Bvb8 Privacy Policy — Your data security is our priority

Introduction and applicability

This Privacy Policy ("Policy") applies to all users of the bvb8.vu website and mobile application ("Platform"). This Policy explains how bvb8 ("we", "our", "Company") collects, uses, processes, stores, and protects your personal information.

By using the bvb8 platform, you agree to the terms of this Privacy Policy. If you do not agree with this policy, please stop using our services.

1.1 Legal framework

This Policy has been prepared in compliance with the following data protection laws and regulations:

• General Data Protection Regulation (GDPR) — European Union
• International gaming commission data protection guidelines
• Bangladesh Digital Security Act, 2018
• Payment Card Industry Data Security Standard (PCI DSS)

1.2 Scope of policy

This Policy covers the following areas:

• What types of personal information we collect
• Why and how we use your information
• Who your information may be shared with
• How we keep your information secure
• What rights you have to control your data

What information we collect

We collect various types of personal information to provide services on the bvb8 platform. We collect only necessary information and follow data minimization principles.

2.1 Registration information

When you create an account, we collect:

• Identity information: Full name, date of birth, nationality
• Contact information: Email address, phone number, postal address
• Account information: Username, password (encrypted), security questions
• Identity verification: National ID card (NID), passport, driving license

2.2 Financial information

To process payments, we collect:

• Bank account number and name
• Mobile banking account number
• Payment card information (stored in PCI DSS compliant encryption)
• Transaction history and payment records

2.3 Usage information

Automatically collected during platform use:

• Login information: IP address, login time, and device
• Device information: Browser type, operating system, device ID
• Betting data: Bet history, game types, time, favorite games
• Navigation data: Page visits, clicks, time spent on site

2.4 Contact information

When you contact us:

• Customer support chat and email content
• Feedback, reviews, and survey responses
• Marketing communication preferences

How we use your information

We use your personal information only for legitimate business purposes and to fulfill legal obligations. Every use has a clear purpose and complies with GDPR Lawful Basis criteria.

3.1 Account Management

• To create and manage your bvb8 account
• Identity verification and fulfilling KYC (Know Your Customer) obligations
• Account security and fraud prevention
• Age verification and prevention of underage gaming

3.2 Service Provision

• Providing betting and gaming services
• Processing deposits and withdrawals
• Providing bonuses, promotions, and rewards
• Bet settlement and payout of winnings

3.3 Customer Support

• To answer your questions and address your issues
• Improving customer service quality
• Dispute resolution and complaint handling

3.4 Legal and Regulatory Obligations

• Anti-Money Laundering (AML) verification
• Implementing responsible gaming policies
• Submitting reports to licensing authorities
• Cooperation with law enforcement (as required by legal order)

3.5 Marketing and Personalization

• Sending promotional offers and updates (with your consent)
• Personalized game recommendations
• Improving user experience
• Platform performance analysis

You can opt out of marketing communications at any time.

Cookies and tracking technology

The bvb8 website uses cookies and similar tracking technologies to enhance your browsing experience and analyze platform performance.

4.1 Types of Cookies

4.2 Third-Party Cookies

We use the following third-party services:

• Google Analytics: Website traffic and user behavior analysis
• Facebook Pixel: Social media marketing optimization
• Hotjar: Heatmaps and user experience improvement

4.3 Cookie Control

You can block or delete cookies from your browser settings. However, blocking certain cookies may prevent some site features from working. You can control specific cookie categories using our Cookie Consent Manager.

Information sharing with third parties

Bvb8 does not sell your personal information. We share information with specific third parties only in the following circumstances:

5.1 Service Providers

• Payment processors: To process deposits and withdrawals
• Game providers: To provide casino games and sportsbook services
• Identity verification services: In conducting KYC and AML checks
• Cloud hosting: Data storage and server infrastructure
• Customer support tools: Live chat and helpdesk software

5.2 Legal Obligations

We may be required to disclose your information if:

• A court order or subpoena is issued
• Law enforcement requests information in a legitimate investigation
• Gaming license authorities require regulatory reports
• Suspected fraud, money laundering, or illegal activity

5.3 Business Transfers

In the event of a change of ownership, merger, or acquisition of bvb8, your data may be transferred to the new owner. We will provide advance notice in such situations.

5.4 Consent-Based Sharing

We do not share your personal information with any other party without your explicit consent. We have strict Data Processing Agreements (DPA) with every third-party partner.

Data security measures

Bvb8 uses industry-standard technology and organizational measures to protect your personal information. We safeguard your data from unauthorized access, disclosure, alteration, or destruction.

6.1 Technical Security

• SSL/TLS encryption: All data transmission protected with 256-bit encryption
• Data encryption: Sensitive information (passwords, card numbers) encrypted at rest
• Firewall: Advanced firewall and IDS/IPS systems
• DDoS protection: Preventing Distributed Denial of Service attacks
• Regular security audits: Penetration testing and vulnerability scans

6.2 Access Control

• Only authorized staff have data access
• Role-Based Access Control (RBAC) implementation
• Two-factor authentication (2FA) for administrative access
• All data access is logged and monitored

6.3 Data Retention

We retain your personal information only as long as necessary:

• Active accounts: While the account remains active
• Inactive accounts: Deleted 3 years after last login
• Financial records: 7 years as per legal obligations
• Marketing data: Deleted within 30 days after opt-out

6.4 Data Breach Response

If a data breach occurs that poses a risk to your rights and freedoms, we will notify you and relevant authorities within 72 hours. The nature of the breach, potential impact, and our response measures will be communicated transparently.

Your data rights

You have various rights over your personal information under GDPR and other data protection laws. bvb8 respects these rights and makes them easy to exercise.

7.1 Right of Access

You have the right to know what information we hold about you. You can request a copy of your personal data. Use the "Download My Data" option in Account Settings or write to [email protected].

7.2 Right to Rectification

If your information is incorrect or incomplete, you have the right to update or correct it. You can edit your profile information from Account Settings at any time.

7.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your data under certain circumstances:

• Information is no longer necessary
• You have withdrawn consent
• Data has been processed unlawfully

Restrictions: We may be required to retain certain data for legal obligations (AML, tax records) or to establish legitimate claims.

7.4 Right to Restrict Processing

You can restrict the processing of your data in certain circumstances, such as when data accuracy is disputed.

7.5 Right to Data Portability

You have the right to receive your data in a common, machine-readable format (such as CSV, JSON) and transfer it to another service provider.

7.6 Right to Object

You can object to direct marketing and profiling at any time. Every marketing email includes an "Unsubscribe" link.

7.7 Rights Regarding Automated Decisions

You have the right to request human review of fully automated decisions (such as AI-based credit scoring).

Child privacy protection

The bvb8 platform is only for individuals aged 18 and above. We do not knowingly collect personal information from anyone under 18.

8.1 Age Verification

• Date of birth verification is mandatory at registration
• Government ID verification at first withdrawal
• Additional age verification on suspicious accounts

8.2 Minor Protection Policy

If we discover that an underage person has created an account, we will immediately:

• I will permanently close my account
• We will delete all personal information
• We will refund any deposited funds (if any)

8.3 For Parents

If you believe your child has provided personal information to us, please contact [email protected] immediately. We will investigate promptly and take appropriate action.

Privacy Policy changes

Bvb8 regularly reviews and updates this Privacy Policy to ensure it remains aligned with our practices and applicable laws.

9.1 Change Notification

• Minor changes: Will be posted on this page and the "Last Updated" date will be changed
• Significant changes: A notification will be sent to the registered email and acknowledgment will be requested at login
• Legal changes: Mandatory updates to comply with new laws or regulations

9.2 Acceptance of Changes

Continuing to use the bvb8 platform after changes means you accept the updated Privacy Policy. If you do not agree with the changes, you may close your account and request data deletion.

9.3 Version History

We archive previous versions of this policy. You can request to view older versions by contacting [email protected].

Contact and complaints

For any questions, concerns, or requests regarding privacy or data protection, please contact our Data Protection Officer (DPO).

10.1 Contact methods

• Email: [email protected] or [email protected]
• Live chat: 24/7 customer support available on the platform
• Account settings: From the Privacy Controls section

10.2 Response time

We are committed to responding to all privacy-related requests:

• Common questions: 24-48 hours
• Data access/deletion requests: 30 days (as per GDPR)
• Critical security issues: Within 24 hours

10.3 Filing complaints

If you believe we have not handled your personal information properly, you can:

• Please try to resolve the issue directly with us first
• You can file a complaint with your country's data protection authority
• May use Alternative Dispute Resolution (ADR) where applicable