Privacy Policy — star888

Section 1

Data Controller

For the purposes of this Privacy Policy, the data controller responsible for the personal information collected through the star888 platform is the operating entity behind the star888 brand. By registering an account with star888 or by using any of the platform's services, you acknowledge that your personal data will be processed in accordance with this Privacy Policy.

If you have any questions, concerns, or requests relating to the privacy of your personal data, you may contact our data protection team at any time via 24/7 live chat on the platform, or in writing to support@star888. All privacy-related inquiries are handled in English and are typically acknowledged within two business days.

Section 2

Information We Collect

star888 collects personal information from players through several channels — primarily during account registration, during the KYC verification process, during financial transactions, and through the automatic technical data generated by your use of the platform. The categories of data we collect are described below.

2.1 Information You Provide Directly

• Registration Data: Full legal name, date of birth, gender, nationality, residential address (including division, district, and postal code within Bangladesh), email address, and mobile phone number.
• Identity Verification Documents: Scanned or photographed copies of your Bangladesh National Identity Card (NID), passport, or other government-issued identity document submitted during KYC review.
• Payment Information: Mobile wallet account numbers (bKash, Nagad, Rocket, Upay), bank account details, or card details (Visa/Mastercard) as required to process deposits and withdrawals. Full card numbers are never stored — only tokenised references provided by our payment processors.
• Support Communications: The content of any messages, transcripts, or attachments you share with our support team via live chat or email, including descriptions of account issues and any personal information you choose to include in those communications.
• Bonus and Promotion Claims: Any information provided when claiming a bonus or entering a promotion, including promotional codes entered and the associated account activity.

2.2 Information Collected Automatically

• Technical Data: IP address, browser type and version, operating system, device type and model, screen resolution, language settings, and referring URL collected automatically when you access the platform.
• Usage Data: Pages visited, games played, bet history, session duration, click paths, features accessed, deposit and withdrawal records, and bonus activity — all collected to support account management, fraud detection, and platform improvement.
• Geolocation Data: Approximate geographic location derived from your IP address, used to ensure compliance with applicable jurisdictional requirements and to detect access from restricted regions.
• Cookie and Tracking Data: Session tokens, preference cookies, and analytics identifiers as described in Section 4 of this Privacy Policy.

Section 3

How We Use Your Data

star888 processes personal data only for clearly defined, legitimate purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was collected. The legal bases and purposes for processing your personal data are set out below.

3.1 Purposes of Processing

1. Account Management: To create, maintain, and administer your player account — including processing login credentials, tracking account balances, and managing communication preferences.
2. Identity and Age Verification: To verify that you are aged 18 or above and that the identity you have provided is accurate, in compliance with our age restriction policy and responsible gaming obligations.
3. Transaction Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard, and USDT, and to maintain accurate financial records associated with your account.
4. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, multiple account abuse, bonus fraud, and other prohibited conduct as described in our Terms & Conditions.
5. Responsible Gaming Compliance: To monitor account activity for signs of problem gambling behaviour, to apply self-exclusion and deposit limit tools, and to fulfil our responsible gaming obligations to players across Bangladesh.
6. Customer Support: To respond to your queries, investigate disputes, resolve technical issues, and provide assistance via our 24/7 live chat and email support channels.
7. Platform Improvement: To analyse aggregated, anonymised usage data to understand how players interact with the platform, identify technical issues, and develop new features and services.
8. Marketing Communications: To send promotional emails, SMS notifications, or in-platform messages about bonuses, new games, and seasonal offers — but only where you have provided explicit consent to receive such communications, and only until that consent is withdrawn.
9. Legal and Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering (AML) regulations, to respond to lawful requests from competent authorities, and to maintain records required for audit purposes.

Section 4

Cookies & Tracking Technologies

star888 uses cookies and similar technologies (including local storage, session tokens, and pixel tags) to deliver core platform functionality, maintain your logged-in session, and collect anonymised analytics that help us improve the player experience. The table below summarises the types of cookies we use and their purpose.

4.1 Managing Cookies

You can manage or delete cookies through your browser settings at any time. Most modern browsers allow you to block third-party cookies, clear existing cookies, or be notified before a cookie is stored. Please be aware that disabling strictly necessary or security cookies will impair your ability to log in and use core platform features on star888.

4.2 No Third-Party Advertising Cookies

star888 does not use third-party advertising networks or retargeting pixels to track your behaviour across other websites. Our analytics data is processed internally and is not shared with external advertising platforms. We do not build cross-site behavioural profiles for commercial advertising purposes.

Section 5

Data Sharing & Third Parties

star888 does not sell, rent, or trade your personal data to any third party for that party's own marketing or commercial purposes. Your personal data may be shared only in the limited circumstances described below, and always subject to appropriate contractual data protection obligations.

5.1 Service Providers

• Payment Processors: Personal and financial data is shared with payment service providers — including mobile wallet operators (bKash, Nagad, Rocket, Upay) and card payment networks (Visa, Mastercard) — to process deposits and withdrawals. These providers are bound by their own data protection obligations and process data only to the extent necessary to complete the transaction.
• KYC and Identity Verification Providers: Where automated identity verification technology is used, your submitted identity documents may be processed by a trusted third-party KYC provider. This provider is contractually bound to process your data solely for identity verification purposes and to maintain appropriate security standards.
• Customer Support Technology Providers: Live chat and support ticket systems may be operated by third-party software providers. Support communications are processed within these systems subject to the same data protection standards applied across the star888 platform.
• Game Content Providers: When you play games supplied by third-party studios — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi — limited technical identifiers may be shared with those providers to facilitate gameplay and record the outcome of each game round. These providers do not receive your full personal profile.

5.2 Legal and Regulatory Disclosure

star888 may disclose your personal data to law enforcement agencies, regulatory authorities, or courts of competent jurisdiction where we are required to do so by law, where such disclosure is necessary to prevent or detect crime, or where we are responding to a valid legal process such as a court order or official investigation. We will, where legally permissible, notify you of such a disclosure request before complying.

Section 6

Data Retention

star888 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention guidelines apply to the principal categories of personal data we hold.

Once the applicable retention period has expired, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and platform analytics purposes, as it no longer constitutes personal data.

Section 7

Your Privacy Rights

As a player on star888, you have a number of rights in relation to the personal data we hold about you. We are committed to honouring these rights promptly and transparently. To exercise any of the rights described below, contact our support team via 24/7 live chat or email support@star888.

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is processed, the legal basis for processing, and the parties with whom it has been shared. Access requests are fulfilled within 30 days of receipt.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. Where possible, corrections can be made directly through your account settings. For identity documents, contact the support team.
• Right to Erasure: Subject to our legal retention obligations, you have the right to request the deletion of your personal data. Where deletion is not possible due to a legal requirement, we will inform you of the applicable retention period and the date on which deletion will proceed.
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while an accuracy dispute is being resolved, or where you have objected to processing and we are assessing whether our legitimate grounds override your objection.
• Right to Object: You have the right to object to the processing of your personal data for marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interests, though such an objection may affect your ability to use certain platform features.
• Right to Data Portability: Where processing is carried out by automated means on the basis of consent or contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to request that it be transmitted to another service provider where technically feasible.

Section 8

Data Security Measures

Protecting the security of your personal data is a core operational priority at star888. We implement a layered set of technical and organisational security measures designed to protect your information against unauthorised access, accidental loss, alteration, disclosure, or destruction.

8.1 Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your browser or app and the star888 platform is encrypted using industry-standard SSL/TLS protocols. Connections over unencrypted HTTP are automatically redirected to HTTPS.
• Encrypted Data Storage: Sensitive data fields — including passwords (stored as salted hashes), payment identifiers, and identity document references — are encrypted at rest using AES-256 or equivalent encryption standards.
• Access Controls: Access to personal data within our internal systems is restricted on a strict need-to-know basis. Staff access to player account data is logged, monitored, and subject to regular review.
• Vulnerability Management: The platform undergoes regular security testing, including vulnerability assessments and code reviews, to identify and remediate security weaknesses before they can be exploited.

8.2 Organisational Safeguards

• All staff with access to personal data receive data protection and information security training as part of their onboarding and on an ongoing basis.
• Third-party service providers are required to sign data processing agreements that bind them to the same security and confidentiality standards applied internally at star888.
• In the event of a data breach that poses a risk to your rights, we will notify affected players without undue delay and will take immediate steps to contain the breach and prevent recurrence.

Section 9

Minors & Age Verification

star888 operates a strict 18+ policy and does not knowingly collect, store, or process personal data from individuals under the age of 18. The platform requires all players to confirm that they are 18 years of age or older at the point of registration, and this declaration is verified through our KYC identity document review process before any withdrawal is processed.

If we discover — through the KYC review process, through a parent or guardian notification, or through any other means — that a person under the age of 18 has registered an account on star888, we will immediately:

1. Suspend and permanently close the underage player's account.
2. Void all bets placed and winnings accrued during the period of underage use.
3. Return any deposits made — less any amounts already wagered — to the original payment method where technically feasible.
4. Securely delete all personal data associated with the underage account within a reasonable timeframe, subject to any legal obligations to retain records of the incident for compliance purposes.

Section 10

Changes to This Policy

star888 reserves the right to update, revise, or replace this Privacy Policy at any time. Where changes to this policy are material — meaning they significantly alter the way we collect, use, or share your personal data — we will provide you with reasonable advance notice via email or via a prominent notification on the platform before the revised policy takes effect.

For non-material changes — such as clarifications, corrections to typographical errors, or restructuring of existing content without altering its substance — the revised policy will be published with an updated effective date and will apply from that date without prior individual notification.

Your continued use of star888 following the publication of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the revised policy, you should cease using the platform and contact the support team to request account closure in accordance with the process described in our Terms & Conditions.