a880 Privacy Policy

1 Who We Are

a880 is an online casino and sports betting platform operated for the Bangladesh market and accessible at a880.bio. For the purposes of this Privacy Policy, a880 is the data controller responsible for the personal information you provide when using the platform. References to "a880", "we", "us" or "our" in this Policy refer to the a880 platform and its operating team.

a880 is committed to protecting the privacy and personal data of all players. This Policy is designed to be transparent about what data we collect, why we collect it, how long we keep it, and the rights you have over it. We do not use your data for purposes beyond those described in this Policy without first obtaining your explicit consent.

2 Information We Collect

When you register and use the a880 platform, we collect the following categories of personal information:

• Registration data: full name, Bangladesh mobile number, date of birth, and account login credentials. This information is required to create and secure your account.
• Identity verification (KYC) documents: a copy of a valid Bangladesh National ID card or passport, and proof of address where required. These documents are collected once as part of the mandatory KYC process prior to your first withdrawal.
• Financial transaction data: deposit amounts, withdrawal requests, payment method identifiers (e.g. the last four digits of your bKash or Nagad mobile wallet number), and transaction timestamps. Full payment credentials such as complete wallet numbers are not stored by a880 — they are handled directly by the relevant payment provider.
• Gameplay and activity data: games played, bet amounts, win and loss records, session durations, and responsible gaming tool usage. This data is used to operate your account, settle bets, apply bonuses, and monitor for responsible gaming compliance.
• Device and technical data: IP address, device type and operating system, browser type, mobile network operator (e.g. Grameenphone, Robi, Banglalink), and page interaction data collected via session logging. This data is used for security monitoring, fraud detection, and platform performance optimisation.

We collect only the personal information necessary to operate the a880 platform and fulfil our legal and regulatory obligations. We do not collect sensitive personal data such as biometric information, religion, political views, or health data unless specifically required by applicable law.

3 How We Use Your Information

a880 uses the personal information we collect for the following purposes:

• Account creation and management: to register your account, maintain your player profile, process deposits and withdrawals, and communicate account-related information to you.
• Identity verification and compliance: to verify your identity as required by applicable anti-money laundering (AML) and know-your-customer (KYC) obligations, and to ensure only eligible players (21+) access the platform.
• Service delivery: to operate games, settle bets, apply bonuses and promotional offers, and provide customer support.
• Fraud prevention and security: to detect and prevent fraud, money laundering, account takeover, and other prohibited activities. This includes automated monitoring of account behaviour and transaction patterns.
• Responsible gaming compliance: to apply the responsible gaming tools you have set (deposit limits, loss limits, session reminders, self-exclusion), and to monitor gameplay patterns that may indicate problem gambling behaviours.
• Platform improvement: to analyse aggregated and anonymised usage data to improve the a880 platform, optimise page load performance for Bangladesh mobile networks, and develop new features aligned to player needs.

4 Legal Basis for Processing

a880 processes your personal data on one or more of the following legal bases:

• Contractual necessity: processing required to fulfil our contract with you — specifically, to operate your a880 account, process transactions, settle bets, and provide customer support.
• Legal obligation: processing required to comply with applicable laws, including AML regulations, KYC obligations, tax reporting requirements, and cooperation with law enforcement or regulatory authorities.
• Legitimate interests: processing for fraud prevention, security monitoring, platform performance optimisation, and responsible gaming monitoring, where these interests are not overridden by your fundamental rights and freedoms.
• Consent: where we process personal data for purposes beyond the above (such as sending you promotional communications), we will obtain your prior explicit consent and provide a simple means to withdraw that consent at any time.

5 Sharing Your Information

a880 does not sell, rent or trade your personal data. We share your information only in the following limited circumstances:

• Payment processors: transaction data is shared with bKash, Nagad, Rocket, Upay, and banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank) solely to process your deposit and withdrawal requests. These partners operate under their own privacy policies and data protection obligations.
• Game and technology providers: game play data is shared with licensed third-party gaming studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe) to the extent necessary to operate the relevant games and settle results.
• Law enforcement and regulatory bodies: where we are required by applicable law to disclose your personal information to government agencies, law enforcement authorities, or financial intelligence units, we will do so. Where legally permissible, we will notify you of such disclosure.
• Service providers and technology partners: we may share limited technical data with trusted service providers who assist in operating the a880 platform (e.g. hosting infrastructure, analytics tools, customer support platforms). All such providers are contractually bound to process data only on our instructions and to maintain appropriate security standards.

a880 does not share your personal data with advertisers, data brokers, or any other third party for commercial purposes unrelated to the operation of your account.

6 Payment Data & Mobile Wallet Security

a880 supports deposits and withdrawals via bKash, Nagad, Rocket, and Upay — the leading mobile financial services in Bangladesh. When you initiate a transaction using any of these services, the payment credentials you enter (your mobile wallet number and PIN) are transmitted directly to the relevant payment provider through an encrypted connection. a880 does not have access to your mobile wallet PIN at any point.

a880 stores only a truncated reference to your payment method (such as the last four digits of your registered mobile wallet number) for the purposes of transaction reconciliation and withdrawal processing. This truncated reference cannot be used to initiate payments and is stored in encrypted form within a880's secure data environment.

7 Cookies & Tracking Technologies

a880 uses cookies and similar tracking technologies to operate the platform and improve your experience. The types of cookies we use are:

• Essential cookies: required for the platform to function. These include session authentication cookies that keep you logged in during your gaming session and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies: used to remember your preferences (such as language settings and responsible gaming limits you have set) so that you do not need to reset them each time you visit.
• Analytics cookies: used to collect aggregated, anonymised data about how players use the a880 platform — such as which pages load slowest on Bangladesh mobile networks and which game categories are most accessed. This data is used only to improve the platform and is never linked back to individual player identities.

You can manage cookie preferences through your mobile browser settings. Please note that disabling essential cookies may prevent you from logging in or using core platform features. a880 does not use third-party advertising cookies or retargeting pixels.

8 Data Retention

a880 retains your personal data for as long as your account remains active and for a period after account closure as required by applicable law. Specifically: account registration data and KYC documents are retained for a minimum of five years following account closure to comply with anti-money laundering record-keeping requirements; financial transaction data is retained for a minimum of five years to comply with tax and financial reporting obligations; gameplay and activity data is retained for two years from the date of the relevant session or transaction.

Where retention beyond the above periods is required for the resolution of an active dispute, investigation, or legal proceeding, we will retain the relevant data until the matter is fully resolved. Once data is no longer required, it is securely deleted or anonymised so that it can no longer be linked to any individual.

9 Data Security

a880 implements a multi-layered security architecture to protect your personal data. Our security measures include:

• SSL/TLS encryption on all data transmissions between your device and the a880 platform, ensuring that data in transit cannot be intercepted or read by unauthorised parties.
• Encrypted storage of sensitive data fields (including KYC documents and truncated payment references) within a880's secure data environment, with access restricted to authorised personnel only.
• Automated fraud monitoring systems that analyse account behaviour and transaction patterns in real time to detect and flag suspicious activity before it can cause harm.
• Access controls and internal data handling policies that restrict which a880 staff members can access player personal data, with access limited to those with a specific operational need and logged for audit purposes.

While a880 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in a risk to your rights and freedoms, a880 will notify affected players promptly and take immediate steps to contain and remediate the breach.

10 Your Rights

As a registered a880 player, you have the following rights in relation to your personal data:

• Right of access: you may request a copy of the personal data a880 holds about you at any time. We will respond to verified access requests within 30 days.
• Right of rectification: if any personal data a880 holds about you is inaccurate or incomplete, you may request that it be corrected. Minor corrections (such as a name spelling) can be made directly in account settings; more significant changes require support contact and identity re-verification.
• Right of erasure: you may request deletion of your personal data. Where deletion is possible (i.e. where no legal retention obligation applies), a880 will delete the relevant data promptly. Where legal retention obligations prevent full deletion, a880 will restrict processing of the relevant data to only what is required by law.
• Right to restrict processing: you may request that a880 temporarily pause processing of your personal data (for example while you contest its accuracy or object to its use), other than storage and legal compliance processing.
• Right to withdraw consent: where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please contact the a880 support team at [email protected] with the subject line "Data Rights Request". We may need to verify your identity before processing a rights request. We will respond within 30 days of receiving a verified request.

11 Children's Privacy

The a880 platform is strictly intended for adults aged 21 and above. a880 does not knowingly collect or process personal data from individuals under the age of 21. Age verification is conducted as part of the KYC process, and accounts found to belong to individuals under 21 will be immediately closed and any associated balances returned to the payment method on file.

12 Cross-Border Data Transfers

a880's platform infrastructure may involve data processing or storage in jurisdictions outside Bangladesh. Where personal data is transferred outside Bangladesh, a880 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. Such safeguards include contractual data processing agreements with all third-party providers that receive your personal data. By using the a880 platform, you acknowledge and consent to the potential transfer of your personal data outside Bangladesh where necessary for the operation of your account, subject always to the safeguards described above.

13 Changes to This Policy

a880 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When material changes are made, we will notify registered players via in-platform notification or email. The updated Policy will take effect upon publication at a880.bio/privacy-policy. The date of the most recent revision is shown at the top of this document.

Your continued use of the a880 platform after an updated Privacy Policy has been published constitutes your acceptance of the revised Policy. If you do not agree with any changes, you should discontinue use of the platform and may request account closure through our support channel.

14 Contact & Data Requests

For all privacy-related enquiries, data rights requests, or concerns about how a880 handles your personal data, please contact our support team. All queries are handled in English. We aim to respond to all data-related requests within 30 days of receipt. Response times are measured in Bangladesh Standard Time (BST, UTC+6).