88jili Privacy Policy

Introduction

This Privacy Policy ("Policy") is published by 88jili ("we", "us", "our"), the operator of the online gaming platform accessible at 88jili.biz ("the Platform"). It describes how we collect, use, store, share, and protect the personal data of individuals ("you", "your", "the Player") who visit or register an account on the Platform.

88jili is committed to handling your personal data responsibly, transparently, and in a manner consistent with applicable data protection principles. This Policy applies to all data processing activities connected to the Platform, including account registration, identity verification, payment processing, customer support, and marketing communications.

This Policy should be read alongside the Terms & Conditions and the Responsible Gaming Policy, both of which are published on the 88jili Platform.

Data Controller

For the purposes of this Privacy Policy, 88jili acts as the data controller in respect of all personal data collected through the Platform. As data controller, 88jili determines the purposes for which, and the means by which, personal data is processed.

All data-related queries, access requests, correction requests, and deletion requests should be directed to 88jili using the contact details provided in Section 16 of this Policy. We are committed to responding to all data-related inquiries within 30 calendar days of receipt.

Data We Collect

88jili collects the following categories of personal data in connection with the operation of the Platform:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information, except where such data is voluntarily provided in the context of a responsible gaming self-exclusion request or similar welfare-related interaction.

How We Collect Your Data

88jili collects personal data through the following means:

• Direct collection: Information you provide when registering an account via the 88jili Login page, completing identity verification (KYC), making deposits or withdrawal requests, contacting customer support, or completing promotional sign-up forms.
• Automated technical collection: Data collected automatically when you access the Platform, including IP addresses, device identifiers, browser fingerprints, cookie data, and session logs. This data is collected via server logs, analytics tools, and tracking technologies described in Section 7.
• Payment providers: When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or an approved bank transfer, the relevant payment provider shares with 88jili transaction reference data and the mobile number or account reference associated with the transaction, solely for the purpose of matching and confirming the payment.
• Third-party verification services: Where we use third-party identity verification tools to assist with KYC and age verification, those providers may supply us with a verified/not-verified status and, where required, a copy of the verification document you submitted to them.
• Publicly available sources: In limited fraud-detection or AML-screening scenarios, 88jili may cross-reference publicly available data (such as sanctions lists) against account holder names and identity data.

Legal Basis for Processing

88jili processes your personal data on the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing required to perform our contract with you — including account creation, payment processing, and game delivery — is carried out on the basis of contractual necessity. Without this processing, we cannot provide the services described in the Terms & Conditions.
• Legal obligation: Certain processing activities — particularly identity verification (KYC), transaction monitoring, and records retention — are required for compliance with applicable anti-money-laundering (AML) and counter-terrorism financing (CTF) obligations. This processing is carried out on the basis of legal obligation and cannot be refused by the player.
• Legitimate interests: Technical data, usage data, and security-related processing is carried out on the basis of 88jili's legitimate interest in operating a secure, fraud-resistant gaming platform and in improving its services for all players.
• Consent: Marketing communications and certain personalisation features are delivered on the basis of your explicit consent, which you may withdraw at any time by contacting [email protected] or updating your marketing preferences in your Account Settings.

How We Use Your Personal Data

88jili uses your personal data for the following purposes:

• To create, manage, and maintain your 88jili Account;
• To verify your identity and age in accordance with our KYC obligations;
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and approved Bangladeshi bank transfers;
• To deliver the games, sports betting markets, and other services available on the Platform;
• To detect, investigate, and prevent fraudulent activity, collusion, multi-accounting, and other prohibited conduct as defined in the Terms & Conditions;
• To monitor your gaming activity for responsible gaming purposes and to enforce self-imposed limits, cool-off periods, and self-exclusion orders;
• To comply with applicable AML, CTF, and financial reporting obligations;
• To send you transactional communications (deposit confirmations, withdrawal updates, security alerts);
• To send you marketing communications about promotions, bonuses, and new features, where you have consented to receive them;
• To respond to your customer support enquiries and to resolve disputes;
• To improve the Platform's performance, user interface, and game offering based on aggregated usage analytics.

Cookies & Tracking Technologies

88jili uses cookies and similar tracking technologies to support the operation, security, and optimisation of the Platform. A cookie is a small text file stored on your device by your browser when you visit a website. The following types of cookies are used on the 88jili Platform:

• Strictly necessary cookies: Required for core Platform functionality, including maintaining your login session, storing your preferred language and currency settings, and managing your shopping cart in the Cashier. These cannot be disabled without breaking the Platform.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and account hijacking attempts. They store session tokens and CSRF protection values.
• Analytics cookies: Used to collect aggregated, anonymised data about how players interact with the Platform — which pages are visited most, how long sessions last, which games are most popular. This data helps 88jili improve the user experience. No personally identifiable information is stored in analytics cookies.
• Preference cookies: Store your UI preferences such as game view mode, notification settings, and responsible gaming dashboard layout.
• Marketing cookies: Used only with your explicit consent to track which promotional campaigns led you to the Platform, enabling 88jili to measure the effectiveness of its marketing activity.

You can control non-essential cookies through your browser settings. Note that disabling strictly necessary or security cookies will impair your ability to use the Platform and may prevent you from completing the 88jili Login process.

Sharing Your Data with Third Parties

88jili does not sell your personal data. We share personal data with third parties only in the following limited and controlled circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank receive transaction-level data required to process your deposits and withdrawals. Each provider processes your data under their own privacy policy and in accordance with applicable Bangladeshi financial regulations.
• Identity verification providers: Third-party KYC and age-verification services receive the identity documents and data you submit during the verification process. These providers are contractually bound to process your data only for the purpose of verifying your identity on behalf of 88jili.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised session identifiers required to deliver their games via the Platform. They do not receive your full name, contact details, or financial data.
• Fraud prevention and AML screening services: Where required to fulfil our legal obligations, anonymised or pseudonymised account data may be shared with third-party AML screening tools and fraud detection platforms.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, valid legal process, or court order.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of 88jili's assets, player data may be transferred to the acquiring entity. You will be notified of any such transfer by email in advance.

Payment Data & Financial Information

The security of your financial data is a top priority for 88jili. We apply the following specific protections to payment-related personal data:

• 88jili does not store bKash PINs, Nagad PINs, Rocket PINs, or any full banking credentials. Payment authentication always takes place directly on the payment provider's own secure platform.
• We store only the transaction reference number, the mobile number or account reference associated with your payment method, the transaction amount in BDT, and the date and time of the transaction. This is the minimum data required to match incoming and outgoing payments to your 88jili Account.
• All payment data at rest is encrypted using AES-256 encryption. Access to payment records is restricted to authorised members of the finance and compliance teams on a need-to-know basis.
• Withdrawal requests are subject to a payment method match check to ensure that funds are returned only to the same payment source used for the deposit, minimising the risk of fraudulent withdrawal attempts.

Data Retention

88jili retains your personal data for the periods set out below. These periods are determined by the purpose for which the data was collected and by applicable legal retention obligations:

• Account and identity data: Retained for the lifetime of your active account plus a minimum of five years following account closure, in accordance with standard financial record-keeping obligations applicable to online gaming operators.
• Transaction and financial data: Retained for a minimum of seven years from the date of the relevant transaction, consistent with AML record-keeping requirements.
• KYC documents: Retained for five years from the date of verification or from the date of account closure, whichever is later.
• Support communications: Retained for three years from the date of the last interaction in the relevant ticket or chat transcript, to support dispute resolution.
• Technical and usage data: Retained for a maximum of 13 months from collection in standard analytics systems. Raw server logs used for security purposes are retained for six months.
• Marketing preference data: Retained until you withdraw consent or until your account is closed, plus a short period sufficient to process the withdrawal of consent and suppress future communications.

At the end of each applicable retention period, personal data is either securely and permanently deleted or anonymised such that it can no longer be linked to you as an individual.

Data Security

88jili implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes:

• Encryption in transit: All data exchanged between your browser and the Platform is encrypted using TLS 1.3 with 256-bit SSL certificates.
• Encryption at rest: Sensitive personal and financial data stored in 88jili's databases is encrypted using AES-256 encryption.
• Access controls: Access to personal data is restricted to authorised personnel with a documented need to access such data for their specific role. Access rights are reviewed quarterly.
• Two-factor authentication (2FA): Available to all players via Account Settings and mandatory for all 88jili administrative staff accessing production systems.
• Penetration testing: The Platform undergoes regular independent security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: 88jili maintains a documented data breach response procedure. In the event of a breach affecting your personal data, you will be notified without undue delay by email to the address registered on your account.

While 88jili takes all reasonable precautions to protect your data, no internet-based platform can guarantee absolute security. You are also responsible for maintaining the security of your own 88jili Login credentials, as described in the Terms & Conditions.

Your Data Rights

As a player using the 88jili Platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact [email protected] with the subject line "Data Rights Request" and your registered account name or mobile number.

• Right of access: You have the right to request a copy of the personal data 88jili holds about you. We will provide this within 30 calendar days of a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Account details can also be updated directly via your Account Settings.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer needed for the purpose for which it was collected, subject to our legal retention obligations. Note that data retained for AML compliance cannot be deleted during the applicable retention period.
• Right to restriction: You may request that we restrict processing of your data in certain circumstances, for example while a rectification request is being assessed.
• Right to data portability: You may request that we provide your personal data in a structured, machine-readable format so that it can be transferred to another service provider.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to object: You may object to processing based on legitimate interests. We will assess your objection and cease processing unless we have compelling legitimate grounds that override your interests.

Children & Minors

The 88jili Platform is strictly for adults aged 18 years and above. We do not knowingly collect personal data from individuals under the age of 18. If you are under 18, you must not register an account, make a deposit, or access any service on the Platform.

If 88jili discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 18, the relevant account will be immediately suspended, any deposited funds will be returned to the source payment method, and all associated personal data will be deleted from our systems as promptly as our legal obligations permit.

If you are a parent or guardian and believe that your child has registered an account on 88jili, please contact us immediately at [email protected] so that we can take the appropriate action without delay.

Marketing Communications

With your consent, 88jili may contact you by SMS, email, or in-platform notification to share information about promotions, bonuses, new game releases, and seasonal offers. Examples of marketing occasions may include Eid bonus promotions, BPL tournament special odds, and Pohela Boishakh welcome-back offers.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email;
• Updating your notification preferences in Account Settings after completing the 88jili Login;
• Contacting [email protected] with the subject line "Marketing Opt-Out".

Opting out of marketing communications will not affect the delivery of transactional messages such as deposit confirmations, withdrawal notifications, security alerts, or KYC-related communications. These are sent on the basis of contractual necessity and cannot be opted out of while your account remains active.

88jili will never send unsolicited SMS messages to numbers not registered on your account, and will never ask for your password, PIN, or payment credentials via any marketing channel.

Changes to This Privacy Policy

88jili reserves the right to update or revise this Privacy Policy at any time. Where a change is material — for example, introducing a new category of data collection, adding a new data processor, or extending retention periods — we will provide at least 14 days' advance notice by email to your registered address and via a prominent notice on the Platform before the change takes effect.

Minor changes, such as grammatical corrections, clarifications of existing practices, or contact detail updates, may be made without advance notice, though the "Last Updated" date at the top of this page will always reflect when the most recent revision was made.

Your continued use of the Platform after any update to this Privacy Policy constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you should cease using the Platform and request account closure by contacting [email protected].

Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how 88jili handles your personal data, please contact us using the details below:

• Email: [email protected]
• Subject line for data queries: "Data Rights Request" or "Privacy Complaint"
• Response time: Acknowledgement within 5 business days; substantive response within 30 calendar days
• Support hours: 24 hours a day, 7 days a week

We take all privacy complaints seriously. If you raise a concern with us, we will investigate it thoroughly and provide you with a written response explaining our findings and any actions taken. If you remain unsatisfied following our response, you may have the right to escalate the complaint to a relevant supervisory authority under applicable law.