bs338 Privacy Policy

bs338 is an online casino and sports betting platform operating at bs338.io and targeting adult players in Bangladesh. In the context of this Privacy Policy, references to "bs338", "we", "us" and "our" refer to the operator of the bs338 platform responsible for determining the purposes and means of processing your personal data ("the Data Controller").

Our platform offers a wide range of online casino games, live dealer tables, and sports betting markets — including Bangladesh Premier League (BPL) cricket, IPL, T20 World Cup fixtures, and international football. The Services are made available exclusively to individuals aged 21 and above who have registered a verified account.

We take our responsibilities as a Data Controller seriously. This Privacy Policy describes our data practices in plain language so that every bs338 player — regardless of their background or technical knowledge — can understand how their information is handled. If any section of this policy is unclear, our support team is available 24/7 to answer questions.

bs338 collects personal data through several channels: directly from you when you register, deposit, play or contact support; automatically when you browse or use the platform; and from third-party verification services during the KYC process. The categories of data we collect include:

Identity Data

• Full legal name as it appears on your government-issued identification
• Date of birth (used to verify the 21+ age requirement)
• National ID Card number, Passport number or other government-issued identifier submitted during KYC
• Scanned or photographed copies of identity documents where required for verification

Contact Data

• Mobile phone number (used for OTP authentication and account alerts)
• Email address (used for account communications, transaction receipts and support correspondence)
• Residential address in Bangladesh (used for KYC and regulatory compliance purposes)

Financial Data

• Mobile wallet numbers associated with bKash, Nagad, Rocket or Upay accounts used for deposits and withdrawals
• Card type (Visa or Mastercard) and masked card number (last four digits only; full card numbers are tokenised by our payment processor and are never stored on bs338 servers)
• Deposit history, withdrawal history and account balance records

Technical & Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system and browser version
• Session start and end times, pages visited, features used
• Betting and gaming activity logs including wager amounts, game titles, session outcomes and bonus usage
• Cookie identifiers and similar tracking technologies (see Section 5)

Communications Data

• Live chat transcripts and email exchanges with our support team
• Responses to surveys or feedback forms (where you choose to participate)
• Records of any formal complaints submitted to bs338

bs338 uses the personal data we collect for the following purposes:

• Account creation and management — verifying your identity, creating your account, maintaining your account profile and enabling secure login.
• Service delivery — processing deposits and withdrawals, settling bets, crediting winnings and bonuses, and delivering the gaming and betting experience you have registered for.
• KYC and age verification — confirming that you meet the 21+ age requirement and verifying that the identity information you have provided is accurate and consistent with supporting documents.
• Fraud prevention and security — detecting and preventing fraudulent transactions, bonus abuse, multiple-account operations, money laundering, and other prohibited activities outlined in our Terms and Conditions.
• Responsible gaming — monitoring play patterns to identify potential signs of problem gambling; applying player-requested limits, time-outs and self-exclusions; and fulfilling our duty of care obligations.
• Customer support — responding to your enquiries, resolving disputes, and maintaining a record of support interactions for quality assurance purposes.
• Legal and regulatory compliance — meeting record-keeping requirements, responding to lawful requests from regulatory authorities, and maintaining audit trails required by applicable law.
• Platform improvement — analysing aggregated, anonymised usage data to improve the performance, design and content of the bs338 platform. Individual player data used for this purpose is always anonymised before analysis.
• Marketing communications — where you have opted in, sending you information about promotions, bonuses and new features via email or SMS. You may opt out of marketing communications at any time by contacting support or using the unsubscribe mechanism included in each communication.

bs338 does not use automated decision-making processes (including profiling) that produce legal or similarly significant effects on players without human review. Where automated systems flag an account for investigation — for example, a fraud detection algorithm — a member of our compliance team reviews the case before any consequential action (such as account suspension) is taken.

For each category of data processing activity, bs338 relies on one or more of the following lawful bases:

• Contractual necessity — processing required to fulfil our contract with you, including account management, game delivery, and payment processing. Without this processing, we cannot provide the Services.
• Legal obligation — processing required to comply with applicable law, including KYC/AML obligations, record-retention requirements, and responses to lawful authority requests.
• Legitimate interests — processing carried out in pursuit of bs338's legitimate business interests where those interests are not overridden by your rights and freedoms. This covers fraud detection, platform security, responsible gaming monitoring, and anonymised analytics.
• Consent — processing based on your freely given, specific and informed consent. This applies primarily to optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal or the availability of the core Services.

bs338 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit bs338.io. We use the following categories of cookies:

• Strictly necessary cookies — essential for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing identifiers. These cookies cannot be disabled without breaking the Services.
• Functional cookies — remember your preferences such as language settings, game lobby display options and responsible gaming limit configurations across sessions.
• Analytics cookies — collect anonymised data about how players navigate the platform, which features are most used, and where technical errors occur. This data is used to improve the platform experience. No individual player is identifiable from analytics data.
• Security cookies — support our fraud-detection systems by tracking session behaviour patterns and device fingerprints that may indicate automated or unauthorised access.

bs338 does not use third-party advertising or retargeting cookies. We do not participate in cross-site tracking networks or allow advertising technology companies to place cookies via our platform.

You may manage cookie preferences through your browser settings. Disabling cookies beyond strictly necessary ones may affect the functionality of certain platform features. Deleting all cookies will require you to log in again on your next visit.

bs338 shares personal data with third parties only where necessary and only under appropriate contractual safeguards. The categories of third parties we work with include:

• Payment processors — bKash, Nagad, Rocket, Upay, and card processing partners receive the minimum data necessary to authorise and settle financial transactions. These partners operate under their own privacy policies and applicable financial regulation.
• KYC and identity verification providers — specialist third-party services that cross-reference submitted identity documents against government databases to confirm player identity and age. Data shared is limited to the documents and personal details required for the specific verification check.
• Game content providers — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi and other licensed studios receive a session token and anonymised player identifier to enable game delivery. These providers do not receive your name, contact details or payment information.
• Fraud detection and security services — specialist platforms that analyse transaction patterns and device fingerprints to detect suspicious activity. Data shared is processed solely for the purpose of protecting the security of the bs338 platform and its players.
• Regulatory and law enforcement authorities — bs338 will disclose personal data to competent authorities where required to do so by law, court order, or where we reasonably believe disclosure is necessary to prevent or report criminal activity including money laundering or fraud.
• Professional advisors — lawyers, auditors and compliance consultants who are subject to professional confidentiality obligations and who access data only to the extent required for their specific engagement.

bs338 operates as an international platform. Some of our third-party service providers — including game content providers and technical infrastructure partners — are located outside Bangladesh. As a result, your personal data may be transferred to and processed in countries other than Bangladesh.

Where data is transferred internationally, bs338 ensures that appropriate safeguards are in place to protect your information to a standard equivalent to that applied within Bangladesh. Safeguards include:

• Contractual clauses in data processing agreements that impose equivalent data protection obligations on the recipient.
• Restriction of international transfers to service providers whose countries or operational standards are assessed to provide an adequate level of data protection.
• Technical controls including encryption in transit and at rest regardless of the jurisdiction in which data is processed.

If you wish to obtain further information about international transfer safeguards applicable to your data, please contact our support team at [email protected].

bs338 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by law or regulation. Our standard retention periods are as follows:

• Account and identity data — retained for the lifetime of the account plus a minimum of five years following account closure, in accordance with anti-money-laundering record-keeping requirements.
• Transaction and financial records — retained for a minimum of five years from the date of each transaction.
• Gaming and betting activity logs — retained for a minimum of five years; used for dispute resolution, responsible gaming monitoring and regulatory reporting.
• KYC documents — retained for a minimum of five years following account closure or the date of the relevant verification check, whichever is later.
• Support communications — retained for three years from the date of the last interaction in a support thread, unless the communication relates to a formal complaint or legal matter, in which case it is retained for the duration of any proceedings plus two years.
• Marketing preference records — consent and opt-out records are retained for three years from the date of the last change, to demonstrate compliance with consent obligations.
• Analytics data — anonymised analytics data (from which no individual can be identified) may be retained indefinitely for platform improvement purposes.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player.

As a bs338 player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days and will not charge a fee for reasonable requests.

bs338 is strictly an adult platform. The Services are not directed at, and must not be used by, anyone under the age of 21. We do not knowingly collect personal data from individuals under 21 years of age.

Where we discover or have reasonable grounds to suspect that an account is being operated by a minor, we will immediately suspend the account, conduct an age-verification review, and permanently close the account if the suspicion is confirmed. Any funds held in a confirmed minor's account will be returned to the source payment method (net of any bonus funds, which will be forfeited).

Parents and guardians who believe a minor may have created an account on bs338 are encouraged to contact our support team immediately at [email protected]. We take child protection obligations seriously and will treat all such reports with urgency and confidentiality.

bs338 also recommends that parents and guardians in Bangladesh make use of parental control software to restrict minor access to online gambling platforms at the device and network level.

bs338 implements a layered security architecture designed to protect your personal data against unauthorised access, disclosure, alteration and destruction. Key security measures include:

• TLS encryption in transit — all data exchanged between your browser or device and bs338.io is protected by TLS 1.2 or higher. Unencrypted HTTP connections are automatically redirected to HTTPS.
• AES-256 encryption at rest — sensitive data including identity documents, KYC records and financial data is stored in encrypted form. Encryption keys are managed in a dedicated key management system separate from data storage.
• OTP two-factor authentication — login and high-value transactions may require one-time passcode verification via SMS to your registered mobile number, adding a second layer of security beyond your password.
• Access controls — bs338 staff access to player data is governed by role-based access controls. Only staff with a specific operational need for a category of data can access it. Access logs are maintained and reviewed regularly.
• Penetration testing and vulnerability management — the bs338 platform undergoes periodic security assessments by independent security professionals. Identified vulnerabilities are remediated according to a risk-based priority schedule.
• Incident response procedures — bs338 maintains a documented data breach response plan. In the event of a breach that poses a risk to player rights, affected players will be notified promptly with details of what data was involved and what steps are being taken.

While bs338 takes all reasonable precautions to protect your data, no internet-based platform can guarantee absolute security. You play an important role in your own account security by choosing a strong unique password, keeping your login credentials confidential, and notifying us immediately if you suspect unauthorised access.

bs338 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or improvements to our platform. When material changes are made — those that meaningfully affect how your data is collected, used or shared — we will provide advance notice via email to your registered address and/or via a prominent on-site notification at least seven days before the change takes effect.

Minor updates that do not alter the substance of our data practices (such as typographical corrections, structural reformatting, or clarifications that do not change meaning) may be made without advance notice. The effective date shown at the top of this document will be updated whenever a revision is published.

We encourage you to review this Privacy Policy periodically. Your continued use of the bs338 platform following the effective date of any update constitutes your acknowledgement of the revised policy. If you object to a material change and do not wish to continue using the platform under the revised terms, please contact our support team to arrange account closure before the effective date.

Previous versions of this Privacy Policy are available upon request by contacting [email protected].

If you have any questions about this Privacy Policy, wish to exercise a data right, or have a concern about how bs338 has handled your personal data, please contact our support team using the details below. All privacy correspondence is handled by staff trained in data protection obligations.

• Email: [email protected] (subject line: "Privacy Enquiry" or "Data Rights Request")
• Support hours: 24/7, available in English and Bengali
• Response time: We aim to acknowledge all privacy-related enquiries within two business days and to provide a substantive response within 30 days.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter through appropriate legal channels available in your jurisdiction. bs338 is committed to engaging cooperatively with any regulatory enquiry relating to our data practices.