588bd Privacy Policy — How We Handle Your Data

This Privacy Policy ("Policy") describes how 588bd ("we", "us", "the Platform") collects, uses, stores, discloses, and otherwise processes the personal data of individuals ("you", "the Player") who register for or use the services available at 588bd.io. It is intended to give you full transparency over our data practices and to set out clearly the rights you hold with respect to your personal information.

588bd is committed to processing personal data lawfully, fairly, and transparently, and to implementing appropriate technical and organisational measures to protect it against unauthorised access, loss, or misuse. Our data practices are consistent with internationally recognised data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

This Policy should be read together with the 588bd Terms & Conditions and the Responsible Gaming Policy, both of which are available on this website. In the event of any conflict between this Policy and those documents with respect to the handling of personal data, this Privacy Policy shall prevail.

If you have any questions about how your data is handled, or if you wish to exercise any of your rights as a data subject, please contact us at [email protected] at any time.

For the purposes of this Privacy Policy, the data controller responsible for the personal data you provide to, or that is collected by, the 588bd platform is the legal entity operating the 588bd brand. The Platform is operated as a safe and reliable online betting and casino service targeting players in Bangladesh.

As data controller, 588bd determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in accordance with this Policy and applicable data protection standards. Where processing is carried out by a third party on our behalf (a "data processor"), we ensure that appropriate data processing agreements are in place to govern that relationship.

All formal requests relating to your personal data — including access requests, correction requests, erasure requests, and objections to processing — should be directed to [email protected]. We aim to respond to all formal data subject requests within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days and will notify you accordingly.

588bd collects personal data in several categories depending on the nature of your interaction with the platform. The following data type cards set out each category and the specific items collected within it:

588bd does not collect or process special categories of sensitive personal data (such as racial or ethnic origin, religious beliefs, health data, or biometric data) except where strictly required by law and only with your explicit consent.

588bd collects personal data through the following channels:

• Direct registration: Information you provide when creating a 588bd account, including your name, date of birth, email address, and mobile number.
• Identity verification (KYC): Documents and information you submit when completing the mandatory verification process, including copies of official identification and proof of address.
• Deposit and withdrawal transactions: Payment method details and transaction data generated when you fund or withdraw from your account via bKash, Nagad, Rocket, Upay, or bank transfer.
• Platform activity: Gameplay data, betting history, and account activity automatically recorded by the 588bd platform systems as you interact with the sportsbook, live casino, or slot games.
• Technical collection: Device data, IP addresses, and session data collected automatically by our servers and through cookies and similar technologies whenever you access the 588bd website or mobile platform.
• Customer support interactions: Information you provide when you contact our live chat team or email [email protected], including the content of those communications.
• Third-party sources: Identity and fraud screening data received from KYC verification partners and payment fraud detection services, where this is necessary for account verification or legal compliance.

588bd processes your personal data for the following defined purposes:

588bd does not process your personal data for purposes beyond those stated in this section without first obtaining your consent or identifying an alternative lawful basis for doing so.

Each processing activity carried out by 588bd is founded on one or more of the following legal bases:

• Contractual necessity: Processing that is necessary to perform the contract between you and 588bd — including account creation, payment processing, and gameplay delivery — is justified on the basis that it is essential to providing the service you have requested.
• Legal obligation: Processing required for compliance with applicable law, including KYC/AML obligations, is justified on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, platform security, dispute resolution, and aggregated analytics is justified on the basis of 588bd's legitimate interests in operating a secure, compliant, and commercially viable platform, where those interests are not overridden by your privacy rights.
• Consent: Where processing is not covered by the above bases — for example, the use of non-essential cookies or processing of sensitive personal data — 588bd will seek your explicit, informed, and freely given consent before proceeding. You may withdraw consent at any time without detriment.

588bd does not sell your personal data. We share your data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment processors: Financial data is shared with our payment processing partners (including mobile banking gateways for bKash, Nagad, Rocket, and Upay, and bank transfer processors) solely to facilitate your deposit and withdrawal transactions.
• Identity verification providers: Identity data and KYC documents may be shared with third-party identity verification services for the purpose of confirming your identity and age as part of the account verification process.
• Fraud and AML screening: Transaction data and device/IP information may be shared with fraud detection and anti-money laundering screening services to detect and prevent prohibited activity.
• Game software providers: When you play a game supplied by a third-party provider such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, or Spribe, certain session data (including your player ID, game outcome, and wager amount) is transmitted to that provider's platform to facilitate the game round. These providers are contractually bound to process this data only for the purpose of game delivery and are not permitted to use it for other commercial purposes.
• Legal authorities: Where required by applicable law, court order, or a lawful request from a competent authority, 588bd will disclose the minimum personal data necessary to comply with the legal obligation. 588bd will, where legally permitted, notify you of any such disclosure.
• Corporate transactions: In the event of a merger, acquisition, or sale of the 588bd business or substantially all of its assets, your personal data may be transferred to the acquiring entity, subject to the same data protection obligations as set out in this Policy.

All third parties with whom 588bd shares personal data are required to maintain the confidentiality and security of that data and are prohibited from using it for any purpose beyond that for which it was shared. 588bd conducts due diligence on data processors before engaging their services and reviews these relationships periodically.

588bd retains personal data for no longer than is necessary for the purpose for which it was collected, subject to any applicable legal obligations requiring longer retention. The following general retention periods apply:

• Account data and KYC records: Retained for the duration of your account plus a minimum of five (5) years following account closure, to comply with anti-money laundering record-keeping obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, consistent with financial record-keeping requirements.
• Gameplay and betting history: Retained for a minimum of three (3) years following account closure for dispute resolution and responsible gaming monitoring purposes.
• Customer support communications: Retained for two (2) years following the resolution of the relevant enquiry or complaint.
• Technical and device data: Retained for up to twelve (12) months from collection, unless a longer period is required for an ongoing fraud investigation or security review.
• Cookie data: Session cookies expire when you close your browser. Persistent cookies are retained for the period stated in the cookie declaration, typically between 30 days and 12 months depending on the cookie's function.

Where we are unable to delete your data due to a legal obligation, we will restrict active processing of that data and store it securely in an archived state for the duration of the applicable retention period only.

588bd uses cookies and similar technologies (such as local storage and session storage) on the 588bd.io website. Cookies are small text files placed on your device that allow the website to recognise your browser and store certain information across sessions. We use cookies for the following purposes:

• Strictly necessary cookies: These cookies are essential for the operation of the 588bd platform — for example, to maintain your logged-in session, to remember items in your bet slip, and to ensure platform security. They cannot be disabled without impairing your ability to use the platform.
• Performance and analytics cookies: These cookies collect anonymised information about how players use the platform — for example, which pages are visited most frequently and whether error messages are encountered. This information is used solely to improve the platform. We do not link this data to individual player profiles without additional steps.
• Functionality cookies: These cookies remember preferences you have set — such as your language setting (English) — to provide a more personalised experience.

588bd does not use third-party advertising or retargeting cookies that track your behaviour across other websites. You can control which non-essential cookies are placed on your device through your browser settings; however, disabling strictly necessary cookies may affect your ability to use certain features of the 588bd platform. For questions about our use of cookies, please contact us at [email protected].

As a data subject, you hold the following rights with respect to the personal data that 588bd processes about you. These rights are not absolute and are subject to certain conditions and exceptions under applicable law:

• Right of access: You have the right to request confirmation of whether 588bd processes your personal data and, if so, to receive a copy of that data together with information about the purposes, categories, and recipients of processing.
• Right to rectification: You have the right to request the correction of inaccurate or incomplete personal data that we hold about you. Minor corrections (such as updating your contact number) can be made directly through your account settings; more significant changes require identity verification.
• Right to erasure ("right to be forgotten"): You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where processing is unlawful. This right is subject to our legal retention obligations described in Section 8.
• Right to restriction of processing: You have the right to request that 588bd restrict the active processing of your data in certain circumstances — for example, while the accuracy of the data is being contested or while you have objected to processing based on legitimate interests.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to 588bd in a structured, commonly used, machine-readable format, and to have that data transmitted to another data controller where technically feasible and where processing is based on consent or contract.
• Right to object: You have the right to object to processing based on legitimate interests. 588bd will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or unless the processing is necessary for the establishment, exercise, or defence of legal claims.
• Rights related to automated decision-making: 588bd does not make decisions that produce significant legal or similarly significant effects on you solely by automated means without human review. Where automated checks (such as fraud screening) flag your account for action, a human review will be conducted before any material decision is implemented.

To exercise any of the rights listed above, please submit a written request to [email protected]. We may ask you to provide proof of identity before processing your request to ensure that data is not disclosed to, or acted upon by, an unauthorised person. All verified requests will be processed within 30 calendar days.

588bd implements a multi-layered technical and organisational security framework to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures in place include:

• 256-bit SSL/TLS encryption on all data in transit between your device and the 588bd platform.
• Encryption at rest for sensitive personal data stored on 588bd servers, including identity documents and financial records.
• Role-based access controls that limit access to personal data to only those members of the 588bd team who require it to perform their specific functions.
• Intrusion detection and prevention systems monitoring the platform infrastructure continuously for signs of unauthorised access or attack.
• Regular security assessments and penetration testing carried out by qualified security professionals to identify and address vulnerabilities.
• Incident response procedures to ensure that any confirmed data breach is contained quickly, assessed for impact, and reported to affected players and relevant authorities in accordance with applicable obligations.

While 588bd takes all reasonable steps to protect your personal data, no transmission over the internet or electronic storage system is guaranteed to be 100% secure. You are responsible for maintaining the security of your account credentials and for ensuring that your device is protected by up-to-date security software.

If you suspect that your 588bd account has been compromised or that your personal data has been accessed without authorisation, please contact us immediately at [email protected] or via our 24/7 live chat service.

The 588bd platform is strictly for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals below the age of 21. Our registration process requires date-of-birth verification, and all accounts are subject to KYC age verification before any gameplay or financial transactions are permitted.

If 588bd becomes aware, through any means, that a player is under the age of 21, the account will be immediately suspended, all transactions will be reversed where technically and legally possible, all personal data relating to that individual will be deleted from our systems at the earliest opportunity consistent with our legal obligations, and the matter may be referred to the appropriate authorities.

If you believe that a minor has accessed the 588bd platform and provided personal data, please notify us immediately at [email protected] so that we can take prompt action.

The 588bd platform may contain references to, or integrations with, third-party services such as game software providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe) and payment gateway partners (bKash, Nagad, Rocket, Upay, and banking institutions). When you interact with a third-party service — such as launching a game hosted on a provider's platform — your device may communicate directly with that provider's servers, and that provider's own privacy policy will govern any personal data collected during that interaction.

588bd is not responsible for the privacy practices, data security measures, or content of any third-party service provider, even where that provider is integrated into the 588bd platform. We encourage you to review the privacy notices of any third-party service you interact with. Where we are aware of concerns about a provider's data practices, we will take appropriate action including reviewing our contractual relationship with that provider.

588bd reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made, we will notify registered players by email or by posting a prominent notice on the 588bd website, and we will update the effective date shown at the top of this document.

We encourage you to review this Policy periodically to remain informed about how we protect your personal data. Your continued use of the 588bd platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should cease using the platform and may request account closure by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 588bd processes your personal data, please contact our support team using the details below. We are committed to resolving all privacy-related enquiries promptly and transparently.

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly on the 588bd platform
• Response time: We aim to acknowledge all privacy enquiries within 48 hours and to provide a full response within 30 calendar days
• Coverage: Serving all divisions of Bangladesh including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh (Bangladesh Standard Time, UTC+6)