cash88 Privacy Policy — How We Handle Your Data

This Privacy Policy ("Policy") sets out how cash88 ("cash88", "we", "us", "our") collects, processes, stores, and discloses personal data in connection with the operation of the cash88 online gaming and sports betting platform at cash88.im (the "Platform"). It applies to all registered players, prospective users, and visitors to the Platform, regardless of the device or connection method used to access the site.

By registering a cash88 account, making a deposit, placing a bet, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must cease using the Platform immediately.

cash88 may update this Policy from time to time in response to legal, technical, or business changes. The most current version of this Policy will always be available on this page, clearly marked with the applicable effective date. We encourage you to review this Policy periodically. Your continued use of the Platform following any published amendment constitutes your acceptance of the revised Policy.

1.1 — Information You Provide Directly

When you register a cash88 account or interact with the Platform, we collect information that you voluntarily submit to us. This includes:

• Full legal name and date of birth (required for age verification — all players must be 21 or older).
• Bangladeshi mobile number used as your primary account identifier and for OTP verification.
• Email address, where provided for correspondence and account notifications.
• Account username and password (stored in hashed, non-reversible form — never in plain text).
• Government-issued identity documents submitted for KYC verification (e.g., National ID card, passport).
• Payment method details such as your bKash wallet number, Nagad account number, Rocket number, or bank account reference. Note: full card numbers and CVV codes are never stored by cash88 — card payment tokenization is handled by our PCI-compliant payment partners.
• Correspondence you send to us via [email protected] or through any in-platform messaging feature.

1.2 — Information Collected Automatically

When you access the Platform, certain technical and behavioural data is collected automatically by our systems. This data does not identify you by name but may constitute personal data when combined with other information we hold:

• IP address and approximate geographic location derived from IP data.
• Device type, operating system, browser type, and browser version.
• Mobile network operator and connection type (Wi-Fi, 4G, 5G).
• Pages visited, time spent on each page, navigation path, and click-stream data.
• Betting activity: games played, wager amounts, bet outcomes, and session duration.
• Session timestamps and time-zone data (Bangladesh Standard Time, UTC+6).
• Cookies and similar tracking technologies as described in Section 5 of this Policy.

1.3 — Information from Third Parties

In certain circumstances, cash88 may receive personal data about you from third-party sources. This can include identity verification data returned by our KYC service providers, fraud screening signals from our payment processing partners, and device fingerprint data from our anti-fraud technology providers. We use this information solely for the purposes described in this Policy and do not sell or rent it to unrelated third parties.

2.1 — Platform Operation and Account Management

The primary purpose for which we process your personal data is to operate the cash88 Platform and fulfil our obligations to you as a registered player. This includes creating and maintaining your account, verifying your age and identity, processing deposits and withdrawals via bKash, Nagad, Rocket, and other supported payment methods, and providing access to sports betting markets, casino games, slots, and crash games.

We also use your data to administer bonuses and promotional offers, process any complaints or disputes you raise, communicate account-related notifications to you, and enforce the cash88 Terms and Conditions — including detecting and preventing duplicate accounts, bonus abuse, and prohibited conduct.

2.2 — Legal and Regulatory Compliance

cash88 processes certain categories of personal data because we are legally or operationally required to do so. This includes age verification and KYC checks conducted before the first withdrawal, anti-money laundering (AML) transaction monitoring, responsible gaming monitoring to identify players who may be showing signs of problem gambling, and fraud prevention screening on deposits and withdrawals.

We retain transaction records and identity documents for the minimum period necessary to satisfy our compliance obligations. Where we are required to share data with authorities in connection with a lawful investigation, we will do so in accordance with applicable legal requirements and, where permitted, will notify you of such a disclosure.

2.3 — Service Improvement and Analytics

We use aggregated and, where necessary, individually analysed usage data to understand how players interact with the Platform, identify technical issues, optimise game loading performance, and improve the overall user experience. Analytics data is processed on a pseudonymised basis wherever technically feasible, meaning your name and payment details are not associated with behavioural analytics records unless there is a specific, documented compliance reason to do so.

2.4 — Marketing Communications

With your explicit consent, cash88 may send you promotional messages about new games, deposit bonuses, seasonal offers (for example, promotions tied to the Bangladesh Premier League, T20 World Cup, Eid, or Pohela Boishakh), and platform updates. You may withdraw your consent to marketing communications at any time by contacting us at [email protected]. Withdrawal of marketing consent does not affect the processing of data required for Platform operation or compliance purposes.

3.1 — Categories of Recipients

cash88 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the following limited and controlled circumstances:

• Payment processors: Your transaction data is shared with bKash, Nagad, Rocket, Upay, and our card payment partners solely to process deposits and withdrawals. These parties act as independent data controllers for the data they receive in connection with their own services.
• Identity verification providers: Your identity documents and biometric data (where applicable) are shared with our KYC and AML service providers for the purpose of verifying your identity and age in compliance with our obligations.
• Game and technology providers: Where you play a game supplied by a third-party studio (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), limited technical session data may be shared with that provider to facilitate game delivery and fair-play certification.
• Fraud prevention and security vendors: We share device and behavioural signals with our anti-fraud technology partners to detect account takeovers, collusion, match-fixing involvement, and money laundering activity.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, financial intelligence units, or other government bodies where required or permitted by applicable law.
• Group companies and successors: In the event of a merger, acquisition, or transfer of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

All third-party service providers who process personal data on our behalf are required to implement appropriate technical and organisational security measures and to process data only on documented instructions from cash88.

3.2 — International Data Transfers

The cash88 Platform is operated for the Bangladesh market. Some of our technology and service providers may be located outside Bangladesh, which means your personal data may be transferred to and processed in other jurisdictions. Where such transfers occur, cash88 takes reasonable steps to ensure that the recipient provides an adequate level of data protection consistent with the standards described in this Policy.

cash88 retains your personal data for as long as your account remains active and for a reasonable period thereafter, in order to satisfy legal, regulatory, and audit obligations. The specific retention periods we apply are as follows:

• Account and identity data: Retained for the duration of your account plus a minimum of five (5) years following account closure, to meet AML and KYC record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Betting and gaming logs: Retained for a minimum of three (3) years for dispute resolution and fair-play audit purposes.
• Support and complaint correspondence: Retained for three (3) years from the date the matter was resolved.
• Marketing preferences: Retained until you withdraw consent or close your account, whichever is earlier.
• Technical logs and session data: Retained for up to twelve (12) months for security monitoring and platform performance analysis.

When data is no longer required for any legitimate purpose, cash88 will securely delete or irreversibly anonymise it. Anonymised, aggregated data that cannot be used to identify any individual may be retained indefinitely for statistical and business intelligence purposes.

5.1 — How cash88 Uses Cookies

The cash88 Platform uses cookies and similar technologies (such as local storage and session tokens) to deliver a functional, secure, and personalised experience. Cookies are small text files placed on your device by the Platform. They do not contain executable code and cannot directly access other files stored on your device.

The cookies we use fall into three categories:

• Strictly necessary cookies: These are essential for the Platform to function. They maintain your login session, preserve your language and currency preferences, and facilitate secure transactions. These cookies cannot be disabled without significantly impairing the functionality of the Platform.
• Performance and analytics cookies: These collect anonymised or pseudonymised data about how players use the Platform — for example, which pages are visited most frequently and whether any pages produce technical errors. This information helps us continuously improve Platform performance.
• Functional cookies: These remember choices you make (such as your preferred payment method or last-visited game category) to improve your experience on return visits.

cash88 does not use third-party advertising cookies or behavioural tracking cookies that share your data with advertisers outside of the cash88 Platform ecosystem.

You can configure your browser to refuse cookies or to alert you when cookies are being set. However, disabling strictly necessary cookies will prevent you from logging in and using core Platform features. For guidance on managing cookies, refer to your browser's help documentation.

As a cash88 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with your registered username and a clear description of your request. We will respond within a reasonable timeframe and, where required, may ask you to verify your identity before processing the request.

cash88 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and cash88 servers.
• Encryption of sensitive data at rest, including identity documents and financial records.
• Bcrypt or equivalent one-way hashing for all stored account passwords.
• Role-based access controls limiting access to personal data to only those employees and contractors whose job functions require it.
• Intrusion detection systems and 24/7 security monitoring of Platform infrastructure.
• Regular security assessments and penetration testing of the Platform.
• Two-factor authentication (2FA) available for player accounts to reduce the risk of unauthorised access.

While cash88 takes these measures seriously, no online platform can guarantee absolute security. If you suspect that your account has been compromised, please contact [email protected] immediately so that we can take prompt action to secure your account.

The cash88 Platform is strictly for individuals aged 21 and above. cash88 does not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been collected from an underage individual, we will promptly suspend the associated account, delete the data, and manage any balance held in accordance with applicable policy.

If you are a parent or guardian and believe that a person under your care has registered on cash88 without your knowledge, please contact us immediately at [email protected]. We take underage gambling prevention seriously and will act swiftly on all credible reports.

If you have any questions, concerns, or requests relating to this Privacy Policy or cash88's handling of your personal data, please contact our support team at: [email protected]. Please include your registered username and a clear description of your query or request so that we can respond efficiently.

cash88 takes all privacy complaints seriously and will acknowledge your contact within 48 hours. If you are not satisfied with our response to a privacy complaint, you may wish to seek further guidance from a relevant data protection authority or consumer protection body in your jurisdiction.