bbb4 Privacy Policy — How We Handle Your Personal Data

1 Introduction and Scope

This Privacy Policy ("Policy") describes how bbb4 ("bbb4", "we", "us", "our") collects, uses, stores, shares, and otherwise processes the personal data of individuals ("you", "Player", "User") who access or use the bbb4 website at https://bbb4.io and all associated services, features, products, and communications made available through that domain.

This Policy applies to all bbb4 players registered in Bangladesh and any other eligible South Asia region users accessing the bbb4 platform. It covers personal data collected through the website, through our customer support channels, through our payment processing integrations (including bKash, Nagad, Rocket, and Upay), and through any email, live chat, or other communication you initiate with bbb4.

By registering an account on bbb4, making a deposit, placing a bet, or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein.

2 Data Controller Information

bbb4 is the data controller responsible for the personal data collected through the bbb4 platform. As data controller, bbb4 determines the purposes and means of processing your personal information and is accountable for ensuring that processing is carried out lawfully, fairly, and transparently.

For all privacy-related enquiries, data subject access requests, correction requests, deletion requests, or complaints relating to how bbb4 handles your personal data, you may contact us using the details set out in Section 13 of this Policy.

3 Personal Data We Collect

bbb4 collects personal data in three principal ways: information you provide to us directly, information generated automatically through your use of the platform, and information received from approved third-party service providers. The categories of personal data we collect are set out below.

3.1 Information You Provide Directly

• Registration data: Full legal name, date of birth, residential address, mobile phone number, and email address
• Identity verification documents: National Identity Card (NID) number, passport biographical data, utility bill or bank statement (for address verification)
• Payment information: Mobile banking account numbers (bKash, Nagad, Rocket, Upay), bank account details, and Visa/Mastercard details where applicable — note that bbb4 does not store full card numbers; card processing is handled by PCI-DSS-compliant payment processors
• Communications: Records of live chat sessions, support emails, and any other correspondence you initiate with bbb4
• Responsible gaming information: Deposit limits, self-exclusion requests, cooling-off period activations

3.2 Automatically Collected Technical Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type and version
• Session duration, pages visited, and navigation patterns within the bbb4 platform
• Betting and gaming activity records, including bet amounts, game selections, win/loss history, and session timestamps in Bangladesh Standard Time (BST, UTC+6)
• Cookie identifiers and similar tracking technology data (see Section 7)

3.3 Data Received from Third Parties

• Identity verification results from KYC service providers
• Transaction confirmation data from payment processors (bKash, Nagad, Rocket, Upay, bank partners)
• Fraud screening and risk scoring data from approved anti-fraud partners

4 How We Use Your Personal Data

bbb4 uses the personal data we collect for the following purposes:

bbb4 does not use your personal data for automated decision-making that produces significant legal effects on you without the involvement of a human reviewer. Our fraud and risk screening systems may flag accounts for review, but final decisions on account suspension or fund withholding are reviewed by a member of the bbb4 compliance team.

5 Legal Basis for Processing

bbb4 processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contract Performance: Processing is necessary to fulfil our obligations to you under the bbb4 Terms & Conditions — for example, to operate your account, process your bets, and handle deposits and withdrawals.
• Legal Obligation: Processing is required to comply with applicable law — for example, anti-money laundering (AML) obligations, age verification requirements, and record-keeping mandates.
• Legitimate Interests: Processing serves a legitimate business interest of bbb4 that is not overridden by your privacy rights — for example, fraud prevention, platform security, and improving the quality of our services.
• Consent: Where processing is based on your consent — for example, sending you promotional emails about bbb4 offers — you have the right to withdraw that consent at any time by contacting [email protected] or updating your account communication preferences.

6 Data Sharing and Third Parties

bbb4 does not sell your personal data. We may share your data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

6.1 Payment Processors

To process deposits and withdrawals, bbb4 shares relevant transaction and identity data with approved payment processors including bKash, Nagad, Rocket, Upay, and partner banks such as City Bank, BRAC Bank, Islami Bank, and Dutch-Bangla Bank. Each of these processors operates under its own data protection framework and is required to handle your data securely.

6.2 Identity Verification Providers

bbb4 uses approved third-party KYC service providers to verify the identity of registered players. These providers receive only the identity documents and data necessary to conduct the verification and are contractually prohibited from using your data for any other purpose.

6.3 Game Content Providers

When you play a game on the bbb4 platform that is powered by a third-party provider (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), limited session data may be shared with that provider to enable gameplay. The nature of this data sharing is technical in scope and does not include financial or identity documentation.

6.4 Legal and Regulatory Authorities

bbb4 may disclose your personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of bbb4, our players, or the public.

6.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of bbb4's business, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you of any such transfer and of any changes to this Privacy Policy that result from it.

7 Cookies and Tracking Technologies

bbb4 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, prevent fraud, and analyse how players use our services. The following categories of cookies are used on the bbb4 platform:

• Strictly Necessary Cookies: Essential to the operation of the platform. These include session authentication cookies and security tokens. They cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display options, and game history. Disabling these may affect your experience but will not prevent you from using the platform.
• Analytics Cookies: Collect anonymised data on how players navigate the bbb4 platform, which pages are most visited, and where technical errors occur. This data is used solely for internal improvement purposes.
• Security and Fraud Prevention Cookies: Help bbb4 identify suspicious login patterns, detect bot activity, and protect player accounts from unauthorised access.

By continuing to use the bbb4 platform, you consent to the use of cookies as described above. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent you from logging in to your bbb4 account.

8 Data Retention

bbb4 retains personal data for as long as is necessary for the purpose for which it was collected and for as long as required by applicable law. The following retention periods apply as a general guide:

• Active account data: Retained for the full duration of your account being open and active on the bbb4 platform.
• Closed account data: Following account closure, bbb4 retains identity, transaction, and gaming history records for a minimum of five years to comply with anti-money laundering and financial record-keeping obligations.
• KYC verification documents: Retained for a minimum of five years following the completion of the verification process or the closure of the account, whichever is later.
• Support communication records: Retained for three years from the date of the last communication in a given support thread.
• Marketing consent records: Retained for as long as the consent remains active, plus a reasonable additional period following withdrawal of consent for audit purposes.

Once the applicable retention period has expired and there is no other lawful basis for continued retention, bbb4 will securely delete or anonymise your personal data.

9 Your Data Protection Rights

As a bbb4 player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact bbb4 at [email protected] with the subject line "Data Privacy Request". We will respond to all valid requests within 30 days.

• Right of Access: You may request a copy of the personal data bbb4 holds about you, along with information about how it is processed.
• Right to Rectification: You may request that inaccurate or incomplete personal data held by bbb4 be corrected or updated.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to bbb4's legal obligations to retain certain data.
• Right to Restriction: You may request that bbb4 restrict the processing of your data in certain circumstances, for example while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on consent or contract performance and is carried out by automated means, you may request your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling for fraud prevention purposes. bbb4 will assess your objection and cease processing unless there are compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

10 Children and Underage Users

The bbb4 platform is strictly intended for adults aged 21 years and over. bbb4 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from an individual who is under 21, we will immediately suspend the associated account, delete the personal data in question to the extent permitted by law, and take appropriate action in accordance with our underage gambling prevention procedures.

If you are a parent or guardian and you believe that your child has registered an account on bbb4 or provided personal data to the platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

11 Data Security Measures

bbb4 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the bbb4 servers is encrypted in transit using current SSL/TLS protocols.
• Encryption at Rest: Sensitive data fields including identity document references and payment method details are encrypted in our databases using AES-256 or equivalent standards.
• Access Controls: Access to player personal data within the bbb4 organisation is restricted to staff members who require it to fulfil their job responsibilities. Access is governed by role-based permissions and is subject to regular review.
• Secure Password Handling: Player account passwords are stored using a one-way cryptographic hashing algorithm. bbb4 staff cannot view your plaintext password.
• Fraud Monitoring: bbb4 employs automated systems that continuously monitor platform activity for signs of suspicious behaviour, account takeover attempts, and data exfiltration.
• Third-Party Security Standards: Payment processors and KYC providers used by bbb4 are required to maintain security standards commensurate with their role, including PCI-DSS compliance for card processing partners.

While bbb4 takes all reasonable steps to protect your personal data, no internet-based service can guarantee absolute security. If you suspect that your bbb4 account has been compromised, please contact support immediately at [email protected].

12 Changes to This Privacy Policy

bbb4 may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law, or changes in the services we provide. The effective date at the top of this page will be updated whenever a new version of the Policy enters into force.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data or meaningfully alter your rights — bbb4 will notify registered players by email to the address held on their account at least 14 days before the changes take effect. For non-material updates (such as clarifications of existing text), the revised Policy will be published on this page without advance notice.

Your continued use of the bbb4 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the revised Policy, you must cease using the platform and may close your account by contacting support.

13 Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, or wish to raise a complaint about how bbb4 has handled your personal data, please contact our support team using the details below. All privacy-related communications are handled in English and are responded to within 48 hours during standard operating hours in Bangladesh Standard Time (BST, UTC+6).

• Email: [email protected] — please use subject line "Data Privacy Request"
• Live Chat: Available within the bbb4 platform for registered and logged-in players
• Response Commitment: Data subject access requests will be fulfilled within 30 days of identity verification. Urgent complaints will be acknowledged within 48 hours.

This Privacy Policy was last reviewed and updated in January 2026. bbb4 recommends all players review this Policy periodically. If you have been a bbb4 player for some time, we encourage you to re-read this Policy to ensure you remain comfortable with how your data is handled.