BB88 Privacy Policy – How We Protect Your Data in Pakistan

This Privacy Policy applies to all users of the BB88 online gaming platform available at bb88-khelo.com. BB88 ("we", "us", "our") is the data controller responsible for the personal information collected through this platform. When we refer to "you" or "your" in this policy, we mean any individual who visits bb88-khelo.com, registers a player account, makes a deposit, places a bet, plays a game, or contacts our customer support team.

This policy is written in English and is intended for Pakistani players accessing BB88 from within Pakistan. The platform operates in Pakistani Rupees (PKR) and integrates with Pakistani payment methods including Easypaisa, JazzCash, NayaPay, SadaPay, and local bank IBFT transfers.

By registering an account on BB88, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described here. If you do not agree with any aspect of this policy, please do not register or use BB88's services.

BB88 collects personal data through several channels: directly from you when you register or interact with the platform, automatically through your device and browser when you visit the site, and from third parties such as payment processors and identity verification services.

Data You Provide Directly

• Registration data: Full name, Pakistani mobile number, date of birth, email address (optional), and chosen username/password.
• Identity verification (KYC): CNIC (Computerised National Identity Card) number and a photograph or scan of the document when required for account verification.
• Financial data: Mobile wallet number (Easypaisa/JazzCash account linked to your CNIC), bank account number and IBAN for bank transfer withdrawals, and Visa/Mastercard card details entered during transactions (card data is processed by our payment partners and not stored on BB88 servers in full).
• Support interactions: Any information you share with BB88's customer support team via Live Chat, WhatsApp, Telegram, or email.

Data Collected Automatically

• Device information: Device type, operating system, browser type and version, and screen resolution.
• Network information: IP address, approximate geographic location derived from IP (city/region level), and mobile network operator if applicable.
• Session data: Pages visited, time spent on pages, features accessed, bet history, game history, deposit and withdrawal transaction records, and session start/end timestamps.
• Cookie and tracking data: As described in Section 6 of this policy.

Every piece of data BB88 collects has a specific purpose. We do not collect data speculatively or for vague future uses. Below is a clear account of why each category of data is used and what it enables.

• Account creation and management: Your name, mobile number, and date of birth are used to create and maintain your BB88 player account. We use your mobile number for login verification codes, account security alerts, and payment confirmations.
• Processing deposits and withdrawals: Your Easypaisa or JazzCash number, bank account number, and transaction history are used to execute financial transactions in PKR. This data is shared with the relevant payment processor for each transaction.
• Identity verification (KYC/AML): Your CNIC number and document scan are used to verify your identity when required — typically before processing withdrawals above set thresholds or when flagged by fraud monitoring systems. This is a regulatory requirement for anti-money laundering compliance.
• Fraud detection and security: IP address, device fingerprint, login patterns, and transaction behaviour are analysed to detect fraudulent activity, multiple accounts, bonus abuse, and other prohibited conduct as defined in BB88's Terms and Conditions.
• Personalising your experience: Game history, betting preferences, and session data are used to show you relevant promotions, game recommendations, and sports markets that match your interests. BB88 does not use sensitive personal data (such as CNIC information) for personalisation purposes.
• Customer support: Any data you share when contacting BB88 support is used to investigate and resolve your query. Support interaction records are retained to provide context for future contacts.
• Responsible gaming: Session length data, deposit amounts, and betting behaviour are monitored by BB88's responsible gaming systems to identify patterns consistent with problem gambling and to prompt or apply appropriate interventions.
• Legal and regulatory compliance: Transaction records and account data are retained for the periods required under applicable regulations governing financial services, anti-money laundering, and data protection.

BB88 processes your personal data on one or more of the following legal grounds, depending on the specific purpose:

• Contractual necessity: Processing your registration data, payment information, and account activity records is necessary to fulfil the contract between you and BB88 — specifically, to operate your account, process bets, and pay out winnings.
• Legal obligation: Processing your CNIC details for identity verification and retaining transaction records are required under anti-money laundering regulations and financial compliance obligations that BB88 must meet as a gaming operator.
• Legitimate interests: Fraud detection, security monitoring, and responsible gaming surveillance are conducted on the basis of BB88's legitimate interest in operating a secure, fair platform and protecting both the business and its players from harm.
• Consent: Where BB88 sends you marketing communications about promotions, new games, or special offers (beyond transactional notifications), this is done on the basis of your consent. You can withdraw consent for marketing communications at any time by contacting BB88 support.

BB88 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Data is shared with third parties only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

Payment Processors

When you make a deposit or withdrawal, BB88 shares your transaction details and registered payment account number with the relevant payment processor — Easypaisa, JazzCash, NayaPay, SadaPay, your bank, or Visa/Mastercard network as applicable. This is the minimum data required to execute the transaction. Payment processors are not given access to your betting history, game activity, or other account data.

Identity Verification Services

When KYC verification is required, BB88 may share your CNIC details with an identity verification partner to confirm your document's authenticity. These partners operate under strict data processing agreements and do not use your data for any purpose beyond verification.

Fraud and Security Services

BB88 uses third-party fraud detection tools that may analyse device fingerprints, IP addresses, and behavioural patterns. These tools receive anonymised or pseudonymised data rather than directly identifying personal information wherever technically feasible.

Legal Authorities

BB88 will disclose personal data to law enforcement or regulatory authorities when legally required to do so — for example, in response to a lawful court order or an official regulatory investigation. BB88 will not cooperate with requests for data that are not supported by appropriate legal authority.

BB88 uses cookies and similar technologies (local storage, session tokens) to operate the platform, maintain your login session, and understand how the platform is being used. Here is a clear breakdown of the types of cookies and their purposes.

Essential Cookies

These cookies are required for BB88 to function. They manage your login session, maintain your betslip during a visit, and preserve security tokens. Without these cookies, you cannot log into your account or use the platform. They cannot be disabled.

Analytics Cookies

BB88 uses analytics tools to understand how players navigate the platform — which pages are visited most, where players spend the most time, and where technical issues occur. Analytics data is aggregated and does not identify individual players. You can opt out of analytics cookies by contacting BB88 support.

Security and Fraud Detection Cookies

These cookies support BB88's fraud detection systems by building a device fingerprint that can identify suspicious behaviour patterns, such as multiple account attempts from a single device. This data is not used for advertising.

BB88 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, and no longer. Specific retention periods for different data categories are set out below.

When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be associated with an individual player. For financial records, the 5-year retention period reflects anti-money laundering regulatory requirements and cannot be shortened by player request.

BB88 respects your right to understand and control how your personal data is used. The following rights are available to all registered BB88 players. To exercise any of them, contact BB88 support at support@bb88-khelo.com with the subject line "Data Rights Request".

All data rights requests are handled by BB88's support team. We aim to respond within 14 days. In complex cases, a 30-day extension may apply, in which case we will notify you of the delay and the reason.

BB88 implements a layered security architecture to protect your personal and financial data. These measures are reviewed and updated continuously as technology and threat landscapes evolve.

• Transport encryption: All data transmitted between your device and bb88-khelo.com is encrypted using TLS 1.3 with 256-bit AES encryption. The padlock symbol in your browser confirms this is active during your session.
• Database encryption: Personal data is encrypted at rest within BB88's database infrastructure. Sensitive fields (CNIC numbers, bank account identifiers) use additional field-level encryption on top of the full database encryption layer.
• Access controls: BB88 staff access to personal data is governed by role-based access controls. Only staff whose job function requires access to specific data categories can view that data. All staff access is logged and audited.
• Two-factor authentication: All BB88 player accounts support two-factor authentication (2FA) using SMS verification codes. Players are encouraged to enable 2FA in their account settings.
• Intrusion detection: BB88's infrastructure is monitored by automated intrusion detection systems that flag unusual access patterns, login anomalies, and potential data breach indicators in real time.
• Penetration testing: BB88's systems undergo regular third-party penetration testing to identify and resolve vulnerabilities before they can be exploited.

Data Breach Response: In the unlikely event of a data breach affecting player personal data, BB88 will notify affected players within 72 hours of becoming aware of the breach, explaining what data was affected, what we are doing to contain it, and what you should do to protect yourself.

BB88 is strictly an 18+ platform. BB88's services are not directed at, intended for, or available to persons under the age of 18. BB88 does not knowingly collect personal data from anyone under 18 years of age.

During registration, BB88 collects date of birth and will not allow an account to be created if the entered date of birth indicates the applicant is under 18. Where BB88 has reasonable grounds to believe an existing account holder is under 18, the account will be immediately suspended pending verification. If verification confirms the account holder is under 18, the account will be permanently closed and any deposits returned to the payment method used.

BB88 may update this Privacy Policy from time to time to reflect changes in how we operate, changes to applicable law, or improvements in our data practices. The "Last Updated" date at the top of this page shows when the most recent revision was made.

When we make material changes — meaning changes that significantly affect your rights or how we use your data — BB88 will:

• Display a prominent notice on bb88-khelo.com for at least 7 days before the changes take effect.
• Send an SMS notification to your registered mobile number summarising the nature of the change.

For minor changes — such as updating contact information or clarifying existing practices without changing their substance — BB88 will update the policy and change the "Last Updated" date without a separate notification.

Your continued use of BB88 following the effective date of any updated policy constitutes your acceptance of the revised terms. If you do not accept a material change, you may close your account and withdraw your balance before the change takes effect.

If you have any questions, concerns, or requests relating to this Privacy Policy or how BB88 handles your personal data, please get in touch with our support team. We aim to respond to all privacy-related queries within 14 days.

Please include "Privacy Policy Query" or "Data Rights Request" in your message subject so our team can route your query to the right person quickly. For data access or erasure requests, please also confirm your registered mobile number so we can verify your identity before processing the request.