aa88 Privacy Policy — Your Data, Protected
At aa88, we take the privacy of every player in Bangladesh seriously. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights you hold over your information. Please read this document carefully before using the aa88 Platform.
Section 1
Information We Collect
aa88 collects personal data from you in three principal ways: information you provide directly when registering and using the Platform, information we collect automatically as you interact with our services, and information we receive from trusted third-party partners where permitted by this Policy and applicable law.
Information You Provide Directly
When you register an aa88 account, you are required to provide certain personal information so that we can create and maintain your account, verify your identity, and process your financial transactions. The categories of information you provide include:
- Identity data: Full legal name, date of birth, and gender.
- Contact data: Email address, mobile phone number, and residential address within Bangladesh.
- Financial data: Mobile financial service (MFS) account details for bKash, Nagad, Rocket, or Upay; card details for Visa or Mastercard transactions (card numbers are never stored in full on aa88 systems).
- Identity verification documents: Copies of your Bangladesh National Identity Card (NID), passport, driving licence, utility bills, or bank statements submitted as part of the Know Your Customer (KYC) process.
- Account credentials: Your chosen username and a hashed version of your password. Plain-text passwords are never stored.
- Communications: Records of correspondence with our support team, including live chat transcripts and emails sent to [email protected].
- Responsible gaming preferences: Deposit limits, session time limits, cool-off periods, and self-exclusion requests you submit through your account settings.
Information Collected Automatically
When you access and use the aa88 Platform, our systems automatically collect certain technical and behavioural data. This collection happens through server logs, cookies, pixel tags, and similar technologies. This data includes:
- Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
- Usage data: Pages visited, games played, bets placed, bet amounts, session duration, click-path data, and search queries made within the Platform.
- Location data: General geographic location derived from your IP address, used to confirm that you are accessing the Platform from Bangladesh.
- Transaction data: A full record of all deposits, withdrawals, bonus credits, wager amounts, and game outcomes associated with your account.
Minimal Collection Principle: aa88 collects only the personal data that is strictly necessary for the purposes described in this Policy. We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data, unless specifically required for responsible gaming compliance purposes.
Identity & KYC Data
Name, date of birth, NID or passport copies, and address details collected during registration and the KYC verification process required before your first withdrawal.
Financial & Payment Data
bKash, Nagad, Rocket, Upay, and card transaction details used to process deposits and withdrawals. Full card numbers are never stored on aa88 servers.
Device & Usage Data
IP address, browser type, device identifiers, session duration, and in-platform behaviour data collected automatically to maintain security and improve your experience.
Section 2
How We Use Your Data
aa88 uses the personal data we collect for specific, clearly defined purposes. We do not use your data in ways that are incompatible with the purposes described below, and we do not sell your personal data to third parties for their own marketing purposes under any circumstances.
Account Management and Service Delivery
The primary use of your personal data is to create and maintain your aa88 account, provide you with access to the Platform's products and services, process your deposits and withdrawals, communicate important account notifications, and respond to your support requests. Without this processing, we would be unable to provide the aa88 service to you.
Identity Verification and Fraud Prevention
aa88 uses your identity data and KYC documents to verify that you are who you claim to be, that you are at least 18 years of age, and that you are located in Bangladesh. We also use your device data, IP address, and transaction history to detect and prevent fraud, money laundering, account takeover attempts, and other forms of financial crime. This processing is necessary for compliance with our legal and regulatory obligations and for the protection of both aa88 and its players.
Financial Transaction Processing
Your financial data is used exclusively to process the deposits and withdrawals you initiate via bKash, Nagad, Rocket, Upay, Visa, or Mastercard. We pass the minimum necessary data to our payment processing partners to complete each transaction. We do not retain full payment card numbers. Transaction records are retained for the period required by applicable financial record-keeping standards.
Responsible Gaming and Player Protection
aa88 uses your usage data, session data, and betting history to monitor for indicators of problem gambling behaviour. Where such indicators are identified, we may proactively contact you to offer responsible gaming support tools or, in serious cases, apply protective account restrictions in line with our Responsible Gaming policy. This processing is carried out in the interest of player welfare and is a core component of our commitment to safe gambling.
Marketing and Promotional Communications
With your consent, aa88 may use your contact data (email address and mobile number) to send you information about promotions, bonuses, and new features on the Platform that we believe may be of interest to you. You may withdraw your consent to marketing communications at any time by contacting [email protected] or updating your notification preferences in your account settings. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal.
Platform Improvement and Analytics
Aggregated and anonymised usage data is used to analyse how players interact with the Platform, identify performance issues, improve the game library, and develop new features. This analytics processing does not identify individual players and cannot be used to make decisions about your account.
| Purpose | Legal Basis |
|---|---|
| Account creation and service delivery | Contractual necessity |
| KYC identity verification | Legal obligation |
| Fraud and AML monitoring | Legal obligation / Legitimate interest |
| Payment processing | Contractual necessity |
| Responsible gaming monitoring | Legitimate interest / Player welfare |
| Marketing communications | Consent (opt-in) |
| Platform analytics | Legitimate interest (anonymised) |
Service Operation
Your data powers every aspect of your aa88 experience — from account login and game access to deposit processing and support responses. Data use is proportionate to the service delivered.
No Data Sales
aa88 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Your information is used solely for the purposes described in this Policy.
Marketing Opt-Out
Promotional emails and SMS messages are sent only with your consent. You can opt out at any time by emailing [email protected] or adjusting your notification settings in your account panel.
Section 3
Data Sharing & Third Parties
aa88 does not share your personal data with third parties except in the limited circumstances described in this section. In every case where data is shared, we apply appropriate contractual safeguards to ensure your data is handled with the same standard of care that aa88 applies internally.
Payment Service Providers
To process your deposits and withdrawals, aa88 shares the minimum necessary financial data with our payment partners, including bKash, Nagad, Rocket, Upay, and card processing networks (Visa and Mastercard). These providers act as independent data controllers for transactions conducted through their own platforms, and their own privacy policies govern how they handle your data on their end. aa88 shares only the data required to initiate and confirm each transaction.
Identity Verification Partners
aa88 may use trusted third-party identity verification services to assist with the KYC process. These partners receive only the specific identity documents and data points required to perform verification. They are contractually prohibited from using your data for any purpose other than the verification task aa88 has engaged them to perform.
Technology and Infrastructure Providers
aa88 uses cloud infrastructure, content delivery, and analytics technology providers to host and operate the Platform. These providers may process personal data on aa88's behalf as data processors, strictly under our instructions and subject to data processing agreements that require them to maintain appropriate security standards and confidentiality obligations.
Game Software Providers
Certain game providers whose titles are available on the aa88 Platform may receive limited session and transaction data to facilitate game delivery, fair-play certification, and jackpot calculations. Game providers include studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers are not granted access to your full profile or KYC documents.
Legal and Regulatory Disclosure
aa88 may disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities where we are legally required to do so, or where disclosure is necessary to prevent, detect, or prosecute fraud, money laundering, or other criminal activity. Any such disclosure will be limited to the data specifically requested and legally required.
Business Transfers
In the event that aa88 undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to the way your data is processed as a result.
No Third-Party Marketing: aa88 does not share your contact details with third-party advertisers or marketing networks. You will never receive unsolicited marketing communications from third parties as a result of your aa88 account registration.
Payment Partners
Transaction data is shared with bKash, Nagad, Rocket, Upay, Visa, and Mastercard solely to process your deposits and withdrawals. No additional profile data is passed to payment providers.
KYC Verification Services
Identity documents may be processed by accredited third-party KYC partners under strict data processing agreements. Verification partners cannot use your data for their own purposes.
Legal Authorities
aa88 cooperates fully with law enforcement and regulatory authorities when legally required to do so. Any data disclosed in this context is strictly limited to what is legally requested.
Section 5
Data Security & Retention
aa88 implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, alteration, disclosure, or destruction. Security is not an afterthought at aa88 — it is a foundational element of how the Platform is designed and operated.
Technical Security Measures
- 256-Bit SSL/TLS Encryption: All data transmitted between your device and aa88 servers is encrypted in transit using industry-standard 256-bit SSL/TLS encryption. This means your personal and financial data cannot be intercepted by third parties while in transit.
- Password Hashing: Your account password is never stored in plain text. It is processed through a one-way cryptographic hashing function before storage, meaning that even aa88 staff cannot read your password.
- Two-Factor Authentication (2FA): aa88 strongly recommends enabling 2FA on your account. When enabled, a one-time verification code is sent to your registered mobile number each time you log in from an unrecognised device, providing a second layer of protection against unauthorised access.
- Access Controls: Access to personal data within aa88's internal systems is restricted on a strict need-to-know basis. Staff members can only access the data necessary for their specific role. All internal data access is logged and audited.
- Secure Document Storage: KYC documents uploaded to aa88 are stored in encrypted, access-controlled storage environments. Documents are not accessible to general support staff and are only retrievable by the compliance team for verification purposes.
Data Retention Periods
aa88 retains your personal data only for as long as is necessary for the purposes described in this Policy, or as required by applicable law. The following retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account + 5 years post-closure |
| KYC identity documents | Duration of account + 5 years post-closure |
| Financial transaction records | 7 years from transaction date |
| Support correspondence | 3 years from last interaction |
| Session and usage logs | 13 months on a rolling basis |
| Marketing consent records | Until consent is withdrawn + 1 year |
Upon the expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be associated with you as an individual. Extended retention periods may apply where data is subject to an ongoing legal dispute, regulatory investigation, or law enforcement request.
Data Breach Response: In the unlikely event of a data breach that poses a risk to your personal data, aa88 will notify affected players without undue delay, including a description of the nature of the breach, the data categories affected, and the steps we have taken to address it.
256-Bit SSL Encryption
All data in transit between your browser and aa88 servers is protected by 256-bit SSL/TLS encryption. The padlock icon in your browser confirms this protection is active.
Password Hashing
Your password is stored as a one-way cryptographic hash. It cannot be read or recovered by aa88 staff. If you forget your password, it must be reset — it cannot be retrieved.
Two-Factor Authentication
Enable 2FA in your account settings to require a one-time code sent to your mobile number on every new device login — a powerful defence against account takeover.
Section 6
Your Privacy Rights
As an aa88 account holder, you hold the following rights in relation to your personal data. These rights may be exercised at any time by contacting our support team at [email protected]. aa88 will respond to all valid privacy rights requests within a reasonable timeframe and without charge in most circumstances.
Right of Access
You have the right to request a copy of all personal data that aa88 holds about you. Upon receipt of a valid access request, we will provide you with a summary of the data categories held, the purposes for which your data is being processed, and, where applicable, the third parties with whom your data has been shared.
Right to Rectification
If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For data that you can update directly — such as your email address or mobile number — you may do so from within your account settings. For data that requires formal correction — such as your registered name or date of birth following a change in identity documents — please contact [email protected] with supporting documentation.
Right to Erasure
In certain circumstances, you have the right to request that aa88 delete the personal data we hold about you. This right is not absolute: we may be required by law to retain certain categories of data (particularly financial transaction records and KYC documents) for defined retention periods, even after your account has been closed. Where erasure cannot be carried out in full due to legal retention obligations, we will inform you of the specific data categories that must be retained and the reason for retention.
Right to Restrict Processing
You may request that aa88 restricts the processing of your personal data in certain situations — for example, while the accuracy of data you have disputed is being verified, or where you have objected to processing based on legitimate interest and that objection is being considered.
Right to Data Portability
Where your data is processed on the basis of your consent or contractual necessity, and where the processing is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider if you wish.
Right to Withdraw Consent
Where aa88 processes your data on the basis of your consent — most commonly in the context of marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal. To withdraw your marketing consent, email [email protected] or update your notification preferences in your account settings.
Submitting a Privacy Request: To exercise any of the rights described in this section, email [email protected] with the subject line "Privacy Rights Request", include your registered account username and a description of the right you wish to exercise. We will acknowledge your request within 48 hours and complete it within 30 days.
Right of Access
Request a full copy of all personal data aa88 holds on your account. We will respond within 30 days of receiving your verified request.
Right to Rectification
Update inaccurate account data directly in your account settings, or contact support with documentation for formal corrections to identity records.
Right to Erasure
Request deletion of your personal data. Note that financial and KYC records must be retained for legally required periods even after account closure.
Right to Portability
Receive your data in a machine-readable format for transfer to another platform. Available for data processed by automated means on the basis of consent or contract.
Section 7
Children's Privacy
The aa88 Platform is strictly intended for adults aged 18 years and above. We do not knowingly collect, process, or store personal data from individuals under the age of 18. Age verification is a mandatory step in the account registration process and is reinforced through our KYC identity verification procedures.
Age Verification at Registration
All prospective aa88 account holders are required to declare their date of birth during registration and confirm that they are at least 18 years of age. Before processing any withdrawal request, aa88 completes a formal KYC check which includes verification of the account holder's age against a government-issued identity document such as a Bangladesh National Identity Card (NID) or passport. Accounts where the holder is found to be under 18 years of age will be immediately suspended and any funds held in the account will be returned to their source.
Parental and Guardian Guidance
aa88 encourages parents and guardians in Bangladesh to take an active role in monitoring their children's online activity. We recommend the use of parental control software to restrict access to gambling websites on shared or family devices. If you believe that a minor has registered an account on the aa88 Platform using false age information, please contact us immediately at [email protected] with the subject line "Underage Account Report". We will investigate and act on all such reports as a matter of priority.
No Marketing to Minors
aa88 does not direct marketing communications at individuals under the age of 18. Our marketing activities are designed to reach only adults who have actively registered an account and consented to receive promotional material. We do not use social media advertising or other channels that are likely to reach a predominantly underage audience.
18+ Only: If you are under 18 years of age, you are not permitted to register or use the aa88 Platform under any circumstances. If you are a parent or guardian and suspect that a minor in your household has accessed aa88, please contact us at [email protected] immediately so that we can take protective action.
18+ Age Gate
aa88 enforces a strict 18+ age requirement. Date of birth is collected at registration and verified against government-issued ID before any withdrawal is processed. Underage accounts are suspended immediately upon discovery.
Parental Controls
We encourage parents to use parental control software on family devices. If you suspect a minor has accessed the Platform, contact [email protected] immediately with the subject "Underage Account Report".
No Underage Marketing
aa88 marketing communications are directed exclusively at registered adult account holders who have opted in to receive promotional content. We do not target platforms or audiences with significant underage user bases.
Section 8
Policy Updates & Contact
aa88 reserves the right to update this Privacy Policy at any time to reflect changes in the way we operate the Platform, changes in applicable law, or improvements to our data protection practices. When we make material changes to this Policy, we will notify registered account holders by email and display a prominent notice on the Platform for a period of no less than 30 days prior to the changes taking effect.
How Updates Are Communicated
Minor clarifications and non-material updates may be made to this Policy without advance notice, but the effective date displayed at the top of this document will always reflect the date of the most recent revision. We recommend that you review this Privacy Policy periodically to stay informed of how aa88 handles your personal data. Your continued use of the Platform after a material update takes effect constitutes your acknowledgement of the revised Policy.
Version History
| Version | Effective Date | Summary of Changes |
|---|---|---|
| 1.0 | 1 January 2026 | Initial publication of aa88 Privacy Policy |
Contact Our Data Protection Team
If you have any questions, concerns, or complaints about the way aa88 collects, uses, or protects your personal data, or if you wish to exercise any of the privacy rights described in Section 6, please contact our support team using the details below. We are committed to resolving all privacy-related concerns promptly and transparently.
- Email: [email protected] (subject line: "Privacy Enquiry")
- Response Time: We will acknowledge your message within 48 hours and provide a substantive response within 30 days.
- Support Hours: 24 hours a day, 7 days a week, 365 days a year.
- Language: English-language support for all players across Bangladesh.
Privacy Rights Requests: To submit a data access, rectification, erasure, or portability request, email [email protected] with the subject line "Privacy Rights Request". Include your registered username and a clear description of the right you wish to exercise. We will verify your identity before processing the request to protect the security of your data.
Policy Change Notifications
Material changes to this Privacy Policy are communicated by email to all registered account holders at least 30 days before taking effect. Minor clarifications may be updated without prior notice.
24/7 Privacy Support
Our support team is available around the clock to answer privacy questions, guide you through submitting a rights request, or escalate data protection concerns to our compliance team.
30-Day Response Commitment
aa88 commits to providing a substantive response to all privacy rights requests within 30 days of receipt. Complex or high-volume requests may require an extension, of which you will be notified.
Your Privacy Is Protected — Play with Confidence at aa88
Now that you understand how aa88 protects your personal data, explore everything the Platform has to offer. From live cricket betting to premium slots and live casino games, aa88 is Bangladesh's most trusted online gaming destination. 18+ only. Play responsibly.
18+ only. Please gamble responsibly. SSL encrypted. Fair play certified.