anonymised so does not constitute personal data after processing |
| Security and fraud logs (IP addresses, device data) | 90 days (active) + 12 months (archived) | Legitimate interest — fraud investigation and platform security incident response |
| Marketing preferences and consent records | Until consent is withdrawn + 3 years | Legal obligation — evidence of consent for marketing communications |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ballo88's internal data disposal procedures. Anonymised data — from which all identifying information has been irreversibly removed — may be retained indefinitely for statistical and platform improvement purposes, as it no longer constitutes personal data.
Players who request account closure should be aware that account closure does not result in the immediate deletion of all personal data. Legally mandated retention periods continue to apply after closure. ballo88 will confirm the expected data deletion timeline at the time of processing an account closure request.
Section 8
Policy Updates & Contact
8.1 Updates to This Privacy Policy
ballo88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or platform features. When a material change is made to this policy, ballo88 will publish a revised version at https://ballo88.net/privacy-policy with an updated effective date clearly indicated at the top of the document.
Where a change is significant — for example, a new category of personal data being collected, a new third-party processor being engaged, or a change to how long data is retained — ballo88 will additionally notify registered Players via their registered mobile number or email address at least 7 days before the change takes effect. Continued use of the ballo88 platform after the effective date of any revised Privacy Policy constitutes acceptance of the updated terms.
8.2 Children and Minors
The ballo88 platform is strictly intended for adults aged 18 years and above. ballo88 does not knowingly collect or process personal data from individuals under the age of 18. If ballo88 discovers that personal data has been collected from a minor — whether through a false declaration of age during registration or any other means — that account will be immediately suspended, all funds will be handled in accordance with our responsible gaming procedures, and the personal data will be deleted as soon as practicable. If you believe a minor has registered an account on the ballo88 platform, please contact us immediately at [email protected].
8.3 Links to Third-Party Platforms
The ballo88 platform may contain references to third-party services such as game providers (Pragmatic Play, Evolution Gaming, Spribe, etc.) or payment partners (bKash, Nagad). Once you navigate away from the ballo88 platform to a third-party service, this Privacy Policy no longer applies. ballo88 encourages you to review the privacy policies of any third-party services you interact with, as ballo88 has no control over and assumes no responsibility for the data practices of those entities.
8.4 Contact the ballo88 Privacy Team
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ballo88, please contact our privacy team using the details below. ballo88 will respond to all privacy-related enquiries within 5 business days.
- Email: [email protected] — subject line: "Privacy Enquiry — [Your Username]"
- Platform: https://ballo88.net
- Operating hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)
Continue Exploring ballo88
Your Data is Safe — Now Enjoy the Platform
Now that you understand how ballo88 protects your privacy, explore our full range of games and betting markets — all secured with the same standards described in this policy.