Privacy Policy for 288sb
Your privacy matters at 288sb. This Privacy Policy explains precisely what personal information we collect, how we use it, who we may share it with, and the rights you hold over your own data. We are committed to handling all player information with the highest standards of security and transparency.
- 1Introduction
- 2Data We Collect
- 3How We Collect Data
- 4How We Use Your Data
- 5Legal Basis for Processing
- 6Data Sharing & Disclosure
- 7International Data Transfers
- 8Data Retention
- 9Cookies & Tracking
- 10Your Data Rights
- 11Children's Privacy
- 12Security Measures
- 13Third-Party Links
- 14Policy Amendments
- 15Contact Us
About This Document: This Privacy Policy applies to all personal data collected and processed by 288sb in connection with the operation of the 288sb platform, including the website at https://288sb.io and any associated mobile interfaces. It should be read alongside the 288sb Terms & Conditions, which govern the overall contractual relationship between 288sb and its registered players.
Introduction
288sb ("we", "us", "our") operates an online betting and gaming platform serving players across Bangladesh, including in Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh, and Cox's Bazar. In the course of providing our services, we necessarily collect and process certain personal information relating to our users.
This Privacy Policy sets out in clear terms what categories of personal data we collect from you, the purposes for which that data is used, the circumstances in which it may be shared with third parties, and the rights you are entitled to exercise in respect of your personal information. We are committed to processing your data lawfully, fairly, and transparently at all times.
By registering an account with 288sb, making a deposit, placing a bet, or otherwise using any feature of the 288sb platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Privacy Policy, you should not use the 288sb platform.
288sb takes its data protection obligations seriously. All systems handling personal data are secured with industry-standard encryption, and access to player data within the organisation is restricted on a strict need-to-know basis. We do not sell, rent, or trade your personal data to third-party marketers under any circumstances.
Data We Collect
288sb collects personal data across several categories depending on how you interact with the platform. The specific data points collected are outlined below.
2.1 Identity & Contact Data
When you register a 288sb account, we collect your full legal name, date of birth, Bangladesh mobile phone number, and email address. If you proceed through the KYC (Know Your Customer) verification process, we additionally collect copies of your Bangladesh National Identity Card (NID), passport, or other government-issued identity documents as applicable.
2.2 Financial Data
To facilitate deposits and withdrawals, we collect information relating to your payment methods. This includes your registered bKash, Nagad, Rocket, or Upay mobile wallet number, and where card payments are used, the first six and last four digits of your Visa or Mastercard number (full card numbers are never stored on 288sb systems). We also retain a full transactional history of all deposits, withdrawals, bonuses, and wagers made through your account, denominated in Bangladeshi Taka (BDT).
2.3 Technical & Usage Data
When you access the 288sb platform, our systems automatically collect certain technical data including your IP address, browser type and version, operating system, device type and identifiers, referring URL, pages visited, session duration, and clickstream data. This information is used to maintain platform security, diagnose technical issues, and improve the overall player experience.
2.4 Communications Data
If you contact 288sb via live chat, email, or any other support channel, we retain records of that correspondence including the content of messages, timestamps, and any attachments or screenshots provided. This data is used for quality assurance, dispute resolution, and regulatory compliance purposes.
2.5 Behavioural & Gaming Data
We collect detailed records of your activity on the platform, including which games you play, bet sizes, win/loss outcomes, session frequency, responsible gaming tool usage (such as deposit limit settings and cooling-off requests), and any patterns of play that may be relevant to our responsible gaming obligations or fraud prevention measures.
Sensitive Data: 288sb does not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, genetic data, or biometric data. If any sensitive data is incidentally received (for example, within a document submitted for KYC purposes), it is treated with the highest level of protection and not used for any purpose beyond identity verification.
How We Collect Data
288sb collects personal data through the following channels and mechanisms:
- Direct Submission: Data you provide voluntarily when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting support, or responding to any 288sb survey or promotion.
- Automated Collection: Data collected automatically by our platform systems when you browse, log in, or interact with any feature of the 288sb website or interface, including cookies, server logs, and session tracking technologies.
- Third-Party Sources: Data received from third-party identity verification services, payment processors (including bKash, Nagad, Rocket, and Upay gateway providers), fraud detection partners, and publicly accessible sources such as sanctions screening databases, where necessary for compliance purposes.
- Device & Browser APIs: Technical information derived from the device and browser you use to access the platform, including screen resolution, time zone settings (Bangladesh Standard Time, UTC+6), and language preferences.
How We Use Your Data
288sb uses the personal data we collect for the following specific purposes:
4.1 Account Management
To register and maintain your 288sb player account, verify your identity, enforce the 21+ age restriction, process KYC documentation, manage your account settings, and communicate essential account-related notices to you via your registered email address or mobile number.
4.2 Service Delivery
To process your deposits and withdrawals via your chosen Bangladesh payment method, settle bets and gaming outcomes, award bonuses and promotional credits, and provide the full range of 288sb betting and casino services you have requested.
4.3 Legal & Regulatory Compliance
To fulfil our obligations under applicable anti-money laundering (AML) regulations, conduct sanctions screening, perform fraud detection and prevention activities, retain transaction records for the statutory retention periods required, and cooperate with law enforcement authorities where required by law.
4.4 Responsible Gaming
To monitor your gaming activity for indicators of problem gambling behaviour, enforce deposit limits and self-exclusion instructions you have requested, send responsible gaming reminders, and apply any player protection measures mandated by our operational policies.
4.5 Platform Improvement
To analyse aggregated and anonymised usage data in order to improve the performance, design, and functionality of the 288sb platform, personalise your experience where you have provided consent, and conduct internal research and analytics. Individual player data used for this purpose is anonymised wherever feasible.
4.6 Marketing Communications
To send you promotional offers, bonus notifications, and updates about new games or features at 288sb, where you have opted in to receive such communications. You may withdraw your consent to marketing communications at any time by contacting 288sb support or using the opt-out link in any marketing email.
4.7 Security & Fraud Prevention
To detect, investigate, and prevent unauthorised access to player accounts, identify collusion or bonus abuse patterns, screen for suspicious transaction activity, and protect both players and the 288sb platform from fraudulent or malicious activity.
Legal Basis for Processing
288sb processes personal data only where a valid legal basis exists for doing so. The legal bases we rely upon are as follows:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of a contract (the 288sb Terms & Conditions) |
| Processing deposits and withdrawals | Performance of a contract |
| KYC identity verification | Legal obligation and performance of a contract |
| AML screening and fraud prevention | Legal obligation and legitimate interests |
| Responsible gaming monitoring | Legal obligation and legitimate interests |
| Platform analytics and improvement | Legitimate interests (anonymised/aggregated data) |
| Marketing communications | Consent (opt-in, withdrawable at any time) |
| Retaining transaction records | Legal obligation |
Where 288sb relies on legitimate interests as a legal basis, we have assessed that those interests are not overridden by your rights and freedoms as a data subject, taking into account the nature of the data processed and the reasonable expectations of 288sb players.
Data Sharing & Disclosure
288sb does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or marketing organisations. Personal data may be shared with third parties only in the specific circumstances described below.
6.1 Payment Processors
To process your deposits and withdrawals, we share the minimum necessary transaction data with the relevant payment gateway or mobile wallet provider (bKash, Nagad, Rocket, Upay, Visa/Mastercard acquiring banks). These providers receive only the data required to execute your requested transaction and are contractually prohibited from using it for any other purpose.
6.2 Identity Verification Partners
To fulfil our KYC obligations, we may share your submitted identity documents and personal details with regulated third-party identity verification service providers. These providers operate under data processing agreements that bind them to handle your data securely and in accordance with applicable data protection standards.
6.3 Fraud Prevention & AML Screening
We may share data with third-party fraud detection and anti-money laundering screening services where necessary to protect the integrity of the 288sb platform and comply with our legal obligations. This may include sharing transaction data, IP addresses, and device fingerprints with screening providers on a confidential basis.
6.4 Law Enforcement & Regulatory Authorities
288sb will disclose personal data to law enforcement agencies, regulatory bodies, or other public authorities where we are legally compelled to do so, or where disclosure is necessary to prevent or investigate a crime, protect the safety of individuals, or defend the legal rights of 288sb.
6.5 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of the 288sb business, player data held at the time of the transaction may be transferred to the acquiring entity as part of the business assets. You will be notified in advance of any such transfer that affects the processing of your personal data.
No Third-Party Marketing Sharing: 288sb will never share your personal data with third-party advertisers, affiliate marketing networks, or data resellers for their own independent marketing purposes. Any promotional communications you receive from 288sb are sent directly by 288sb and are governed by your consent preferences.
International Data Transfers
288sb's primary operations and player data systems are oriented toward serving the Bangladesh market. In certain circumstances, personal data may be processed by third-party service providers (such as cloud infrastructure providers, KYC platforms, or fraud screening services) whose servers or operations are located outside Bangladesh.
Where personal data is transferred to a third country or territory, 288sb takes appropriate steps to ensure that such transfers are protected by adequate safeguards, including the use of standard contractual clauses, data processing agreements, or transfer to jurisdictions that maintain an adequate level of data protection as recognised by applicable standards.
If you wish to obtain further information about the specific safeguards applied to any international transfer of your personal data, please contact the 288sb data team using the contact details provided in Section 15 of this Privacy Policy.
Data Retention
288sb retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The specific retention periods applied to different categories of data are as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account plus 5 years after closure | Legal obligation / AML compliance |
| KYC identity documents | 5 years from account closure | Legal obligation |
| Transaction records (deposits / withdrawals) | 5 years from date of transaction | Legal obligation / AML compliance |
| Betting and gaming history | 5 years from date of activity | Legal obligation / dispute resolution |
| Support correspondence | 3 years from date of communication | Legitimate interests / dispute resolution |
| Technical / server logs | 12 months from date of collection | Legitimate interests / security |
| Marketing consent records | Until consent is withdrawn plus 1 year | Legal obligation (consent record) |
| Self-exclusion records | Indefinitely (permanent exclusion) or until expiry of period | Legal obligation / responsible gaming |
Upon expiry of the relevant retention period, personal data is securely deleted or anonymised in accordance with 288sb's internal data deletion procedures. Data that has been anonymised and can no longer be linked to any identifiable individual falls outside the scope of this Privacy Policy and may be retained indefinitely for analytical purposes.
Cookies & Tracking Technologies
The 288sb platform uses cookies and similar tracking technologies to deliver and improve the platform experience. A cookie is a small text file placed on your device by a website you visit. Cookies serve several functions on the 288sb platform, including maintaining your login session, remembering your language and display preferences, and collecting anonymised analytics data.
9.1 Types of Cookies Used
- Strictly Necessary Cookies: Required for the platform to function correctly. These include session authentication cookies that keep you logged in during your visit. These cookies cannot be disabled without rendering the platform inoperable.
- Functional Cookies: Used to remember your preferences such as your last-used payment method, preferred game category, and display settings. These improve your experience but are not essential to core platform function.
- Analytics Cookies: Used to collect anonymised data about how players interact with the 288sb platform, including which pages are visited most frequently and how players navigate between sections. This data is used solely to improve the platform and is never linked to individual player identities.
- Security Cookies: Used to detect and prevent fraudulent access attempts, bot activity, and other security threats. These cookies may record session metadata such as IP address, device fingerprint, and login timestamps.
9.2 Managing Cookies
You may control the use of non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies via the privacy or security settings menu. Please note that disabling functional or analytics cookies may affect the quality of your experience on the 288sb platform, though it will not prevent you from accessing core betting and gaming functionality.
288sb does not use third-party advertising cookies or cross-site tracking cookies for the purpose of serving targeted advertisements on external websites.
Your Data Rights
As a 288sb player, you hold a number of rights in relation to your personal data. These rights are described below. To exercise any of these rights, please contact the 288sb support team using the contact details provided in Section 15.
- Right of Access: You have the right to request a copy of the personal data that 288sb holds about you. We will provide a summary of your data in a clear, readable format within 30 days of receiving a valid access request.
- Right to Rectification: You have the right to request correction of any personal data held by 288sb that is inaccurate or incomplete. You may update certain account details directly through your account settings panel; for other corrections, contact 288sb support.
- Right to Erasure: In certain circumstances, you have the right to request deletion of your personal data. Please note that this right is subject to limitations where 288sb is legally required to retain data (for example, transaction records subject to AML retention obligations). 288sb will inform you of any applicable limitations when processing an erasure request.
- Right to Restrict Processing: You have the right to request that 288sb restricts its processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or where you have objected to processing pending verification of legitimate grounds.
- Right to Data Portability: Where processing is based on your consent or the performance of a contract and is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format.
- Right to Object: You have the right to object to processing of your personal data where that processing is based on legitimate interests. 288sb will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
- Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
Response Timeframe: 288sb will acknowledge all data rights requests within 5 business days and will provide a substantive response within 30 calendar days. Where a request is particularly complex or numerous, this period may be extended by a further 30 days, and you will be informed of the extension and the reasons for it.
Children's Privacy
The 288sb platform is strictly intended for adults aged 21 years and above. 288sb does not knowingly collect, process, or store personal data relating to individuals under the age of 21. The platform implements age verification controls at the point of registration, and KYC verification may be required to confirm a player's age before withdrawals are processed.
If 288sb becomes aware that personal data has been collected from an individual who is under the age of 21, that data will be deleted as promptly as possible, the associated account will be immediately suspended, and any funds held in the account will be frozen pending investigation. Any winnings generated by an underage player prior to discovery will be forfeited in their entirety in accordance with the 288sb Terms & Conditions.
If you are a parent or guardian and you believe that a minor in your care has registered a 288sb account or submitted personal data to the platform, please contact 288sb support immediately via the details in Section 15. We will treat such reports with the highest priority and take swift action to address the situation.
21+ Strictly Enforced: 288sb maintains a zero-tolerance policy on underage access. All registered players warrant at the point of registration that they are aged 21 or above. Age documentation may be requested at any time as part of ongoing KYC obligations.
Security Measures
288sb employs a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Key security measures in place include:
- 256-Bit SSL Encryption: All data transmitted between your device and the 288sb platform is encrypted using 256-bit SSL (Secure Sockets Layer) technology. This ensures that your login credentials, payment information, and personal data cannot be intercepted during transmission.
- Access Controls: Access to player data within the 288sb organisation is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories required to perform their specific role. All internal access is logged and audited.
- Data Minimisation: 288sb collects only the minimum personal data necessary for each stated processing purpose. Full payment card numbers, for example, are never stored on 288sb systems; only partial card details required for identification purposes are retained.
- Two-Factor Authentication (2FA): 288sb offers two-factor authentication via your registered Bangladesh mobile number to protect your account against unauthorised login attempts. Players are strongly encouraged to enable 2FA.
- Fraud Detection Systems: Automated fraud detection systems monitor account activity in real time for indicators of unauthorised access, suspicious betting patterns, and payment anomalies. Alerts are reviewed by the 288sb security team promptly.
- Penetration Testing: 288sb conducts regular security assessments and penetration tests of its platform infrastructure to identify and remediate potential vulnerabilities before they can be exploited.
While 288sb takes all reasonable steps to protect your personal data, no internet-based system can guarantee absolute security. You are responsible for keeping your 288sb login credentials confidential and for notifying 288sb immediately if you suspect any unauthorised access to your account.
Third-Party Links
The 288sb platform may from time to time contain references to, or functionality provided by, third-party service providers such as game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi). While 288sb takes care in selecting its third-party partners, we are not responsible for the privacy practices of third-party entities whose software or services are integrated into the 288sb platform.
Game content delivered by third-party studio providers operates within the 288sb platform environment. Any data collected by those game engines in the course of delivering the game experience is subject to the data processing agreements 288sb holds with each provider. These agreements require all third-party providers to handle player data in a manner consistent with this Privacy Policy.
If you have concerns about how a specific third-party provider handles data, we recommend reviewing that provider's own published privacy documentation. 288sb accepts no liability for the data practices of third-party entities operating outside the scope of their contractual obligations to 288sb.
Policy Amendments
288sb reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the structure of the 288sb platform. Material amendments — meaning changes that substantively affect your rights as a data subject or the way in which your personal data is processed — will be communicated to all registered players via email to their registered address at least 7 days before the amended policy takes effect.
Non-material amendments (such as typographical corrections, clarifications of existing provisions that do not change their substantive meaning, or updates to contact details) may be made without prior notice. The effective date displayed at the top of this page will be updated to reflect when the current version came into force.
It is your responsibility to review this Privacy Policy periodically. Your continued use of the 288sb platform following the effective date of any amendment constitutes your acceptance of the revised policy. If you do not accept an amendment to this Privacy Policy, you should cease using the 288sb platform and contact support to arrange account closure.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 288sb handles your personal data, please contact us using the details below. All data-related enquiries are handled by the 288sb support team with full confidentiality.
- Live Chat: Available 24 hours a day, 7 days a week, via the support chat accessible from any page of the 288sb platform. Live chat is the fastest channel for data rights requests and privacy enquiries.
- Email: [email protected] — please include "Privacy Enquiry" or "Data Rights Request" in the subject line of your message. This address is displayed as plain text and is not a clickable link; please copy it manually into your email client.
- Response Time: All privacy and data rights enquiries will be acknowledged within 5 business days. Substantive responses will be provided within 30 calendar days of acknowledgement.
Formal Data Rights Requests: To exercise any of the data rights described in Section 10 of this Privacy Policy (access, rectification, erasure, portability, restriction, or objection), please submit your request in writing to [email protected] with the subject line "Data Rights Request — [Your Account Username]". 288sb may require identity verification before processing a formal data rights request to ensure that personal data is not disclosed to an unauthorised party.
How 288sb Protects Your Privacy
A plain-language overview of the key privacy protections built into the 288sb platform for every registered player in Bangladesh.
Every byte of data exchanged between your device and the 288sb platform — including login credentials, payment details, and personal information — is protected by 256-bit SSL encryption. Your data in transit is unreadable to any third party.
288sb will never sell, rent, or share your personal data with external advertisers, data brokers, or marketing networks. Your information is used solely to operate your account, process transactions, and keep the platform secure — nothing more.
You hold comprehensive rights over your personal data at 288sb: access, correction, deletion, portability, restriction, and objection. Submit a request to [email protected] and our team will respond within 5 business days and resolve it within 30 calendar days.
Access to your player data within 288sb is restricted to staff who genuinely need it to perform their role. All internal data access is logged, audited, and reviewed regularly. No 288sb employee will ever ask you for your password, bKash PIN, or OTP code.
288sb publishes clear retention periods for every category of data it collects. Transaction records are retained for 5 years in line with AML compliance obligations. Server logs are deleted after 12 months. No data is kept longer than necessary.
288sb sends promotional emails and bonus notifications only to players who have explicitly opted in to receive such communications. You can withdraw your marketing consent at any time by contacting support or using the unsubscribe option in any marketing email. Your preference is applied immediately.
Have Questions About Your 288sb Account?
Visit our FAQ for quick answers, explore our full game library, or log in to manage your account settings and privacy preferences. For players aged 21 and above only.