boni88 Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal data collected and processed by boni88 ("boni88", "the Company", "we", "us", "our") in connection with the operation of the boni88 platform at boni88.pro, including all games, betting markets, promotional features, customer support channels, and any associated mobile browser interfaces.

By registering an account with boni88 or by continuing to use the boni88 platform after this Privacy Policy has been published or updated, you ("the Player", "you", "your") acknowledge that you have read and understood this policy and consent to the collection and processing of your personal data as described herein.

boni88 is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles. If you do not consent to the terms of this Privacy Policy, you must not register an account or continue to use the boni88 platform.

This Privacy Policy should be read alongside the boni88 Terms & Conditions and Responsible Gaming Policy, which together form the full contractual and compliance framework governing your use of the platform.

2. Personal Data We Collect

boni88 collects personal data from players through several channels, including the account registration form, the KYC verification process, payment transactions, platform usage activity, and direct communications with customer support. The categories of personal data we collect include:

• Identity data: Full legal name, date of birth, gender, nationality, and government-issued identification number (National ID card number or passport number).
• Contact data: Residential address (including city and district — for example, Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar), email address, and mobile phone number.
• Financial data: Payment method details including bKash, Nagad, Rocket, Upay, Visa, or Mastercard account identifiers (we do not store full card numbers), transaction history, deposit amounts in Bangladeshi Taka (৳), and withdrawal records.
• Verification documents: Copies of government-issued photo ID (NID card or passport) and, where required, a selfie photograph submitted for KYC identity verification.
• Technical data: IP address, device type, operating system, browser type and version, session timestamps, login history, and geolocation data (country and city level).
• Usage data: Game history, betting activity, bonus redemption records, session duration, and page interaction data collected via standard server logs and analytics tools.
• Communications data: Records of any correspondence between you and boni88 customer support, including live chat transcripts, support ticket content, and email exchanges.
• Marketing preferences: Your consent status and preference settings regarding promotional communications, including SMS, email, and in-platform notifications.

boni88 collects only the minimum personal data necessary for the purposes described in this policy. We do not collect sensitive categories of personal data such as racial or ethnic origin, religious beliefs, political opinions, health information, or biometric data beyond what is strictly required for identity verification.

3. How We Use Your Personal Data

boni88 uses the personal data it collects for the following specific purposes, each of which has a defined legal basis:

boni88 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a separate lawful basis for that new use.

4. Sharing Your Personal Data

boni88 does not sell, rent, or share your personal data with unaffiliated third parties for their own marketing purposes. We may share your personal data with the following categories of third parties, strictly for the purposes described in Section 3:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and card network partners (Visa, Mastercard) receive the minimum financial and identity data necessary to process your transactions securely.
• Identity verification providers: Third-party KYC and AML service providers may receive copies of your identity documents and identity data to perform regulated verification checks.
• Game content providers: Live casino and slot providers such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe receive pseudonymous player session identifiers to deliver game content and to report RTP (return to player) data. These providers do not receive your full name, contact details, or financial data.
• Analytics providers: Anonymised or aggregated technical and usage data may be shared with analytics service providers to help boni88 understand platform performance and improve the player experience.
• Legal and regulatory authorities: boni88 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, court order, or regulatory obligation — including AML reporting obligations.
• Professional advisers: Legal, accounting, and auditing firms engaged by boni88 may access personal data on a strictly need-to-know basis and are bound by confidentiality obligations.

All third-party service providers engaged by boni88 are contractually required to maintain the confidentiality and security of any personal data they receive and to process it only for the specified purpose for which it was shared.

5. Cookies and Tracking Technologies

boni88 uses cookies and similar tracking technologies on the boni88.pro platform to deliver and improve our services. Cookies are small text files placed on your device by your browser when you visit the boni88 platform. The types of cookies we use include:

• Strictly necessary cookies: Required for the platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without impairing your ability to use the platform.
• Functional cookies: Used to remember your preferences, such as language settings and login state, so that you do not need to re-enter them on each visit.
• Analytics cookies: Used to collect anonymised data about how players navigate the boni88 platform, including pages visited, session duration, and error events. This data helps us improve platform performance and user experience.
• Security cookies: Used to detect and prevent fraudulent activity, including credential-stuffing attempts and suspicious login patterns.

You may control cookie settings through your browser preferences. Please note that disabling strictly necessary cookies will prevent you from logging into your boni88 account. boni88 does not use third-party advertising cookies or behavioural tracking cookies that track your activity across unrelated websites.

6. Data Retention

boni88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any overriding legal or regulatory retention obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account relationship with boni88, and for a minimum of 5 years following the closure or termination of your account, in accordance with AML and financial record-keeping requirements.
• Transaction and financial records: Retained for a minimum of 5 years from the date of each transaction, in compliance with applicable financial regulations.
• KYC verification documents: Retained for a minimum of 5 years from the date of verification or from the date of account closure, whichever is later.
• Customer support communications: Retained for 2 years from the date of the final communication in each support interaction, or longer where the communication relates to an ongoing dispute or legal matter.
• Technical and usage logs: Retained for up to 12 months for security and fraud prevention purposes, after which they are deleted or fully anonymised.
• Marketing consent records: Retained for the duration of your opt-in consent and for 3 years following any withdrawal of consent, as evidence of compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised, unless a specific legal obligation requires continued retention. Players may request information about the retention period applicable to their specific data by contacting boni88 support.

7. Data Security

boni88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in transit: All data exchanged between your browser or mobile device and boni88 servers is protected by TLS 1.2 / 1.3 encryption (256-bit SSL). This applies to all page loads, login sessions, deposit flows, and API communications.
• Encryption at rest: Sensitive fields in the boni88 database — including identity document data, payment account identifiers, and authentication credentials — are encrypted at rest using industry-standard symmetric encryption algorithms.
• Access controls: Access to systems holding personal data is restricted on a strict need-to-know basis. All staff and contractors with data access undergo background screening and are bound by confidentiality obligations. Access privileges are reviewed regularly and revoked immediately upon termination of employment or contract.
• Two-factor authentication: Internal administrative access to player data systems requires two-factor authentication (2FA) on all accounts.
• Penetration testing and audits: boni88 engages independent security professionals to conduct periodic penetration tests and security audits of its platform infrastructure.
• Incident response: boni88 maintains a documented data breach response procedure. In the event of a security incident that poses a risk to your personal data, boni88 will notify affected players and relevant authorities in accordance with applicable law.

While boni88 takes all reasonable steps to protect your personal data, no system connected to the internet can be guaranteed to be completely secure. Players are responsible for maintaining the security of their own account credentials and should use a strong, unique password and enable any available account-level security features.

8. Your Data Rights

As a registered player on the boni88 platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact boni88 support via live chat or by writing to the email address shown in the footer of this page:

• Right of access: You have the right to request a copy of the personal data boni88 holds about you, along with information about how it is being processed. boni88 will respond to access requests within 30 days.
• Right to rectification: If any personal data boni88 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Identity data corrections require the submission of updated verification documents.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. Please note that this right is subject to boni88's legal and regulatory data retention obligations, which may require continued retention of certain data even after account closure.
• Right to restrict processing: You may request that boni88 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to its use for a particular purpose.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where boni88 relies on legitimate interests as the legal basis for that processing. You also have the right to withdraw marketing consent at any time by updating your notification preferences in your account settings or by contacting support.
• Right not to be subject to automated decision-making: boni88 may use automated systems for fraud detection and responsible gaming monitoring. Where such systems produce decisions that significantly affect your account status, you have the right to request human review of that decision.

boni88 will not charge a fee for processing data rights requests in normal circumstances. boni88 may request proof of identity before actioning a data rights request, to ensure that personal data is not disclosed to an unauthorised party.

9. Marketing Communications

boni88 may send you promotional communications about new games, seasonal bonuses, cricket betting markets (including BPL, IPL, and T20 World Cup promotions), Eid and Pohela Boishakh special offers, and other platform features. Marketing communications are only sent where you have given your explicit consent at the point of registration or through your account notification settings.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your notification preferences in the account settings section of the boni88 platform.
• Clicking the unsubscribe link included in any promotional email sent by boni88.
• Contacting boni88 customer support via live chat and requesting removal from all marketing lists.

Withdrawal of marketing consent will not affect the lawfulness of any processing carried out prior to the withdrawal, and will not affect your ability to use the boni88 platform. Note that boni88 may still send you essential non-promotional communications related to your account, such as security alerts, transaction confirmations, KYC verification requests, and updates to these policies.

10. Children and Minors

The boni88 platform is strictly intended for adults aged 21 years or older. boni88 does not knowingly collect, process, or store the personal data of any individual under the age of 21. Age verification is a mandatory step in the registration and KYC process, and accounts found to belong to individuals under 21 will be immediately suspended and all associated data will be handled in accordance with applicable law.

If boni88 becomes aware that personal data has been collected from an individual under the age of 21 without appropriate verification, it will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the boni88 platform, please contact us immediately at the email address shown in the footer of this page.

11. International Data Transfers

boni88 operates infrastructure and engages service providers that may be located outside Bangladesh. Where personal data is transferred to a third party located in another country, boni88 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to the protections described in this policy. Safeguards may include contractual data processing agreements incorporating standard data protection clauses, or the engagement of providers who maintain recognised international data security certifications.

Personal data relating to Bangladeshi players is processed and stored in a manner consistent with applicable data protection principles. boni88 does not transfer personal data to any country where it would be exposed to a lower standard of protection than that described in this Privacy Policy, without first putting appropriate protective measures in place.

12. Changes to This Privacy Policy

boni88 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, boni88 will notify registered players via the email address associated with their account and will post the updated Privacy Policy on the boni88.pro platform with a revised effective date at the top of the document.

Your continued use of the boni88 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Privacy Policy, you must stop using the boni88 platform and may request account closure by contacting customer support.

boni88 recommends that players review this Privacy Policy periodically to stay informed about how their personal data is being handled. The date shown at the top of this policy indicates when the current version was last reviewed and published.

13. Contact and Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way boni88 handles your personal data, please contact our support team. All data-related enquiries will be acknowledged within 24 hours and resolved within 30 days in accordance with the timelines described in Section 8.

You may reach boni88 customer support via the live chat function available within the boni88 platform at any time. Written enquiries may be directed to the email address displayed in the footer of this page. Please state clearly in your communication that your enquiry relates to a privacy or data protection matter, so that it can be routed directly to the appropriate team member.

For related legal documents, please also review our Terms & Conditions and Responsible Gaming policy.