Legal

bg388 Privacy Policy

bg388 is committed to protecting the personal data of every player on our Bangladesh platform. This policy explains what data we collect, why we collect it, and how you can control it.

Last updated: 1 January 2026
SSL Encrypted
All data in transit is protected by SSL encryption.
No Data Sales
We never sell your personal data to any third party.
Right to Erasure
Request deletion of your personal data at any time.
Data Contact
Reach our data team at [email protected]
Secure Storage
Sensitive data stored with AES-256 encryption at rest.
21+ Policy
We never knowingly collect data from anyone under 21.

1. Introduction

This Privacy Policy describes how bg388 collects, uses, stores, and protects the personal information of players who access or use the bg388 online casino and sports betting platform. bg388 is committed to handling your personal data responsibly. By registering for a bg388 account or using any part of the bg388 platform, you acknowledge that you have read this Privacy Policy and consent to the data practices described here.

bg388 serves players primarily in Bangladesh and structures its data practices to reflect the expectations of the Bangladesh market. All financial transactions are conducted in Bangladeshi Taka (BDT) via domestic mobile banking services including bKash, Nagad, and Rocket. This policy applies to all personal data collected through the bg388 platform, whether collected directly from you or through automated technical means such as cookies and server logs.

2. Personal Data We Collect

bg388 collects personal data in four main categories. We collect only the data that is necessary for the purposes described in this policy and do not collect data beyond what our legitimate operational needs require.

Registration Data
Full legal name, date of birth, email address, mobile phone number (Bangladesh number), and declared country of residence. This data is required to create and maintain your bg388 account and to comply with our age verification and KYC obligations.
Identity Verification (KYC) Data
Where identity verification is required, we may collect a copy of a government-issued photo ID (such as a National Identity Card or passport), a recent proof of address document, and in some cases a photograph for face-match verification. KYC documents are stored in encrypted form and are only accessible to authorised compliance personnel.
Transaction and Financial Data
Records of all deposits and withdrawals including the payment method used (bKash, Nagad, Rocket, or bank transfer), transaction amounts in BDT, transaction timestamps, and transaction reference numbers. bg388 does not store full mobile banking PINs or full bank account numbers — these are processed entirely within the secure systems of the respective payment provider.
Technical and Usage Data
IP address at login and registration, device type and operating system, mobile browser type and version, pages and game sessions accessed, session duration, and referring URL where applicable. This data is collected automatically through server logs and session tracking and is used for security, fraud prevention, and platform performance monitoring.

3. How We Use Your Personal Data

bg388 uses the personal data it collects for the following specific purposes only. We do not use personal data for purposes incompatible with those listed below.

  • To create, verify, and administer your bg388 account, including processing your registration, verifying your age and identity, and maintaining the ongoing security and integrity of your account.
  • To process deposits and withdrawals via bKash, Nagad, Rocket, and bank transfer, and to maintain accurate records of all financial transactions on your account for reconciliation, dispute resolution, and compliance purposes.
  • To detect, investigate, and prevent fraud, money laundering, bonus abuse, and other prohibited conduct, including using technical data and transaction patterns to identify suspicious activity.
  • To provide customer support, including responding to account queries, processing complaints, and communicating about account status, transaction outcomes, or policy updates via your registered email address or mobile number.
  • To personalise your experience on the platform, including displaying relevant game recommendations and promotional offers based on your gameplay history, where you have not opted out of personalised communications.
  • To comply with applicable legal and regulatory obligations, including retaining transaction records for the periods required by law and responding to lawful requests from competent authorities.

4. Legal Basis for Processing

bg388 processes personal data only where a valid legal basis exists. The legal bases on which bg388 relies are set out below.

  • Contractual necessity: processing your registration data, account data, and transaction data is necessary to perform the contract between you and bg388 (the Terms and Conditions accepted at registration).
  • Legal obligation: processing KYC data, transaction records, and certain technical data is necessary to comply with applicable anti-money laundering, age verification, and data retention laws.
  • Legitimate interests: processing technical and usage data for fraud detection, platform security, and performance optimisation represents a legitimate interest of bg388 that does not override your fundamental data protection rights.
  • Consent: where bg388 sends you personalised marketing communications by email or SMS, this is based on your consent, which you may withdraw at any time by contacting support or using the opt-out link in any marketing message.

5. Sharing Your Personal Data

bg388 does not sell personal data. bg388 shares personal data with third parties only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

  • Payment processors: transaction data (amount, timestamp, and reference) is shared with bKash, Nagad, Rocket, and bank partners solely to process deposits and withdrawals. bg388 does not receive or store your mobile banking PINs or full bank credentials.
  • Game content providers: limited technical session data (game session ID, stake, and result) is shared with providers such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe to deliver game content and support dispute resolution. These providers do not receive your financial or identity data.
  • Identity verification providers: where third-party KYC services are used, identity documents and verification data are shared under strict data processing agreements. These providers are obligated to process your data solely for identity verification and no longer than required.
  • Legal authorities: bg388 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by a valid legal obligation, court order, or lawful request from a competent authority. bg388 will notify affected players to the extent permitted by law.
Data Sharing Principle: bg388 applies a strict minimum-necessary principle to all data sharing. We share only the specific data elements a third party needs to perform their function and never share broader account profiles or behavioural data sets with any commercial third party for marketing or analytics purposes.

6. Payment Data and Mobile Banking

bg388 integrates with bKash, Nagad, and Rocket — the mobile financial services most widely used by players in Bangladesh. When you initiate a deposit or withdrawal using one of these services, you interact directly with that service's secure payment interface. bg388 receives only the transaction confirmation data from the payment provider: the amount in BDT, the timestamp, and a reference number. bg388 does not receive, store, or process your bKash PIN, Nagad PIN, Rocket PIN, or any mobile banking credential.

For bank transfer transactions via BRAC Bank, City Bank, Islami Bank, Sonali Bank, or Dutch-Bangla Bank, bg388 receives the transaction reference and confirmation from the bank. Any account details you provide for withdrawal purposes are stored in encrypted form and used solely to process that specific withdrawal. bg388 does not retain these details for other purposes once the withdrawal is complete.

7. Cookies and Tracking Technologies

The bg388 platform uses cookies and similar session-tracking technologies to maintain platform functionality, improve user experience, and support security operations. bg388 does not use third-party advertising cookies or sell cookie-derived data to advertising networks.

Essential Cookies
Required for platform operation. These cookies maintain your login session, store your language preference, and allow the platform to function correctly across page loads. They cannot be disabled without breaking core functionality. No personal data is shared with third parties via essential cookies.
Analytics Cookies
Used to understand how players navigate the platform — which game categories are most accessed, session duration patterns, and page performance metrics. Analytics data is aggregated and anonymised before analysis and does not identify individual players. You may opt out of analytics cookies by contacting support.
Security Cookies
Used to detect and prevent fraudulent login attempts, session hijacking, and automated bot activity. Security cookies store a session token and a device fingerprint hash (not personally identifiable) to verify that requests to the platform originate from your authenticated session. These cookies are essential for account security and cannot be disabled.

bg388 does not use Flash cookies, pixel tags embedded in third-party advertising, or any cross-site tracking technology that would allow advertising networks to track your activity across websites other than bg388. Your platform activity remains within bg388's own systems.

8. Data Retention

bg388 retains personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law. Account registration data and KYC documents are retained for the duration of the account's active life plus a minimum of 5 years after account closure to satisfy anti-money laundering and financial record-keeping obligations. Transaction records are retained for a minimum of 5 years from the date of each transaction. Technical and usage data such as server logs is retained for a maximum of 12 months unless specific data must be preserved as evidence in an ongoing investigation or dispute.

When the applicable retention period expires, bg388 securely deletes or anonymises the relevant personal data so that it can no longer be linked to an identifiable individual. Where data is anonymised rather than deleted, the anonymised data set may be retained for statistical and platform improvement purposes, but it will no longer constitute personal data.

9. Data Security Measures

bg388 implements industry-standard technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures are reviewed and updated regularly to reflect evolving security standards and emerging threat patterns relevant to the Bangladesh digital payments environment.

Security measures include: SSL/TLS encryption for all data in transit between your device and bg388 servers; AES-256 encryption for sensitive data at rest including KYC documents and payment reference data; role-based access controls so only authorised personnel can access personal data relevant to their function; regular security audits and penetration testing; and automated anomaly detection systems that flag unusual account activity for review by our security team.

10. Your Data Rights

As a bg388 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact bg388 support at the email address in Section 14. bg388 will respond to all data rights requests within 30 days of receipt at no charge.

Right of Access
Request a copy of the personal data bg388 holds about you, including categories of data held, purposes of processing, and any third parties with whom it has been shared.
Right of Rectification
If personal data bg388 holds about you is inaccurate or incomplete, request that it be corrected or completed. Correcting identity data may require re-verification of your identity.
Right of Erasure
Request deletion of your personal data where it is no longer necessary for the purposes collected, where you withdraw consent, or where it has been unlawfully processed. bg388 may be unable to delete certain data where retention is required by law.
Right to Restrict Processing
Request that bg388 restrict processing of your personal data in certain circumstances, for example while a rectification request is being assessed or where you contest the lawfulness of processing.
Right to Object
Object to the processing of your personal data where bg388 relies on legitimate interests as its legal basis. You also have an unconditional right to object to processing for direct marketing purposes at any time.

bg388 will not discriminate against you for exercising any of the above rights. Exercising a data right will not affect your ability to continue using the bg388 platform, provided the right exercised does not require deletion of data legally required for account operation.

11. Children and Minors

The bg388 platform is strictly for adults aged 21 years or older. bg388 does not knowingly collect personal data from any person under the age of 21. If bg388 becomes aware that personal data has been collected from a person under 21, it will delete that data promptly and close the associated account. If you are a parent or guardian and believe that a minor in your care has registered with bg388, please contact support immediately using the email address in Section 14. bg388 takes the protection of minors seriously and cooperates fully with parental requests to investigate and close underage accounts.

12. Third-Party Links and Services

The bg388 platform may contain references to third-party game providers and payment services. bg388 is not responsible for the privacy practices or data handling of any third-party service, and this Privacy Policy applies only to data processed by bg388 directly. Game providers such as Evolution Gaming, Pragmatic Play, Ezugi, and Spribe operate under their own privacy policies in relation to their game delivery infrastructure. bg388 encourages players to review the privacy policies of any third-party service they interact with in connection with their gaming activity.

13. Changes to This Privacy Policy

bg388 reserves the right to update this Privacy Policy at any time. When changes are made, the updated policy will be posted on this page with a revised effective date. For material changes that affect your rights or the way bg388 uses your personal data, bg388 will notify registered players via their registered email address or mobile number at least 7 days before the changes take effect. Your continued use of the bg388 platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy.

14. Contact and Data Queries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how bg388 handles your personal data, please contact the bg388 support team using the email address below. All data-related queries are handled by bg388's designated data handling team. bg388 aims to acknowledge all privacy queries within 24 hours and to provide a substantive response within 30 days.

Privacy Contact: [email protected]
Ready to Play at bg388?
Your data is protected. Explore the full bg388 game lobby — live casino, cricket betting, slots, and more — or visit our FAQ for any questions about your account.
Explore bg388 Casino View FAQ