786ba Privacy Policy

1Introduction

786ba ("we", "us", "our") operates the online betting and casino platform available at 786ba.io (the "Platform"). We are the data controller responsible for the personal information you provide when you register, use our services, or interact with the 786ba Platform in any capacity. This Privacy Policy sets out our practices regarding the collection, storage, processing, and protection of personal data belonging to players and visitors in Bangladesh and beyond.

We take our data protection obligations seriously. We collect only the information necessary to deliver our services, process your payments, verify your identity in compliance with anti-money laundering (AML) obligations, and improve the quality and safety of the 786ba experience. We do not sell your personal data to third-party advertisers. We do not share your information with unauthorised parties. Every piece of data we hold is protected by enterprise-grade security infrastructure including 256-bit SSL encryption.

This Policy should be read alongside the 786ba Terms & Conditions and the 786ba Responsible Gaming Policy, both of which are incorporated by reference. If there is any conflict between this Privacy Policy and the Terms & Conditions on a data protection matter, this Privacy Policy prevails.

2Data We Collect

786ba collects personal data across several categories depending on how you interact with the Platform. The categories of data we collect are described below:

2.1 Account & Identity Data

• Full legal name as it appears on your Bangladesh National Identity Card (NID) or passport
• Date of birth (used for mandatory 21+ age verification)
• Registered mobile number (Bangladesh number preferred; used for OTP verification and account communications)
• Username and encrypted password associated with your 786ba Login credentials
• Email address (if provided during registration or support interaction)
• Residential address in Bangladesh (city, district, and postal zone)

2.2 Identity Verification (KYC) Data

• Scanned copy or photograph of Bangladesh NID, passport, or driver's licence
• Selfie photograph for biometric identity matching (where required by our KYC process )
• Proof of payment method ownership (e.g., screenshot of bKash or Nagad account showing the registered mobile number matching your 786ba account)
• Source of funds documentation where requested for high-value transactions

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records including amounts in Bangladeshi Taka (BDT), timestamps, and payment method identifiers
• bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, or Visa/Mastercard reference numbers associated with your transactions
• Account balance history, bonus credit and debit records, and wagering activity logs

2.4 Technical & Usage Data

• IP address and approximate geographic location at the time of each session
• Device type, operating system, and browser version used to access the Platform
• Session duration, pages visited, games played, bets placed, and interaction patterns
• Cookies and similar tracking technologies as described in Section 7 of this Policy

2.5 Communication Data

• Records of all communications between you and 786ba support, including live chat transcripts, emails sent to [email protected], and WhatsApp messages (where applicable)
• Responses to surveys, feedback forms, or promotional participation records

3How We Collect Data

786ba collects personal data through the following primary channels:

• Direct submission: Information you provide when registering a 786ba account, completing the KYC verification process, submitting a deposit or withdrawal request, or contacting our support team.
• Automated collection: Technical data collected automatically when you access the 786ba Platform, including IP addresses, device identifiers, browser fingerprints, and session activity logs gathered through our web analytics and security monitoring systems.
• Payment providers: Transaction reference data received from payment processors including bKash, Nagad, Rocket, and banking partners when you initiate a deposit or withdrawal. 786ba does not receive or store full card numbers — only masked identifiers and transaction references.
• Third-party game providers: Game session data, bet amounts, and game outcomes transmitted from our game provider partners including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi for the purpose of settlement, dispute resolution, and responsible gaming monitoring.
• KYC verification services: Identity verification results returned by our KYC service partners when processing document checks and biometric comparisons.

4How We Use Your Data

786ba uses the personal data we collect for the following specific purposes:

786ba does not use your personal data for unsolicited third-party marketing campaigns. Where we send you promotional communications about 786ba offers and bonuses, these relate solely to the 786ba Platform itself, and you may opt out at any time by contacting [email protected].

5Legal Basis for Processing

786ba processes your personal data under the following legal bases:

• Contractual necessity: Processing required to register your account, verify your identity, process payments, and deliver the betting and gaming services you have contracted for when registering at 786ba.
• Legal obligation: Processing required to comply with anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: Processing for the purposes of fraud prevention, Platform security, responsible gaming monitoring, and general service improvement — where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where you have provided explicit, freely given, and informed consent — for example, when opting in to receive promotional notifications from 786ba. You may withdraw this consent at any time.

6Data Sharing & Disclosure

786ba does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the following limited and controlled circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and banking partners receive the minimum data required to process your deposit or withdrawal transaction. These providers operate under their own privacy policies and are not permitted to use your data for any purpose beyond facilitating your 786ba transaction.
• Game providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game studios receive a unique player session identifier and applicable bet/balance data necessary to run each game round. They do not receive your full name, NID, or financial account details.
• KYC and identity verification partners: Our third-party KYC service providers receive identity document images and biometric data solely for the purpose of completing your identity verification check. These partners are contractually bound to process this data only for that purpose and to delete it upon completion.
• Legal authorities: 786ba will disclose personal data to law enforcement agencies, financial intelligence units, or courts where required to do so by applicable law, court order, or regulatory direction — including in connection with AML investigations.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the 786ba business, player data may be transferred to the acquiring entity. You will be notified of any such transfer and its privacy implications prior to completion.

7Cookies & Tracking

The 786ba Platform uses cookies and similar tracking technologies to support essential Platform functionality, maintain session security, and analyse how players interact with the site. The categories of cookies we use are as follows:

• Essential cookies: Required for basic Platform operation, including maintaining your login session after using the 786ba Login page, storing your language and display preferences, and enabling secure payment flows. These cookies cannot be disabled without impairing your ability to use the Platform.
• Security cookies: Used to detect and prevent fraudulent activity, credential stuffing attacks, and suspicious session behaviour. These are essential to maintaining Platform integrity and cannot be opted out of.
• Analytics cookies: Used to collect anonymised data about page visits, game interactions, and Platform navigation patterns. This data helps us identify performance issues and improve the user experience. We use internal analytics tools only — we do not use Google Analytics or other third-party analytics platforms that share data with advertising networks.
• Preference cookies: Store your optional preferences such as game lobby filters, notification settings, and last-viewed sections. These are non-essential and can be cleared via your browser settings.

You can manage cookie settings at the browser level. Most modern browsers allow you to view, block, or delete cookies. Please note that disabling essential or security cookies will prevent you from accessing key Platform features including the 786ba Login page and the deposit interface. 786ba does not use third-party advertising cookies or cross-site tracking technologies.

8Data Retention

786ba retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Active account data: Retained for the full duration of your account being open and active on the 786ba Platform.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of your last transaction or account closure, in compliance with anti-money laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with applicable financial record-keeping obligations.
• Support communication records: Retained for two (2) years from the date of the communication, or longer if the communication relates to an unresolved dispute or regulatory investigation.
• Technical and usage logs: Typically retained for ninety (90) days for security monitoring purposes, after which they are anonymised or deleted.
• Closed accounts: Following account closure, we retain the minimum data required to comply with legal obligations. Non-essential profile data is deleted within ninety (90) days of account closure.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be associated with an identifiable individual.

9Data Security

786ba implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the 786ba Platform.
• Encrypted data storage for all sensitive personal and financial data held in our systems, using industry-standard AES-256 encryption at rest.
• Access controls ensuring that personal data is accessible only to authorised 786ba staff with a documented business need, operating under strict confidentiality obligations.
• Multi-factor authentication (MFA) for all internal systems that process player personal data.
• Regular security audits and penetration testing conducted on the Platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Fraud detection systems that continuously monitor account activity for anomalous patterns indicative of unauthorised access or financial abuse.

While 786ba takes every reasonable precaution to protect your data, no online platform can guarantee absolute security against all possible threats. If you suspect that your 786ba account has been accessed without your authorisation, you must contact our support team immediately at [email protected] so that we can secure your account and investigate the incident.

In the event of a data breach that is likely to result in a high risk to your rights and freedoms, 786ba will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

10Your Rights

As a player whose personal data is processed by 786ba, you hold the following rights with respect to your information. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request":

• Right of access: You have the right to request a copy of the personal data 786ba holds about you, together with an explanation of how it is being used and on what legal basis.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data held by 786ba be corrected. Where possible, corrections will be applied within ten (10) business days of a valid request.
• Right to erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no legal obligation requires its continued retention. Please note that data subject to AML retention requirements cannot be deleted until the applicable statutory retention period has expired.
• Right to restrict processing: You have the right to request that 786ba restricts the processing of your personal data in certain circumstances, such as while the accuracy of the data is being contested.
• Right to data portability: You have the right to request that certain personal data you have provided to 786ba be transferred to you or to another service provider in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to processing of your personal data where 786ba relies on legitimate interests as its legal basis, unless we can demonstrate compelling legitimate grounds for the processing that override your rights.
• Right to withdraw consent: Where 786ba processes your data on the basis of your consent (e.g., promotional communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

786ba will respond to all verified data rights requests within thirty (30) days of receipt. We may require identity verification before processing a data rights request to ensure that we do not disclose or delete data in response to a fraudulent request.

11Children & Minors

If you are a parent or guardian and you believe that your child has registered an account on the 786ba Platform without your knowledge, please contact us immediately at [email protected] with the subject line "Underage Account Report". We will investigate all such reports promptly and take appropriate action.

12Third-Party Services

The 786ba Platform integrates with third-party services to deliver its full range of features. These third-party providers operate under their own privacy policies and terms of service. 786ba is not responsible for the privacy practices of these external service providers beyond the contractual data processing obligations we impose on them. The principal third-party categories are:

• Game providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. Game session data is processed within their certified gaming environments.
• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard. Transaction data is handled by these providers under their respective financial services privacy frameworks.
• KYC service providers: Third-party identity verification specialists who process document and biometric data exclusively for KYC purposes on our behalf.
• Platform hosting and infrastructure: Cloud infrastructure and content delivery providers who host the 786ba Platform. These providers are contractually prohibited from accessing or processing player data for any purpose other than maintaining platform availability.

786ba does not integrate any third-party social media plugins, advertising networks, or cross-site tracking technologies into the 786ba Platform. No player data is shared with advertising platforms, data brokers, or marketing analytics services.

13Policy Amendments

786ba reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. When we make material changes, we will update the effective date at the top of this page. Where the changes are significant and affect how we process your data in ways that require your awareness, we will make reasonable efforts to notify registered players via the contact details associated with their account prior to the changes taking effect.

Your continued use of the 786ba Platform after the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how 786ba protects your personal data.

14Contact & Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a privacy concern, please contact the 786ba data team through any of the following channels:

• Email: [email protected] — use subject line "Privacy Policy Query" or "Data Rights Request" as appropriate (plain text — not a clickable link)
• Live Chat: Available 24/7 directly on the 786ba Platform after completing 786ba Login
• WhatsApp: Available to registered players after login — contact details provided within the Platform
• Support Hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (BST, UTC+6)

786ba aims to acknowledge all privacy-related enquiries within 24 hours and to resolve substantive data rights requests within 30 calendar days of receipt and identity verification. Requests that are complex or involve large volumes of data may take longer, in which case we will notify you of the extended timeline.