sbj88 Privacy Policy

This Privacy Policy describes how sbj88 ("we", "us", "our", or "sbj88") collects, uses, stores, shares, and protects the personal data of users ("you", "your", or "player") who access or register on the sbj88 platform available at sbj88.io. This Policy forms part of the overall sbj88 Terms & Conditions and should be read alongside them.

sbj88 acts as the data controller in respect of all personal data collected through the sbj88 platform. As data controller, sbj88 determines the purposes for which personal data is processed and the means by which that processing takes place. sbj88 is committed to handling all personal data in a manner that is transparent, lawful, and consistent with good data governance practices.

By registering an account on sbj88.io or by continuing to use the platform after this Policy has been published, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

sbj88 collects personal data from you in two ways: data you provide directly when interacting with the platform, and data that is generated automatically as a result of your use of the platform. The categories of personal data we collect are described in the table below.

sbj88 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data, except where identity documents provided during KYC review incidentally contain such information, in which case only the identity-relevant fields are processed.

sbj88 uses the personal data it collects for specific, documented purposes. We do not use personal data for any purpose incompatible with those stated here without first informing you and, where required, obtaining your consent. The primary purposes for which sbj88 processes personal data are as follows:

• Account creation and management: To create and maintain your sbj88 account, verify your identity, and ensure only eligible players (21 years or older, resident in Bangladesh) access the platform.
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard accurately and securely, and to maintain a complete and auditable financial record for each account.
• Regulatory compliance and fraud prevention: To fulfil our KYC (Know Your Customer) and anti-money laundering (AML) obligations, to detect and prevent fraudulent activity, and to respond to requests from law enforcement or regulatory bodies where required by law.
• Customer support: To respond to your enquiries, resolve complaints, process responsible gaming requests (such as self-exclusion or deposit limit adjustments), and improve the quality of our support service.
• Platform personalisation and improvement: To analyse how players use the sbj88 platform, identify areas for improvement, and personalise your experience (for example, recommending cricket betting markets relevant to BPL or T20 matches you have previously engaged with).
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates by email or SMS, but only where you have opted in to receive such communications. You may withdraw consent at any time.
• Security and technical operations: To monitor platform security, investigate suspicious activity, prevent unauthorised access, and maintain the technical integrity of sbj88.io.

sbj88 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual necessity: Processing that is necessary to perform the contract between you and sbj88 — including account registration, payment processing, and game access — is carried out on the basis of contractual necessity.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements — including KYC verification, AML checks, and retention of financial records — is carried out on the basis of legal obligation.
• Legitimate interests: Processing activities such as fraud detection, platform security monitoring, internal analytics, and service improvement are carried out on the basis of sbj88's legitimate interests, provided those interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications and the use of non-essential cookies is carried out on the basis of your freely given, informed, and specific consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

sbj88 does not sell, rent, or trade your personal data to any third party for their own independent commercial purposes. Personal data may be shared with carefully selected third-party organisations only in the following circumstances and under binding data processing agreements:

• Payment service providers: bKash, Nagad, Rocket, Upay, and card processing partners receive only the payment data strictly necessary to process a deposit or withdrawal transaction. These providers operate their own privacy policies in respect of data shared with them.
• Game and software providers: Third-party game studios (Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, Microgaming, and others) may receive anonymised or session-level technical data required to deliver their games via the sbj88 platform. These providers do not receive your full identity or payment data.
• Identity verification services: KYC and AML compliance providers may receive identity documents and identity data to perform verification checks on sbj88's behalf.
• IT infrastructure and hosting providers: Cloud hosting and content delivery network providers that host the sbj88 platform infrastructure may process technical data (including IP addresses and server logs) as part of their hosting services.
• Law enforcement and regulatory authorities: sbj88 will disclose personal data to governmental, law enforcement, or regulatory bodies in Bangladesh or other relevant jurisdictions where required to do so by applicable law, court order, or regulatory direction, without prior notice to you where legally required.

All third-party processors engaged by sbj88 are required to process personal data only on sbj88's documented instructions, to maintain appropriate technical and organisational security measures, and to delete or return data upon termination of their engagement.

sbj88 uses cookies and similar tracking technologies on sbj88.io to support core platform functionality, analyse usage patterns, and deliver relevant content to players. The categories of cookies used on the sbj88 platform are as follows:

• Strictly necessary cookies: These cookies are essential for the sbj88 platform to function. They manage your login session, maintain your account authentication state, and enable core security features. These cookies cannot be disabled without preventing you from using the platform.
• Performance and analytics cookies: These cookies collect anonymised data about how players interact with sbj88.io — including which pages are visited most frequently, session duration, and error reports. This data helps sbj88 improve platform performance and usability.
• Functional cookies: These cookies remember your preferences and settings (such as language, currency display, and notification preferences) so that you do not need to re-enter them on each visit.
• Marketing cookies: These cookies are used, with your consent, to deliver promotional content relevant to your interests. They track visits across sbj88.io to build a profile of your preferences.

You can manage your cookie preferences at any time via your browser settings. Note that disabling certain cookies may affect the functionality of the sbj88 platform. sbj88 does not use third-party advertising networks to serve ads to you outside of sbj88.io based on your sbj88 activity.

sbj88 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulation. The following retention principles apply:

• Active account data: Personal data associated with an active sbj88 account is retained for the full duration of the account relationship and for a minimum period of five (5) years following account closure, in order to satisfy financial record-keeping and AML compliance obligations.
• KYC and identity verification documents: Copies of identity documents submitted during the KYC process are retained for a minimum of five (5) years from the date of submission, or longer if required by applicable regulatory guidance.
• Transaction records: Records of all deposits, withdrawals, bets, and game rounds are retained for a minimum of five (5) years following the date of each transaction.
• Support communications: Live chat transcripts and support ticket records are retained for a period of two (2) years from the date of the interaction, unless they relate to a formal complaint or legal proceeding, in which case they are retained until resolution plus one (1) year.
• Marketing data: Email and SMS marketing consent records and communication logs are retained for the duration of your consent plus two (2) years, or until you withdraw consent, whichever is earlier.

When personal data reaches the end of its retention period and no legal obligation requires its continued storage, sbj88 will securely delete or irreversibly anonymise that data.

sbj88 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following measures:

• Encryption in transit: All data exchanged between your browser or mobile device and sbj88 servers is encrypted using 256-bit TLS (Transport Layer Security) protocols. The padlock icon in your browser's address bar confirms this connection is secure.
• Encryption at rest: Sensitive personal data — including identity documents and payment account identifiers — is encrypted at rest using AES-256 encryption on sbj88's secure server infrastructure.
• Access controls: Access to personal data within sbj88's internal systems is restricted on a strict need-to-know basis. Staff with access to personal data are required to complete data protection training and are bound by confidentiality obligations.
• Two-factor authentication: sbj88 supports SMS OTP-based two-factor authentication for player accounts, and mandates multi-factor authentication for all internal administrative system access.
• Penetration testing and security audits: sbj88's platform infrastructure undergoes regular security assessments, including penetration testing by independent security professionals, to identify and remediate vulnerabilities.
• Incident response: sbj88 maintains a documented data breach response procedure. In the event of a security incident that poses a risk to your personal data, sbj88 will take immediate containment steps and notify affected players as required.

As an sbj88 account holder whose personal data is processed by sbj88, you hold the following rights in relation to that data. To exercise any of these rights, contact sbj88 support via live chat or by emailing [email protected] (plain text — not a clickable link).

• Right of access: You have the right to request a copy of the personal data sbj88 holds about you, along with information about how that data is being processed.
• Right to rectification: If any personal data sbj88 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to erasure: You may request that sbj88 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interests. This right is subject to any overriding legal retention obligations.
• Right to restrict processing: You may request that sbj88 restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed.
• Right to data portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive a structured, machine-readable copy of the data you have provided to sbj88.
• Right to object: You have the right to object to sbj88 processing your personal data for direct marketing purposes at any time. You may also object to processing based on sbj88's legitimate interests, though such objections are subject to assessment against sbj88's grounds for processing.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing already carried out.

sbj88 will respond to all data rights requests within 30 calendar days of receipt. Where a request is complex or high in volume, sbj88 may extend this period by a further 30 days, with prior notice to you.

The sbj88 platform is strictly intended for adults aged 21 years and above. sbj88 does not knowingly collect personal data from individuals under the age of 21. The platform's registration process includes age verification steps designed to prevent access by minors.

If sbj88 becomes aware that personal data has been collected from an individual under the age of 21 — whether through a fraudulent registration or any other means — sbj88 will immediately suspend the account, securely delete or quarantine the associated personal data, and conduct a review in accordance with sbj88's underage gambling prevention procedures.

If you are a parent or guardian and believe that a person under the age of 21 in your care has registered an account on sbj88, please contact sbj88 support immediately via live chat so that the account can be closed and the data addressed without delay.

sbj88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or our internal data processing practices. When material changes are made, the "Last Updated" date at the top of this page will be revised, and where the changes are significant, sbj88 will make reasonable efforts to notify active account holders via their registered email address or through an in-platform notice.

Your continued use of the sbj88 platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with the amended Policy, you should cease using the sbj88 platform and contact support to arrange account closure.

sbj88 recommends that you review this Privacy Policy periodically to stay informed about how your personal data is being handled. The version history of this Policy is available on request from the sbj88 support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or sbj88's processing of your personal data, please contact the sbj88 Data Privacy team using the following channels:

• Live Chat: Available 24/7 via sbj88.io — select the "Privacy / Data" topic from the support menu for fastest routing.
• Email: [email protected] — plain text address, not a clickable link. Please include "Privacy Request" in your subject line along with your registered username.
• Response time: sbj88 aims to acknowledge all privacy-related enquiries within 48 hours, and to provide a substantive response within 30 calendar days.

If you are unsatisfied with sbj88's response to a data privacy concern, you have the right to escalate the matter through sbj88's formal complaints procedure. Details of this procedure are available from the sbj88 support team upon request.