Privacy Policy — bb44ap

Welcome to the bb44ap Privacy Policy. bb44ap ("we", "us", "our", "the Platform") is committed to protecting the privacy of every player who accesses our services at bb44ap.biz. This Privacy Policy describes in plain, clear terms what personal data we collect, the purposes for which we use it, the circumstances under which it may be shared, how long we retain it, and the rights you hold in relation to your own data.

This Privacy Policy applies to all personal data processed in connection with your use of the bb44ap platform, including but not limited to account registration, identity verification, deposits and withdrawals via bKash, Nagad, Rocket, and Upay, gameplay activity, customer support interactions, and any marketing communications you have opted in to receive.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy. By registering a player account or otherwise using any feature of the bb44ap platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

bb44ap collects the following categories of personal data from players and prospective players:

• Identity data: Full name, date of birth, gender, and national identity information (e.g., NID number, passport number) provided during registration or KYC verification.
• Contact data: Email address, phone number, and residential address (city, district, division) provided during account setup or verification.
• Financial data: Mobile wallet account identifiers (bKash, Nagad, Rocket, Upay numbers), transaction amounts, deposit and withdrawal histories, and account balance records.
• Verification documents: Copies of identity documents, address proof documents, and payment method screenshots submitted during the KYC process.
• Account data: Username, password hash (never stored in plain text), account preferences, responsible gaming settings, and communication preferences.
• Gameplay data: Betting history, game session records, wagering amounts, bonus usage, and win/loss records generated during your use of bb44ap's gaming services.
• Technical data: IP address, device type, operating system, browser type and version, screen resolution, and session timestamps collected automatically when you access the platform.
• Communications data: Records of your interactions with bb44ap's customer support team, including emails, chat transcripts, and support ticket histories.

bb44ap collects personal data through the following channels and mechanisms:

• Direct provision: Data you actively provide when completing the registration form, updating your account profile, submitting KYC documents, or contacting our support team.
• Transactional activity: Data generated automatically when you make deposits or withdrawals via bKash, Nagad, Rocket, or Upay, including transaction timestamps, amounts, and mobile wallet identifiers.
• Platform interaction: Data generated through your use of the bb44ap gaming platform, including bets placed, games played, session duration, and bonus activations.
• Automated technologies: Technical data collected via cookies, session tokens, server logs, and similar tracking technologies when you access bb44ap.biz. See Section 7 for full details on our use of cookies.
• Third-party game providers: Aggregated, anonymised game outcome data may be received from our game studio partners (Pragmatic Play, Evolution Gaming, Ezugi, NetEnt) in the course of delivering licensed game content. This data is used for dispute resolution and platform integrity purposes only.

bb44ap does not purchase personal data from data brokers or obtain player data from social media platforms without explicit player consent.

bb44ap processes personal data only where a valid legal basis exists. The legal bases on which we rely are as follows:

• Contractual necessity: Processing required to deliver the gaming services you have contracted for, including account management, payment processing, and dispute resolution.
• Legal obligation: Processing required to comply with anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, and any other applicable legal or regulatory obligation.
• Legitimate interests: Processing carried out for purposes of fraud prevention, platform security, responsible gaming enforcement, and improvement of our services, where such interests are not overridden by your privacy rights.
• Consent: Processing for optional purposes — principally the delivery of marketing communications — where you have provided explicit, informed, and freely given consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

bb44ap uses the personal data it collects for the following purposes:

• Account creation and management: Creating your player account, verifying your identity and age, maintaining your account settings and preferences, and processing account closure requests.
• Service delivery: Enabling you to place bets, play games, participate in promotions, and access all features of the bb44ap platform.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, and Upay; verifying payment method ownership; and maintaining accurate transaction records in BDT.
• KYC and AML compliance: Verifying player identity and age, screening against relevant watchlists, and meeting our anti-money laundering obligations.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour; enforcing self-exclusion requests, deposit limits, and session time reminders; and delivering responsible gaming communications.
• Customer support: Responding to your queries, resolving disputes, processing complaints, and delivering support-related communications.
• Platform security and fraud prevention: Detecting and investigating suspicious account activity, enforcing our Terms & Conditions, and protecting the integrity of the bb44ap platform and its player community.
• Service improvement: Analysing anonymised and aggregated usage data to understand how players interact with the platform and to improve the user experience, game selection, and payment processes.
• Marketing communications: Sending promotional offers, bonus announcements, and seasonal campaigns (such as Eid or BPL season promotions) to players who have opted in to receive such communications.

bb44ap will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a new legal basis for processing.

bb44ap does not sell your personal data. We share personal data only in the limited circumstances described below:

• Payment processors: Mobile wallet providers (bKash, Nagad, Rocket, Upay) receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are data controllers in their own right for data processed in connection with payment transactions.
• KYC and identity verification providers: Third-party identity verification services may process your identity documents to assist with our KYC obligations. All such providers are bound by strict data processing agreements and are prohibited from using your data for any purpose other than identity verification.
• Game content providers: Game studios such as Pragmatic Play, Evolution Gaming, and Ezugi may receive technical session data (e.g., game round IDs, bet amounts) for the purpose of game delivery, dispute resolution, and RNG certification. No personal contact data is shared with game studios.
• IT and platform service providers: Hosting, database, and cybersecurity service providers who support the technical operation of bb44ap.biz may have access to personal data as part of their service delivery. All such providers are bound by confidentiality obligations and data processing agreements.
• Law enforcement and regulatory authorities: bb44ap will disclose personal data to government agencies, law enforcement bodies, or regulatory authorities where required to do so by applicable law, or where disclosure is necessary to protect the safety of individuals or the integrity of the platform.
• Business transfers: In the event of a merger, acquisition, or sale of all or a material part of bb44ap's assets, your personal data may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections.

bb44ap uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your session, and understand how players use our services. The categories of cookies used are as follows:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication tokens that keep you logged in during a gaming session, CSRF protection tokens, and load-balancing cookies. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: Used to remember your account preferences such as language settings, responsible gaming tool configurations, and display preferences. These improve your experience but are not essential to basic platform operation.
• Analytical cookies: Used to collect anonymised, aggregated data about how players navigate the bb44ap platform — such as which pages are visited most frequently, average session duration, and common user journeys. This data is used to improve the platform and is not linked to individual identities.
• Security cookies: Used to detect and prevent fraudulent login attempts, bot activity, and other security threats. These cookies are part of our fraud-prevention infrastructure and are essential for protecting player accounts.

Most web browsers allow you to control cookie behaviour through browser settings. You may choose to block or delete cookies, though doing so may impair your ability to log in or use certain features of bb44ap. For guidance on managing cookies in your specific browser, consult your browser's help documentation.

bb44ap retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Account and identity data: Retained for the duration of your account relationship with bb44ap, plus a minimum of 5 years following account closure, in accordance with anti-money laundering record-keeping obligations.
• KYC verification documents: Retained for a minimum of 5 years from the date of submission, or longer where required by applicable law. Documents are securely deleted at the end of the retention period.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction in BDT, for accounting, audit, and AML compliance purposes.
• Gameplay and betting records: Retained for a minimum of 3 years following account closure, for dispute resolution and responsible gaming monitoring purposes.
• Customer support communications: Retained for 2 years from the date of the last communication in a support thread, unless the communication relates to a dispute that remains unresolved.
• Marketing consent records: Retained for the duration of the consent, plus 2 years following withdrawal of consent, as evidence that processing was lawfully based.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with bb44ap's internal data deletion procedures. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for analytical and business intelligence purposes.

bb44ap implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• SSL/TLS encryption in transit: All data exchanged between your browser and bb44ap servers is encrypted using TLS 1.2 or higher, preventing interception by third parties.
• AES-256 encryption at rest: Sensitive data fields — including identity document copies, financial records, and password hashes — are encrypted at rest in our database infrastructure.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. bb44ap staff members can access only the data relevant to their specific operational role. All internal data access is logged and audited.
• Password hashing: Player passwords are never stored in plain text. bb44ap uses a one-way cryptographic hashing algorithm (bcrypt) with individual salt values to store password credentials securely.
• Intrusion detection and monitoring: bb44ap employs continuous network monitoring and intrusion detection systems to identify and respond to potential security incidents in real time.
• Regular security assessments: Our platform undergoes periodic security reviews to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no internet-based platform can guarantee absolute security. In the unlikely event of a data breach that poses a risk to your rights and freedoms, bb44ap will notify affected players and relevant authorities in accordance with applicable data breach notification obligations, without undue delay.

As a player on the bb44ap platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request":

• Right of access: You may request a copy of all personal data bb44ap holds about you, together with information about how it is used and with whom it is shared. We will respond to access requests within 30 days.
• Right to rectification: You may request the correction of any inaccurate or incomplete personal data held about you. Requests will be actioned within 14 days of verification.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where processing is unlawful. Erasure requests are subject to mandatory minimum retention obligations under AML law.
• Right to restriction: You may request that we restrict processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling. You also have an absolute right to object to processing of your data for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before the withdrawal.

bb44ap will not charge a fee for responding to data rights requests except in cases of manifestly unfounded or excessive requests, in which case we may charge a reasonable administrative fee or decline to act on the request.

bb44ap's services are strictly intended for adults aged 18 years and over. We do not knowingly collect, store, or process personal data relating to persons under the age of 18. Our registration process includes age declaration requirements and KYC procedures specifically designed to prevent underage access.

If bb44ap becomes aware that personal data has been collected from a person under the age of 18, we will take immediate steps to delete that data, close the associated account, and return any deposited funds where this is consistent with our AML obligations.

The bb44ap platform may from time to time display references to third-party service providers, game studios, or payment partners. While bb44ap takes care to engage with reputable partners, we are not responsible for the privacy practices of any third-party organisation. Each third party operates under its own privacy policy, which we encourage you to review before providing that organisation with any personal data.

bb44ap does not embed third-party tracking pixels, social media widgets, or external advertising scripts on its platform that would allow third parties to collect personal data from bb44ap users without their knowledge. All third-party integrations on bb44ap.biz serve a functional purpose and are subject to contractual data processing obligations.

bb44ap reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. Where changes are material — meaning they significantly affect how we handle your personal data or the rights available to you — we will provide at least 14 days' advance notice by email to your registered address and by publishing a notice on the bb44ap platform.

For non-material amendments, such as clarifications of existing language or updates to contact details, changes will take effect immediately upon publication on bb44ap.biz without individual notification. The "Last updated" date at the top of this document will be revised to reflect the date of each update.

Your continued use of the bb44ap platform after the effective date of any change to this Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with the changes, you should cease using the platform and contact our support team to request account closure before the revised policy takes effect.

The current version of this Privacy Policy is always available at bb44ap.biz/privacy-policy. We recommend reviewing this page periodically to stay informed of how bb44ap protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data bb44ap holds about you, please contact our support team. We take all privacy enquiries seriously and aim to provide a substantive response within 3 business days:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data rights requests: "Data Rights Request"
• Subject line for privacy complaints: "Privacy Complaint"
• Response time: Acknowledgement within 24 hours; substantive response within 3 business days for standard queries, and within 30 days for formal data rights requests.

When submitting a data rights request or privacy complaint, please include your registered username, the email address associated with your bb44ap account, and a clear description of your request or concern. This will allow our team to locate your records and respond accurately without unnecessary delay.

bb44ap is committed to resolving all privacy concerns promptly and transparently. If you are not satisfied with our response to a privacy complaint, you may have the right to escalate the matter to an appropriate supervisory authority under applicable data protection law.