8g88 Privacy Policy

1 Introduction

8g88 operates an online sports betting and casino gaming platform accessible at 8g88.io, serving registered adult players in Bangladesh. This Privacy Policy ("Policy") sets out in full and transparent detail the personal data processing activities undertaken by 8g88 in connection with the operation of the platform.

This Policy applies to all personal data collected through the 8g88 website, any mobile application or progressive web app provided by 8g88, communications between you and 8g88 (including live chat, email, and WhatsApp), and any other interaction you have with the platform. It covers data collected at the point of registration, during ongoing use of the platform, at the point of account closure, and for a defined period thereafter.

This Policy is intended to be read together with the 8g88 Terms & Conditions and the Responsible Gaming Policy. Where any of those documents address data processing, this Privacy Policy provides the authoritative and complete description of that processing. References to "data protection law" or "applicable law" throughout this Policy mean the data protection and privacy obligations applicable to 8g88's operations as a responsible international online gaming platform.

2 Data Controller

For the purposes of this Privacy Policy, 8g88 acts as the data controller in respect of your personal data. As data controller, 8g88 determines the purposes for which and the manner in which personal data is processed. 8g88 is responsible for ensuring that all processing activities described in this Policy are carried out lawfully, fairly, and transparently.

All data protection queries, access requests, correction requests, deletion requests, and complaints relating to your personal data should be directed to the 8g88 Data Protection contact:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 inside your account dashboard after login

3 Personal Data We Collect

8g88 collects and processes the following categories of personal data. The specific data points collected from you will depend on how you interact with the platform and the stage of your account lifecycle.

3.1 Identity and Registration Data

When you register an account with 8g88, we collect: your full legal name, date of birth, residential address (including city — which may be Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or elsewhere in Bangladesh), email address, and a username of your choosing. This information is required to create and maintain your account and to fulfil our identity verification obligations.

3.2 Identity Verification (KYC) Data

As part of our Know Your Customer process, we may collect copies of: a government-issued photo identification document (National ID card, passport, or driving licence), proof of address (utility bill or bank statement dated within the last 3 months), and confirmation of your payment method (for example, a screenshot showing your bKash or Nagad registered mobile number). KYC documents are processed securely and retained only for as long as required by our legal obligations.

3.3 Financial Data

To process deposits and withdrawals, we collect: your payment method type (bKash, Nagad, Rocket, Upay, Visa, Mastercard), associated account or card identifiers (e.g., registered mobile number, last 4 digits of card), transaction amounts in Bangladeshi Taka (BDT), and transaction timestamps. We do not store full card numbers or full bank account numbers. Payment card data is tokenised by our PCI-DSS compliant payment processor and is never held in full on 8g88 servers.

3.4 Technical and Device Data

When you access the 8g88 platform, our systems automatically collect certain technical data, including: IP address, browser type and version, operating system, device type (desktop, mobile, or tablet), screen resolution, time zone setting, referring URL, pages visited, and session duration. This data is used for security purposes, fraud detection, platform optimisation, and aggregate analytics.

3.5 Gameplay and Betting Data

We record all betting and gaming activity conducted through your account. This includes: sports bets placed (market, selection, stake, odds, and outcome), casino game sessions (game title, provider, stake, result, and game round reference), bonus credits received and wagering progress, and balance history. This data is essential for the operation of the platform, dispute resolution, and responsible gaming monitoring.

3.6 Communications Data

If you contact 8g88 via live chat, email, or WhatsApp, we retain records of those communications, including the content of messages, timestamps, and any attachments. These records are kept for quality assurance, dispute resolution, training purposes, and to provide continuity of service when you contact us on multiple occasions.

3.7 Responsible Gaming Data

Where you make use of responsible gaming tools — including deposit limit settings, session time limits, cool-off periods, or self-exclusion requests — we record those settings and the dates on which they were applied. This data is used exclusively to enforce the limits you have set and to monitor for potential problem gambling indicators in accordance with our responsible gaming obligations.

4 How We Collect Your Data

8g88 collects personal data through the following channels:

• Directly from you: Information you provide when registering an account, completing KYC verification, making deposits or withdrawal requests, participating in promotions, contacting support, or updating your account settings.
• Automatically during platform use: Technical and device data collected passively when you browse or interact with the 8g88 website or application, including data collected via cookies and server logs (see Section 10 for full cookie details).
• From third-party service providers: KYC verification data may be cross-referenced with identity verification providers. Payment processors may confirm transaction status and flag suspicious transactions. Fraud detection partners may provide risk scores associated with device fingerprints or IP addresses.
• From game providers: Third-party casino game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may share game round data, session records, and RTP statistics with 8g88 for reconciliation, auditing, and dispute resolution purposes.

5 Purpose and Legal Basis for Processing

The table below sets out the purposes for which 8g88 processes your personal data and the legal basis relied upon for each processing activity:

Where processing is based on consent (for example, receiving promotional emails), you may withdraw your consent at any time by updating your communication preferences in the account settings section or by contacting 8g88 support. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

6 Data Sharing and Disclosure

8g88 does not sell, rent, or trade your personal data. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for each purpose:

6.1 Payment Processors

To execute deposits and withdrawals, we share relevant transaction data with our payment partners, including bKash, Nagad, Rocket, Upay, and card processing networks (Visa, Mastercard). These providers process your payment data under their own privacy policies and are independently responsible for data security within their systems. 8g88 selects payment partners that maintain appropriate security standards.

6.2 KYC and Identity Verification Providers

To fulfil our identity verification obligations, we may share identity documents and registration data with specialist KYC verification service providers. These providers are engaged under data processing agreements that require them to handle your data securely and only for the purpose of identity verification on behalf of 8g88.

6.3 Game Providers

Third-party game studios that supply casino games to the 8g88 platform receive limited session and transaction data to operate game rounds and produce auditable records. Game providers do not receive your full identity or payment data; they receive only what is technically required to serve the game software, such as a pseudonymous session identifier and stake/return values.

6.4 Fraud and Security Partners

8g88 uses fraud detection and cybersecurity service providers that may receive technical data (IP addresses, device fingerprints, behavioural signals) to generate risk assessments. These providers operate under strict data processing agreements and are prohibited from using the data for any purpose other than providing risk intelligence to 8g88.

6.5 Legal and Regulatory Disclosure

8g88 may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, by court order, or where 8g88 reasonably believes that disclosure is necessary to prevent fraud, protect the safety of individuals, or defend legal claims. 8g88 will notify affected users of such disclosures where it is legally permitted to do so.

6.6 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of 8g88's assets, personal data held by 8g88 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and the privacy terms applicable to their data following the transfer.

7 International Data Transfers

8g88 operates as an international online platform. Some of the third-party service providers described in Section 6 may process your personal data in countries outside Bangladesh. Where personal data is transferred internationally, 8g88 takes steps to ensure that appropriate safeguards are in place, including contractual protections that require the recipient to maintain data security standards equivalent to those 8g88 applies itself.

By using the 8g88 platform, you acknowledge that your personal data may be transferred to and processed in countries outside your country of residence. 8g88 does not transfer data to countries that lack adequate data protection frameworks without first implementing contractual safeguards.

8 Data Retention

8g88 retains personal data for as long as is necessary to fulfil the purposes set out in this Policy, and in any event for no longer than the periods described below:

• Active account data: Retained for the full duration of your account being open and active on the platform.
• Account data following closure: Retained for a minimum of 5 years following account closure to comply with anti-money-laundering, fraud prevention, and audit obligations. This period may be extended where an investigation, dispute, or legal proceeding is ongoing at the point of the standard retention expiry.
• KYC documents: Retained for a minimum of 5 years from the date of submission or from the date the account closes, whichever is later.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction in accordance with financial record-keeping requirements.
• Customer support communications: Retained for 3 years from the date of the last communication in a support thread.
• Technical and device data (server logs): Retained for 12 months in rolling format, after which older log entries are deleted or anonymised.
• Marketing consent records: Retained for as long as you hold an account, and for 3 years after account closure as evidence of the consent given.

When the applicable retention period expires, personal data is securely and permanently deleted from 8g88 systems, or anonymised so that it can no longer be associated with any identified or identifiable individual.

9 Security Measures

8g88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and 8g88 servers is encrypted using 256-bit SSL/TLS protocols. This applies to the website, login process, deposit and withdrawal flows, and API communications.
• Encryption at rest: Sensitive personal data fields stored in 8g88 databases — including identity document data and payment identifiers — are encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within 8g88's systems is restricted to authorised personnel whose job roles require that access. Role-based access controls and multi-factor authentication are applied to internal systems holding player data.
• Penetration testing and security audits: 8g88 undertakes periodic security assessments and vulnerability testing to identify and remediate weaknesses in the platform's security posture.
• Incident response: 8g88 maintains a data breach response procedure. In the event of a confirmed data breach that poses a risk to your rights and freedoms, 8g88 will notify affected players without undue delay and take immediate remediation steps.
• Third-party security standards: All third-party data processors engaged by 8g88 are required under contract to maintain security standards consistent with those applied by 8g88 itself.

Whilst 8g88 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for keeping your account login credentials confidential and for ensuring that your device is free of malware or keyloggers that could compromise your account security.

10 Cookies and Tracking Technologies

8g88 uses cookies and similar tracking technologies on the platform. A cookie is a small text file placed on your device when you visit a website. The table below describes the categories of cookies used by 8g88:

8g88 does not use advertising cookies or third-party behavioural tracking cookies. You can manage or delete cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent the platform from functioning correctly and may prevent you from logging in or completing transactions.

11 Your Data Rights

As a player registered with 8g88, you have the following rights with respect to your personal data. To exercise any of these rights, please contact 8g88 via live chat or email at [email protected]. 8g88 will respond to all verified data rights requests within 30 calendar days of receipt.

• Right of Access: You have the right to request confirmation of whether 8g88 holds personal data about you and, if so, to receive a copy of that data along with information about how it is processed.
• Right to Rectification: If any personal data held by 8g88 about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to the processing. This right is subject to 8g88's legal obligations to retain certain data (see Section 8).
• Right to Restriction of Processing: You may request that 8g88 restrict the processing of your data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive a copy of the personal data you have provided to 8g88 in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where that processing is based on legitimate interests. 8g88 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, or where the processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time through your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of prior processing.

12 Minors and Age Restriction

The 8g88 platform is strictly for adults aged 21 years and above. 8g88 does not knowingly collect or process personal data relating to individuals under the age of 21. If you are under 21, you must not register an account, deposit funds, or use any part of the 8g88 platform.

If 8g88 becomes aware that it has inadvertently collected personal data from a person under the age of 21, it will take immediate steps to delete that data and close the associated account. Any funds deposited by an underage player will be handled in accordance with applicable law, which may result in return of deposited amounts only with no winnings paid out.

If you are a parent or guardian and believe that a person under 21 in your care has created an account with 8g88, please contact 8g88 support immediately via live chat or at [email protected].

13 Third-Party Links and Services

The 8g88 platform may contain references to or integrations with third-party services — most notably the casino game software provided by studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game provided by one of these studios, your gameplay session data is processed both by 8g88 and by the relevant game provider. Each provider operates under its own privacy policy. 8g88 recommends that you review the privacy policies of game providers whose software you use regularly.

8g88 is not responsible for the data practices of third-party service providers beyond the contractual obligations those providers have undertaken to 8g88. In particular, 8g88 is not responsible for the privacy practices of payment providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard) — players should review those providers' own privacy policies for information on how they handle payment data.

14 Changes to This Privacy Policy

8g88 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made, we will notify registered players by email or by displaying a prominent notice on the platform. The notification will be provided at least 7 days before the updated Policy takes effect, except where an immediate update is required for legal compliance or to address an urgent security issue.

The effective date at the top of this Policy indicates when the current version was last updated. The current version of the Privacy Policy is always available at 8g88.io/privacy-policy. Your continued use of the platform after the effective date of any updated Policy constitutes your acceptance of the changes. If you do not accept the revised Policy, please cease using the platform and contact support to arrange account closure.

8g88 maintains an internal version history of this Policy. If you require a copy of a previous version of the Privacy Policy that was in effect during a specific period, please contact [email protected] with your request.

15 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way 8g88 handles your personal data, please get in touch using any of the channels below. Our support team is available 24 hours a day, 7 days a week, including during Eid, Pohela Boishakh, and all Bangladesh public holidays.

• Email: [email protected]
• Live Chat: Available inside your account dashboard, 24/7
• WhatsApp: Available after login via the in-app support menu

When contacting 8g88 about a data protection matter, please include your registered username and a clear description of your request or concern. This will help our team locate your account records and respond to you as efficiently as possible. We aim to acknowledge all data-related queries within 48 hours and to provide a full response within 30 calendar days.

All communications regarding data protection matters are handled in English. Our support team is experienced in assisting players from across Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh, and will work to resolve your concern promptly and professionally.