Your Privacy Matters to 88pct

88pct collects personal information in two ways: information you provide to us directly, and information we collect automatically through your use of the platform. We collect only the data that is necessary to operate a safe, legal, and fair gaming environment for players in Bangladesh.

Information you provide directly:

• Registration data: Full legal name (as shown on your National Identity Card or passport), date of birth, email address, mobile phone number, and a password of your choosing.
• Identity verification (KYC) data: A scanned copy or photograph of your National Identity Card (NID), passport, or other government-issued photo ID; a recent utility bill or bank statement confirming your residential address; a selfie photograph for liveness verification where required.
• Payment information: Your bKash, Nagad, Rocket, or Upay mobile wallet number; Visa or Mastercard card details (card number, expiry, CVV) where card payments are used. Full payment credentials are processed by our payment service providers — 88pct does not store raw card numbers on its servers.
• Communication records: The content of any messages you send to our support team via live chat, email, or WhatsApp, including your name, contact details, and the nature of your enquiry.
• Responsible gaming self-declarations: Any deposit limits, session limits, cooling-off requests, or self-exclusion requests you submit through the platform.

Information collected automatically:

• Device and technical data: IP address, browser type and version, operating system, device model, screen resolution, and time zone (Bangladesh Standard Time, UTC+6).
• Usage and behavioural data: Pages visited, games played, bet amounts and outcomes, session duration, click patterns, and navigation paths within the platform.
• Cookie and tracking data: First-party session cookies, persistent preference cookies, and analytics data collected via our platform analytics tools. See Section 4 (Cookies & Tracking) for full details.
• Transaction records: A complete log of all deposits, withdrawals, bonus claims, wagers, game results, and account balance changes associated with your account.
• Geolocation data: Approximate location data derived from your IP address, used to detect access from restricted regions and for fraud prevention purposes.

88pct uses the personal data we collect for clearly defined, legitimate purposes. We do not use your data for any purpose that you would not reasonably expect given the nature of an online gaming platform. The specific purposes for which we process your data are as follows:

Where we rely on your consent to process data — for example, to send you promotional emails or SMS notifications about bonuses and new games — you may withdraw that consent at any time by contacting our support team or updating your communication preferences within your account settings. Withdrawing consent will not affect the lawfulness of processing carried out before the withdrawal.

88pct will never use your personal data to make fully automated decisions that produce significant legal effects concerning you, without providing an opportunity for human review of that decision.

88pct does not sell, rent, or trade your personal data to third parties for their own marketing purposes — ever. We share your data only in the limited circumstances described below, and only with parties who are contractually bound to handle it securely and in accordance with applicable data protection standards.

We may share your data with the following categories of third party:

• Payment service providers: bKash, Nagad, Rocket, Upay, and card-processing partners require your payment details and transaction data to process deposits and withdrawals. These providers operate under their own privacy policies and are responsible for the security of payment data within their systems.
• Identity verification services: Third-party KYC providers who assist us in verifying the identity and age of registered players. These providers are bound by strict data processing agreements and may not use your identity documents for any purpose other than the verification task we have instructed them to perform.
• Game content providers: Studios such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player identifier and basic session data (such as bet amounts and game results) as a technical requirement of delivering their games via the 88pct platform. No directly identifying personal data (such as your name or NID) is passed to game studios.
• Fraud detection and cyber-security partners: Specialist third-party services that help us detect bot activity, multi-accounting, and suspicious payment patterns. These services receive IP addresses, device fingerprints, and behavioural data for the sole purpose of platform security.
• Legal and regulatory authorities: Where required by law, court order, or a formal request from a competent authority, we will disclose relevant account and transaction data. We will always seek to notify you of such a request unless we are legally prohibited from doing so.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of our assets, your data may be transferred to the acquiring entity, subject to the same data protection obligations described in this policy. You will be notified of any such transfer.

The 88pct platform uses cookies and similar tracking technologies (such as local storage and session storage) to deliver a functional, personalised, and secure experience. A cookie is a small text file placed on your device when you visit a website. Cookies cannot carry viruses or install software on your device.

We use the following categories of cookies:

You can control or delete cookies through your browser settings at any time. Please be aware that disabling strictly necessary cookies will impair your ability to log in and use the platform. Instructions for managing cookies are available in the help documentation of your browser (Chrome, Firefox, Safari, Edge, etc.).

88pct does not use third-party advertising cookies or cross-site tracking pixels. We do not participate in retargeting networks or behavioural advertising exchanges.

88pct retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account data and KYC documents: Retained for a minimum of 5 years from the date of account closure, in compliance with anti-money-laundering (AML) record-keeping requirements.
• Transaction records (deposits, withdrawals, bets): Retained for a minimum of 5 years from the date of each transaction.
• Customer support communications: Retained for 2 years from the date of the last interaction, unless a longer period is required in connection with an open dispute or investigation.
• Marketing consent records: Retained for as long as your marketing preferences remain active, plus 2 years after you withdraw consent, as evidence that consent was validly obtained and withdrawn.
• Analytics and usage data: Aggregated and anonymised after 13 months. Anonymised data is no longer personal data and may be retained indefinitely for platform improvement purposes.
• Self-exclusion records: Retained indefinitely to prevent re-registration by players who have requested permanent self-exclusion.

When your data is no longer required, we delete it securely or anonymise it so that it can no longer be linked to you as an individual. Secure deletion methods include cryptographic erasure for digitally stored data and secure physical destruction for any paper records.

Protecting your personal data from unauthorised access, loss, or misuse is a responsibility that 88pct takes extremely seriously. We implement a layered security architecture combining technical, administrative, and physical safeguards to ensure that your data remains confidential and intact at all times.

Our security measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the 88pct servers is encrypted using industry-standard TLS 1.3 protocols, the same level of encryption used by international financial institutions.
• Encrypted data storage: Sensitive data — including KYC documents and payment details — is stored using AES-256 encryption at rest. Encryption keys are managed using a dedicated key management system and are rotated on a regular schedule.
• Access controls: Access to systems containing personal data is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and audited. Multi-factor authentication (MFA) is mandatory for all staff who can access player data.
• Penetration testing and vulnerability scanning: The platform is subject to regular independent security assessments and penetration tests. Critical vulnerabilities are remediated within defined SLA windows.
• Intrusion detection and monitoring: Real-time monitoring systems alert our security team to anomalous activity, attempted brute-force attacks, and suspicious login patterns around the clock (24/7, Bangladesh Standard Time and beyond).
• Data breach response: In the event of a confirmed data breach that poses a risk to affected players, 88pct will notify impacted users without undue delay and will take immediate steps to contain and remediate the breach.

While we implement robust security measures, no internet-based platform can guarantee absolute security. You also have a role to play: use a strong, unique password for your 88pct account, enable any available two-factor authentication, and never share your login credentials with anyone — including people claiming to represent 88pct staff.

As a player on the 88pct platform, you hold meaningful rights over your personal data. We are committed to honouring these rights promptly and without unnecessary obstacles. The following rights are available to all registered players:

To exercise any of these rights, contact our Data Protection team at [email protected] with the subject line "Privacy Rights Request". We will verify your identity before processing any request and will respond within 30 calendar days. In complex cases, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it.

88pct reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the features and services we offer. We are committed to transparent communication when meaningful changes are made.

When we make material changes to this policy — for example, changes to the categories of data we collect, the third parties we share data with, or your rights as a data subject — we will notify you by:

• Posting a prominent notice on the 88pct platform homepage for a minimum of 14 days following the change;
• Sending an email notification to your registered email address where the change materially affects your rights or our obligations;
• Updating the "Last Updated" date shown at the top of this page and in the hero section above.

The current version of this Privacy Policy is always accessible at https://88pct.net/privacy-policy. We encourage you to review this page each time you visit to ensure you remain aware of our current practices. Your continued use of the platform following the posting of an updated Privacy Policy constitutes your acceptance of the changes.

If you have questions, concerns, or complaints about this Privacy Policy or our data handling practices, our support team is available 24 hours a day, 7 days a week at [email protected]. We are committed to resolving all privacy-related enquiries promptly and fairly.