Privacy Policy
sbj88 Data Protection
At sbj88 we take your privacy seriously. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and the rights you hold over your information as a player on our Bangladesh platform.
This Privacy Policy ("Policy") applies to all players, visitors, and users of the sbj88 website at https://sbj88.app and any related sub-domains, mobile interfaces, or APIs operated by sbj88. By creating an account or continuing to use the sbj88 platform, you acknowledge that you have read and understood this Policy and you consent to the data practices described herein. If you do not agree, you should discontinue use of the platform. This Policy forms part of the broader legal framework that also includes the sbj88 Terms & Conditions and the Responsible Gaming Policy.
Information We Collect Key
sbj88 collects personal data only to the extent necessary to provide a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect fall into three broad groups: data you provide directly, data generated through your use of the platform, and data received from third parties.
When you register an sbj88 account or complete our KYC verification process, you provide us with identity and contact data including your full legal name, date of birth, email address, mobile number, home address, and government-issued ID details (National ID Card or passport number and scan). You may also provide payment-method details during deposit and withdrawal transactions.
As you use the sbj88 platform, we automatically collect data about how you interact with it. This includes your IP address, device type and operating system, browser type and version, session timestamps, pages visited, games played, bet amounts and outcomes, deposit and withdrawal history, and the URLs from which you navigated to our site. This data is collected via server logs and first-party analytics tools.
We may receive data about you from payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, Mastercard) in the context of verifying and processing transactions. We may also receive fraud-risk scores and identity verification results from our KYC compliance partners. We do not purchase or acquire third-party marketing data lists.
| Data Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full name, date of birth, NID / passport number | Registration form, KYC upload |
| Contact Data | Email address, mobile number, home address | Registration form |
| Financial Data | bKash / Nagad number, bank account reference, transaction amounts in ৳ BDT | Deposit / withdrawal requests, payment processor callbacks |
| Technical Data | IP address, device ID, browser type, OS version | Server logs, first-party analytics |
| Behavioural Data | Games played, bet history, session duration, pages visited | Platform activity tracking |
| Communications Data | Support chat transcripts, email correspondence content | Live chat system, email inbox |
| Verification Data | ID document scan, selfie (where requested), proof of address | KYC upload portal |
How We Use Your Data Updated 2026
sbj88 processes your personal data only for clearly defined, lawful purposes. We do not sell your personal data to third parties for their own marketing purposes under any circumstances. The table below maps each processing purpose to the data categories involved and the legal basis on which sbj88 relies for that processing.
- Account Registration & Management: We process your identity and contact data to create and maintain your sbj88 player account, authenticate your logins, manage your preferences, and communicate account-related updates (e.g., password reset, deposit confirmation). Legal basis: performance of a contract.
- KYC Identity Verification: We process identity and verification data to confirm that you are who you say you are, that you are at least 18 years of age, and that your account is not being used fraudulently. This process is a legal and regulatory obligation. Legal basis: legal obligation and legitimate interest.
- Payment Processing: We process financial data to facilitate deposits and withdrawals via the supported Bangladesh payment methods (bKash, Nagad, Rocket, Upay, and bank transfers). We share only the minimum data necessary with each payment processor to complete the transaction. Legal basis: performance of a contract.
- Responsible Gaming Monitoring: We analyse behavioural data — including session frequency, bet sizes, deposit patterns, and net loss trends — to identify players who may be experiencing gambling-related harm and to enforce platform-level responsible gaming controls. Legal basis: legal obligation and legitimate interest (player protection).
- Fraud Detection & AML Compliance: We process technical, financial, and behavioural data to detect and prevent fraud, money laundering, bonus abuse, multi-accounting, and other prohibited conduct. We may share findings with law enforcement or financial intelligence authorities where required by law. Legal basis: legal obligation and legitimate interest.
- Customer Support: We process communications data and account data to respond to your support queries, investigate complaints, and resolve disputes. Support interactions are logged and retained for quality assurance and dispute resolution purposes. Legal basis: performance of a contract and legitimate interest.
- Marketing Communications: With your explicit consent at registration (or subsequently via your account settings), we may use your contact data to send promotional emails, SMS messages, or in-platform notifications about bonuses, new games, and seasonal offers relevant to the Bangladesh market. You may withdraw this consent at any time. Legal basis: consent.
- Platform Improvement & Analytics: We use aggregated and anonymised behavioural and technical data to analyse platform performance, identify popular games and features, improve the user interface, and plan new product developments. This processing does not involve your individual personal data in identifiable form. Legal basis: legitimate interest.
Cookies & Tracking Technologies
sbj88 uses cookies and similar client-side tracking technologies to operate the platform, remember your preferences, maintain your login session, and gather first-party analytics data. We do not use third-party advertising cookies or cross-site tracking pixels that share your browsing data with external advertising networks.
These cookies are essential for the platform to function. They maintain your authenticated session, remember your language preference, protect against cross-site request forgery (CSRF), and enable secure payment flows. They cannot be disabled.
These cookies remember your personalisation choices — such as preferred game layout, notification settings, and responsible gaming reminder schedules — so that your experience is consistent across sessions. They are enabled by default but can be disabled in settings.
sbj88 uses first-party analytics cookies to understand how players navigate the platform, which features are used most, and where technical issues occur. Analytics data is aggregated and does not identify you personally. You may opt out via your account settings.
sbj88 does not place third-party advertising cookies, retargeting pixels, social media tracking scripts, or any cross-site tracking technology on our platform. Your browsing behaviour on sbj88 is not shared with external advertising platforms.
Most web browsers allow you to control cookies through their settings. You can set your browser to refuse all cookies, to alert you when cookies are being set, or to delete cookies after each session. Note that disabling strictly necessary cookies will prevent you from logging in to your sbj88 account and using core platform features. For guidance on managing cookies in your specific browser, visit the help section of your browser provider.
Data Sharing & Third Parties
sbj88 does not sell, rent, or trade your personal data. We share personal data only in the limited circumstances described below and only to the extent necessary for each stated purpose. All third parties with whom we share data are contractually required to maintain appropriate security standards and to use your data only for the purpose for which it was shared.
Categories of Third-Party Recipients
- Payment Processors: We share the minimum necessary financial and identity data with our Bangladesh payment partners — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, and Mastercard — to process your deposit and withdrawal transactions. Each processor operates under its own privacy policy and applicable Bangladesh financial regulations.
- KYC & Identity Verification Providers: We use specialist third-party identity verification services to assist with the KYC process. These providers receive the identity documents you submit (e.g., NID scan, passport) solely for the purpose of verifying authenticity and confirming your identity. Document data is not retained by these providers beyond the verification process.
- Game Providers & Software Studios: When you play games developed by third-party studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), limited technical session data (e.g., player session token, currency, game result) may be exchanged with the provider's game servers to deliver the game. These providers do not receive your full personal profile.
- Fraud Prevention & AML Partners: We work with specialised fraud detection and anti-money-laundering compliance technology providers. These partners receive behavioural and financial data to compute risk scores and flag suspicious activity. Data is shared under strict data processing agreements.
- Legal & Regulatory Authorities: Where required by applicable law or a valid legal order, sbj88 may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies. We will notify you of such disclosure where permitted by law.
International Data Transfers
Some of our third-party technology partners — particularly game providers and KYC verification platforms — may process data on servers located outside Bangladesh. Where such international transfers occur, sbj88 ensures that appropriate safeguards are in place, including:
- Data processing agreements that impose obligations equivalent to applicable data protection standards.
- Technical measures including encryption in transit (TLS 1.3) and encryption at rest (AES-256) for all personal data transferred internationally.
- Strict contractual restrictions limiting the recipient's use of transferred data to the specific, documented purpose only.
- Regular vendor security assessments to ensure ongoing compliance with sbj88's data protection standards.
Data Retention & Security Encrypted
sbj88 retains your personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods set out below reflect a balance between operational necessity, legal compliance, and minimising the volume of personal data held.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | AML / KYC regulatory requirement |
| Financial Transaction Records | 7 years from transaction date | Financial records compliance obligation |
| Betting & Gaming History | 5 years from account closure | Dispute resolution and responsible gaming audit |
| Support Communications | 3 years from last interaction | Complaint resolution and quality assurance |
| Marketing Consent Records | 3 years from consent or withdrawal | Evidence of lawful marketing basis |
| Technical & Log Data | 13 months rolling | Security incident investigation |
| Analytics Data (aggregated) | 26 months rolling | Platform improvement and trend analysis |
Security Measures
sbj88 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security programme includes the following measures:
All data transmitted between your device and sbj88 servers is encrypted using TLS 1.3, the current industry standard for transport-layer security. This prevents interception of your credentials, payment data, and personal information in transit.
Personal data stored in sbj88 databases is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from data stores, rotated on a regular schedule, and protected by hardware security modules (HSMs).
Access to personal data is restricted on a strict need-to-know basis. sbj88 staff access to player data is role-based, logged, and audited. Multi-factor authentication is mandatory for all administrative access to systems containing personal data.
sbj88 engages independent third-party security firms to conduct regular penetration tests and vulnerability assessments of our platform. Critical findings are remediated within 48 hours; medium-severity findings within 14 days.
In the event of a personal data breach that poses a risk to your rights and freedoms, sbj88 will notify affected players by email within 72 hours of becoming aware of the breach. The notification will describe the nature of the breach, data affected, and steps taken.
All sbj88 employees with access to personal data receive mandatory data protection training upon onboarding and annually thereafter. Training covers data minimisation, secure handling, phishing awareness, and the correct procedure for responding to player data requests.
Your Privacy Rights
As a player on the sbj88 platform, you have a number of rights in relation to the personal data we hold about you. These rights are set out below. To exercise any of these rights, contact our support team at [email protected] from the email address registered to your account. sbj88 will respond to all verified rights requests within 30 calendar days.
Contact & Complaints
If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have a concern about how sbj88 has handled your personal data, you can contact our Data Protection team directly. All enquiries are handled in English and are treated as strictly confidential.
For general privacy questions, data access requests, or consent withdrawal, email the sbj88 support team at [email protected]. Use the subject line "Privacy Request — [Your Account Username]" so that your message is routed to the correct team immediately. Please send your request from the email address registered to your sbj88 account so that we can verify your identity before processing your request.
sbj88's live chat support is available 24 hours a day, 7 days a week in English, accessible directly from your account dashboard. While live chat is suitable for general privacy questions and guidance, formal rights requests (access, erasure, portability) must be submitted by email to create a documented audit trail. Response time for email privacy requests is within 5 business days for acknowledgement.
How to Submit a Formal Complaint
- Send an email to [email protected] with the subject line "Formal Privacy Complaint — [Your Account Username]".
- Include a clear description of the personal data processing you believe has been carried out incorrectly, the date(s) on which it occurred, and the specific right or principle you believe has been violated.
- Attach any relevant screenshots, correspondence, or supporting evidence that you believe is material to your complaint.
- sbj88 will acknowledge your complaint within 5 business days and provide a substantive response within 30 calendar days. If the matter is particularly complex, we will inform you within the initial 30-day period if additional time is required.
- If you are not satisfied with sbj88's response to your complaint, you may escalate the matter to your relevant national data protection authority or seek independent legal advice.
Explore sbj88 With Confidence
Your data is protected, your privacy is respected, and your experience is backed by 256-bit SSL encryption. Ready to play? Dive into cricket betting, live casino games, crash titles, or 600+ slots — all with instant BDT payments via bKash and Nagad. 18+ only. Play responsibly.