Privacy Policy — babu365

Section 1

Information We Collect

babu365 collects personal data only to the extent necessary to provide a safe, secure, and high-quality online casino and sports betting service to players in Bangladesh. We collect information in three principal ways: information you provide to us directly, information collected automatically when you use the platform, and information received from third-party service providers such as payment processors and identity verification partners.

Information you provide directly: When you register an account on babu365, you provide us with your full legal name, date of birth, residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or elsewhere in Bangladesh), email address, and mobile phone number. You may also be asked to provide your Bangladesh National Identity Card (NID) number or passport number as part of our KYC verification process.

Sensitive data: babu365 does not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for identity verification purposes. If you voluntarily disclose such information during a support interaction, we will handle it with the highest level of care and will not store it beyond the resolution of your query.

Section 2

How We Use Your Data

babu365 processes your personal data on the basis of contractual necessity (to deliver the services you have registered for), legal obligation (to comply with KYC, AML, and applicable regulatory requirements), legitimate interest (to protect the security and integrity of the platform), and, where applicable, your explicit consent (for optional communications such as promotional emails).

• Account management: We use your identity and contact data to create, verify, maintain, and administer your babu365 account. This includes processing your registration, verifying your age, and communicating important account notices such as password reset confirmations and withdrawal approvals.
• Payment processing: Your financial data — including your bKash, Nagad, Rocket, Upay, or bank account details — is used exclusively to process deposits and withdrawals in Bangladeshi Taka (BDT). We transmit payment data to our licensed payment processing partners under strict data processing agreements.
• KYC and fraud prevention: We use identity data, technical data, and usage data to verify your identity, detect and prevent fraud, money laundering, and bonus abuse, and to comply with applicable AML obligations. This may involve automated risk-scoring systems supplemented by manual review by our compliance team.
• Service personalisation: We use usage data — such as the games you play most frequently, your preferred betting markets (e.g., BPL cricket, IPL, football), and your session history — to personalise your babu365 homepage, recommend relevant games, and tailor promotional offers to your activity profile.
• Promotional communications: With your consent, we may send you promotional emails and SMS messages regarding new games, deposit bonuses, seasonal promotions (Eid, Pohela Boishakh, BPL season), and responsible gaming reminders. You may withdraw this consent at any time by updating your communication preferences in your account settings or by contacting support.
• Platform analytics and improvement: We analyse aggregated and anonymised usage data to understand how players interact with babu365, identify areas for improvement, test new features, and optimise platform performance. This analytics processing does not involve individually identifying you from aggregated data sets.
• Legal compliance and dispute resolution: We may use and retain your data as required to comply with applicable laws, respond to legal proceedings, enforce our Terms & Conditions, resolve disputes, and protect the rights, property, or safety of babu365, our players, or third parties.

babu365 will not use your personal data for any purpose that is incompatible with the purposes described in this Privacy Policy without first obtaining your explicit consent or establishing a separate lawful basis for the new processing activity.

Section 3

Data Sharing & Disclosure

babu365 does not sell your personal data. We share your data only with trusted third-party service providers who are contractually bound to process it solely for the purposes specified by babu365 and to maintain security standards equivalent to our own. The categories of recipients with whom data may be shared are set out below.

1. Payment processing partners: When you make a deposit or withdrawal using bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank, the relevant financial data is shared with that payment provider to execute the transaction. Each payment partner operates under its own privacy policy and is subject to Bangladesh Bank regulations and applicable financial services laws.
2. Identity verification providers: To fulfil our KYC obligations, babu365 works with specialist identity verification service providers who cross-reference the identity documents you submit against relevant databases. These providers are bound by strict confidentiality obligations and data processing agreements.
3. Game software providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical data (such as player session tokens and game history) as required to deliver their games through the babu365 platform. These providers do not receive your full identity or financial data.
4. Analytics and platform performance providers: We use third-party analytics tools to monitor platform uptime, detect performance issues, and analyse aggregated traffic patterns. These tools process technical data (IP addresses, device type, session duration) under data processing agreements that prohibit independent use of the data.
5. Legal and regulatory authorities: babu365 may disclose personal data to law enforcement agencies, courts, regulatory bodies, or other government authorities where required by law, in response to a valid legal request, or where we determine in good faith that disclosure is necessary to protect the safety of any person, to address fraud, or to protect the legal rights of babu365.
6. Business transfers: In the event of a merger, acquisition, restructuring, or sale of all or substantially all of babu365's assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified via the email address associated with your account before your data is transferred and becomes subject to a different privacy policy.

Section 4

Cookies & Tracking Technologies

babu365 uses cookies and similar technologies (such as local storage objects and session tokens) to operate the platform, maintain your login session, detect fraud, and analyse platform performance. Cookies are small text files placed on your device by your web browser when you visit babu365. They allow the platform to recognise your device on subsequent visits and to maintain your preferences and session state.

babu365 does not use advertising cookies, retargeting cookies, or cross-site tracking technologies that would allow third-party advertisers to build a behavioural profile of you across external websites. All analytics data is processed in aggregated or pseudonymised form and is not used to identify you individually.

Managing cookies: You may configure your browser to block or delete cookies. Please note that blocking strictly necessary cookies will prevent babu365 from functioning correctly — you will not be able to log in, maintain a game session, or process transactions. Blocking functional or analytics cookies will not affect your ability to access the core platform but may reduce personalisation quality. Browser-level cookie controls are available in your browser's privacy or settings menu.

Section 5

Data Security Measures

babu365 implements a layered, defence-in-depth security architecture to protect all personal data held on the platform. Our security measures are reviewed and updated regularly to address evolving threats. The key technical and organisational measures in place include the following:

• Transport Layer Security (TLS 1.3): All data transmitted between your browser or mobile device and babu365 servers is encrypted using TLS 1.3. The babu365 SSL certificate is verified and renewed regularly, and all HTTP traffic is automatically redirected to HTTPS.
• At-rest encryption: Personal data stored in our databases — including identity documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption. Encryption keys are managed through a dedicated key management system with strict access controls.
• Access controls: Access to systems containing personal data is restricted to babu365 personnel with a documented legitimate business need. All staff with data access are subject to background checks, confidentiality agreements, and mandatory data protection training. Multi-factor authentication is enforced for all internal system access.
• Intrusion detection and monitoring: Our infrastructure is monitored 24 hours a day, 7 days a week by automated intrusion detection systems and a dedicated security operations team. Anomalous access patterns, unusual transaction volumes, and other indicators of compromise trigger immediate alerts and investigation protocols.
• Penetration testing: babu365 engages independent third-party security specialists to conduct penetration testing and vulnerability assessments on a regular basis. Identified vulnerabilities are remediated according to a risk-prioritised patching schedule.
• Data breach response: In the event of a personal data breach that poses a risk to your rights and freedoms, babu365 will notify affected players via the registered email address within 72 hours of becoming aware of the breach. The notification will describe the nature of the breach, the categories and approximate volume of data affected, and the steps being taken to address and mitigate the incident.

Section 6

Data Retention Policy

babu365 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce our agreements. The specific retention periods applicable to each data category are set out in the table below.

When the applicable retention period expires, babu365 will securely delete or anonymise your personal data in a manner that makes re-identification impossible. Where anonymisation is used in preference to deletion (for example, to preserve aggregated statistical data for analytical purposes), the anonymised data no longer constitutes personal data and is therefore not subject to this Privacy Policy.

If you request deletion of your personal data before the end of the applicable retention period and there is no overriding legal obligation requiring continued retention, babu365 will action the deletion request within 30 days and confirm completion to your registered email address.

Section 7

Your Privacy Rights

As a babu365 player, you hold a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact our privacy team at support@babu365 with the subject line "Data Subject Request". We will respond within 30 days of receiving a verifiable request. We may ask you to verify your identity before processing any request to protect your data from unauthorised access.

• Right of access: You have the right to request a copy of all personal data that babu365 holds about you, together with information about how that data is being used and with whom it has been shared. We will provide this information in a clear, structured format free of charge.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update basic account information directly through your babu365 account settings page.
• Right to erasure ("right to be forgotten"): You may request that babu365 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and there is no other lawful basis for processing), or where you object to processing based on legitimate interest. This right is subject to overriding legal and regulatory retention obligations.
• Right to restriction: You may request that babu365 restrict processing of your personal data — meaning we may store it but not otherwise use it — in certain circumstances, such as while the accuracy of the data is being contested or while an objection is under consideration.
• Right to data portability: Where processing is carried out by automated means and is based on your consent or a contract with you, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) and to transmit it to another service provider.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on babu365's legitimate interest. You also have the right to object to direct marketing at any time, including profiling related to direct marketing, by updating your communication preferences in your account settings.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that took place prior to withdrawal. Withdrawal of consent for marketing communications does not affect your ability to continue using babu365.

Section 8

Contact & Privacy Queries

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way babu365 handles your personal data, please do not hesitate to contact our privacy team. We are committed to resolving all privacy-related enquiries promptly and transparently.

Privacy enquiries can be directed to our support team at support@babu365. Please include "Privacy Query" or "Data Subject Request" in the subject line of your email so that it is routed directly to the appropriate team. Our privacy team is available to respond Monday through Sunday, including Bangladesh public holidays such as Victory Day (16 December), Independence Day (26 March), and Eid.

babu365 takes all privacy complaints seriously. If you submit a formal complaint, we will acknowledge receipt within two business days and provide a full response within 20 business days. If you are not satisfied with the outcome of a complaint, you may have the right to escalate it to an appropriate data protection authority or court in your jurisdiction.

Policy updates: This Privacy Policy may be updated periodically to reflect changes in babu365's data practices, applicable law, or service offerings. When material changes are made, registered players will be notified via the email address associated with their account at least 14 days before the changes take effect. The effective date at the top of this page reflects the date of the most recent revision. Continued use of babu365 following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms.

This Privacy Policy was last updated on 1 January 2026 and applies to all babu365 services as of that date.