tb888 Privacy Policy

This Privacy Policy ("Policy") describes how tb888 ("tb888", "the Platform", "we", "us", "our") collects, uses, stores, and protects the personal data of individuals ("Player", "User", "you") who access or use the tb888 website and associated services at tb888.io.

This Policy applies to all personal data collected through the tb888 platform, including data collected during account registration, identity verification, deposits and withdrawals via bKash, Nagad, Rocket, and Upay, gameplay activity, customer support interactions, and your general use of the tb888 website.

By creating a tb888 account or continuing to use the tb888 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with the terms of this Policy, you must not use the tb888 platform.

This Policy should be read alongside the tb888 Terms & Conditions, which govern your overall use of the platform. In the event of any conflict between this Policy and the Terms & Conditions on matters of data privacy, this Policy shall prevail.

tb888 acts as the data controller for all personal data collected through the tb888 platform. As data controller, tb888 determines the purposes and means by which your personal data is processed and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

If you have any questions regarding the data controller's responsibilities or wish to exercise any of your privacy rights described in this Policy, you may contact the tb888 data protection team at [email protected].

tb888 collects the following categories of personal data from players. We collect only the minimum data necessary to deliver our services and comply with applicable legal obligations.

tb888 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or biometric data beyond the photograph on a government-issued identity document submitted for KYC purposes.

tb888 collects personal data through the following means:

• Direct submission: Data you provide when creating your tb888 account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in promotions.
• Automated collection: Technical and behavioural data collected automatically when you visit or interact with the tb888 platform, including via cookies, server logs, and session tracking technologies.
• Payment providers: Transaction reference data shared by bKash, Nagad, Rocket, or Upay to confirm the status of your deposit or withdrawal. tb888 receives only transaction reference data — not your full mobile wallet credentials or PIN.
• Identity verification services: In some cases, tb888 may use third-party identity verification services to cross-reference the documents you submit during KYC. These services return only a verification result; your original documents are handled by tb888 directly.
• Public sources: Publicly available data (such as records from government databases) may be consulted to validate identity or address information where required by applicable anti-money laundering obligations.

tb888 processes your personal data on one or more of the following legal grounds:

• Contractual necessity: Processing required to create and manage your tb888 account, execute transactions in BDT, and deliver the services you have requested under the tb888 Terms & Conditions.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML) rules, know-your-customer (KYC) obligations, age verification requirements, and any other legal obligations to which tb888 is subject.
• Legitimate interests: Processing carried out in tb888's legitimate interests — including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where such interests are not overridden by your fundamental privacy rights.
• Consent: Where tb888 relies on consent as the legal basis for processing (for example, for optional marketing communications), you may withdraw your consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

tb888 uses the personal data it collects for the following purposes:

• To create, operate, and maintain your tb888 account, including processing deposits and withdrawals in Bangladeshi Taka via bKash, Nagad, Rocket, and Upay.
• To verify your identity and age (21+) as required during the KYC process and at any subsequent point where re-verification is needed.
• To detect, investigate, and prevent fraudulent activity, money laundering, underage gambling, and prohibited conduct as defined in the tb888 Terms & Conditions.
• To monitor gameplay patterns and account activity for responsible gaming purposes, including the detection of problem gambling behaviour and the enforcement of self-imposed limits.
• To communicate with you regarding your account status, transaction confirmations, security alerts, changes to platform policies, and responses to support queries.
• To personalise your tb888 experience, including delivering relevant promotional offers (where you have not opted out) related to cricket betting on BPL and IPL, casino games, and special seasonal events.
• To improve the tb888 platform through aggregated, anonymised analytics on usage patterns, game performance, and platform reliability.
• To comply with applicable legal obligations, respond to lawful requests from authorities, and enforce tb888's legal rights.

tb888 will not use your personal data for purposes that are incompatible with those listed above without first obtaining your explicit consent or establishing a separate lawful basis for doing so.

tb888 does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment processing partners: Your transaction reference data is shared with bKash, Nagad, Rocket, and Upay solely to process your deposit or withdrawal. These partners process your data under their own privacy policies and are independently responsible for the security of data within their systems.
• Game content providers: Where you play games provided by third-party studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), certain gameplay session data may be shared with those providers for the purpose of game operation, dispute resolution, and technical support.
• Identity verification services: Where tb888 uses a third-party KYC service, your submitted documents may be processed by that service under a strict data processing agreement with tb888.
• Legal and regulatory authorities: tb888 may disclose your personal data to law enforcement agencies, regulators, or courts where legally required to do so — for example, in response to a lawful order, court subpoena, or investigation into financial crime.
• Corporate successors: In the event of a merger, acquisition, or sale of assets involving tb888, your personal data may be transferred to the successor entity, subject to equivalent data protection commitments. You will be notified of any such transfer in advance where legally required.

All third-party data processors with whom tb888 shares personal data are required to process that data only on tb888's documented instructions and to implement appropriate technical and organisational security measures.

tb888 uses cookies and similar session-tracking technologies to operate the platform securely and efficiently. The following categories of cookies are used on the tb888 platform:

• Strictly necessary cookies: Required for core platform functionality, including maintaining your logged-in session, security tokens, and load-balancing preferences. These cookies cannot be disabled without affecting your ability to use the platform.
• Performance and analytics cookies: Used to collect anonymised data on how players navigate and interact with the tb888 platform. This data is used to identify technical errors, improve page load performance, and optimise the user experience. No personally identifiable information is collected via these cookies.
• Functional cookies: Used to remember your platform preferences such as language settings and game display options across sessions.

tb888 does not use third-party advertising cookies, behavioural targeting cookies, or cross-site tracking technologies. Your browsing activity on the tb888 platform is not shared with advertising networks.

Most web browsers allow you to control cookie settings through the browser's preference panel. Note that disabling strictly necessary cookies may prevent certain tb888 platform features from functioning correctly.

tb888 retains your personal data for only as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your active account plus a minimum of five years following account closure, in accordance with standard financial record-keeping requirements.
• Transaction records: All deposit and withdrawal records denominated in BDT are retained for a minimum of five years from the date of the transaction to comply with anti-money laundering record-keeping obligations.
• KYC documents: Identity and address verification documents are retained for the duration of your active account plus five years following closure, or longer where required by applicable law.
• Gameplay history: Individual game and bet records are retained for a minimum of three years from the date of the session for dispute resolution and responsible gaming monitoring purposes.
• Support communications: Customer support chat and email records are retained for two years from the date of the last interaction, or longer if related to an unresolved dispute or legal matter.
• Technical and log data: Server logs and IP address records are retained for a maximum of 12 months from collection, unless a security incident requires longer retention for investigation purposes.

Upon expiry of the applicable retention period, tb888 will securely delete or anonymise your personal data so that it can no longer be associated with you.

tb888 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and tb888 servers.
• Encrypted storage of sensitive data fields, including identity document metadata, at rest.
• Role-based access controls limiting internal staff access to personal data to those with a documented operational need.
• Regular security audits and vulnerability assessments of the tb888 platform infrastructure.
• Multi-factor authentication requirements for all tb888 internal systems that process player personal data.
• Secure tokenised payment channels for all bKash, Nagad, Rocket, and Upay transactions, ensuring tb888 servers never receive or store your mobile wallet PINs or full credentials.

While tb888 takes all reasonable steps to safeguard your data, no internet transmission or electronic storage system is entirely immune to security risk. Players are strongly encouraged to use unique, strong passwords for their tb888 account and to never share their login credentials with any third party.

In the event of a data security breach that is likely to result in a risk to your rights and freedoms, tb888 will notify affected players without undue delay and will take all appropriate remedial steps.

As a tb888 player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact tb888 at [email protected] with your registered account username and a description of your request. tb888 will respond within 30 days.

• Right of access: You have the right to request a copy of the personal data tb888 holds about you, along with information on how it is being used.
• Right to rectification: If any personal data tb888 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: You may request that tb888 delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to tb888's legal retention obligations. Note that tb888 is required by law to retain certain financial and identity records even after account closure.
• Right to restrict processing: You may request that tb888 restrict the processing of your personal data in certain circumstances — for example, while an accuracy dispute is being resolved.
• Right to data portability: Where processing is based on your consent or on a contract, you may request that tb888 provide your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where tb888 processes your data on the basis of consent (for example, for optional marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You have the right to object to tb888 processing your personal data on the basis of legitimate interests, including for profiling or direct marketing purposes.

tb888 will not charge a fee for responding to data rights requests submitted in good faith. Where a request is manifestly unfounded or excessive, tb888 reserves the right to charge a reasonable administrative fee or decline to act on the request, with written explanation.

The tb888 platform is strictly intended for adults aged 21 years and over. tb888 does not knowingly collect or process personal data from any individual under the age of 21. Age verification is a mandatory component of the tb888 account registration and KYC process.

If tb888 discovers or is notified that personal data has been collected from an individual who is under 21 years of age, tb888 will immediately suspend the relevant account, delete all associated personal data, and return any deposited funds to the payment method of origin.

If you have reason to believe that a person under the age of 21 has registered on the tb888 platform, please notify tb888 immediately at [email protected]. tb888 takes the protection of minors from online gambling extremely seriously and will act on all credible reports without delay.

tb888 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made, tb888 will notify registered players via their registered email address or via an in-platform notification at least seven days before the revised Policy takes effect.

The most current version of this Privacy Policy will always be available at tb888.io/privacy-policy. The "Last Updated" date at the top of this document reflects the date on which the most recent revision was published. Your continued use of the tb888 platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

If you do not agree with any changes to this Privacy Policy, you should stop using the tb888 platform and may request account closure by contacting [email protected]. Any personal data collected prior to the effective date of the revised Policy will continue to be handled in accordance with the Policy version in force at the time of collection, unless you consent to the revised terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data tb888 holds about you, please contact the tb888 data protection team using the details below. Our support agents are available 24 hours a day, seven days a week and are fluent in English.

Email: [email protected]

When submitting a data rights request, please include your registered tb888 username, the email address associated with your account, a description of your request, and any relevant reference numbers. tb888 will acknowledge your request within 72 hours and provide a full response within 30 days.

For queries specifically related to responsible gaming, self-exclusion, or deposit limits, please visit our Responsible Gaming page, which provides dedicated guidance and self-help tools for players based in Bangladesh.