eb88 Privacy Policy — How We Handle Your Personal Data

For the purposes of this Privacy Policy, the data controller responsible for the personal data collected and processed through the eb88 platform is eb88, the operator of the website eb88.im. As the data controller, eb88 determines the purposes for which personal data is collected and the means by which it is processed.

All data protection enquiries , requests to exercise your data rights, and formal complaints relating to privacy matters should be directed to the eb88 data protection team at [email protected]. Our team will acknowledge all data-related enquiries within 72 hours and aim to resolve them within 30 calendar days.

eb88 collects personal data from you directly (when you provide it during registration, verification, or support interactions), automatically (through your use of the platform), and from third parties (such as identity verification partners and payment processors). The categories of personal data we collect are set out below.

eb88 collects and processes personal data only for specific, defined purposes. We do not process personal data in ways that are incompatible with the purposes listed below. The primary purposes for which we use your personal data are:

• Account Registration and Management: To create, verify, maintain, and close your eb88 account, including processing your registration details and keeping your account information up to date.
• Identity and Age Verification (KYC): To confirm that you are who you say you are, that you are aged 21 or above, and that you are eligible to hold an active account on the eb88 platform.
• Transaction Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and other supported payment channels, and to maintain accurate financial records of all account activity.
• Platform Delivery and Improvement: To operate and maintain the eb88 platform, deliver the games, sports markets, and services you request, analyse usage patterns, resolve technical issues, and continuously improve the player experience.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, identity theft, and other conduct that poses a risk to eb88 or to other players on the platform.
• Responsible Gaming Compliance: To monitor account activity for indicators of problem gambling, enforce self-exclusion and limit settings you have applied, and reach out proactively where our responsible gaming tools suggest your gambling behaviour warrants attention.
• Legal and Regulatory Compliance: To comply with applicable legal obligations, including responding to lawful requests from regulatory bodies, financial intelligence units, law enforcement agencies, and courts of competent jurisdiction.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide account assistance through our 24/7 support team.
• Personalisation and Marketing: Where you have given your consent, to send you personalised promotional offers, bonus notifications, event-based promotions (such as BPL season offers or Eid bonuses), and platform update notifications via email or SMS. You may withdraw this consent at any time.

eb88 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual Necessity: Processing that is necessary to perform our contract with you — including account registration, transaction processing, game delivery, and customer support — is carried out on the basis that it is required to fulfil the agreement you entered into when accepting our Terms & Conditions.
• Legal Obligation: Processing required for us to comply with applicable law, including KYC identity verification, anti-money-laundering record keeping, and responding to lawful authority requests, is carried out on the basis of our legal obligations.
• Legitimate Interests: Processing for fraud detection, platform security, abuse prevention, responsible gaming monitoring, and internal analytics is carried out on the basis of our legitimate business interests, provided those interests do not override your fundamental privacy rights.
• Consent: Processing for direct marketing communications, personalised promotional offers, and non-essential cookies is carried out only where you have provided clear, freely given, and informed consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

eb88 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the circumstances described below, and strictly to the extent necessary for the stated purpose:

• Payment Processors: We share financial data with payment service providers including bKash, Nagad, Rocket, Upay, and partner banking institutions (including Dutch-Bangla Bank, BRAC Bank, and City Bank) solely to process deposits and withdrawals on your behalf. These providers handle your financial data under their own privacy and security standards.
• Identity Verification Partners: We share identity and document data with third-party KYC and age verification service providers to confirm your identity, age, and eligibility in accordance with our Terms & Conditions. These providers are contractually obligated to process your data only for verification purposes.
• Game Studios and Software Providers: Certain usage data (such as game session data) may be transmitted to third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to deliver the respective game experiences. These studios operate under their own data protection frameworks.
• Technology and Infrastructure Providers: We share data with hosting providers, cloud infrastructure partners, cybersecurity vendors, and analytics platforms that support the operation of the eb88 platform. All such providers are bound by data processing agreements that restrict their use of your data to service delivery only.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, financial intelligence authorities, courts, and other public bodies where required by applicable law or where disclosure is necessary to prevent or detect a serious crime. Such disclosures are made without prior notice to the account holder where legally required.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of eb88 or its assets, personal data held by eb88 may be transferred to the acquiring entity as part of the transaction. In such circumstances, eb88 will notify affected users in advance and ensure the acquiring party is bound by privacy obligations no less stringent than those in this policy.

eb88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The retention periods applicable to the main categories of data we hold are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where data cannot be immediately deleted due to technical constraints (for example, data held in secure backup systems), eb88 will ensure it is isolated from further active processing and deleted at the earliest practicable opportunity.

eb88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the eb88 platform is encrypted using industry-standard 256-bit SSL/TLS protocols. This applies to all pages and communication channels on eb88.im.
• Encrypted Data Storage: Sensitive personal data and financial records stored on eb88 servers are encrypted at rest using AES-256 encryption. Access to decrypted data is restricted to authorised personnel on a strict need-to-know basis.
• Access Controls: Internal access to personal data is governed by role-based access controls. All staff members with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable SMS-based two-factor authentication on their eb88 accounts. This significantly reduces the risk of unauthorised account access even if login credentials are compromised.
• Firewall and Intrusion Detection: The eb88 platform is protected by enterprise-grade firewall systems and real-time intrusion detection and prevention systems (IDS/IPS) that monitor for suspicious access patterns and block malicious traffic.
• Regular Security Audits: eb88 conducts regular internal and third-party security audits and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Data Breach Response: In the event of a personal data breach that poses a risk to your rights and freedoms, eb88 will notify affected account holders without undue delay, and no later than 72 hours after becoming aware of the breach, providing details of the nature of the breach and the steps being taken to address it.

The eb88 platform uses cookies and similar tracking technologies to operate the site, remember your preferences, analyse usage, and where you have consented, to deliver relevant promotional content. The types of cookies used on eb88.im are described below:

You may manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies may impair the functionality of the eb88 platform. Most modern browsers allow you to refuse cookies, delete existing cookies, or receive a notification when a cookie is set. Consult your browser's help documentation for specific instructions.

As a data subject whose personal data is processed by eb88, you hold a number of rights in relation to that data. eb88 is committed to facilitating the exercise of these rights promptly and without unnecessary obstruction. Your rights are as follows:

• Right of Access: You have the right to request a copy of the personal data eb88 holds about you, along with information about how that data is being processed. Requests will be responded to within 30 calendar days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update certain account details directly through your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request that eb88 delete the personal data we hold about you where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (for consent-based processing), or where you object to processing carried out on the basis of legitimate interests and eb88 cannot demonstrate overriding grounds to continue. Note that certain data must be retained by eb88 to comply with legal obligations (such as anti-money-laundering record-keeping requirements) and cannot be deleted on request during mandatory retention periods.
• Right to Restriction of Processing: You have the right to request that eb88 restrict the active processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved, or while an objection to processing is under review.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you have the right to receive a copy of the personal data you have provided to eb88 in a structured, commonly used, and machine-readable format, and to have that data transmitted directly to another service provider where technically feasible.
• Right to Object: You have the right to object at any time to processing carried out on the basis of legitimate interests, including profiling. You also have the right to object to processing of your personal data for direct marketing purposes, in which case eb88 will cease such processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to Lodge a Complaint: If you are dissatisfied with how eb88 has handled your personal data, you have the right to lodge a complaint with eb88's data protection team at [email protected]. If your concern is not resolved to your satisfaction, you may also raise the matter with a relevant supervisory authority.

eb88 employs the following measures to prevent minors from accessing the platform and providing us with their personal data:

• Date of birth is a mandatory field during registration, and accounts where the stated date of birth indicates an age below 21 are automatically blocked from completion.
• All accounts are subject to potential KYC age verification at any time during the account lifecycle. Where age cannot be confirmed, the account will be suspended pending satisfactory verification.
• eb88 may conduct periodic audits of account registration data to identify any records that may indicate a player is below the minimum age.

If you believe that a minor has registered an account on the eb88 platform or that eb88 has inadvertently collected personal data from a person under 21, please notify us immediately at [email protected]. We will investigate the matter promptly and take appropriate action including account closure and data deletion.

The eb88 platform serves players primarily based in Bangladesh. However, some of the third-party service providers we engage — including cloud infrastructure partners, identity verification vendors, and game studio technology providers — may process personal data on servers located outside Bangladesh. Where such international transfers occur, eb88 takes the following steps to ensure your data remains adequately protected:

• eb88 only transfers personal data to third-party providers outside Bangladesh where those providers implement data protection measures that are equivalent in standard to those applied by eb88 within Bangladesh.
• All third-party data processors engaged by eb88 are bound by contractual data processing agreements that specify the permitted purposes of processing, the security standards to be maintained, and the obligation to notify eb88 of any data breach affecting transferred data.
• eb88 conducts due diligence assessments of all third-party processors prior to engagement and monitors ongoing compliance with agreed data protection standards.
• Where a third-party provider is located in a jurisdiction that does not provide a comparable level of data protection to that available under applicable Bangladeshi law, eb88 will implement additional contractual or technical safeguards to mitigate the difference in protection level.

eb88 may send you promotional communications — including bonus offers, seasonal promotions (such as BPL cricket season campaigns, Eid bonuses, Pohela Boishakh promotions, and IPL special offers), and platform update notifications — where you have given your explicit consent to receive such communications during account registration or subsequently through your account settings.

• Marketing communications are sent via email to your registered email address and/or via SMS to your registered Bangladeshi mobile number, depending on your stated preferences.
• You may withdraw your consent to receive marketing communications at any time by updating your preferences in your account settings, by clicking the unsubscribe link in any marketing email, or by contacting [email protected] with the subject line "Unsubscribe".
• Following a request to unsubscribe, eb88 will process your opt-out within 5 business days. You may continue to receive transactional communications (such as deposit confirmations, withdrawal notifications, and security alerts) that are necessary for the management of your account, regardless of your marketing preferences.
• eb88 does not sell your contact details to third-party marketers. Marketing communications will only ever originate from eb88 directly.
• Players who have applied self-exclusion on their accounts will be automatically removed from all marketing communication lists for the duration of the exclusion period.

eb88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we provide. The current version of this Privacy Policy is always available at eb88.im/privacy-policy and is identified by its effective date displayed in the hero section at the top of this page.

• Where changes to this Privacy Policy are material — meaning they meaningfully affect how we collect, use, or share your personal data or alter your rights in relation to that data — eb88 will notify active account holders by email to their registered address no fewer than 14 days before the revised policy takes effect.
• Minor updates — including corrections of typographical errors, clarifications that do not alter the substance of existing provisions, and amendments required to maintain compliance with applicable law — may take effect immediately without prior notice and will be identified by an updated effective date.
• Continued use of the eb88 platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not accept the revised policy, you must cease using the platform and request account closure before the effective date.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way eb88 processes your personal data, please contact our data protection team using the details below. All privacy-related correspondence is handled in English, 24 hours a day, 7 days a week.

• Email: [email protected] — Include "Privacy Policy" or "Data Rights Request" in the subject line for fastest routing.
• Live Chat: Available directly on the eb88 platform — responses typically within 30 minutes.
• Response Times: Data rights requests acknowledged within 72 hours; substantive response within 30 calendar days.
• Time Zone: All support and data protection operations are conducted in Bangladesh Standard Time (BST, UTC+6).