bbsiot Privacy Policy

1 Introduction

bbsiot ("we", "us", "our") operates an online casino and sports betting platform accessible at bbsiot.vip, serving players primarily based in Bangladesh. We understand that your personal data is valuable and sensitive. This Privacy Policy sets out the principles, procedures, and safeguards we apply when collecting, storing, using, and disclosing information about the individuals who use our platform.

This Policy applies to all personal data processed by bbsiot in connection with your use of the bbsiot website, mobile interface, customer support channels, and any related services. It covers data collected directly from you during registration and gameplay, as well as data gathered automatically through our technical systems.

bbsiot is committed to maintaining the confidentiality, integrity, and availability of all personal data entrusted to us. We do not sell your personal data to third parties, and we apply strict access controls to ensure that your information is used only for the purposes described in this Policy.

2 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, directly or indirectly.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, alteration, or deletion.
• "Data Controller" means bbsiot, the entity that determines the purposes and means of processing personal data.
• "Data Processor" means any third party that processes personal data on behalf of bbsiot under a formal data processing agreement.
• "Player" / "You" means any individual who registers an account on or otherwise accesses the bbsiot platform.
• "Platform" refers to the bbsiot website, mobile application, and all associated services.
• "KYC" refers to the Know Your Customer identity verification procedures applied to player accounts in accordance with anti-money laundering obligations.
• "Cookies" refers to small text files placed on your device by the bbsiot platform to support functionality, analytics, and personalisation.

3 Personal Data We Collect

bbsiot collects only the data that is necessary and proportionate to the purposes for which it is processed. The categories of personal data we may collect include:

3.1 Registration and Identity Data

• Full legal name as it appears on official identification documents.
• Date of birth (used to verify that you meet the 18+ age requirement).
• Email address and contact phone number.
• Residential address, including city, district, and postal code (for example, Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar).
• Username and encrypted account password.
• Preferred currency (BDT ৳).

3.2 Identity Verification (KYC) Documents

• Copies of government-issued photo identification (National ID card, passport, or driving licence).
• Proof of address documentation (utility bills, bank statements, or official correspondence).
• Payment method ownership evidence (bKash, Nagad, Rocket, Upay, Visa, or Mastercard account screenshots or statements).
• Source of funds declarations where required by our AML compliance procedures.

3.3 Financial Transaction Data

• Deposit and withdrawal amounts, dates, and associated payment method references.
• Transaction identifiers and confirmation codes from payment processors.
• Account balance history and wagering records.
• Bonus and promotional credit activity.

3.4 Gameplay and Behavioural Data

• Games played, wagers placed, bet amounts, and outcomes.
• Session duration, login timestamps, and platform usage frequency.
• Sports betting selections, odds accepted, and market preferences.
• Responsible gaming tool settings (deposit limits, session timers, self-exclusion status).

3.5 Technical and Device Data

• IP address and approximate geolocation (country and city level).
• Device type, operating system, browser type and version.
• Referral source (the URL or channel through which you arrived at the bbsiot platform).
• Cookie identifiers and similar tracking technologies as described in Section 8.

3.6 Communications Data

• Content of messages exchanged with the bbsiot customer support team via live chat or email.
• Records of complaints, dispute submissions, and their resolution outcomes.
• Email communication history, including marketing preferences and opt-out records.

4 How We Collect Your Data

bbsiot collects personal data through the following means:

• Direct submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or responding to promotional surveys.
• Automated collection: Technical data gathered automatically as you interact with the platform, including via cookies, log files, and session recording tools.
• Third-party sources: Identity verification data received from our KYC and AML service providers; payment confirmation data received from bKash, Nagad, Rocket, Upay, Visa, and Mastercard processors; fraud screening data from security partners.
• Publicly available sources: Sanctions screening databases, politically exposed persons (PEP) lists, and adverse media monitoring services consulted as part of our AML compliance programme.

5 How We Use Your Personal Data

The personal data collected by bbsiot is used for the following purposes:

Purpose	Data Used	Legal Basis
Account registration and management	Identity, contact, and login data	Contract performance
Identity verification (KYC / AML)	ID documents, address proof, source of funds	Legal obligation
Processing deposits and withdrawals	Financial transaction and payment method data	Contract performance
Delivering casino and sports betting services	Gameplay, session, and preference data	Contract performance
Fraud prevention and platform security	Technical, device, and behavioural data	Legitimate interests
Responsible gaming monitoring and intervention	Wagering patterns, session data, limit settings	Legal obligation / Legitimate interests
Customer support and dispute resolution	Communications and account history data	Contract performance
Promotional and marketing communications	Contact data, gameplay preferences	Consent (opt-in)
Platform analytics and improvement	Anonymised behavioural and technical data	Legitimate interests
Regulatory compliance and legal obligations	Identity, financial, and transaction records	Legal obligation

6 Legal Basis for Processing

bbsiot processes personal data on one or more of the following legal grounds:

• Contract Performance: Processing is necessary to deliver the services you have requested when creating a bbsiot account and agreeing to our Terms and Conditions.
• Legal Obligation: Processing is required to comply with applicable laws, including anti-money laundering legislation, identity verification requirements, and responsible gaming regulations.
• Legitimate Interests: Processing is carried out in pursuit of bbsiot's legitimate business interests — such as fraud prevention, platform security, and service improvement — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: For certain optional processing activities — including marketing communications and non-essential cookies — bbsiot relies on your explicit, freely given consent, which you may withdraw at any time without affecting the lawfulness of processing carried out before withdrawal.

7 Data Sharing and Disclosure

bbsiot does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

7.1 Payment Service Providers

Transaction data is shared with our payment processing partners — including bKash, Nagad, Rocket, Upay, Visa, and Mastercard — solely to execute deposits and withdrawals on your behalf. These providers are authorised data processors operating under contractual data protection obligations.

7.2 Identity Verification and AML Providers

KYC document data and identity information may be shared with accredited third-party identity verification services to fulfil our regulatory obligations regarding age verification, identity confirmation, and anti-money laundering screening.

7.3 Game Content Providers

Where required for game delivery, limited technical session data (such as a pseudonymous session token) may be transmitted to game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, JILI, PG Soft, Spribe, Hacksaw Gaming, and Ezugi. No personally identifiable information beyond what is strictly necessary is shared with game providers.

7.4 Regulatory and Law Enforcement Authorities

bbsiot may be required by law or court order to disclose personal data to regulatory bodies, law enforcement agencies, or governmental authorities. In such cases, bbsiot will disclose only the minimum data necessary to comply with the legal obligation and will, where legally permitted, notify the affected player of the disclosure.

7.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of the bbsiot business, player data may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer and of any material changes to this Privacy Policy that may result from it.

8 Cookies and Tracking Technologies

The bbsiot platform uses cookies and similar tracking technologies to support platform functionality, analyse usage patterns, and deliver a personalised experience. The following categories of cookies are used:

• Essential Cookies: Required for the platform to function correctly. These include session management cookies, authentication tokens, and security cookies. They cannot be disabled without impairing platform functionality.
• Analytical Cookies: Used to collect anonymised data about how players navigate the platform, which pages are visited most frequently, and where technical errors occur. This data helps bbsiot improve the quality and performance of the platform.
• Functional Cookies: Used to remember your preferences, such as your preferred language, display settings, and responsible gaming limit configurations, so that you do not need to re-enter them on each visit.
• Marketing Cookies: Used, with your prior consent, to deliver relevant promotional content and to measure the effectiveness of bbsiot's marketing campaigns. These cookies may be placed by bbsiot's authorised marketing technology partners.

You may manage your cookie preferences at any time through your browser settings. Please note that disabling essential cookies may prevent you from accessing certain features of the bbsiot platform.

9 Data Retention

bbsiot retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of five years following account closure, to comply with AML and financial record-keeping obligations.
• Financial transaction records: Retained for a minimum of five years from the date of the transaction, in accordance with applicable financial regulations.
• KYC verification documents: Retained for a minimum of five years following the completion of the verification process or account closure, whichever is later.
• Customer support communications: Retained for a minimum of two years from the date of the last communication, unless the matter is subject to an ongoing dispute or legal proceeding.
• Marketing preference records: Retained until you withdraw consent or for a maximum of three years from your last active interaction with bbsiot marketing communications.
• Technical and log data: Retained for a maximum of 13 months from the date of collection, after which it is anonymised or deleted.

When personal data is no longer required, bbsiot securely deletes or anonymises it in accordance with our data destruction procedures.

10 Data Security

bbsiot applies a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the bbsiot platform.
• Encryption at rest for sensitive personal data stored in bbsiot's database systems.
• Role-based access controls ensuring that only authorised personnel with a legitimate business need can access player data.
• Multi-factor authentication for all internal administrative systems that handle player data.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Incident response procedures to detect, contain, and remediate data security breaches promptly, with affected players notified in accordance with applicable legal obligations.

11 Your Data Protection Rights

bbsiot respects your rights over your personal data. Subject to applicable law and certain conditions, you may exercise the following rights at any time by contacting our data protection team at [email protected]:

bbsiot will respond to all data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by up to an additional 60 days, with notice provided to you within the initial 30-day period. Requests may be made at any time by emailing [email protected] with the subject line "Data Rights Request".

Please note that certain rights are subject to exceptions. For example, bbsiot may be unable to delete your data if retention is required to comply with a legal obligation, such as our AML record-keeping requirements.

12 International Data Transfers

bbsiot operates as an internationally licensed offshore gaming platform. As a result, your personal data may be transferred to and processed in countries outside Bangladesh. These countries may not have data protection laws equivalent to those in your jurisdiction.

When transferring personal data internationally, bbsiot applies appropriate safeguards, which may include:

• Executing standard contractual clauses with data recipients that impose data protection obligations consistent with recognised international privacy frameworks.
• Transferring data only to organisations that have implemented equivalent technical and organisational security measures to those applied by bbsiot.
• Conducting transfer impact assessments where required to evaluate the risks associated with specific cross-border data flows.

By using the bbsiot platform and accepting this Privacy Policy, you acknowledge that your personal data may be processed outside Bangladesh and consent to such transfers subject to the safeguards described above.

13 Children's Privacy

The bbsiot platform is strictly intended for adults aged 18 and above. We do not knowingly collect, process, or store personal data from individuals under the age of 18. If bbsiot discovers that personal data has been collected from a person under 18, that data will be deleted immediately and the associated account will be closed without notice.

If you are a parent or guardian and believe that a minor has registered on the bbsiot platform, please contact us immediately at [email protected] so that we can take appropriate action.

14 Third-Party Links and Services

The bbsiot platform may reference third-party services such as payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others). These third parties operate their own independent privacy policies, and bbsiot is not responsible for the data practices of any third-party service provider beyond the contractual obligations they have accepted as our data processors.

Players are encouraged to review the privacy policies of any third-party service with which they interact in connection with their use of the bbsiot platform.

15 Changes to This Privacy Policy

bbsiot reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, bbsiot will notify registered players via email to the address on file and/or via a prominent notice displayed on the platform.

The "Last Updated" date at the top of this document indicates when the current version came into effect. We encourage you to review this Policy periodically to stay informed about how we protect your data. Your continued use of the bbsiot platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

16 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bbsiot handles your personal data, please contact our data protection team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Rights Requests: "Data Rights Request"
• Subject Line for Privacy Queries: "Privacy Policy Enquiry"
• Live Chat: Available 24/7 via the in-platform chat widget
• Response Time: Within 4–12 hours by email; immediate via live chat (BST, UTC+6)