t888m Privacy Policy — How We Protect Your Data

1 Information We Collect

1.1 Registration Data

When you create a t888m account, we collect the following information that you submit directly:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (used to verify you are aged 18 or above)
• Mobile phone number registered in Bangladesh
• Email address
• Preferred username and password (password stored in hashed, non-reversible form)
• Residential address (collected at the KYC verification stage)

1.2 Identity Verification Data

To comply with our Know Your Customer (KYC) obligations and to prevent underage gambling, t888m collects copies of identity documents when a player requests their first withdrawal or when a reasonable suspicion of account misuse arises. Accepted documents include:

• Bangladesh National Identity Card (NID) issued by the Election Commission
• Valid Bangladeshi passport (biographical data page)
• Valid Bangladeshi driving licence

Document images are encrypted immediately upon upload and are retained only for the period required to complete verification and satisfy record-keeping obligations, after which they are securely deleted from active storage.

1.3 Financial & Payment Data

When you make a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, t888m records the transaction reference number, the mobile number associated with the payment account, the transaction amount in Bangladeshi Taka (৳), the date and time of the transaction, and the direction of the transaction (deposit or withdrawal). t888m does not store full payment account credentials or PIN numbers. Payment processing is handled by the respective mobile money operators, whose own privacy policies govern the data they process on their side of the transaction.

1.4 Gameplay & Betting Data

t888m automatically records all gameplay and wagering activity on your account. This includes game titles played, bet amounts, win and loss outcomes, session start and end times, and responsible gaming tool interactions (such as deposit limit adjustments or self-exclusion requests). This data is used to operate your account accurately, resolve disputes, detect potential problem gambling patterns, and improve the platform's game offering.

1.5 Technical & Device Data

When you access t888m via a web browser or mobile device, we automatically collect certain technical information. This includes your IP address, browser type and version, device type (desktop, tablet, or mobile), operating system, screen resolution, referring URL, pages visited within the t888m site, and the date and time of each visit. This data is used for security monitoring, fraud detection, platform optimisation, and compliance with geographic access controls.

1.6 Communications Data

When you contact t888m's support team via live chat or email, we retain a record of the communication, including the content of the messages, the date and time of contact, and the resolution reached. This data is used for quality assurance, staff training, dispute resolution, and fraud investigation purposes.

2 How We Use Your Data

t888m uses the personal data it collects for the following specific and lawful purposes. We rely on one or more of the following legal bases for each use: performance of a contract with you; compliance with a legal obligation; our legitimate business interests; or, where required, your explicit consent.

2.1 Promotional Communications

If you have opted in to receiving promotional messages from t888m, we may contact you via SMS to your registered mobile number or via email to advise you of bonus offers, seasonal promotions tied to events such as Eid or the BPL Finals, new game launches, and other platform news. You may withdraw your consent to receive promotional communications at any time by contacting support at [email protected] or by updating your notification preferences within your account settings. Withdrawal of marketing consent does not affect your ability to use the platform.

3 Data Sharing & Third Parties

3.1 Payment Service Providers

To process your deposits and withdrawals, t888m shares the minimum necessary transaction data with the relevant mobile money operator — bKash, Nagad, Rocket, or Upay. The data shared is limited to the transaction amount, your registered mobile number, and a t888m-generated reference code. Each payment provider processes this data under their own privacy policy and terms of service, which we recommend you review independently.

3.2 Game Content Providers

t888m's game library includes titles provided by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Hacksaw Gaming, and Ezugi. When you launch a game from one of these providers, your t888m account identifier and session token are shared with the provider's game server for the purpose of conducting and recording the game session. Game providers do not receive your full name, identity documents, payment details, or contact information. Each provider operates its own data infrastructure under contractual data processing agreements with t888m.

3.3 Identity Verification Partners

Where t888m uses a third-party identity verification service to assist with KYC processing, your identity document images and relevant biographic data will be shared with that provider for the sole purpose of verifying your identity. t888m selects identity verification partners who maintain data security standards consistent with or exceeding our own, and who are contractually prohibited from using your data for any purpose other than verification.

3.4 Legal & Regulatory Disclosure

t888m may disclose personal data to competent authorities, law enforcement bodies, or regulatory agencies where required to do so by applicable law, a valid court order, or an instruction from a government body with appropriate jurisdiction. In such cases, t888m will disclose only the data specifically required by the request and will, where legally permissible, notify the affected player of the disclosure.

3.5 Business Transfers

In the event that t888m's business or any part of it is acquired by, merged with, or transferred to another entity, player data may form part of the transferred assets. In such circumstances, t888m will take reasonable steps to ensure that the receiving entity is bound by privacy obligations equivalent to those set out in this Privacy Policy, and will notify affected players of the change in data controller prior to any transfer taking effect.

4 Cookies & Tracking Technologies

4.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — for example, your preferred language, login session status, or items in a cart — and to recognise your device on a return visit. t888m uses cookies and similar tracking technologies (including local storage objects and session tokens) to operate and improve the platform.

4.2 Types of Cookies Used by t888m

• Strictly Necessary Cookies: These cookies are essential to the operation of the t888m platform. They maintain your logged-in session, remember your account preferences during a visit, and enable core security functions. These cookies cannot be disabled without preventing you from using the platform.
• Functional Cookies: These cookies remember choices you make (such as your preferred game category or display settings) to provide a more personalised experience. Disabling these cookies may reduce the convenience of using the platform but will not prevent access.
• Analytics Cookies: t888m uses anonymised analytics data to understand how players navigate the platform, which pages are most visited, and where technical issues occur. This data is used in aggregate form and does not identify individual players.
• Security Cookies: These cookies assist in detecting and preventing fraudulent activity, bot access, and account takeover attempts. They form part of t888m's active fraud-detection infrastructure.

4.3 Managing Your Cookie Preferences

You can manage or delete cookies through your browser settings at any time. Most modern browsers allow you to block third-party cookies, clear all cookies on exit, or receive a notification before a cookie is placed. Please note that disabling strictly necessary cookies will prevent you from logging in and using the t888m platform. Detailed instructions for managing cookies in common browsers are available through each browser's official help documentation.

4.4 No Cross-Site Tracking

t888m does not use cross-site tracking technologies to follow your browsing activity on websites other than t888m.app. The tracking technologies used by t888m are confined to the t888m platform and are used solely for the purposes described in this section.

5 Data Security & Retention

5.1 Security Measures

t888m implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and t888m's servers
• Encryption of sensitive data fields (including passwords and identity document images) at rest
• Role-based access controls limiting staff access to personal data to those with a demonstrated operational need
• Regular security audits and penetration testing of the platform infrastructure
• Two-factor authentication (2FA) options available to all registered players
• Real-time fraud monitoring and anomaly detection on account activity

5.2 Data Retention Periods

t888m retains personal data for as long as your account remains active and for a period thereafter as required to fulfil legal, regulatory, and operational obligations. As a general guide:

• Account registration data is retained for the duration of the account and for five years following account closure.
• Identity verification documents are retained for the minimum period required by applicable anti-money laundering regulations, typically five years from the date of verification.
• Transaction records are retained for five years following the date of each transaction.
• Support communications are retained for two years from the date of the last communication in each case.
• Anonymised analytics data may be retained indefinitely as it cannot be used to identify any individual.

When personal data is no longer required, it is securely deleted or anonymised using methods designed to make re-identification impossible.

5.3 Data Breach Response

In the event of a personal data breach that poses a significant risk to affected players' rights and interests, t888m will take immediate steps to contain the breach, assess its scope, and notify affected players and, where applicable, relevant authorities without undue delay. Notification will be provided to the email address or mobile number on your registered account. t888m maintains a documented incident response procedure that is reviewed and updated regularly.

6 Your Privacy Rights

6.1 Withdrawing Consent

Where t888m processes your personal data on the basis of your consent (for example, for promotional communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. You can withdraw consent for marketing communications at any time by emailing [email protected].

6.2 Complaints

If you believe that t888m has not handled your personal data in accordance with this Privacy Policy or applicable law, you are encouraged to contact us in the first instance at [email protected] so that we can investigate and attempt to resolve your concern. t888m will acknowledge privacy complaints within 48 hours and aims to resolve them within 14 calendar days.

7 Children's Privacy & Minors

t888m employs age verification at the account registration stage and mandatory KYC document verification before processing any withdrawal. These measures are specifically designed to detect and prevent underage access. Any account found to belong to a person under the age of 18 will be immediately closed, all balances forfeited, and the matter reported to the appropriate authorities where required by law.

t888m strongly encourages parents and guardians to make use of parental control software to restrict access to online gambling platforms on devices used by minors. A number of free parental control tools are available for both Android and iOS devices that can be used to block access to gambling websites by category.

8 Policy Updates & Contact

8.1 Updates to This Privacy Policy

t888m reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will update the "Last Updated" date at the top of this document and, where the changes significantly affect your rights or our obligations, notify you via your registered email address or mobile number before the changes take effect. Your continued use of the t888m platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms.

8.2 Contacting t888m About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way t888m handles your personal data, please contact our support team. All privacy-related enquiries should include your registered account username and a clear description of your request or concern to help us process it efficiently. Our support team is available 24 hours a day, 7 days a week on Bangladesh Standard Time (BST, UTC+6).

Email for privacy enquiries: [email protected] — please use the subject line "Privacy Enquiry" or "Privacy Rights Request" for faster routing.

8.3 Relationship to Other t888m Policies

This Privacy Policy should be read alongside t888m's Terms & Conditions and Responsible Gaming policy. Together, these three documents form the complete framework governing your relationship with t888m. In the event of any conflict between the Privacy Policy and the Terms & Conditions on a data-related matter, the Privacy Policy shall take precedence with respect to the processing of personal data.