8kbd2 Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how 8kbd2 ("the Platform", "we", "us", "our") collects, processes, stores, and protects personal data provided by or generated about individuals ("you", "the Player", "the User") who visit, register on, or interact with the 8kbd2 website and associated services, including the sportsbook, live casino, slots, and account wallet.

By creating an 8kbd2 account or continuing to use the platform after this Policy's effective date of January 2026, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

This Policy should be read together with the Terms & Conditions, which is incorporated by reference. In the event of any conflict between this Policy and the Terms & Conditions on matters of data handling, this Policy shall govern.

2. Data Controller Identity

8kbd2 acts as the data controller for all personal data collected through the platform. As data controller, 8kbd2 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out in accordance with applicable data protection standards.

For all data protection enquiries, access requests, or complaints, you may contact our Data Protection team using the contact details provided in Section 15 of this Policy.

3. Information We Collect

8kbd2 collects personal data through several channels. The categories of data we collect, and the typical source of each, are set out in the table below.

3.1 Data You Provide Voluntarily

Most personal data is provided directly by you during the account registration process, when you complete KYC verification, when you contact our support team, or when you update your account settings. Providing this data is a condition of using the 8kbd2 platform — without it, we cannot operate your account, process payments, or verify your identity.

3.2 Data Collected Automatically

When you access the 8kbd2 website or mobile site, certain technical data is collected automatically by our servers and analytics systems. This includes your IP address, device identifiers, browser fingerprint, and session activity. This data is used for security monitoring, fraud detection, and platform performance optimisation.

4. How We Use Your Information

8kbd2 uses the personal data we collect for the following specific purposes:

• Account Creation and Management: To register your account, verify your identity, maintain your account settings, and provide access to all platform features.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other accepted payment methods, and to maintain accurate financial records.
• Identity Verification (KYC): To comply with anti-money laundering best practices and verify that all players are aged 21 or above, as required by our responsible gaming policy.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, multiple account registration, bonus abuse, money laundering, and other prohibited conduct.
• Responsible Gaming: To monitor gaming behaviour for signs of problem gambling and to implement player-requested tools such as deposit limits, cooling-off periods, and self-exclusion.
• Customer Support: To respond to your enquiries, resolve disputes, and process account-related requests submitted via live chat or email.
• Platform Improvement: To analyse aggregate usage patterns and improve the performance, design, and feature set of the 8kbd2 platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and event announcements relevant to your gaming preferences — only where you have given explicit consent to receive such communications.
• Legal Compliance: To meet our obligations under applicable anti-money laundering standards, data retention requirements, and any lawful requests from competent authorities.

5. Legal Basis for Processing

8kbd2 processes your personal data under the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you accepted when registering — including account management, payment processing, and bet settlement.
• Legitimate Interests: Processing conducted in pursuit of 8kbd2's legitimate business interests, such as fraud detection, security monitoring, and platform improvement, where those interests are not overridden by your rights.
• Legal Obligation: Processing required to comply with applicable anti-money laundering standards, identity verification requirements, and lawful requests from competent authorities.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for direct marketing communications. You may withdraw consent at any time by contacting support or updating your communication preferences in your account settings.

6. Sharing of Personal Data

8kbd2 does not sell, rent, or trade your personal data to third parties for commercial gain. We share personal data with external parties only in the following circumstances and only to the minimum extent necessary:

6.1 Payment Service Providers

To process your deposits and withdrawals, we share relevant financial and identity data with your chosen payment provider — bKash, Nagad, Rocket, Upay, or card networks such as Visa or Mastercard. These providers operate under their own privacy policies and are bound by contractual obligations to protect the data we share with them.

6.2 Game Suppliers

When you access a casino game or live dealer table, limited session data is shared with the third-party game supplier (such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, or Microgaming) for the purpose of game delivery, RNG certification, and fair-play auditing. Game suppliers do not receive your full personal profile — only the minimum data required to deliver the game session.

6.3 Identity Verification Partners

For KYC verification, 8kbd2 may use third-party identity verification technology providers. These partners process your identity documents and biometric data solely for the purpose of verifying your identity and age and are contractually prohibited from using your data for any other purpose.

6.4 Legal and Regulatory Disclosure

8kbd2 may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by law or in response to a valid legal request. In such cases, 8kbd2 will disclose only the minimum data required and will, where legally permitted, notify the affected account holder.

7. Cookies and Tracking Technologies

8kbd2 uses cookies and similar tracking technologies to operate the platform, maintain your session, detect fraud, and analyse usage patterns. The categories of cookies we use are:

• Strictly Necessary Cookies: Required for the platform to function — including session authentication, security tokens, and your login state. These cannot be disabled without breaking core functionality.
• Performance and Analytics Cookies: Used to collect anonymised data about how players navigate and use the platform, helping us identify and fix performance issues.
• Functional Cookies: Used to remember your preferences, such as your preferred language, display settings, and responsible gaming tool configurations.
• Security Cookies: Used to detect and prevent fraudulent access attempts, identify suspicious device behaviour, and enforce account security policies.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the 8kbd2 platform. 8kbd2 does not use third-party advertising cookies or sell behavioural data to ad networks.

8. Data Retention

8kbd2 retains personal data for as long as your account is active and for a defined period after account closure. Our standard retention periods are as follows:

• Account and Identity Data: Retained for the duration of your active account, plus a minimum of five years after account closure for anti-money laundering compliance and legal record-keeping purposes.
• Financial Transaction Records: Retained for a minimum of seven years after the date of each transaction to satisfy financial record-keeping requirements.
• Gaming Activity Logs: Retained for three years from the date of each recorded session for dispute resolution, responsible gaming monitoring, and fraud prevention purposes.
• Customer Support Communications: Retained for two years from the date of the last interaction for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for the duration of your consent and for two years after withdrawal of consent as proof of the consent record.

After the applicable retention period expires, personal data is either permanently deleted from our systems or anonymised so that it can no longer be linked to an identifiable individual. Anonymised aggregate data may be retained indefinitely for statistical and analytical purposes.

9. Your Rights as a Data Subject

As a player whose personal data is held by 8kbd2, you hold the following rights with respect to that data. To exercise any of these rights, please contact the 8kbd2 Data Protection team using the details in Section 15.

• Right of Access: You may request a copy of all personal data 8kbd2 holds about you. We will respond within 30 days of receiving a valid access request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. Corrections to identity data may require supporting documentation.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations described in Section 8.
• Right to Restriction of Processing: In certain circumstances, you may request that 8kbd2 restrict the processing of your personal data while a dispute or rectification request is being resolved.
• Right to Data Portability: You may request that 8kbd2 provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Withdraw Consent: Where processing is based on your consent (primarily for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to Object: You may object to processing carried out on the basis of 8kbd2's legitimate interests. 8kbd2 will stop such processing unless it can demonstrate compelling legitimate grounds that override your interests.

10. Data Security Measures

8kbd2 implements a layered approach to data security that includes both technical and organisational safeguards:

• Encryption: All data in transit is encrypted using TLS 1.2 or higher (256-bit). Sensitive data at rest — including identity documents and financial records — is encrypted using AES-256 encryption.
• Access Controls: Personal data is accessible only to 8kbd2 staff who require it to perform their job functions. Access is managed through role-based permissions and multi-factor authentication for all internal systems.
• Infrastructure Security: 8kbd2 servers are hosted in secure, access-controlled data centres. Network infrastructure is protected by firewalls, intrusion detection systems, and regular vulnerability scanning.
• Security Audits: The 8kbd2 platform undergoes periodic independent security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: 8kbd2 maintains a documented data breach response plan. In the event of a confirmed breach affecting player data, affected players will be notified without undue delay.

While 8kbd2 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are also responsible for keeping your login credentials confidential and for reporting any suspected unauthorised access to your account promptly.

11. Children and Minors

The 8kbd2 platform is strictly intended for adults aged 21 years and above. 8kbd2 does not knowingly collect personal data from individuals under the age of 21. All accounts are subject to age verification during the KYC process.

If 8kbd2 discovers that personal data has been collected from an individual under the age of 21 — whether through the registration process or through a subsequent KYC check — the account will be immediately suspended, all associated data will be reviewed, and any deposited funds will be returned to the originating payment method after verification. If you believe that a minor has created an account on 8kbd2, please contact us immediately using the details in Section 15.

12. Third-Party Payment Processors

Deposit and withdrawal transactions on the 8kbd2 platform are processed by third-party payment service providers including bKash, Nagad, Rocket, Upay, and international card networks. When you initiate a payment transaction, you are also subject to the privacy policy of the relevant payment provider, as that provider will independently collect and process your payment credentials and transaction data.

8kbd2 does not store your full bKash or Nagad PIN or any card security codes. Payment credentials are transmitted directly and securely to the relevant payment provider. 8kbd2 retains only the transaction reference ID, amount, timestamp, and outcome for internal accounting and dispute resolution purposes.

13. International Data Transfers

8kbd2 operates as an international platform and, as a result, some personal data may be processed or stored on servers located outside Bangladesh. Where data is transferred internationally, 8kbd2 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy.

Such safeguards may include contractual data processing agreements with third-party service providers that incorporate internationally recognised data protection clauses, or the use of service providers that operate under recognised security certification frameworks.

14. Changes to This Privacy Policy

8kbd2 reserves the right to amend this Privacy Policy at any time to reflect changes in platform operations, legal requirements, or data processing practices. When material changes are made, 8kbd2 will notify registered players via the email address or mobile number held on their account at least 7 days before the change takes effect. The revised Policy will also be published on this page with an updated effective date.

Your continued use of the 8kbd2 platform after the effective date of a revised Policy constitutes your acceptance of the changes. If you do not accept the revised Policy, you must cease using the platform and may request account closure by contacting 8kbd2 support.

15. Contact and Data Requests

For all privacy-related enquiries, data subject rights requests, or data breach reports, please contact the 8kbd2 Data Protection team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week from within the 8kbd2 platform. This is the fastest channel for urgent requests.
• Email: support@8kbd2.io — please include "Privacy Request" and your registered account username in the subject line.

All data subject rights requests must be submitted by the registered account holder. 8kbd2 may ask you to verify your identity before processing a request to ensure that personal data is not disclosed to an unauthorised party.