888tt Privacy Policy

This Privacy Policy applies to all personal data processed by 888tt in connection with the operation of the 888tt online casino and sports betting platform, including all services accessible at https://888tt.io and any mobile or app-based interface we may make available. It covers data collected directly from players during registration and gameplay, data gathered automatically through your use of the platform, and data received from third-party service providers acting on our behalf.

This Policy should be read together with the 888tt Terms & Conditions and Responsible Gaming Policy. Where those documents reference data-related matters, this Policy governs. In the event of any inconsistency between this Policy and any other document on the platform, this Policy takes precedence with respect to data protection matters.

888tt is committed to handling your personal data in a lawful, fair, and transparent manner. We apply the principles of data minimisation, purpose limitation, and storage limitation across all data processing activities. We do not process your data for any purpose other than those described in this Policy without first obtaining your explicit consent.

888tt acts as the data controller for all personal data collected through the 888tt platform. As the data controller, 888tt determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection standards.

For all data protection enquiries, rights requests, and complaints, you may contact 888tt's designated data protection point of contact using the details provided in Section 14 of this Policy. All data protection correspondence should be directed to the support team at [email protected] — displayed here as plain text and not as a clickable link.

888tt collects personal data through three primary channels: information you provide directly, information collected automatically, and information received from third parties. The categories of data we collect are set out below.

3.1 Data You Provide Directly

• Registration Data: Full legal name, date of birth, gender, nationality, residential address (including city and division within Bangladesh), email address, and Bangladeshi mobile phone number.
• Identity Verification (KYC) Data: Government-issued photo identification (National ID Card, passport, or driving licence), proof of address documents, and selfie or biometric verification images where required.
• Payment Data: Mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers), bank account details, and card data (card number, expiry, cardholder name) for Visa and Mastercard transactions. Full card numbers are processed exclusively by our PCI-DSS-compliant payment processors and are not stored on 888tt servers.
• Support Communications: The content of any messages, emails, or live chat transcripts you exchange with the 888tt support team, including any attachments or supporting documents you submit.
• Responsible Gaming Data: Any deposit limits, cooling-off periods, self-exclusion requests, or reality check preferences you set on your account.

3.2 Data Collected Automatically

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage Data: Pages visited, time spent on each page, game sessions initiated, bets placed, game outcomes, login and logout timestamps, and clickstream data.
• Session Cookies: Temporary cookies used to maintain your authenticated session. These expire when you close your browser and are essential for platform functionality.
• Analytics Data: Aggregated and, where possible, anonymised data about platform usage patterns, collected via analytics tools we operate internally.

3.3 Data Received from Third Parties

• Payment Processors: Transaction confirmation data, fraud scoring results, and payment status updates from bKash, Nagad, Rocket, Upay, and our card payment processing partners.
• KYC Verification Partners: Identity verification results, document authenticity assessments, and age confirmation outputs from our third-party KYC service providers.
• Fraud Prevention Services: Risk scores, flagged behaviour indicators, and device fingerprint data from fraud detection service providers we engage to protect the integrity of the platform.

888tt uses the personal data we collect for the following specific and documented purposes. We do not use your data for any purpose incompatible with those listed below without obtaining your prior consent.

888tt relies on the following legal bases when processing your personal data:

• Contract Performance: Processing that is necessary to perform the contract between you and 888tt — including account creation, payment processing, and customer support — is carried out on the basis that it is required to deliver the service you have signed up to receive.
• Legal Obligation: Certain processing activities, such as KYC identity verification, anti-money-laundering checks, and the maintenance of records required by applicable law, are mandatory and cannot be waived. Failure to provide the data necessary for these activities may result in restrictions on your account.
• Legitimate Interest: 888tt processes certain data — including device data for fraud prevention and aggregated usage data for platform improvement — on the basis of its legitimate interest in maintaining a secure, reliable, and commercially viable platform, provided that this interest does not override your fundamental privacy rights.
• Consent: Where 888tt relies on consent as the legal basis for processing (most notably for sending promotional communications), you are free to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

888tt does not sell, rent, or trade your personal data to any third party. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment Service Providers: We share transaction-related data with bKash, Nagad, Rocket, Upay, and our card payment processing partners solely to authorise, process, and reconcile your deposits and withdrawals. These providers operate under their own privacy policies and are independently responsible for data they hold.
• KYC and Identity Verification Partners: We share identity documents and registration data with our contracted KYC verification service providers solely to fulfil our age verification and anti-fraud obligations. These providers are contractually prohibited from using your data for any other purpose.
• Fraud Prevention and Security Services: We share device and behavioural data with fraud detection services to identify and prevent account takeover, money laundering, and other platform abuses. All such providers are bound by strict data processing agreements.
• Game Technology Providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session-level technical data required to operate their games on our platform. This data does not include your full identity details and is used solely for game delivery purposes.
• Legal and Regulatory Disclosure: 888tt may disclose your personal data to law enforcement agencies, financial intelligence units, or other governmental authorities where required to do so by applicable law, court order, or regulatory obligation. We will notify you of any such disclosure to the extent legally permitted.
• Corporate Transactions: In the event of a merger, acquisition, or sale of substantially all of 888tt's assets, your personal data may be transferred to the successor entity. We will provide advance notice of any such transfer and the new data controller's identity.

888tt uses cookies and similar tracking technologies on the platform. The following table summarises the types of cookies we use, their purpose, and their retention duration:

888tt does not use third-party advertising cookies, behavioural retargeting cookies, or social media tracking pixels on the platform. You may manage your cookie preferences at any time by adjusting your browser settings. Note that disabling essential session cookies will prevent you from logging in to your account.

888tt retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected or as required by applicable law. The following retention periods apply:

• Active Account Data: Registration, KYC, payment, and usage data associated with an active player account is retained for the duration of the account's existence and for a period of five (5) years following account closure.
• Transaction Records: Financial transaction records, including deposit and withdrawal history, are retained for a minimum of seven (7) years from the date of each transaction to comply with applicable financial record-keeping obligations.
• Support Communications: Records of customer support interactions are retained for three (3) years from the date of the interaction, or longer where the interaction relates to an unresolved dispute.
• Self-Exclusion Records: Where a player has applied for permanent self-exclusion, their identity data is retained indefinitely to prevent re-registration. Other personal data associated with a self-excluded account is deleted or anonymised after the standard five-year post-closure retention period.
• Analytics Data: Aggregated and anonymised analytics data may be retained indefinitely as it does not constitute personal data once fully anonymised.

Upon expiry of the relevant retention period, your personal data will be securely deleted or irreversibly anonymised. You may request early deletion of your data under the rights described in Section 10, subject to our legal retention obligations.

888tt implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes the following controls:

• TLS/SSL Encryption: All data transmitted between your device and the 888tt platform is encrypted using TLS 1.2 or higher. The platform operates exclusively over HTTPS.
• Encryption at Rest: Sensitive personal data stored on 888tt servers — including identity verification data and payment records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to 888tt employees and contractors who require it to perform their specific job functions. All staff with data access are subject to confidentiality obligations and receive regular data protection training.
• Multi-Factor Authentication: Access to internal systems containing personal data requires multi-factor authentication for all 888tt personnel.
• Penetration Testing: 888tt engages independent security professionals to conduct regular penetration tests and vulnerability assessments of the platform and its underlying infrastructure.
• Incident Response: In the event of a data breach that is likely to result in a risk to your rights and freedoms, 888tt will notify affected players without undue delay and take all necessary remedial action. We maintain a documented incident response plan for this purpose.

As a data subject, you hold the following rights in relation to the personal data that 888tt holds about you. To exercise any of these rights, please contact our support team at [email protected] (plain text — not a clickable link). We will respond to all verified rights requests within 30 days.

• Right of Access: You have the right to request a copy of the personal data that 888tt holds about you, along with information about how that data is being used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may update most account information directly from your account settings after login.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. This right is subject to our legal retention obligations described in Section 8.
• Right to Restriction: You have the right to request that we restrict our processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: You have the right to receive the personal data you have provided to 888tt in a structured, commonly used, machine-readable format, and to request that we transmit that data to another controller where technically feasible.
• Right to Object: You have the right to object to our processing of your personal data where that processing is based on legitimate interest. You also have an unconditional right to object to processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

The 888tt platform is strictly restricted to adults aged 21 years and above. 888tt does not knowingly collect or process personal data from individuals under the age of 21. Registration on the platform constitutes a declaration by the user that they are at least 21 years of age.

If 888tt becomes aware that personal data has been collected from an individual who is under 21 years of age, we will immediately suspend the relevant account, delete the associated personal data, and reverse any transactions carried out during that period to the extent technically possible. Any bonus funds or winnings accumulated by an underage user will be forfeited.

Account holders are responsible for ensuring that minors in their household do not have access to their 888tt account credentials or the platform. We recommend using device-level parental controls and password managers to prevent unauthorised minor access.

The 888tt platform does not contain outbound links to third-party websites. However, third-party game studios whose games are available on the platform (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) operate their own privacy policies with respect to data processed within their game software. 888tt is not responsible for the data practices of these studios beyond the scope of the data processing agreements we maintain with each provider.

Payment service providers — including bKash, Nagad, Rocket, Upay, Visa, and Mastercard — also maintain their own privacy policies governing transaction data processed through their respective systems. 888tt encourages players to review the privacy policies of all payment service providers they use in connection with the platform.

888tt reserves the right to update this Privacy Policy at any time. When material changes are made to this Policy — changes that affect your rights or how your data is used — we will provide advance notice to registered players via email to the address on file and/or a prominent notice on the platform. The revised Policy will take effect on the date specified in the notice.

Your continued use of the 888tt platform after the effective date of any revised Policy constitutes your acknowledgement of the updated terms. If you do not agree with the changes, you must stop using the platform and may request account closure in accordance with the Terms & Conditions.

The current version of this Privacy Policy is always available at https://888tt.io/privacy-policy. The effective date shown at the top of this document indicates when it was last updated. We recommend reviewing this page periodically to stay informed of any revisions.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a complaint about how 888tt has handled your personal data, please contact our support team using the details below. All correspondence should be directed to our designated data protection contact.

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: Available 24/7, Bangladesh Standard Time (BST, UTC+6)
• Languages: English and Bengali support available
• Response Time: We aim to acknowledge all privacy-related enquiries within 3 business days and to provide a substantive response within 30 calendar days of receiving a verified request.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection authority or regulatory body in your jurisdiction. 888tt will cooperate fully with any regulatory investigation carried out in accordance with applicable law.