8u88 Privacy Policy

01 Introduction & Scope

This Privacy Policy ("Policy") describes how 8u88 ("8u88", "we", "us", "our"), operating the online betting and casino platform accessible at https://8u88.io, collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "Player") who access or use the 8u88 platform, including the website, any associated mobile interfaces, and all related digital services.

This Policy applies to all personal data processed by 8u88 in connection with its operations, including data provided voluntarily by Players during registration and data collected automatically through your use of the platform. By creating an 8u88 account or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy.

This Policy should be read alongside the 8u88 Terms & Conditions and the Responsible Gaming Policy, which together govern your relationship with 8u88.

02 Data We Collect

8u88 collects the following categories of personal data. The specific data points collected depend on the nature of your interaction with the platform.

2.1 Identity & Registration Data

• Full legal name as it appears on government-issued identification
• Date of birth (collected to enforce the 21+ age restriction)
• Residential address, including district and division within Bangladesh
• Username chosen during account registration
• Email address and, where provided, mobile phone number
• Nationality and country of residence

2.2 Identity Verification (KYC) Data

• Scanned or photographed copies of government-issued photo identification (National ID card, passport, or driving licence)
• Proof of address documents (utility bill or bank statement)
• Selfie or liveness-check image where requested for biometric verification
• Payment account ownership evidence (e.g., screenshot of registered bKash/Nagad/Rocket mobile number)

2.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and payment method references
• Mobile wallet identifiers (bKash account number, Nagad number, Rocket number) — stored as masked references, not full credentials
• Bank account details where bank transfer is used (account name, bank name, branch)
• Card type and last four digits where Visa or Mastercard is used
• Transaction history, including bonus credits and wagering activity

2.4 Behavioural & Usage Data

• Games played, bet amounts, win/loss records, session durations
• Platform navigation paths and feature usage patterns
• Search queries made within the platform
• Responsible gaming tool usage (deposit limits set, self-exclusion periods)

2.5 Technical & Device Data

• IP address at time of registration and subsequent logins
• Device type, operating system, and browser version
• Approximate geolocation derived from IP address
• Cookie identifiers and session tokens
• Log data including access timestamps, error logs, and referral source

2.6 Communications Data

• Content of support tickets, live chat transcripts, and email correspondence with the 8u88 support team
• Survey responses and feedback submitted voluntarily through the platform

03 How We Collect Data

8u88 collects personal data through the following channels:

3.1 Directly From You

The majority of personal data 8u88 holds is provided directly by you — at account registration, during KYC verification, when making deposits or withdrawal requests, when contacting support, or when responding to optional surveys or promotions.

3.2 Automatically Through Platform Use

When you visit and use the 8u88 platform, certain technical and behavioural data is collected automatically through server logs, cookies, and similar technologies. This includes your IP address, device identifiers, session activity, and navigation patterns. See Section 6 for full details on cookies and tracking.

3.3 From Third-Party Service Providers

8u88 may receive supplementary data from trusted third-party partners in the following limited contexts:

• Payment processors — transaction status confirmations and fraud screening signals from bKash, Nagad, Rocket, Upay, and card processing networks
• Identity verification providers — results of automated KYC checks where a third-party verification service is used to validate identity documents
• Game providers — aggregated game session data from studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, used to resolve disputes and ensure fair play
• Fraud detection services — risk scoring signals used to identify potentially fraudulent account activity

04 Purpose & Legal Basis for Processing

8u88 processes personal data only for specified, legitimate purposes. The table below summarises the primary processing activities, their purposes, and the legal basis on which each activity rests.

4.1 Marketing Communications

Where you have opted in to receive marketing communications, 8u88 may contact you by email regarding promotions, bonuses, new game launches, and seasonal offers relevant to Bangladeshi players (such as Eid or BPL season promotions). You may withdraw your consent and opt out of marketing communications at any time by contacting [email protected]. Opting out of marketing does not affect your account access or any other processing based on contract or legal obligation.

05 Data Sharing & Disclosure

8u88 does not sell, rent, or trade your personal data. We share personal data only in the limited circumstances described below, and only with parties who are bound by confidentiality and data protection obligations at least as stringent as our own.

5.1 Essential Service Providers

8u88 shares personal data with the following categories of third-party service providers who process data on our behalf to enable the platform to function:

• Payment processing partners — bKash, Nagad, Rocket, Upay, card networks, and bank partners require transaction data to execute deposits and withdrawals
• KYC and identity verification providers — receive document images and personal data to perform automated identity checks
• Cloud hosting and infrastructure providers — host the 8u88 platform and store data securely on encrypted servers
• Game content providers — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other studios receive session identifiers to deliver game content and resolve round disputes
• Customer support software providers — support ticket and live chat platforms that process communications between players and the 8u88 support team
• Fraud detection and security services — risk management providers that analyse transaction and behavioural patterns to protect against fraud

5.2 Legal & Regulatory Disclosures

8u88 may disclose personal data to law enforcement agencies, regulatory bodies, or judicial authorities where required to do so by applicable law, court order, or regulatory directive. In particular, where 8u88's AML monitoring identifies activity that triggers a mandatory reporting obligation, the relevant data will be disclosed to the appropriate authority without prior notice to the account holder.

5.3 Business Transfers

In the event of a merger, acquisition, asset sale, or restructuring involving 8u88 or any entity in its corporate group, personal data held by 8u88 may be transferred to the relevant acquiring or successor entity. In such circumstances, 8u88 will take reasonable steps to ensure that the acquiring entity agrees to treat your personal data in accordance with a policy no less protective than this one.

06 Cookies & Tracking Technologies

8u88 uses cookies and similar technologies (collectively "cookies") to ensure the platform functions correctly, remember your preferences, and understand how players use the platform so we can improve it.

6.1 Types of Cookies Used

6.2 No Third-Party Advertising Cookies

8u88 does not place or permit third-party advertising network cookies on the platform. You will not be tracked across other websites for advertising retargeting purposes as a result of visiting 8u88.

6.3 Managing Cookies

You may manage or delete cookies through your browser settings at any time. Please be aware that disabling strictly necessary cookies will impair your ability to log in and use the platform. Disabling functional cookies will cause certain preferences to reset on each visit. Disabling analytics cookies does not affect your access to any platform feature.

07 Data Security

8u88 applies a layered technical and organisational security framework to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure.

7.1 Technical Measures

• Transport encryption: All data in transit between your browser or app and 8u88 servers is encrypted using TLS 1.2 or higher
• At-rest encryption: Sensitive personal data stored in 8u88 databases — including identity documents, payment references, and KYC records — is encrypted using AES-256
• Password hashing: Account passwords are stored using a one-way cryptographic hash (bcrypt) with a unique salt per account — plain-text passwords are never stored
• Access controls: Access to personal data is restricted to 8u88 staff who require it for their specific job function, enforced through role-based access control (RBAC)
• Intrusion detection: 8u88 infrastructure is monitored continuously for anomalous access patterns and potential intrusion attempts

7.2 Organisational Measures

• Staff with access to personal data receive mandatory data protection training
• All third-party service providers are vetted and bound by contractual data protection obligations before receiving access to any player data
• 8u88 conducts periodic internal security reviews of its data handling practices

7.3 Data Breach Response

In the event of a personal data breach that poses a risk to the rights of affected players, 8u88 will notify affected individuals without undue delay and will take immediate remedial action to contain and address the breach. Notifications will be delivered by email to the address registered on your account.

08 Data Retention

8u88 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention schedule applies as a general guide:

Once the applicable retention period expires, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where anonymised data is retained for aggregate analytics purposes, it is no longer considered personal data and falls outside the scope of this Policy.

09 Your Privacy Rights

As a player on the 8u88 platform, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days. Requests may require identity verification before we can action them.

9.1 Right of Access

You have the right to request a copy of the personal data 8u88 holds about you, along with information about how it is being used and with whom it has been shared. We will provide this in a clear, readable format.

9.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account-level data such as your registered address or contact information, you can update this directly within your account settings or by contacting support.

9.3 Right to Erasure

You may request that 8u88 delete your personal data in circumstances where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to overriding legal retention obligations — in particular, 8u88 cannot delete financial and KYC records within their mandatory retention periods.

9.4 Right to Restriction

You may request that 8u88 restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or where you have objected to processing and a determination is pending.

9.5 Right to Data Portability

Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) for transfer to another service.

9.6 Right to Object

You have the right to object to processing of your personal data carried out on the basis of 8u88's legitimate interests, including profiling for responsible gaming monitoring purposes. Where you object, 8u88 will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for legal claims.

9.7 Right to Withdraw Consent

Where processing is based on your consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal. Contact [email protected] or update your notification preferences in your account settings.

10 Children & Minors

The 8u88 platform is strictly for adults aged 21 years and above. 8u88 does not knowingly collect, store, or process personal data belonging to any person under the age of 21. Age verification is a mandatory step in the 8u88 KYC process, and accounts suspected of being held by or on behalf of minors are immediately suspended pending review.

If you are a parent or guardian and believe that a minor in your care has registered an account with 8u88 or provided personal data to the platform, please contact us immediately at [email protected] with the subject line "Underage Account Report". We will investigate the matter urgently and, where confirmed, close the account, delete all associated personal data (to the extent permitted by legal obligations), and return any deposited funds to the payment source.

11 International Data Transfers

8u88 primarily stores and processes player data on servers located in secure data centres serving the Asian market. However, some of our third-party service providers — particularly game studio partners such as Pragmatic Play, Evolution Gaming, and NetEnt — are headquartered or operate infrastructure outside Bangladesh. In such cases, personal data may be transferred internationally.

Where personal data is transferred internationally, 8u88 takes steps to ensure appropriate safeguards are in place, including:

• Contractual clauses obligating the recipient to maintain data protection standards no less stringent than those applied by 8u88
• Transfer only to service providers operating under recognised security certifications (such as ISO 27001)
• Restriction of transferred data to the minimum necessary for the service provider to fulfil their contracted function

12 Policy Updates

8u88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered players by email to the address on file at least 14 days before the updated Policy takes effect.

The "Last updated" date shown at the top of this Policy indicates when the most recent revision was made. Continued use of the 8u88 platform after the effective date of any update constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to stay informed about how 8u88 protects your personal data.

Where a proposed change materially reduces your privacy rights or significantly alters the legal basis on which we process your data, 8u88 will seek fresh consent where required before applying the change to your account.

13 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise a data rights request, or believe that 8u88 has handled your personal data in a manner inconsistent with this Policy, please contact us using the details below.

13.1 Data Enquiries

All privacy-related enquiries should be directed to our support team with a clear subject line describing the nature of your request:

13.2 Complaints

If you are not satisfied with 8u88's response to a privacy complaint or believe your data rights have not been adequately respected, you are entitled to escalate your complaint to the appropriate data protection or consumer rights authority in your jurisdiction. 8u88 will cooperate fully with any regulatory investigation arising from a player complaint submitted in good faith.

Before escalating to a regulatory authority, we strongly encourage you to allow 8u88's support team the opportunity to resolve the matter directly, as the majority of privacy concerns can be addressed promptly through direct communication.