o88 Privacy Policy — How We Handle Your Personal Data

1. Introduction

o88 is committed to protecting the privacy and security of your personal information. We collect only the data that is necessary to operate the platform, comply with applicable legal obligations, prevent fraud, and provide you with a high-quality gaming experience. We do not collect data for its own sake, and we do not sell your personal information to any third party for marketing or advertising purposes.

This policy should be read alongside our Terms & Conditions, which together form the complete agreement governing your use of o88. If you have any questions about how your data is handled, you can contact our support team at the address provided at the end of this document.

2. Information We Collect

The types of personal data that o88 collects depend on how you interact with our platform. The table below summarises the main categories of data we collect and the primary reason for collecting each category:

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or biometric data. We only collect the data listed above and only to the extent necessary for the purposes described in this policy.

3. How We Use Your Information

o88 uses the personal data it collects for the following purposes:

• To create and manage your account, verify your identity, and maintain your account security. This includes processing KYC documentation and responding to account-related enquiries.
• To process your financial transactions, including deposits via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to process withdrawal requests to your registered payment method.
• To detect, investigate, and prevent fraud, money laundering, and any other prohibited activity on the platform. This includes monitoring transaction patterns and account behaviour for unusual activity.
• To provide responsible gaming tools and to monitor your account for signs of problem gambling, including tracking deposit frequency, session length, and self-imposed limits.
• To send you account-related communications, including transaction confirmations, security alerts, and important notices about changes to our terms or this policy. These are service communications and are not optional.
• To improve the performance and reliability of the o88 platform, including analysing usage data to identify technical issues, optimise load times, and prioritise feature development.

We do not use your personal data for automated decision-making that produces significant effects on you without human review. Where automated processes flag your account (for example, for a security review), a member of our team will review the matter before any action is taken.

4. Legal Basis for Processing

o88 processes your personal data on the following legal grounds:

• Contract performance: Processing that is necessary to provide the o88 service to you under the Terms & Conditions you agreed to when creating your account, including account management, transaction processing, and customer support.
• Legal obligation: Processing that is necessary to comply with applicable law, including anti-money laundering obligations, age verification requirements, and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: Processing for the purpose of fraud prevention, platform security, and responsible gaming monitoring, where our legitimate interest in protecting users and the platform does not override your right to privacy.
• Consent: Where we send you optional promotional communications or use non-essential cookies, we do so only with your consent. You may withdraw that consent at any time by contacting support.

5. Sharing Your Information

o88 does not sell, rent, or trade your personal data. We share your information only in the following limited circumstances:

• Payment processors: We share transaction data with certified payment gateways (bKash, Nagad, Rocket, Upay, Visa, Mastercard) to the extent necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and security standards.
• Service providers: We use third-party providers for specific operational functions, including game software providers (such as Pragmatic Play and Evolution Gaming), hosting and infrastructure providers, and identity verification services. These providers process data only as instructed by o88 and are bound by data processing agreements.
• Legal and regulatory authorities: We may disclose your personal data to government bodies, law enforcement agencies, or regulators where we are legally required to do so, or where disclosure is necessary to protect the safety and rights of o88, its users, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of our business, your personal data may be transferred to the acquiring entity as part of that transaction, subject to the same privacy protections described in this policy.

6. Payment Data and Financial Information

When you deposit or withdraw funds through bKash, Nagad, Rocket, Upay, Visa, or Mastercard, your payment credentials are handled directly by those payment providers through their own secure, certified channels. o88 does not store your full bKash PIN, mobile banking password, card number, or CVV on our servers. We receive only a transaction reference, a masked identifier (e.g., the last four digits of a card or the first few digits of a mobile wallet number), and the transaction status.

Your transaction history on o88 — including deposit amounts, withdrawal amounts, dates, and the payment method used — is stored in your account for the purpose of providing you with an accurate financial record, processing future withdrawal requests, and fulfilling our anti-money laundering record-keeping obligations. This history is accessible to you in your account dashboard.

7. Cookies and Tracking Technologies

o88 uses cookies and similar technologies on our platform. Cookies are small text files placed on your device that help us operate the site effectively and improve your experience. We use the following types of cookies:

• Essential cookies: These are required for the platform to function. They maintain your login session, remember your language preference, and ensure that security tokens work correctly. You cannot opt out of essential cookies without losing platform functionality.
• Analytics cookies: These help us understand how users interact with the platform — for example, which pages are visited most, how long sessions last, and where users encounter errors. Data collected by analytics cookies is aggregated and does not identify individual users.
• Preference cookies: These remember your account settings and display preferences, such as your chosen language, so you do not need to re-enter them each time you visit the platform.

You can control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the o88 platform. We do not use third-party advertising cookies or cross-site tracking pixels.

8. Data Retention

o88 retains your personal data for as long as your account is active and for a period afterwards as required by applicable law and our operational needs. Specifically: account and identity data is retained for a minimum of 5 years following account closure to comply with anti-money laundering record-keeping requirements; transaction records are retained for a minimum of 5 years; technical and usage logs are retained for up to 12 months; and marketing consent records are retained for as long as the consent remains valid plus a reasonable period afterwards.

When the applicable retention period expires, we securely delete or anonymise your personal data so that it can no longer be used to identify you. Where complete deletion is not immediately possible due to backup or archiving systems, we isolate the data and prevent any further processing until deletion is feasible.

9. Your Rights Over Your Personal Data

You have the following rights in relation to your personal data held by o88. To exercise any of these rights, contact our support team using the details at the end of this policy. We will respond within a reasonable timeframe and in any event within 30 days of receiving your request.

• Right of access: You may request a copy of the personal data o88 holds about you, together with information about how it is used and with whom it is shared.
• Right of rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it. You can update basic account details directly in your account settings.
• Right of erasure: You may request that we delete your personal data. This right is not absolute — where we are required by law to retain data (for example, for anti-money laundering purposes), we will inform you of the extent to which erasure is possible.
• Right to restriction: You may ask us to restrict the processing of your personal data in certain circumstances — for example, while a dispute about accuracy is being resolved, or where you have objected to processing and we are considering that objection.
• Right to object: You may object to the processing of your personal data where we rely on legitimate interests as the legal basis. You also have an unconditional right to object to processing for direct marketing purposes at any time.

To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request" and a description of your request. We may need to verify your identity before processing your request. We will not charge a fee for exercising your rights unless your request is manifestly unfounded or excessive.

10. Security of Your Data

o88 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data in transit, access controls that limit who within our organisation can view sensitive account data, secure server infrastructure with regular security patching, and monitoring systems that detect and respond to anomalous access patterns.

While we take all reasonable steps to protect your data, no platform can guarantee absolute security. If you suspect that your account has been compromised, you should change your password immediately and contact our support team. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay.

11. Children's Privacy

If we become aware that we have inadvertently collected personal data from a person under 21, we will delete that data promptly and close the associated account. If you are a parent or guardian and believe that your child has created an account on o88, please contact our support team immediately so we can take appropriate action.

12. Third-Party Links and Services

The o88 platform may contain references to game providers such as Pragmatic Play and Evolution Gaming whose software is integrated into our platform. These providers operate their own privacy practices governing the data processed through their game engines. o88 does not control those practices. We encourage you to review the privacy policies of any third-party service providers whose games you play on our platform if you have concerns about their data handling.

13. Changes to This Privacy Policy

o88 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we offer. When we make a material change to this policy, we will update the effective date at the top of this page and, where the change significantly affects your rights or our data handling practices, we will endeavour to notify you directly via your registered email address or through a notice on the platform.

Your continued use of o88 following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how we protect your data.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way o88 handles your personal data, please contact our support team. We are available 24/7 and will do our best to address your query promptly and thoroughly.