at888 Privacy Policy – How We Handle Your Data

at888 is an online casino and sports betting platform operated for users in Bangladesh and accessible at https://at888.ws. at888 acts as the data controller for all personal information collected through the Platform. When this Policy refers to "at888", "we", "us", or "our", it refers to the operator of the at888 Platform. Any questions about data privacy or requests to exercise your rights under this Policy should be directed to [email protected].

at888 collects personal information in three main ways: information you provide directly when you register or use the Platform, information collected automatically as you use the Platform, and information we may receive from third parties in limited circumstances.

Information you provide directly:

• Registration information: your mobile phone number, chosen username, and password. at888 does not require you to provide your full legal name at registration unless you are requested to complete enhanced KYC verification.
• Identity verification documents: where required for KYC compliance, copies of government-issued identification such as a National Identity Card (NID), passport, or driving licence, together with a recent utility bill or bank statement as proof of address.
• Financial information: payment method reference numbers used for deposits and withdrawals (for example, your bKash wallet number, Nagad account number, or bank account details). at888 does not store full payment card numbers; card transactions are handled by certified third-party payment processors.
• Communications: messages and requests sent to at888 via the support email address, including the content of those communications and any attachments.

Information collected automatically:

• Technical data: your IP address, browser type and version, operating system and device model, screen resolution, and the URLs you navigate to and from within the Platform.
• Session data: login timestamps, session duration, pages viewed, games launched, wagers placed, and the outcomes of those wagers. This data is used to verify the integrity of game results and to detect and prevent fraudulent activity.
• Cookie and tracking data: information placed on your device by cookies and similar technologies when you visit the Platform. For full details see Section 6 of this Policy.
• Responsible gaming data: your deposit limit settings, session time reminder preferences, and any self-exclusion requests submitted through your account settings. This data is processed solely to fulfil our responsible gaming obligations.

Information received from third parties:

• Payment processor confirmations: transaction status and reference data returned by bKash, Nagad, Rocket, Upay, and banking partners confirming whether a deposit or withdrawal has been completed successfully.
• Identity verification services: where at888 uses a third-party KYC service to verify identity documents, that service may return a verification result (pass/fail) and a confidence score to at888. at888 does not receive the full document image from such services — only the verification outcome.
• Fraud prevention and anti-money-laundering screening: at888 may check information you provide against fraud prevention databases and financial crime screening services. Results from these checks inform our risk management decisions but are not used for any other purpose.

at888 uses the personal information it collects for the following purposes. We use only the minimum information necessary for each purpose listed below.

1. Account management: to create and maintain your player account, verify your identity, process deposits and withdrawals, and manage your account preferences and responsible gaming settings.
2. Platform delivery: to operate and provide the online casino games, sports betting markets, and all other features of the Platform. This includes recording the outcome of bets placed and maintaining an audit trail of all transactions.
3. Security and fraud prevention: to protect the Platform and its users from fraudulent activity, money laundering, identity theft, account takeover, bonus abuse, and other prohibited conduct. This includes automated monitoring of account activity and flagging unusual patterns for manual review.
4. Legal and regulatory compliance: to fulfil at888's obligations under applicable anti-money-laundering legislation, KYC requirements, age verification regulations, and any other legal obligations that apply to the operation of the Platform.
5. Customer support: to respond to your support requests, complaints, and enquiries. Records of support communications may be retained for quality assurance and dispute resolution purposes.
6. Platform improvement: to analyse usage patterns, identify technical issues, test new features, and improve the overall performance and design of the Platform. Where possible, at888 uses anonymised or aggregated data for this purpose so that individual users cannot be identified.

at888 processes your personal information on one or more of the following legal bases, depending on the specific processing activity:

• Contract performance: processing that is necessary to create your account, operate the Platform for you, and fulfil the agreement between you and at888 as described in the Terms & Conditions.
• Legal obligation: processing that is required to comply with applicable anti-money-laundering laws, KYC regulations, age verification requirements, and other legal obligations that at888 is subject to.
• Legitimate interests: processing carried out for the purposes of fraud prevention, security monitoring, Platform improvement, and dispute resolution, where these interests are not overridden by your data protection rights.
• Consent: where at888 relies on your consent for a specific processing activity (for example, sending you marketing communications), you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent will not affect the lawfulness of any processing carried out before withdrawal.

at888 does not sell, rent, or trade your personal information to third parties for their own marketing or commercial purposes. We share personal information only in the following limited circumstances:

1. Payment processors: bKash, Nagad, Rocket, Upay, and banking partners receive the minimum information necessary to process your deposit or withdrawal transaction. These providers are bound by their own data protection obligations and are not permitted to use your information for any other purpose.
2. Identity verification and KYC providers: third-party KYC service providers receive the identity documents you submit for verification. These providers operate under strict data processing agreements with at888 and are permitted to use your information only to return a verification result.
3. Game providers: software providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive your account identifier and session token to authenticate your game session. They do not receive your full name, payment details, or contact information.
4. Law enforcement and regulatory authorities: at888 will disclose personal information to law enforcement agencies, financial intelligence units, or other governmental authorities where required to do so by law, court order, or regulatory directive. at888 will notify you of any such disclosure where it is legally permitted to do so.

at888 uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device when you visit a website. Cookies allow the Platform to recognise your device between sessions, maintain your login state, and remember your preferences.

at888 uses the following categories of cookies:

• Strictly necessary cookies: these are essential for the Platform to function. They maintain your session after login, keep your basket or game state intact during a session, and ensure secure transmission of information. These cookies cannot be disabled without breaking core Platform functionality.
• Functional cookies: these remember your preferences such as language selection and interface settings, and personalise certain aspects of your experience on the Platform. Disabling functional cookies may affect the comfort of your experience but will not prevent you from accessing core Platform features.
• Analytics cookies: these collect aggregated, anonymised information about how users interact with the Platform — such as which pages are visited most frequently and where users tend to exit. This data is used solely to improve Platform performance and does not identify individual users.

at888 retains your personal information for as long as your account remains active and for a period after account closure sufficient to fulfil our legal, regulatory, and contractual obligations. As a general guide: account registration data and transaction records are retained for a minimum of five years following account closure to comply with anti-money-laundering record-keeping requirements; support communication records are retained for three years from the date of the communication; session and gameplay logs are retained for two years from the date of the session.

When personal information is no longer required for the purpose for which it was collected, and no legal or regulatory obligation requires its continued retention, at888 will securely delete or anonymise the data so that it can no longer be attributed to an identifiable individual.

at888 implements appropriate technical and organisational security measures to protect your personal information against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data transmitted between your device and the Platform, encrypted storage of sensitive account data including passwords (which are hashed and salted and never stored in plain text), firewalls and intrusion detection systems, access controls that restrict employee access to personal data to only those staff whose role requires it, and regular security audits and vulnerability assessments.

While at888 takes all reasonable steps to protect your personal information, no internet transmission or electronic storage system is completely secure. If you believe that your account has been compromised, you should change your password immediately and contact [email protected] without delay. at888 will investigate any reported security incident promptly and notify affected users where required.

You have the following rights in relation to your personal information held by at888. To exercise any of these rights, please contact us at [email protected] with a clear description of your request. at888 will respond to all valid requests within 30 days of receipt.

• Right of access: you have the right to request a copy of the personal information that at888 holds about you, together with information about how that data is being used.
• Right of rectification: if any personal information that at888 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed.
• Right of erasure: in certain circumstances you have the right to request that at888 delete the personal information it holds about you. This right is subject to at888's legal and regulatory retention obligations — at888 may not be able to delete all data immediately if it is required for legal compliance purposes.
• Right to restrict processing: you have the right to request that at888 restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of data held about you.
• Right to object: where at888 processes your personal information on the basis of legitimate interests, you have the right to object to that processing. at888 will stop processing unless it can demonstrate compelling legitimate grounds that override your interests.

at888 will not charge a fee for handling a rights request unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. at888 reserves the right to verify your identity before actioning any data rights request to prevent unauthorised access to another person's personal data.

at888 is strictly for adults aged 21 and above. The Platform does not knowingly collect or process personal information relating to any person under the age of 21. If at888 discovers that an account has been registered by or on behalf of a person under 21, that account will be immediately suspended, all funds in the account will be frozen pending review, and the personal information associated with the account will be handled in accordance with applicable law. If you are a parent or guardian and believe that a minor has registered an account on at888 without your consent, please contact [email protected] immediately.

The at888 Platform does not contain links to third-party websites that are outside of at888's control. at888 is a closed platform and all navigation links point to pages within the at888 domain. If at888 introduces any third-party integration in the future that involves data sharing with an external service, this Policy will be updated accordingly and you will be notified before the integration goes live.

at888 reserves the right to update or amend this Privacy Policy at any time. When we make material changes to this Policy, the "Last Updated" date at the top of this page will be revised. We encourage you to review this Policy periodically. Where a change is significant — for example, if we introduce a new category of data processing or share data with a new category of third party — at888 will take reasonable steps to notify registered users directly, such as by sending a notification to your registered mobile number or displaying a prominent notice on the Platform.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which at888 handles your personal data, please contact our support team in writing. at888 will acknowledge all privacy-related enquiries within 5 business days and provide a full response within 30 days.