8fb8 Privacy Policy — How We Protect and Handle Your Data

8fb8 ("the Platform", "we", "us", "our") is an online betting and gaming platform operating at 8fb8.io, primarily serving players based in Bangladesh. 8fb8 acts as the data controller in respect of all personal data collected through the registration, payment, gameplay, and support processes described in this Privacy Policy.

For any queries, requests, or concerns regarding this Privacy Policy or the handling of your personal data, you may contact the 8fb8 Data Support team directly. Our contact email is [email protected] (displayed as plain text — not a clickable link). We aim to respond to all privacy-related enquiries within 48 hours Bangladesh Standard Time (BST, UTC+6).

8fb8 is committed to operating transparently and in good faith with respect to all personal data entrusted to us by our players. This commitment extends to every team member, service partner, and technical system that interacts with player data on our behalf.

8fb8 collects personal data through several distinct channels. The categories of information collected, the source of that information, and the reason for collection are set out below. We only collect data that is necessary for the stated purpose — we do not collect information in excess of what is required to operate the 8fb8 Platform safely and fairly.

A. Registration Data

When you create a 8fb8 account, we collect the following information to establish your identity and enable account management:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (to verify that you meet the 21+ age requirement)
• Residential address, including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar) and postal code
• Email address
• Mobile phone number
• Username and encrypted password

B. Identity Verification Documents

To comply with our Know Your Customer (KYC) obligations and to protect the platform from fraud, we may request one or more of the following documents:

• National Identity Card (NID) — front and back
• Valid passport (biographical data page)
• Birth certificate issued by a competent Bangladeshi authority
• Utility bill or bank statement (for address verification, dated within 90 days)

C. Financial & Transaction Data

Every deposit and withdrawal processed through 8fb8 generates a transaction record. We collect and retain:

• Payment method type (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank)
• Mobile wallet number or bank account reference (masked — we do not store full account credentials)
• Transaction amounts in Bangladeshi Taka (৳)
• Transaction timestamps in Bangladesh Standard Time (BST, UTC+6)
• Transaction reference numbers generated by the payment provider

D. Gameplay & Betting Activity

To maintain fair-play integrity and resolve disputes, we log:

• Bets placed, including market, stake, odds, and outcome
• Casino and slot game session data, including game title, wager amounts, and results
• Bonus activation events and wagering requirement progress
• Session start and end timestamps

E. Technical & Device Data

Automatically collected when you access the 8fb8 Platform:

• IP address and approximate geolocation (country and city level)
• Device type (mobile, tablet, desktop), operating system, and browser version
• Referring URL and pages visited within the 8fb8 Platform
• Session duration and click-path data

F. Customer Support Communications

When you contact 8fb8 support via live chat or email, we retain a record of the conversation, including any attachments you provide, for quality assurance and dispute resolution purposes.

8fb8 uses the personal data it collects exclusively for the purposes outlined below. Data is never used in ways that are incompatible with the original reason for collection without first obtaining your explicit consent.

8fb8 does not use automated decision-making or profiling processes that produce legal or similarly significant effects on players without human review. Any automated flagging system (e.g., fraud scoring) that results in account restriction will be reviewed by a member of the 8fb8 compliance team before any permanent action is taken.

8fb8 processes personal data only where a valid legal basis exists for doing so. The legal bases we rely on are as follows:

• Contract Performance: The majority of data processing on the 8fb8 Platform is necessary to deliver the services you have signed up for — including account management, payment processing, and game delivery. Without this processing, 8fb8 cannot fulfil its contractual obligations to you.
• Legal Obligation: Certain processing activities are required by law, including identity verification under KYC requirements, financial record retention, and cooperation with lawful requests from competent authorities.
• Legitimate Interests: 8fb8 processes some data based on its legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service analytics. In each case, we have assessed that our legitimate interests are not overridden by your data protection rights.
• Consent: Where processing is not covered by the above bases — most notably marketing communications — 8fb8 relies on your explicit, freely given consent. You may withdraw consent at any time by updating your communication preferences within your account settings or by contacting support at [email protected]. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

8fb8 does not sell, rent, or trade your personal data to any third party for commercial purposes. Your data is shared only where strictly necessary, and only with the categories of recipients described below. All third-party recipients are required to handle your data in a manner consistent with this Privacy Policy.

• Payment Processors: To execute deposits and withdrawals, 8fb8 shares necessary transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. These providers receive only the minimum data necessary to process the specific transaction and are bound by their own regulatory obligations regarding data security.
• Identity Verification Partners: 8fb8 uses licensed KYC service providers to verify the authenticity of identity documents submitted during account verification. These partners process identity data solely for verification purposes and do not retain copies beyond the period required to complete the verification.
• Game Content Providers: To deliver live casino and slot games, 8fb8 works with studios including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe. These providers may receive session data necessary to operate the game, such as bet amount and game outcome, in real time. They do not receive your full identity data.
• Regulatory and Law Enforcement Authorities: 8fb8 will disclose personal data to competent authorities where required to do so by applicable law, court order, or lawful government request. We will notify affected players of such disclosures where we are legally permitted to do so.
• Professional Advisers: Legal, accounting, and auditing firms engaged by 8fb8 may access limited personal data in the course of providing professional services. All such parties are bound by confidentiality obligations.

8fb8 uses cookies and similar tracking technologies to operate the Platform effectively, maintain session security, and improve the player experience. A cookie is a small text file stored on your device by your browser when you visit a website. The cookies used by 8fb8 fall into the following categories:

• Strictly Necessary Cookies: These cookies are essential for the 8fb8 Platform to function. They maintain your login session, remember your language preferences, and protect against cross-site request forgery attacks. These cookies cannot be disabled without impairing core Platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymised data about how players use the 8fb8 Platform — which pages are visited most frequently, how long sessions last, and which features are used. This data is used solely to improve Platform performance and user experience. No personally identifiable information is included in analytics reports.
• Functionality Cookies: These cookies remember your preferences and settings, such as your chosen display settings or previously viewed game categories, to personalise your experience on the 8fb8 Platform.
• Security Cookies: These cookies support 8fb8's fraud detection systems by helping to identify unusual patterns of behaviour that may indicate account compromise or automated access attempts.

You may manage cookie preferences through your browser settings. Blocking strictly necessary cookies will affect your ability to log in and use the Platform. Blocking other categories of cookies will not prevent you from accessing the Platform but may reduce the quality of your experience.

8fb8 does not use third-party advertising cookies or retargeting cookies that track your behaviour across other websites.

8fb8 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The retention periods applicable to the main categories of data we hold are set out in the table below.

Upon expiry of the applicable retention period, data is securely deleted or anonymised in a manner that prevents reconstruction of the original personal data. Anonymised aggregate data (e.g., platform-wide betting statistics with no individual identifiers) may be retained indefinitely for business analytics purposes.

As a player on the 8fb8 Platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact the 8fb8 support team at [email protected] with the subject line "Data Rights Request". We will respond within 14 days of receiving a valid request.

• Right of Access: You have the right to request a copy of the personal data 8fb8 holds about you, together with information about how it is processed. We will provide this in a clear, structured format within 14 days of a verified request.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly through your account settings panel.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and no other legal basis for processing exists. Note that certain data categories are subject to mandatory retention periods (see Section 7) and cannot be deleted before those periods have elapsed.
• Right to Restriction of Processing: You may request that 8fb8 restrict processing of your data in certain circumstances — for example, while a dispute regarding data accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you may request a copy of your personal data in a structured, commonly used, machine-readable format (e.g., CSV or JSON) for transfer to another service.
• Right to Object: You have the right to object to processing based on 8fb8's legitimate interests, including profiling for fraud detection. 8fb8 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of prior processing.

8fb8 applies a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes the following measures:

• Encryption in Transit: All data transmitted between your device and the 8fb8 Platform is encrypted using TLS 1.3 with 256-bit AES encryption. This applies to all page loads, API calls, payment transactions, and support interactions.
• Encryption at Rest: Sensitive data fields including passwords, identity document references, and payment method identifiers are encrypted at rest using industry-standard encryption algorithms. Passwords are hashed using bcrypt with a unique salt per account — 8fb8 staff cannot view your plain-text password.
• Access Controls: Access to production systems and databases containing personal data is restricted to authorised personnel only, on a strict need-to-know basis. All internal access is logged and subject to regular audit.
• Two-Factor Authentication: 8fb8 strongly recommends enabling 2FA on your player account. Internal staff accounts with access to any system containing personal data are required to use 2FA without exception.
• Penetration Testing: The 8fb8 Platform undergoes scheduled security assessments by independent third-party security firms. Identified vulnerabilities are remediated according to a prioritised severity framework.
• Incident Response: In the event of a data breach that poses a risk to your rights or freedoms, 8fb8 will notify affected players within 72 hours of becoming aware of the incident, providing details of the nature of the breach, the data involved, and the steps being taken to contain and remediate it.

While 8fb8 employs robust security practices, no system can guarantee absolute security. Players are encouraged to use strong, unique passwords for their 8fb8 accounts and to report any suspected unauthorised access immediately to [email protected].

The 8fb8 Platform is strictly for individuals aged 21 and above. 8fb8 does not knowingly collect personal data from anyone under the age of 21. The Platform employs age verification controls at the point of registration to prevent underage access.

If 8fb8 becomes aware that personal data has been collected from a person under the age of 21, the following steps will be taken immediately:

• The account will be suspended pending investigation and subsequently permanently closed.
• All personal data associated with the account will be deleted as soon as reasonably practicable, subject to any applicable legal retention obligations for fraud-prevention records.
• Any deposited funds will be returned to the originating payment method. Any winnings generated during the period of underage use will be forfeited.

If you are a parent or guardian and believe that a minor in your care has accessed the 8fb8 Platform and provided personal data, please contact us immediately at [email protected]. We will treat all such reports as urgent and act within 24 hours of a verified report being received.

The 8fb8 Platform integrates with a number of third-party services to deliver its full range of features. While 8fb8 carefully selects and vets all third-party partners, please note that third-party services have their own privacy policies which govern how they process data in the course of delivering their services to 8fb8.

Third-party integrations present on the 8fb8 Platform include:

• Live Game Studios: Evolution Gaming, Pragmatic Play Live, Ezugi, Spribe, NetEnt, and Microgaming operate game servers that receive session data in real time to render game outcomes. These studios are internationally audited and operate under their own data governance frameworks.
• Payment Gateways: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank each process payment instructions in accordance with Bangladesh Bank regulations and their own published privacy terms.
• KYC Verification Services: Licensed document verification partners process identity documents exclusively for the purpose of confirming account holder identity. Verified document images are not retained by 8fb8 beyond the period required for the verification process itself.
• Analytics Platforms: 8fb8 uses anonymised, aggregated analytics data to understand Platform usage patterns. No personally identifiable information is transmitted to analytics systems.

8fb8 does not embed third-party social media widgets, advertising networks, or retargeting pixels on the Platform. Your browsing activity on 8fb8.io is not shared with social media companies or advertising platforms.

8fb8 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material updates are made, we will notify registered players via email and display a prominent notice on the Platform prior to the changes taking effect. The "Last Updated" date at the top of this page will always reflect the most recent revision.

Your continued use of the 8fb8 Platform following the effective date of any update constitutes acceptance of the revised Privacy Policy. If you do not agree with a material change, you may request account closure by contacting our support team before the change takes effect.

For all privacy-related enquiries, data rights requests, or concerns about how 8fb8 handles your personal data, please reach out to us using the contact details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Rights Request — [Your Username]"
• Response Time: Within 48 hours Bangladesh Standard Time (BST, UTC+6) for general enquiries; within 14 days for formal data rights requests
• Live Chat: Available 24 hours a day, seven days a week, from within your logged-in 8fb8 account