boll8 Privacy Policy — How We Handle Your Data

This Privacy Policy ("Policy") applies to all users of the boll8 platform accessible at boll8.org. It describes how boll8 collects, uses, stores, shares, and protects personal information provided by or collected from players and visitors in the course of operating its online gaming services, including cricket betting, live casino, slots, dice games, and sports betting.

By creating an account, making a deposit, or continuing to use boll8 after this Policy takes effect, you acknowledge that you have read, understood, and agreed to its terms. If you do not agree, please discontinue use of the platform and contact [email protected] to request account closure.

1. What Personal Data We Collect

boll8 collects the minimum personal data necessary to deliver a safe, compliant, and personalised gaming experience. The categories of data we collect are:

2. How We Use Your Personal Data

boll8 uses personal data only for the purposes set out below. We do not use your data for any purpose incompatible with these stated purposes without first obtaining your consent or establishing a separate legal basis:

• Account creation, verification, and ongoing management — including resetting passwords, processing KYC documents, and maintaining your account security settings.
• Processing financial transactions — crediting deposits, processing withdrawal requests, applying bonuses, and maintaining an accurate transaction ledger for your account.
• Providing customer support — identifying your account, retrieving relevant transaction history, and resolving disputes or complaints raised through the support channel.
• Fraud prevention and security — monitoring account activity for signs of money laundering, bonus abuse, multiple account operation, or other forms of prohibited conduct set out in the Terms and Conditions.
• Responsible gaming compliance — tracking gaming activity to identify patterns consistent with problem gambling, enabling deposit limits and self-exclusion tools, and contacting players where welfare concerns are identified.
• Platform improvement and analytics — analysing aggregated, anonymised usage data to improve game selection, payment processing speeds, and the overall mobile experience for players across Bangladesh.

3. Legal Basis for Processing Personal Data

boll8 processes your personal data only where a valid legal basis exists. The applicable bases are:

Performance of a Contract

The majority of processing activities — account creation, transaction processing, KYC verification, and game delivery — are necessary to fulfil the contract between boll8 and each registered player. Without this processing, boll8 cannot provide its services.

Legal Obligation

boll8 is required by applicable law to collect and retain certain data, including identity verification records, transaction logs, and anti-money laundering screening results. This data is processed to comply with applicable regulatory requirements and cannot be deleted on request while the legal obligation persists.

Legitimate Interests

boll8 processes certain data — including fraud monitoring signals, anonymous analytics, and platform security logs — on the basis of its legitimate interest in operating a secure, reliable, and compliant gaming platform. Where we rely on this basis, we have assessed that our interests do not override your fundamental privacy rights.

Consent

Where boll8 wishes to send you promotional communications about bonuses, seasonal offers (such as Eid promotions or Pohela Boishakh specials), or new game launches, we will do so only on the basis of your explicit consent. You may withdraw consent at any time by contacting [email protected].

4. Data Sharing and Third-Party Processors

boll8 does not sell, rent, or trade your personal data. We may share data with the following categories of third party, strictly on a need-to-know basis and subject to data processing agreements that bind those parties to confidentiality and security obligations:

• Payment processors — bKash, Nagad, Rocket, and Upay receive transaction data necessary to process deposits and withdrawals. They operate under their own privacy policies and regulatory frameworks.
• Game providers — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised session tokens to authenticate game sessions. They do not receive your identity or financial data.
• KYC and identity verification services — third-party identity verification providers process copies of your identification documents for the purpose of age and identity verification. These providers are contractually bound to use your data only for this purpose.
• Law enforcement and regulatory authorities — where boll8 is compelled by law, court order, or regulatory requirement to disclose personal data to a government authority, we will do so. We will notify you of such disclosure where we are legally permitted to do so.

5. Cookies and Tracking Technologies

boll8 uses cookies and similar browser-based technologies to operate the platform, maintain your session, and improve the player experience. This section explains what types of cookies we use and how you can manage them.

Essential Cookies

These cookies are strictly necessary to operate boll8. They maintain your login session, remember your language preference, and enable secure payment flows. Essential cookies cannot be disabled without preventing you from using the platform. No personal data beyond session identifiers is stored in essential cookies.

Analytics Cookies

boll8 uses anonymised analytics cookies to understand how players navigate the platform, which pages are most visited, and where technical errors occur. Analytics data is aggregated and does not identify individual players. This data informs product development decisions.

Managing Your Cookie Preferences

You can manage or delete cookies through your mobile browser settings. On Android Chrome, go to Settings > Privacy and Security > Clear Browsing Data. On iOS Safari, go to Settings > Safari > Clear History and Website Data. Note that clearing cookies will log you out of your boll8 account and reset your preferences.

boll8 does not use third-party advertising or retargeting cookies. No data collected through our cookies is shared with social media platforms or advertising networks.

6. How Long We Retain Your Data

boll8 retains personal data for as long as your account is active and for the minimum period required thereafter by applicable law or legitimate business need. The specific retention periods applicable to each category of data are:

Identity and KYC documents are retained for a minimum of five years following account closure, in accordance with anti-money laundering recordkeeping requirements. Transaction records are retained for five years. Gaming activity logs are retained for two years from the date of the activity. Technical and device data is retained for twelve months. Where a legal dispute, investigation, or regulatory inquiry is ongoing, relevant data will be retained until the matter is resolved.

7. How We Protect Your Data

boll8 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security programme includes industry-standard SSL/TLS encryption for all data transmitted between your device and the boll8 platform, encrypted storage for sensitive data at rest, access controls that limit employee access to personal data on a strict need-to-know basis, and regular security assessments of the platform and its third-party integrations.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, boll8 will notify affected players without undue delay and will take all reasonable steps to contain the breach and prevent further harm.

8. Your Privacy Rights

As a boll8 account holder, you hold the following rights over your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Rights Request" and your registered mobile number for identity verification:

boll8 will respond to all privacy rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 60 days and will inform you of the extension and the reason for it. Please note that certain rights (particularly erasure) may be limited where boll8 is required to retain data to fulfil a legal obligation.

9. Children and Minors

boll8 is an adult gaming platform. Access is restricted to persons aged 21 and above. boll8 does not knowingly collect personal data from persons under the age of 21. If boll8 becomes aware that personal data belonging to a person under 21 has been collected, that data will be deleted immediately and the associated account will be closed. Any funds deposited by an underage account holder will be returned to the payment source.

10. Changes to This Privacy Policy

boll8 reserves the right to update this Privacy Policy at any time. When changes are made, the revised Policy will be posted at boll8.org/privacy-policy with an updated effective date. Where changes are material — meaning they significantly affect how we use your data or the rights available to you — boll8 will provide notice to registered account holders via SMS or email at least 14 days before the revised Policy takes effect.

Your continued use of boll8 following the effective date of any revised Privacy Policy constitutes your acceptance of the changes. If you do not accept the revised Policy, you must cease using boll8 and may request account closure by contacting our support team.

11. Contact Our Privacy Team

For any questions, concerns, or requests relating to this Privacy Policy or how boll8 handles your personal data, please contact our dedicated privacy support team. We aim to acknowledge all privacy-related enquiries within 48 hours and resolve them within 30 days. Our contact address is:

When contacting us about a privacy matter, please include your registered mobile number (do not include your password) so that we can verify your identity and locate your account record efficiently.