8s88 Privacy Policy — Your Data, Your Rights, Our Obligations

This Privacy Policy is published by 8s88 ("the Company", "we", "us", "our"), the operator of the online betting and casino platform accessible at 8s88.io. 8s88 is an internationally operated platform providing sports betting, live casino, slots, poker, and related gaming services to players primarily based in Bangladesh.

For the purposes of this Privacy Policy, 8s88 acts as the data controller in respect of the personal data collected from players and visitors through the 8s88 website and associated mobile interfaces. As data controller, 8s88 determines the purposes for which personal data is collected and the means by which it is processed.

If you have any questions about this Privacy Policy or wish to exercise any of your data rights, you may contact us at any time using the contact details provided in Section 12 of this document.

8s88 collects personal data from you in the following circumstances: when you register an account, when you make or receive payments, when you place bets or play casino games, when you contact our support team, and when you visit the 8s88 website without registering. The categories of data we collect are described in the table below.

Where 8s88 is required by law or by its internal compliance procedures to collect certain personal data and you choose not to provide it, we may be unable to open or maintain your account, process payments, or provide specific services to you.

8s88 does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data (except where required for identity verification), health data, or sexual orientation. If you disclose any such data voluntarily during a support interaction, it will be handled with the highest level of care and will not be used for any purpose beyond resolving the immediate matter.

8s88 uses the personal data collected from you for the following specific purposes:

• Account administration: To create and manage your player account, verify your identity and age, maintain accurate account records, and communicate account-related notifications to you.
• Service delivery: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer; to settle bets and casino game outcomes; to provide access to sports betting markets, live casino tables, slots, and poker games.
• Identity and age verification: To confirm that you meet the 21+ age requirement and to comply with our obligations under internationally recognised anti-money laundering (AML) and Know Your Customer (KYC) standards.
• Fraud prevention and security: To detect and prevent fraudulent activity, account abuse, money laundering, collusion, and other prohibited conduct; to protect the integrity of the platform and the safety of all players.
• Responsible gaming: To monitor for signs of problem gambling behaviour, to administer deposit limits, session controls, and self-exclusion tools, and to comply with responsible gaming obligations.
• Customer support: To respond to your enquiries, resolve disputes, investigate complaints, and provide technical assistance.
• Platform improvement: To analyse usage patterns, identify technical issues, test new features, and improve the overall quality and performance of the 8s88 platform.
• Legal compliance: To meet our obligations under applicable laws and regulations, to respond to lawful requests from regulatory authorities, and to establish, exercise, or defend legal claims.
• Marketing communications: To send you relevant promotional offers, bonus notifications, and platform updates — but only where you have provided consent to receive such communications, or where we have a legitimate interest in doing so. You may withdraw consent or opt out of marketing communications at any time via your account settings or by contacting support.

For each purpose described in Section 3, 8s88 relies on one or more of the following legal bases for processing your personal data:

• Contractual necessity: Processing is necessary to perform the contract between you and 8s88 — specifically, the Terms & Conditions you accepted when registering your account. This basis covers account creation, payment processing, bet settlement, and customer support.
• Legal obligation: Processing is necessary for 8s88 to comply with applicable legal requirements, including AML obligations, KYC requirements, and responses to lawful regulatory requests. This basis covers identity verification and transaction monitoring.
• Legitimate interests: Processing is necessary for 8s88's legitimate interests in operating a safe, fair, and commercially viable platform, provided those interests are not overridden by your privacy rights. This basis covers fraud prevention, platform security, analytics, and responsible gaming monitoring.
• Consent: For marketing communications and non-essential cookies, 8s88 relies on your freely given, specific, informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

8s88 does not sell, rent, or otherwise trade your personal data to third-party organisations for their own commercial purposes. Data is shared with third parties only in the following circumstances and only to the extent strictly necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, and card processing partners (Visa/Mastercard acquirers) receive the financial data necessary to process your deposits and withdrawals. These partners are contractually bound to process data only for the purpose of completing your transaction.
• Identity verification providers: Where required for KYC or age verification, your identity documents and relevant personal details are shared with regulated third-party verification services. These providers operate under strict data protection agreements with 8s88.
• Fraud prevention services: Anonymised or pseudonymised technical data (such as IP addresses and device fingerprints) may be shared with fraud prevention and cybersecurity providers to identify and block fraudulent activity.
• Analytics providers: Aggregated, anonymised usage data may be shared with platform analytics tools to help 8s88 understand how the platform is used and improve the user experience. Raw personally identifiable data is not shared with analytics providers.
• Legal and regulatory authorities: Where required by a lawful order, court direction, or regulatory requirement, 8s88 may disclose personal data to law enforcement agencies, financial regulators, or other competent authorities. 8s88 will notify you of such disclosure where legally permitted to do so.
• Business transfers: In the event that 8s88 undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the successor entity, subject to equivalent data protection obligations.

8s88 uses cookies and similar tracking technologies on the 8s88 website to deliver a functional, secure, and personalised experience. A cookie is a small text file placed on your device by the website when you visit it. The following categories of cookies are used on the 8s88 platform:

• Strictly necessary cookies: These cookies are essential for the website to function. They enable core features such as session authentication, security protections, and load balancing. These cookies cannot be disabled without impairing the functionality of the Service.
• Functional cookies: These cookies remember your preferences (such as language selection and display settings) and personalise your experience on the platform. They are not essential but improve usability.
• Analytics cookies: These cookies collect anonymised data about how visitors use the 8s88 website — which pages are visited most frequently, where users navigate from, and how long sessions last. This information is used to improve the platform. Analytics cookies are only placed with your consent.
• Session security cookies: These cookies support fraud detection and security functions by helping 8s88 identify unusual or suspicious activity within an active session.

You may control non-essential cookies through your browser settings at any time. Please note that disabling functional cookies may affect the quality of your experience on the 8s88 platform. Disabling strictly necessary cookies may prevent the platform from functioning correctly.

8s88 retains personal data only for as long as is necessary for the purpose for which it was collected, or for as long as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Account data (active accounts): Retained for the duration of your active relationship with 8s88 and for a period of 5 years following account closure, to comply with financial record-keeping and AML obligations.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction, in accordance with financial regulatory requirements applicable to international online gambling operations.
• Identity verification documents: Retained for the period required by applicable KYC regulations, typically 5 years following account closure or the completion of the relevant transaction.
• Customer support communications: Retained for 3 years from the date of the last support interaction, to allow for the resolution of any subsequent disputes or complaints.
• Marketing consent records: Retained for the duration of your consent and for 2 years following withdrawal of consent, as evidence of the consent history.
• Technical and usage data (anonymised): Retained in anonymised, aggregated form indefinitely for platform analytics and improvement purposes. Once anonymised, this data no longer constitutes personal data.

When a retention period expires, the relevant data is either securely deleted using industry-standard deletion methods, or anonymised so that it can no longer be associated with any individual. 8s88 conducts periodic data audits to ensure that retention periods are being observed across all data categories.

As a player on the 8s88 platform, you hold the following rights in respect of your personal data. These rights are available to you at any time and can be exercised free of charge by contacting 8s88 at the details provided in Section 12:

• Right of access: You have the right to request a copy of the personal data that 8s88 holds about you, along with information about how that data is being used. 8s88 will provide this information within 30 days of receiving your verified request.
• Right to rectification: If any personal data held by 8s88 about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update most account information directly through your account settings page.
• Right to erasure: In certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw consent — you have the right to request that 8s88 delete your personal data. This right is subject to 8s88's legal obligations to retain certain data (e.g., financial transaction records).
• Right to restriction of processing: You have the right to request that 8s88 restricts the processing of your personal data in certain circumstances, for example while the accuracy of data is being contested or while a complaint is being investigated.
• Right to data portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: Where 8s88 processes your personal data on the basis of legitimate interests, you have the right to object to that processing at any time. You also have an unconditional right to object to processing for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time by contacting 8s88 or adjusting your account settings. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

8s88 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include but are not limited to:

• 256-bit SSL/TLS encryption on all data in transit between your device and 8s88 servers, ensuring that your login credentials, financial details, and personal data cannot be intercepted during transmission.
• Encryption at rest for all stored personal data and financial records on 8s88 servers, using industry-standard encryption algorithms.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. Employees and contractors who require access to personal data for their job functions are granted only the minimum level of access necessary and are bound by confidentiality obligations.
• Two-factor authentication options for player accounts, adding an additional layer of security beyond the standard username and password combination.
• Regular security audits and vulnerability assessments conducted by qualified security personnel to identify and remediate potential weaknesses in the platform's technical infrastructure.
• Intrusion detection systems that continuously monitor network traffic for indicators of unauthorised access or malicious activity.

While 8s88 takes all reasonable and practicable steps to safeguard your data, no online platform can guarantee absolute security. You play an important role in protecting your own data by keeping your 8s88 login credentials confidential, using a strong and unique password, and notifying 8s88 immediately if you suspect any unauthorised access to your account.

The 8s88 platform is strictly intended for adults aged 21 years and above. 8s88 does not knowingly collect, process, or store personal data belonging to any person under the age of 21. Age verification procedures are applied to all new account registrations, and accounts that cannot be verified as belonging to an adult aged 21 or over will be suspended pending resolution.

If you are a parent or guardian and you believe that a minor in your care has provided personal data to 8s88 or has accessed the 8s88 platform, please contact us immediately at [email protected]. We will promptly investigate, close the relevant account, and securely delete any personal data associated with the minor's use of the platform.

8s88 encourages parents and guardians in Bangladesh to use parental control software tools to restrict access to online gambling websites on shared or family devices.

8s88 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or operational changes to the platform. When material changes are made, 8s88 will notify registered players by email or by displaying a prominent notice on the 8s88 website at least 7 days before the changes take effect, except where immediate changes are required for legal or security reasons.

The "Last Updated" date at the top of this document indicates when the current version of the Privacy Policy became effective. We encourage you to review this Privacy Policy periodically to stay informed about how 8s88 handles your personal data. The most current version of this policy is always available at 8s88.io/privacy-policy.

Your continued use of the 8s88 Service after the effective date of any revision constitutes your acknowledgement of the updated Privacy Policy. If you do not agree to the revised policy, you should cease using the Service and close your account by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data that 8s88 holds about you, please contact our support team using the details below. We are committed to responding to all data-related enquiries within 30 calendar days.

• Support Email: [email protected] — use the subject line "Privacy Enquiry" for data-related matters.
• Data Rights Requests: [email protected] — use the subject line "Data Rights Request" and include your registered account email address.
• Breach Reports: If you suspect a security breach affecting your account or personal data, contact [email protected] immediately with the subject line "Security Report".

For further details about your rights and obligations as a player on the 8s88 platform, please also review the Terms & Conditions and our Responsible Gaming policy, both of which form part of your overall agreement with 8s88.