Privacy Policy — How 8x88 Collects, Uses, and Protects Your Data

Introduction

Welcome to the 8x88 Privacy Policy. 8x88 ("we", "us", "our") is Bangladesh's premier online casino and sports betting platform, accessible at https://8x88.io. We are committed to protecting your privacy and handling your personal data in a transparent, responsible, and secure manner.

This Privacy Policy describes how 8x88 collects, stores, uses, and shares personal data when you visit the 8x88 website, register an account, make a deposit or withdrawal, use any of our games or betting markets, interact with our customer support team, or engage with any other feature of the 8x88 platform. It also describes your rights in relation to your personal data and how to exercise them.

By registering an account on 8x88 or by continuing to use the platform after this Privacy Policy has been published or updated, you acknowledge that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Privacy Policy, you should not use the 8x88 platform.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated herein by reference and together form the complete agreement governing your use of the 8x88 platform.

Data We Collect

8x88 collects personal data from you through several channels. The categories of data we collect, and the circumstances in which each category is collected, are described below.

2.1 Registration Data

When you create an 8x88 account, we collect the following data:

• Full legal name
• Date of birth (used to verify that you are 21 years of age or older)
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh) and postal code
• Email address
• Mobile phone number
• Username and password (password is stored in hashed, salted form only)
• Preferred currency (Bangladeshi Taka — BDT)

2.2 Identity Verification Data

When you request a withdrawal above our verification threshold, or when 8x88 initiates a know-your-customer (KYC) check, we may collect:

• Copy of a valid government-issued photo ID (National Identity Card, passport, or driving licence)
• Proof of address document (utility bill, bank statement, or similar document dated within 3 months)
• Selfie or video verification in certain high-value account scenarios
• Source-of-funds documentation for transactions above our internal AML thresholds

2.3 Financial and Transaction Data

When you make deposits or withdrawals, we collect:

• Payment method identifiers (e.g., your bKash mobile number, Nagad account reference, Rocket wallet reference, Upay account reference, Visa/Mastercard last four digits)
• Transaction amounts in BDT (৳)
• Transaction timestamps and reference numbers
• Bank account details where bank transfer is the chosen withdrawal method (Dutch-Bangla Bank, BRAC Bank, or other supported banks)

8x88 does not store full card numbers, CVV codes, or complete bank account credentials on its own servers. These details are processed directly by our certified payment processing partners.

2.4 Usage and Gameplay Data

When you use the 8x88 platform, we automatically collect technical and behavioural data, including:

• IP address and approximate geolocation (country and city level only)
• Device type, operating system, browser type and version
• Session start and end times, session duration
• Pages visited, games played, bets placed, wagering history
• Win/loss records and account balance movements
• Clickstream data and navigation paths within the platform

2.5 Communications Data

When you contact 8x88 customer support or respond to our communications, we collect:

• Live chat transcripts
• Email correspondence content and metadata
• Records of promotional communications sent to you and your engagement with them
• Support ticket history, complaint records, and dispute correspondence

How We Use Your Data

8x88 uses the personal data it collects for the following specific purposes:

• Account creation and management: To register your account, verify your identity, maintain your account profile, and provide you with access to the full range of 8x88 Services.
• Transaction processing: To process deposits and withdrawals accurately and securely via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, or other supported providers).
• Identity and age verification: To confirm that you are at least 21 years of age and to satisfy our know-your-customer obligations. 8x88 takes underage gambling prevention seriously and age verification is a non-negotiable requirement.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, unauthorised account access, bonus abuse, and any other activity that may violate our Terms & Conditions or applicable law.
• Responsible gaming compliance: To monitor gameplay patterns that may indicate problem gambling behaviour, to enforce player-requested deposit limits, session limits, and self-exclusion periods, and to fulfil our responsible gaming obligations.
• Customer support: To respond to your enquiries, resolve disputes, investigate complaints, and provide technical assistance.
• Platform improvement: To analyse usage data in aggregate and pseudonymised form to understand how players use the 8x88 platform, identify areas for improvement, and develop new features.
• Marketing communications: To send you promotional emails, SMS messages, or in-platform notifications about 8x88 bonuses, tournaments, and new games — but only if you have opted in to receive such communications or where permitted on a soft opt-in basis. You may opt out at any time.
• Legal and regulatory compliance: To comply with applicable laws, respond to lawful requests from regulatory or law enforcement authorities, and enforce our legal rights and obligations.

Legal Basis for Processing

8x88 processes your personal data on the following legal bases, depending on the specific purpose of the processing:

• Contractual necessity: Processing your registration data, transaction data, and identity verification data is necessary to perform the contract between you and 8x88 (i.e., to provide the Services you have signed up for). Without this processing, we cannot operate your account.
• Legitimate interests: Processing usage data, communications data, and certain security-related data serves the legitimate interests of 8x88 in operating a secure, fair, and commercially viable platform. We only rely on this basis where our legitimate interests are not overridden by your privacy rights.
• Legal obligation: Certain processing — particularly around identity verification, transaction record-keeping, and anti-money laundering monitoring — is required by applicable law and is performed on the legal basis of compliance with a legal obligation.
• Consent: Where we send you marketing communications or use non-essential cookies and tracking technologies, we rely on your freely given, informed consent. You may withdraw consent for these purposes at any time without affecting the lawfulness of processing carried out before withdrawal.

Data Sharing and Disclosure

8x88 does not sell your personal data to any third party. We share personal data with third parties only in the following limited and controlled circumstances:

• Payment processors: We share the minimum financial data necessary with our payment processing partners (including the operators of bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank gateways) solely to process your requested deposit or withdrawal transactions. These partners process payment data under their own privacy policies and are bound by applicable data protection standards.
• Game providers: When you play games provided by third-party studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), your gameplay session data (including your player identifier and wager amounts) is transmitted to those providers' systems to deliver the game content. Game providers do not receive your name, email, or payment method data.
• Identity verification services: Where we use third-party KYC service providers to assist with document verification, we share the relevant identity documents with those providers strictly for verification purposes. Verified data is not retained by these providers beyond the verification workflow.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or other public authorities where we are legally required to do so, where disclosure is necessary to protect the safety of persons, or where disclosure is required to defend or pursue legal claims.
• Business continuity: In the event of a merger, acquisition, or sale of substantially all of 8x88's assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected players of any such transfer and the privacy implications.

Cookies and Tracking Technologies

8x88 uses cookies and similar tracking technologies on the platform to enhance your user experience, maintain your login session, and analyse platform performance. The categories of cookies we use are as follows:

• Strictly necessary cookies: These cookies are essential for the platform to function correctly. They maintain your authenticated session, preserve your account settings between pages, and enable secure transactions. These cookies cannot be disabled without rendering the platform non-functional.
• Performance and analytics cookies: These cookies collect anonymised or pseudonymised data about how players use the 8x88 platform — such as which pages are visited most frequently and where players experience errors. This data helps us improve the platform. These cookies require your consent.
• Functional cookies: These cookies remember your preferences — such as your preferred language, game lobby display settings, and notification preferences — to personalise your experience. These cookies require your consent.
• Marketing cookies: These cookies track your activity on the 8x88 platform to enable us to deliver relevant promotional content and measure the effectiveness of our campaigns. These cookies require your explicit consent and may be declined without affecting core platform functionality.

You can manage your cookie preferences at any time through the cookie settings panel in your browser, or by contacting support at [email protected]. Please note that disabling certain categories of cookies may affect the functionality of some platform features.

Data Security

8x88 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the 8x88 platform is encrypted using Transport Layer Security (TLS) with a minimum cipher strength of 256 bits. Look for the padlock icon in your browser's address bar as a visual confirmation of the encrypted connection.
• Password hashing: Account passwords are processed through a strong one-way cryptographic hashing algorithm with a unique salt before storage. This means that even in the highly unlikely event of a data breach, your plain-text password cannot be recovered from our stored data.
• Access controls: Access to systems that store or process personal data is restricted to authorised 8x88 personnel who require that access to perform their job function. Access permissions are reviewed and audited regularly.
• Two-factor authentication (2FA): 8x88 strongly encourages all players to enable 2FA on their accounts. 2FA requires a second verification step in addition to your password when logging in, significantly reducing the risk of unauthorised account access.
• Intrusion detection and monitoring: The 8x88 platform is monitored continuously for suspicious access patterns, anomalous transaction behaviour, and potential security incidents. Our security team investigates all flagged events promptly.
• Penetration testing: 8x88 conducts regular security assessments of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.

Despite our best efforts, no online platform can guarantee absolute security. In the unlikely event of a data breach that poses a risk to your rights and freedoms, 8x88 will notify affected players as soon as reasonably practicable and will take immediate steps to contain and investigate the breach.

Data Retention

8x88 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, as described in this Privacy Policy, or as required by applicable legal and regulatory obligations. The key retention periods that apply to the main categories of personal data are as follows:

• Account and registration data: Retained for the duration of your active account plus a minimum of 5 years following permanent account closure. This period allows us to respond to any post-closure disputes or regulatory enquiries relating to your account history.
• Identity verification (KYC) documents: Retained for the duration of your active account plus a minimum of 7 years following permanent account closure, in line with standard financial record-keeping obligations.
• Financial transaction records: Retained for a minimum of 7 years from the date of each individual transaction, as required for financial record-keeping and anti-money laundering compliance purposes.
• Gameplay and wagering history: Retained for 3 years from the date of each gaming session. Aggregated, anonymised gameplay statistics may be retained indefinitely for analytical purposes.
• Customer support and communications records: Retained for 3 years from the date of the last interaction in a given communication thread.
• Marketing consent records: Retained for the duration of your marketing consent plus 3 years following opt-out, to provide evidence of consent history.

When data reaches the end of its applicable retention period, it is securely deleted from active systems and any backups in which it is held, or anonymised in such a way that it can no longer be associated with you as an individual. Requests for earlier deletion of data that is subject to mandatory legal retention periods cannot be fulfilled until those periods expire.

Your Data Rights

As a registered player on the 8x88 platform, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our support team at [email protected]. We will respond to all valid requests within 30 days of receipt.

• Right of access: You have the right to request a copy of the personal data 8x88 holds about you, along with information about the purposes for which it is processed and the third parties with whom it is shared. We will provide this information in a clear, structured format.
• Right to rectification: If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may also update certain account details directly through your 8x88 account settings.
• Right to erasure ("right to be forgotten"): You have the right to request the deletion of your personal data. We will fulfil erasure requests where the data is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. Erasure requests cannot be fulfilled where the data is subject to a mandatory legal retention period.
• Right to restrict processing: You have the right to request that 8x88 restricts the processing of your personal data in certain circumstances — for example, while we investigate a dispute about the accuracy of your data.
• Right to data portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests. You also have an absolute right to object to processing of your data for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

Children and Minors

The 8x88 platform is strictly for adults aged 21 years and above. 8x88 does not knowingly collect, store, or process personal data from any person under the age of 21. The collection of data from minors is not part of our business practice and would constitute a serious violation of our responsible gaming obligations.

If you believe that a person under 21 years of age has registered an account on the 8x88 platform or has provided personal data to 8x88 in any other way, please notify us immediately at [email protected]. We will investigate the matter promptly and, where confirmed, will permanently close the account, delete all associated personal data (to the extent permitted by legal retention requirements), and return any deposited funds to the payment method from which they originated.

Third-Party Services

The 8x88 platform integrates with third-party services to deliver its full range of features. These third parties operate under their own privacy policies and data protection practices, and 8x88 is not responsible for the privacy practices of any third party. We encourage you to review the privacy policies of any third-party service providers whose products you interact with through 8x88.

Third-party integrations currently in use on the 8x88 platform include:

• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other studios whose games are accessible through the 8x88 game lobby. These providers receive your player session data to deliver live game content.
• Payment gateways: The technical payment processing infrastructure used to facilitate bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank transactions. Full payment credentials are handled by these certified gateways and are not stored on 8x88 servers.
• Analytics providers: Pseudonymised platform usage data may be processed by analytics service providers to help 8x88 understand how the platform is being used and to identify opportunities for improvement. No personally identifiable data is shared with analytics providers in identifiable form.
• Customer support tools: Our live chat and ticketing infrastructure is powered by third-party support software. Support conversation data is processed within the support platform under appropriate data handling agreements.

Changes to This Policy

8x88 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaning they meaningfully affect how we collect, use, or share your personal data — we will notify registered players in advance via the email address associated with their account and/or via a prominent notice on the 8x88 platform. Non-material changes, such as formatting corrections or clarifications that do not alter the substance of our privacy practices, may be made without prior notice.

The "Last Updated" date at the top of this Privacy Policy reflects the date on which the most recent version came into effect. We encourage you to review this Privacy Policy periodically to remain informed of how 8x88 protects your personal data. Your continued use of the 8x88 platform following the publication of any updated Privacy Policy constitutes your acceptance of the revised terms.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 8x88 handles your personal data, please contact our support team using the details below. We are committed to resolving all privacy-related enquiries promptly and transparently.

• Email: [email protected] — please use the subject line "Privacy Enquiry" for faster routing
• Live Chat: Available 24/7 via the live chat widget on the 8x88 platform
• Response Time: We aim to respond to all privacy-related email enquiries within 5 business days and to live chat enquiries within 2 minutes

For data rights requests (access, erasure, rectification, portability), please email [email protected] with the subject line "Data Rights Request" and include your registered account username or email address so we can verify your identity. All data rights requests are processed within 30 days of receipt of a verified request.

For responsible gaming concerns, self-exclusion requests, or urgent account security matters, please visit our Responsible Gaming page or contact support immediately via live chat. 8x88 is for adults aged 21 and above only.