Privacy Policy

Introduction

by888 is committed to safeguarding the privacy and security of every user who accesses our platform. This Privacy Policy describes the types of personal information we collect, the purposes for which we use it, the circumstances under which we may share it, and the measures we take to keep it secure. By registering an account or using any service offered on by888, you acknowledge that you have read and understood this policy and consent to the practices described herein.

This policy applies to all users of by888 services, including players based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and all other regions of Bangladesh. We take your data seriously and have designed our systems to meet high standards of data integrity and user confidentiality.

Information We Collect

by888 collects personal information through a number of channels to deliver a complete, secure, and personalised gaming experience. The categories of information we collect are described below.

Account Registration Data

When you create an account with by888, we ask you to provide the following details:

• Full name, date of birth, and gender
• Email address and mobile phone number
• Residential address (city, district, Bangladesh)
• Username and account password (stored as a hashed value)
• Preferred currency (BDT / ৳) and language preference

Transaction & Payment Data

To process deposits and withdrawals through Bangladesh-friendly payment channels, we collect relevant financial data including:

• Mobile wallet numbers for bKash, Nagad, and Rocket transactions
• Transaction IDs, timestamps, and amounts in BDT (৳)
• Bank account details where bank transfer is selected as the withdrawal method
• Card details for Visa and Mastercard payments (processed via PCI-DSS compliant gateways)

Automatically Collected Technical Data

Our servers automatically record certain technical information when you access by888, including your IP address, browser type and version, operating system, device type, pages visited, session duration, referral source, and in-game actions. This data helps us identify performance issues, prevent fraud, and improve the quality of our services.

How We Use Your Information

by888 uses the information we collect exclusively for legitimate operational and service-delivery purposes. The main purposes are:

• Creating and managing your by888 account, verifying your identity, and ensuring account security
• Processing deposits and withdrawals securely through bKash, Nagad, Rocket, Upay, and bank channels
• Delivering bonuses, free spins, promotional offers, and personalised recommendations based on your activity
• Providing customer support in response to your queries, complaints, and account-related requests
• Detecting, investigating, and preventing fraudulent activity, money laundering, and other unlawful conduct
• Meeting responsible gaming obligations, including enforcing age restrictions and self-exclusion requests

We do not use your personal information for automated decision-making that produces legal or similarly significant effects without human oversight. If we intend to use your data for any purpose not listed here, we will notify you in advance and seek your explicit consent.

Cookies & Tracking Technologies

by888 uses cookies and similar tracking technologies to enhance your browsing and gaming experience. Cookies are small text files stored on your device that help us remember your preferences and session state.

Types of Cookies We Use

We use three categories of cookies: (1) Essential cookies, which are strictly necessary for the platform to function correctly — including session authentication, security tokens, and load-balancing cookies. You cannot opt out of these. (2) Performance cookies, which collect anonymised data about how users navigate our site — such as page load times and error reports — to help us improve reliability. (3) Preference cookies, which remember your language setting, preferred sports or game categories, and display options so you enjoy a consistent experience on return visits.

Managing Your Cookie Preferences

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Note that blocking essential cookies may prevent certain features of by888 from working correctly, such as staying logged in during a gaming session. For detailed browser instructions, refer to your browser's official help documentation.

Sharing of Your Information

by888 does not sell, rent, or disclose your personal information to unaffiliated third parties for their own marketing purposes. We share your data only in the following limited circumstances:

• Service providers: payment processors (bKash, Nagad, Rocket, Visa/Mastercard gateways), KYC verification partners, fraud detection services, and hosting infrastructure providers who are contractually bound to protect your data
• Legal obligations: when required to comply with applicable laws, court orders, regulatory investigations, or anti-money-laundering requirements
• Business transfers: in the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity subject to the same privacy protections
• With your consent: we may share data with third parties for purposes you have expressly agreed to, such as opting into an affiliated loyalty programme

All third parties with whom we share data are required to implement appropriate technical and organisational measures to protect that data and may only use it for the specific purpose for which it was shared.

Data Retention

by888 retains your personal data for as long as your account is active or as needed to provide our services. If you close your account, we will delete or anonymise your personal data within a reasonable period, subject to any legal or regulatory obligations that require us to retain certain records for a specified period.

Transaction records, for example, may be retained for up to seven years in compliance with financial record-keeping standards. Any data retained beyond account closure is held securely and used only for compliance purposes, never for marketing or operational targeting.

Security of Your Personal Data

by888 uses a layered security approach to protect your personal information. All data transmitted between your device and our servers is protected by Transport Layer Security (TLS/SSL). Sensitive fields such as passwords are never stored in plain text — they are hashed using a modern one-way hashing algorithm. Our infrastructure is hosted in secure data centres with strict physical and network access controls.

While we maintain strong security practices, no digital platform can guarantee absolute security. You are responsible for keeping your account credentials confidential. If you suspect unauthorised access to your account, contact our support team immediately at [email protected].

Your Data Rights

As a user of by888, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team and we will respond within a reasonable timeframe.

• Right of access: you may request a copy of all personal data we hold about you
• Right of rectification: you may ask us to correct inaccurate or incomplete personal data
• Right to erasure: you may request deletion of your data where there is no legitimate reason for us to continue processing it
• Right to restriction: you may ask us to temporarily stop processing your data while a dispute is under review
• Right to data portability: where technically feasible, you may request your data in a commonly used, machine-readable format
• Right to object: you may object to processing of your personal data for direct marketing or profiling purposes at any time

We will not charge a fee to process most requests. In exceptional cases where a request is manifestly unfounded or excessive, we reserve the right to charge a reasonable administrative fee or to decline the request, with written notice given to you.

Payment Data & Transaction Security

by888 takes the security of financial transactions extremely seriously. When you deposit or withdraw funds using bKash, Nagad, Rocket, Upay, or card payments, your payment credentials are processed through encrypted, PCI-DSS compliant gateways. We do not store full card numbers or mobile wallet PINs on our servers at any point during or after a transaction.

All transaction records are logged with timestamps and stored securely for audit and compliance purposes. If you notice any suspicious transaction activity on your by888 account, report it to our support team immediately. We investigate all reported discrepancies promptly and work to resolve them in your favour where possible.

Third-Party Services & Links

by888 integrates with trusted third-party game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to deliver a broad library of cricket betting markets, live casino tables, slots, and crash games. These providers may independently collect technical data such as game session logs and RTP metrics in accordance with their own privacy policies.

by888 is not responsible for the privacy practices of third-party game studios or payment providers. We encourage you to review their respective privacy policies if you have questions about how they handle your data. We select partners carefully and require that all integrated providers maintain appropriate data security standards.

Age Restriction & Minor Protection

by888 is strictly an adult gaming platform. All users must be 21 years of age or older to register an account and participate in any real-money gaming activity. We do not knowingly collect personal information from individuals under the age of 21. If you are a parent or guardian and believe a minor has accessed our platform or provided personal data, please contact us immediately at [email protected] and we will take prompt action to delete that data and close the account.

We use age verification checks during the registration process and reserve the right to request additional identity documents at any time to confirm that a user meets the 21+ age requirement. Accounts found to belong to minors will be suspended immediately and any funds held in such accounts will be returned through the original payment channel used.

Changes to This Privacy Policy

by888 reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered users via email or an in-platform notification. Your continued use of by888 following the posting of changes constitutes your acceptance of those changes.

We recommend that you review this Privacy Policy periodically to stay informed about how we are protecting your information. If you disagree with any updated terms, you may close your account by contacting our support team before continuing to use the platform.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way by888 handles your personal data, our support team is available to assist you. We aim to respond to all privacy-related enquiries within 5 business days.

For responsible gaming concerns — such as setting deposit limits, requesting a self-exclusion, or seeking support for problem gambling — please also visit our Responsible Gaming page for dedicated guidance and resources.