bf89 Privacy Policy
At bf89, protecting your personal data is a core responsibility, not an afterthought. This Privacy Policy explains exactly what information we collect, why we collect it, how it is used, who it may be shared with, and the rights you hold as a registered player in Bangladesh.
How bf89 Protects Your Data
Six core principles govern the way bf89 handles personal information across every interaction you have with the platform.
Minimal Data Collection
bf89 collects only the personal data that is strictly necessary for account registration, identity verification, payment processing, and regulatory compliance. We do not collect data speculatively or beyond what the platform genuinely requires.
No Sale of Personal Data
bf89 will never sell, rent, or trade your personal information to third-party advertisers, data brokers, or marketing firms. Your data belongs to you, and it is used solely to operate and improve the bf89 platform for your benefit.
SSL Encryption
All data transmitted between your device and bf89 servers is protected by industry-standard 256-bit SSL/TLS encryption. Sensitive fields such as payment details and identity documents are encrypted both in transit and at rest.
Your Rights, Respected
You have the right to access, correct, or request deletion of the personal data bf89 holds about you. Submit a data request to [email protected] and our team will respond within the timeframes described in this policy.
Defined Retention Periods
bf89 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected. Account data is retained for a minimum of five years post-closure to meet anti-money-laundering obligations, then securely deleted.
Transparent Cookie Use
bf89 uses cookies and similar technologies only for functional, analytical, and security purposes. We do not deploy third-party behavioural advertising cookies. Full details of cookies used are provided in Section 7 of this policy.
Throughout this Privacy Policy, the following terms carry the meanings set out below unless the context requires otherwise:
- "bf89", "We", "Us", or "Our" refers to the operator of the bf89 online betting platform accessible at bf89.io and all associated subdomains, applications, and services.
- "You", "Your", or "Player" refers to any individual who visits, registers on, or uses the bf89 platform in any capacity.
- "Personal Data" means any information that identifies or could reasonably be used to identify you as an individual, including your name, email address, phone number, payment details, device identifiers, and IP address.
- "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, modification, or deletion.
- "Data Controller" refers to bf89 in its capacity as the entity that determines the purposes and means of processing your Personal Data.
- "Third Party" means any individual, company, or organisation that is not bf89 or you, including game providers, payment processors, and identity verification services.
- "KYC" means Know Your Customer — the identity and age verification procedures bf89 is required to perform on registered players.
- "Cookie" means a small text file placed on your device by the bf89 platform to facilitate certain functional or analytical processes as described in Section 7.
bf89 collects Personal Data from you through several channels during your use of the platform. The categories of data we collect are as follows:
2.1 Registration Data
When you create a bf89 account, we collect your full legal name, date of birth, residential address in Bangladesh (including district, city, and postal code), mobile phone number, and email address. This data is required to create and maintain your account.
2.2 Identity Verification Data
To comply with our KYC obligations, we may collect copies of your National Identity Card (NID), passport, or birth certificate, as well as a live selfie or video confirmation. These documents are used solely to verify your identity and age.
2.3 Financial Data
When you make a deposit or withdrawal, we collect the details of your chosen payment method. For mobile wallet transactions (bKash, Nagad, Rocket, Upay), this includes your registered wallet number. For bank transfers, this includes your account number and bank name. We do not store full card numbers for Visa or Mastercard transactions — these are handled directly by our PCI-DSS compliant payment processors.
2.4 Transaction Data
We record all deposits, withdrawals, bets placed, games played, bonus claims, and related financial activity associated with your account. This data is necessary for account management, dispute resolution, and regulatory compliance.
2.5 Technical & Device Data
We automatically collect certain technical data when you access the bf89 platform, including your IP address, browser type and version, operating system, device type, screen resolution, time zone, and session duration. This data helps us maintain platform security and optimise the user experience.
2.6 Communications Data
If you contact our support team via live chat or email, we retain records of those communications, including timestamps and content, for quality assurance and complaint resolution purposes.
2.7 Responsible Gaming Data
Where you set deposit limits, loss limits, cooling-off periods, or self-exclusion status, we record these preferences and restrictions to enforce them consistently across your account activity.
| Data Category | Examples | Collection Method |
|---|---|---|
| Registration Data | Name, DOB, address, phone, email | Provided by you at sign-up |
| Identity Verification | NID, passport, selfie | Uploaded during KYC |
| Financial Data | bKash number, bank account, wallet ID | Provided during deposit/withdrawal |
| Transaction Data | Bet history, deposits, withdrawals | Generated automatically by platform |
| Technical Data | IP address, browser, device type | Collected automatically on access |
| Communications Data | Live chat logs, support emails | Provided by you via support channels |
| Responsible Gaming Data | Deposit limits, self-exclusion status | Set by you in account settings |
bf89 uses the Personal Data described in Section 2 for the following specific purposes:
- Account Management: To create, maintain, and administer your bf89 player account, including processing your login credentials, account settings, and profile information.
- Identity & Age Verification: To confirm that you meet the minimum age requirement of 21 years and to verify that the identity you have provided is genuine. This is a legal and operational requirement of the platform.
- Payment Processing: To execute deposit and withdrawal transactions securely via your chosen payment method (bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard). Financial data is passed to our payment processors only to the extent necessary to complete each transaction.
- Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, and other prohibited conduct as described in our Terms and Conditions.
- Regulatory Compliance: To fulfil our obligations under applicable anti-money-laundering laws, responsible gaming requirements, and other regulations governing online betting platforms serving the Bangladesh market.
- Customer Support: To respond to your queries, resolve disputes, and handle formal complaints submitted through our live chat or email support channels.
- Platform Improvement: To analyse aggregated, anonymised usage patterns to improve the bf89 platform's performance, reliability, and user experience. Individual-level profiling for commercial exploitation is not conducted.
- Responsible Gaming Enforcement: To apply and enforce any deposit limits, loss limits, time-out periods, or self-exclusion requests you have placed on your account.
- Promotional Communications: With your consent, to send you information about bf89 promotions, bonus offers, and platform updates by email or SMS. You may withdraw this consent at any time by contacting support or updating your communication preferences in your account settings.
bf89 processes your Personal Data on the following legal grounds depending on the nature of the processing activity:
- Contractual Necessity: Processing your registration data, payment details, and transaction records is necessary to perform the contract between you and bf89 — i.e., to provide you with access to our betting and gaming platform.
- Legal Obligation: Processing your identity verification documents, transaction records, and responsible gaming data is required for bf89 to comply with applicable laws including anti-money-laundering requirements and age verification obligations.
- Legitimate Interests: Processing your technical and device data for fraud prevention, platform security, and aggregated analytics serves bf89's legitimate interest in maintaining a secure, fair platform for all players. We only do this where our interests are not overridden by your rights and freedoms.
- Consent: Where you have opted in to receive promotional communications, we process your contact details for that purpose on the basis of your freely given consent. You may withdraw this consent at any time without it affecting the lawfulness of prior processing or your ability to continue using the bf89 platform.
bf89 does not sell, rent, or trade your Personal Data to any third party. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:
- Payment Processors: Your payment method details are passed to our approved payment processing partners (including mobile wallet operators bKash, Nagad, Rocket, and Upay, and card processors handling Visa and Mastercard transactions) solely to execute deposit and withdrawal requests. These processors are bound by their own data protection obligations and are not permitted to use your data for any other purpose.
- Identity Verification Services: During KYC checks, your identity documents and personal details may be shared with third-party verification service providers. These providers verify authenticity and age solely on behalf of bf89 and are contractually prohibited from retaining or repurposing your data.
- Game Content Providers: When you play games supplied by third-party studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), a session token and account identifier are shared with the game provider to authenticate your game session. Game providers do not receive your full personal profile, payment details, or identity documents.
- Legal & Regulatory Authorities: We may disclose your Personal Data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by law or in response to a valid legal process. We will notify you of such disclosures where we are legally permitted to do so.
- Business Transfers: In the event of a merger, acquisition, restructuring, or sale of assets involving bf89, your Personal Data may be transferred to the acquiring entity. You will be notified of any such transfer and given the opportunity to request deletion of your data prior to transfer if you choose not to continue using the platform under new ownership.
All Third Parties with whom bf89 shares Personal Data are required to process that data in accordance with applicable data protection standards and are not authorised to use it for their own independent marketing or commercial purposes.
bf89 retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account & Registration Data | 5 years post-account closure | AML compliance, dispute resolution |
| Identity Documents (KYC) | 5 years post-account closure | Regulatory requirement |
| Transaction & Bet Records | 5 years post-transaction | Financial audit trail, legal obligation |
| Support Communications | 3 years post-interaction | Quality assurance, complaint records |
| Technical & Device Logs | 12 months rolling | Security monitoring, fraud prevention |
| Marketing Consent Records | Until consent is withdrawn + 1 year | Proof of lawful processing basis |
| Self-Exclusion Records | Indefinite (or until formally lifted) | Responsible gaming obligation |
Once a retention period has expired and there is no outstanding legal hold or dispute requiring continued retention, Personal Data is securely and irreversibly deleted or anonymised in accordance with bf89's internal data destruction procedures.
bf89 uses cookies and similar technologies (including local storage and session tokens) to operate the platform efficiently and securely. Cookies are small text files stored on your device that help us recognise returning visitors, maintain your login session, and understand how the platform is being used.
The types of cookies bf89 uses are as follows:
- Essential Cookies: These are strictly necessary for the platform to function. They maintain your login session, remember your language preference, and support security features such as CSRF protection. Essential cookies cannot be disabled without impairing your ability to use the platform.
- Functional Cookies: These remember your preferences — such as game display settings, odds format, and notification choices — so you do not have to reconfigure them on each visit.
- Analytical Cookies: These help us understand how players navigate the platform, which pages are most visited, and where technical errors occur. The data collected is aggregated and anonymised and is used solely to improve platform performance.
- Security Cookies: These support our fraud detection systems by flagging unusual device behaviour or login patterns that may indicate an account compromise attempt.
bf89 does not use third-party behavioural advertising cookies, cross-site tracking pixels, or social media retargeting technologies. You will not be targeted with bf89 advertisements on other websites based on your platform activity.
You may manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies will affect the functionality of your bf89 account. Detailed browser-level cookie controls are available in your browser's help documentation.
bf89 implements a multi-layered approach to data security to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security measures include:
- 256-bit SSL/TLS Encryption: All data transmitted between your device and bf89 servers is encrypted in transit using industry-standard SSL/TLS protocols, ensuring that your login credentials, payment details, and personal information cannot be intercepted by third parties.
- Encryption at Rest: Sensitive data fields — including identity documents, payment method identifiers, and password hashes — are encrypted at rest in our database infrastructure using AES-256 encryption.
- Access Controls: Access to your Personal Data within bf89's internal systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and subject to regular audit review.
- Two-Factor Authentication (2FA): bf89 offers 2FA as an optional security layer for your player account. We strongly recommend enabling this feature to reduce the risk of unauthorised access.
- Intrusion Detection: bf89's infrastructure is monitored continuously for unusual access patterns, DDoS attempts, and other security threats. Automated alerting systems escalate detected anomalies to our security team in real time.
- Penetration Testing: The bf89 platform undergoes periodic third-party security assessments to identify and remediate vulnerabilities before they can be exploited.
While bf89 employs commercially reasonable security measures, no online platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, bf89 will notify affected players and relevant authorities within the timeframes required by applicable law.
As a bf89 player, you have the following rights with respect to the Personal Data we hold about you. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request — [Your Username]".
Your Data Rights at bf89
bf89 respects your right to control your personal information. The following rights apply to all registered players.
Right to Access
You may request a copy of all Personal Data bf89 holds about you. We will provide this in a structured, readable format within 30 days of your verified request.
Right to Rectification
If any Personal Data we hold is inaccurate or incomplete, you have the right to request correction. Identity-critical fields may require documentary proof before amendment.
Right to Erasure
You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations described in Section 6.
Right to Restrict Processing
You may request that bf89 temporarily restrict the processing of your Personal Data while a correction request or objection is under review.
Right to Data Portability
Where processing is based on your consent or a contract, you may request your Personal Data in a machine-readable format (CSV or JSON) for transfer to another service.
Right to Object
You may object to processing based on legitimate interests or direct marketing at any time. We will cease processing unless we can demonstrate compelling legitimate grounds that override your rights.
bf89 is strictly an adults-only platform. We do not knowingly collect Personal Data from any individual under the age of 21. Our registration process requires all applicants to confirm that they are 21 years of age or older, and we conduct age verification checks as part of our KYC process.
If bf89 becomes aware that Personal Data has been collected from a person under the age of 21 — whether through misrepresentation at registration or any other means — we will immediately suspend that account, delete the associated Personal Data, and if any real-money transactions have taken place, take appropriate steps in accordance with our Terms and Conditions and applicable law.
If you are a parent or guardian and believe that a minor has registered on the bf89 platform using false information, please contact us immediately at [email protected] so that we may investigate and take the appropriate action without delay.
The bf89 platform may contain references to third-party game providers, payment services, and other external entities. While bf89 takes reasonable steps to ensure that all third parties we work with maintain appropriate data protection standards, we cannot accept responsibility for the privacy practices of external organisations.
This Privacy Policy applies solely to Personal Data collected and processed by bf89 in connection with your use of the bf89 platform. If you interact directly with a third-party service — for example, by logging into your bKash or Nagad account through their own interface to initiate a payment — your use of that service is governed by that third party's own privacy policy, not this one.
We encourage you to review the privacy policies of all third-party services you use in connection with your bf89 account activity.
bf89 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. Where changes are material — meaning they significantly affect how we collect or use your Personal Data — we will notify registered players via email or a prominent notice on the platform at least 7 days before the changes take effect.
Minor amendments, such as clarifications of existing language, corrections of typographical errors, or updates required by law with immediate effect, may be made without advance notice. The "Last updated" date at the top of this policy will always reflect the date of the most recent revision.
Your continued use of the bf89 platform after the effective date of any amended Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any material change, you should contact support to discuss your options including Account closure.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how bf89 has handled your Personal Data, please contact our support team through any of the following channels:
- Email: [email protected] — use the subject line "Privacy Enquiry" or "Data Rights Request — [Your Username]" as appropriate
- Live Chat: Available 24 hours a day, 7 days a week directly on the bf89 platform
- Response Time: We aim to acknowledge all privacy-related enquiries within 48 hours (Bangladesh Standard Time, BST UTC+6) and to resolve or substantively respond to all data rights requests within 30 days
If you are not satisfied with our response to a privacy complaint, you have the right to escalate your concern to the relevant supervisory authority or data protection body with jurisdiction over our operations. bf89 will cooperate fully with any such investigation.
Ready to Play with Confidence?
Your personal data is safe with bf89. Explore our cricket sportsbook, slot games, live casino, and fishing titles — all on a platform built with your privacy and security as a foundation.