8fb8 Privacy Policy

1. Data Controller Information

8fb8 is the data controller responsible for your personal information.

The operator of the 8fb8 platform at https://8fb8.app acts as the data controller in respect of all personal data collected from players who register and use the platform. As data controller, 8fb8 determines the purposes and means by which your personal data is processed.

This Privacy Policy applies to all personal data collected through:

1. The 8fb8 website accessible at https://8fb8.app and all subdomains thereof.
2. The 8fb8 account registration and login process.
3. Deposit, withdrawal, and payment processing interactions.
4. Customer support communications, including via email and live chat.
5. Promotional and marketing communications where you have opted in to receive them.
6. Responsible gaming tools and self-management features accessed via Account Settings.

If you have any questions regarding how 8fb8 processes your personal data, or if you wish to exercise any of your privacy rights, you may contact the 8fb8 Data Protection team at: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in the subject line of your email to ensure it is directed to the correct team.

2. Personal Data We Collect

A clear breakdown of every category of personal data that 8fb8 collects and the source of that data.

2.1 Data You Provide Directly

When you register an account, verify your identity, make a deposit or withdrawal, or contact our support team, you provide personal data to 8fb8 directly. This includes:

2.2 Data Collected Automatically

When you access the 8fb8 platform, certain technical data is collected automatically by our systems. This data is used for security monitoring, fraud detection, and platform performance optimisation. It includes:

1. Device and Browser Data: IP address , device type (mobile/desktop/tablet), operating system, browser type and version, screen resolution.
2. Session Data: Login timestamps, session duration, pages visited within the 8fb8 platform, features accessed, bet and game history (timestamps and amounts, not content of personal communications).
3. Geolocation Data: Country and region-level location derived from your IP address. 8fb8 does not access precise GPS-level location data.
4. Cookie and Tracking Data: Session identifiers, authentication tokens, and analytics identifiers set by 8fb8's own systems. See Section 5 (Cookies) for a full breakdown.

2.3 Data Received from Third Parties

In limited circumstances, 8fb8 may receive personal data about you from trusted third-party sources, including:

1. Payment Processors: Transaction confirmation references from bKash, Nagad, Rocket, Upay, and partner banks to validate successful deposits and withdrawals.
2. Identity Verification Partners: Where 8fb8 uses a third-party KYC verification service, that service may return a verification status (confirmed / unconfirmed) associated with the identity documents you submitted.
3. Fraud Detection Services: Risk scores and flagged-device signals provided by fraud prevention tools integrated into the 8fb8 platform infrastructure.

3. How We Use Your Data

8fb8 processes your personal data only for defined, lawful purposes directly related to operating the platform and serving your needs as a player.

3.1 Primary Processing Purposes

The table below sets out the primary purposes for which 8fb8 processes your personal data, together with the legal basis for each processing activity:

3.2 Responsible Gaming Use of Data

8fb8 takes its responsible gaming obligations seriously. Session data, deposit frequency, bet volume, and account activity patterns are monitored by 8fb8's responsible gaming systems to identify signs of potentially harmful gambling behaviour. Where such patterns are detected, 8fb8 may take action including sending a welfare communication to the player, offering access to self-management tools, applying temporary account restrictions, or referring the player to external support resources. This processing is carried out in the player's interests and in compliance with our responsible gaming obligations. For more information, visit our Responsible Gaming page.

3.3 Marketing Communications

8fb8 will only send you promotional emails, SMS notifications, or in-platform offers if you have actively opted in to receive such communications during registration or via your Account Settings. You may withdraw your consent to receive marketing communications at any time by updating your communication preferences in Account Settings or by contacting support at [email protected] (plain text — not a clickable link). Withdrawal of marketing consent does not affect your ability to use the 8fb8 platform or the processing of your account data for operational purposes.

3.4 Automated Decision-Making

8fb8 uses automated systems for fraud scoring, geographic eligibility checks, and responsible gaming monitoring. These systems may result in automated decisions that affect your account, such as a temporary hold on a withdrawal flagged as high-risk, or an automatic geographic restriction applied to an account accessing the platform from a Prohibited Territory. Where an automated decision significantly affects you, you have the right to request human review of that decision by contacting support at [email protected] (plain text — not a clickable link).

4. Data Sharing and Third Parties

8fb8 shares your personal data only with parties who are directly necessary for operating the platform and processing your transactions.

4.1 Categories of Third-Party Recipients

8fb8 may share your personal data with the following categories of third parties, strictly for the purposes identified:

1. Payment Processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank): Your payment account details and transaction amounts are shared with the relevant payment processor solely to execute your deposit or withdrawal instruction. These providers are subject to their own privacy policies and regulatory obligations.
2. KYC Verification Partners: Your identity document data (NID, passport) may be shared with a contracted identity verification service to validate your identity before withdrawal processing. These partners are contractually bound to use your data for verification purposes only.
3. Game Content Providers (Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, Ezugi): When you play a game hosted by a third-party provider, your account identifier and bet/session data may be transmitted to the provider's servers to run the game. Providers do not receive your full identity or payment data.
4. Platform Infrastructure Providers: Cloud hosting, server infrastructure, and cybersecurity service providers who process data on 8fb8's behalf under data processing agreements that require them to maintain equivalent security standards to 8fb8.
5. Fraud Prevention Services: Risk intelligence providers who receive device fingerprint data and session signals to generate fraud risk scores.
6. Legal and Regulatory Authorities: Where required by applicable law, a lawful court order, or a competent regulatory authority, 8fb8 may disclose personal data. 8fb8 will disclose only the minimum data necessary to satisfy the legal obligation.

4.2 No Sale of Personal Data

8fb8 does not sell, rent, exchange, or otherwise transfer your personal data to any third party for commercial or marketing purposes. Your data is not used to build advertising profiles and is not shared with social media advertising networks or data brokers.

4.3 International Data Transfers

Some of 8fb8's third-party service providers — including game content providers and cloud infrastructure partners — may be located outside Bangladesh. Where personal data is transferred to servers or processors in other countries, 8fb8 ensures that appropriate contractual safeguards are in place, including data processing agreements that require the recipient to maintain data security standards consistent with those applied by 8fb8.

5. Cookies and Tracking Technologies

8fb8 uses cookies to keep your session secure, understand platform usage, and prevent fraud. We do not use advertising cookies.

5.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as whether you are logged in, your preferred language settings, and your navigation path — so that your next visit is faster and more personalised. 8fb8 uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a set period).

5.2 Categories of Cookies Used by 8fb8

5.3 Managing Cookies

You can manage or delete non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies stored by websites. Note that disabling Strictly Necessary or Fraud & Security cookies will impair your ability to use the 8fb8 platform — in particular, you may not be able to log in or complete transactions if session and security cookies are blocked. Instructions for managing cookies in major browsers are available via the browser's own help documentation.

5.4 No Third-Party Advertising Cookies

8fb8 does not embed third-party advertising trackers, retargeting pixels, or social media "like/share" buttons that set cross-site tracking cookies on the 8fb8 platform. You will not be retargeted by 8fb8 advertisements on other websites as a result of visiting https://8fb8.app.

6. Data Retention

8fb8 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to mandatory legal retention periods.

6.1 Active Account Retention

While your 8fb8 account remains active, all personal data associated with your account is retained to enable platform operation, payment processing, customer support, and responsible gaming monitoring. Your account is considered active if you have logged in or placed a bet within the preceding 24 months. Accounts with no activity for 24 consecutive months may be classified as dormant.

6.2 Post-Closure Retention

Following account closure — whether initiated by you or by 8fb8 — personal data is retained for the following minimum periods before deletion or anonymisation:

6.3 Anonymisation

Where 8fb8 retains data beyond the periods described above for statistical or analytical purposes — for example, to understand long-term platform usage trends — the data is fully anonymised so that it can no longer be linked to any individual player. Anonymised data does not constitute personal data and is not subject to the rights described in Section 7.

7. Your Privacy Rights

As an 8fb8 player, you have meaningful rights over your personal data. Here is what you can request and how to exercise those rights.

7.1 Right of Access

You have the right to request a copy of all personal data that 8fb8 holds about you. This is sometimes referred to as a Subject Access Request (SAR). On receipt of a verified SAR, 8fb8 will provide a structured summary of your personal data within 30 calendar days. To submit a SAR, email [email protected] (plain text — not a clickable link) with the subject line "Subject Access Request" and include your registered email address and account username for identity verification.

7.2 Right to Rectification

If any personal data that 8fb8 holds about you is inaccurate or out of date, you have the right to request that it be corrected. You may update certain account details — such as your email address and contact number — directly via Account Settings. For changes to identity or KYC data, please contact the support team and provide updated supporting documents.

7.3 Right to Erasure

You may request deletion of your personal data where: (a) the data is no longer necessary for the purpose for which it was collected; (b) you withdraw consent and there is no overriding legal basis for continued processing; or (c) the data has been unlawfully processed. Note that 8fb8's ability to comply with erasure requests is subject to mandatory legal retention obligations. In such cases, 8fb8 will delete the data as soon as the mandatory retention period expires, and will confirm this to you in writing.

7.4 Right to Restriction

You may request that 8fb8 restrict processing of your personal data — meaning we retain it but do not actively use it — in circumstances where you contest the accuracy of the data, you object to our processing, or we no longer need the data but you require it for a legal claim.

7.5 Right to Object

You have the right to object to 8fb8 processing your personal data on the basis of legitimate interests — including profiling for responsible gaming monitoring. Where you object, 8fb8 will cease the relevant processing unless 8fb8 can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for legal claims.

7.6 Right to Withdraw Consent

Where 8fb8 processes your personal data on the basis of your consent — specifically, for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. To withdraw consent, update your preferences in Account Settings or contact support at [email protected] (plain text — not a clickable link).

7.7 Exercising Your Rights

To exercise any of the rights described in this section, contact the 8fb8 Data Protection team at [email protected] (plain text — not a clickable link) with the subject line "Privacy Rights Request". Please include your registered account username and email address so that 8fb8 can verify your identity before processing your request. 8fb8 will respond within 30 calendar days. In complex cases, this period may be extended by a further 30 days, and 8fb8 will notify you of the extension within the initial 30-day window.

8. Data Security Measures

8fb8 implements technical and organisational measures designed to protect your personal data against unauthorised access, loss, and misuse.

8.1 Technical Safeguards

The following technical security measures are in place across the 8fb8 platform and its supporting infrastructure:

1. SSL/TLS Encryption in Transit: All data exchanged between your browser and 8fb8 servers is encrypted using TLS 1.2 or higher. Connections that do not meet this standard are rejected.
2. Password Hashing: Account passwords are never stored in plain text. They are processed through a one-way cryptographic hash function before storage. Even 8fb8 employees cannot read your password.
3. Access Controls: Access to personal data within 8fb8's internal systems is restricted on a strict need-to-know basis. Staff access is role-based and audited.
4. Intrusion Detection: 8fb8's platform infrastructure is monitored 24/7 by automated intrusion detection systems that flag and respond to anomalous access patterns in real time.
5. Payment Data Isolation: Payment method details (bKash/Nagad/bank account numbers) are stored in an isolated, access-controlled environment separate from general account data.

8.2 Organisational Safeguards

In addition to technical controls, 8fb8 maintains the following organisational safeguards:

1. Staff who handle personal data undergo data protection training and are bound by confidentiality obligations.
2. Third-party service providers who process personal data on 8fb8's behalf are subject to data processing agreements that require them to maintain equivalent security standards.
3. 8fb8 conducts periodic internal reviews of its data processing activities and security posture.
4. In the event of a personal data breach that poses a risk to players, 8fb8 will notify affected players promptly and take all reasonable steps to contain and remediate the breach.

8.3 Your Responsibilities

The security of your 8fb8 account also depends on your own actions. You are responsible for keeping your login credentials confidential and for ensuring that your registered email address and mobile number remain under your exclusive control. 8fb8 will never ask for your password via email, live chat, or any other channel. If you believe your account has been compromised, contact support at [email protected] (plain text — not a clickable link) immediately.

9. Children and Minors

The 8fb8 platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from minors.

8fb8 is an 18+ platform. We do not knowingly collect, process, or store personal data from any person under the age of 18. Age verification is enforced at the point of registration and again at first withdrawal via KYC document review. If 8fb8 discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 18, the following steps will be taken immediately:

1. The account will be suspended pending investigation.
2. All personal data associated with the account will be deleted as soon as the investigation is concluded, subject only to any legal retention obligations that may apply.
3. Any balance in the account — including deposited amounts and winnings — will be handled in accordance with Section 3.1 of the 8fb8 Terms & Conditions.
4. Where the breach is determined to have resulted from the deliberate provision of false age information, the matter may be referred to the relevant legal authorities.

10. Updates to This Privacy Policy

8fb8 may update this Privacy Policy from time to time. The current version is always available at https://8fb8.app/privacy-policy.

10.1 How We Notify You of Changes

When 8fb8 makes a material change to this Privacy Policy — meaning a change that significantly affects how your personal data is collected, used, or shared — we will notify you via the email address registered to your account at least 14 days before the change takes effect. For minor, non-material changes (such as typographical corrections or clarifications that do not alter the substance of any section), the updated policy will be published at https://8fb8.app/privacy-policy without separate advance notification.

10.2 Version History

The "Last Updated" date at the top of this Privacy Policy reflects the date on which the most recent revision was published. Players who registered before the most recent update date are encouraged to review the updated policy to understand any changes since their last review.

10.3 Continued Use

Your continued use of the 8fb8 platform after a Privacy Policy update takes effect constitutes acceptance of the updated policy. If you do not agree with the updated policy, you may close your account in accordance with the process described in Section 10.2 of the 8fb8 Terms & Conditions. Outstanding real-money balances will be returned to you following KYC verification.