8z88 Privacy Policy

1 Information We Collect

When you interact with the 8z88 platform — whether by registering an account, making a deposit, placing a bet, or contacting our support team — we collect certain categories of personal information. The specific data we collect depends on how you use the platform and what you choose to provide.

1.1 Account Registration Data

When you create an 8z88 account, we collect the following information:

• Full legal name — as it appears on your government-issued identification document.
• Date of birth — to verify that you meet the 18+ age requirement.
• Residential address — including district, division, and postal code within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh).
• Email address — used for account communications and transactional notifications.
• Mobile phone number — used for two-factor authentication and account security alerts.
• Username and encrypted password — passwords are stored as irreversible cryptographic hashes; we never store plain-text passwords.

1.2 KYC Verification Documents

To comply with our identity verification obligations, we may request copies of the following documents: a valid National Identity Card (NID), passport, or driving licence; a recent utility bill or bank statement confirming your residential address; and a screenshot or statement confirming ownership of your bKash, Nagad, Rocket, or Upay mobile wallet account.

1.3 Financial Transaction Data

We record details of all deposits and withdrawals processed through your account, including transaction reference numbers, amounts in BDT, timestamps, and the payment method used. Full payment credential details (e.g., mobile wallet PINs, card numbers) are never stored on 8z88 servers — these are handled directly by the respective payment gateway.

1.4 Gameplay and Betting Activity

We maintain logs of your betting activity, game history, wager amounts, win/loss records, and session durations. This data is used to operate the platform, detect fraud, fulfil responsible gaming obligations, and resolve disputes. Gameplay logs are linked to your account identifier and retained for the period specified in our data retention policy.

1.5 Technical and Device Data

When you access 8z88, our servers automatically record certain technical information: your IP address, browser type and version, operating system, device model, screen resolution, referring URL, pages visited, and session duration. This information is used for security monitoring, fraud prevention, and improving the platform experience for players in Bangladesh.

2 How We Use Your Data

8z88 uses the personal information it collects for the following purposes. Where we rely on a specific legal basis for each use, this is identified in Section 3 (Legal Basis for Processing) below.

3 Legal Basis for Processing

8z88 processes your personal data on one or more of the following recognised legal grounds:

• Contractual Necessity: Processing is required to perform the contract between you and 8z88 — specifically, to operate your player account, accept your wagers, process your transactions, and provide customer support.
• Legal Obligation: Certain processing activities are required by applicable law, including anti-money-laundering (AML) regulations, age verification obligations, and record-keeping requirements. We cannot waive these obligations at the request of individual users.
• Legitimate Interests: 8z88 processes some data based on legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and internal analytics. We balance our legitimate interests against your privacy rights when relying on this basis.
• Consent: Where processing is not justified by the above grounds — in particular, for optional marketing communications — we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

4 Data Sharing & Disclosure

8z88 does not sell your personal data to third parties. We share your information only in the specific circumstances described below, and only to the minimum extent necessary for the stated purpose.

4.1 Payment Processing Partners

To facilitate deposits and withdrawals, we share relevant transaction data with our payment partners including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and other integrated payment providers. Each payment partner operates under its own privacy policy and is independently responsible for data it receives through its own systems.

4.2 Game Software Providers

Our third-party game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) receive a session token and anonymised player identifier to operate their games within the 8z88 platform. These providers do not receive your full name, contact details, or financial information unless separately required for a specific integration.

4.3 KYC and Identity Verification Services

Where we use third-party identity verification services to assist with document review and fraud screening, your KYC documents and associated personal data may be shared with those providers under strict contractual data processing agreements.

4.4 Legal and Regulatory Disclosure

8z88 may be required to disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by a valid legal order, court judgment, or applicable law. In such cases, we will disclose only the information specifically requested and will notify the affected user where permitted by law.

4.5 Business Transfers

In the event of a merger, acquisition, or sale of substantially all of the assets of 8z88, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such change via the email address associated with your account prior to the transfer taking effect, and your continued use of the platform will constitute acceptance of the new data controller's privacy policy.

5 Cookies & Tracking Technologies

8z88 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and gather anonymised analytical data to improve the player experience. By continuing to use 8z88 after being presented with this notice, you consent to our use of cookies as described below.

5.1 Types of Cookies We Use

You may configure your browser to block or delete cookies at any time. Please be aware that blocking essential cookies will prevent the 8z88 platform from functioning correctly — in particular, you will not be able to maintain a logged-in session or access the game lobby. Blocking analytics or preference cookies will not affect core platform functionality.

6 Data Retention

8z88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Active Account Data: Retained for the duration of your account's active status plus a minimum of 5 years following account closure, in compliance with AML record-keeping requirements.
• KYC Documents: Retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction.
• Gameplay Logs: Retained for a minimum of 3 years from the date of each game session, or longer where required for an open dispute or regulatory inquiry.
• Support Communications: Retained for 3 years from the date of the last interaction.
• Technical / Server Logs: Retained for up to 12 months from the date of collection, unless flagged for security investigation.
• Marketing Consent Records: Retained for 3 years from the date of consent, or until consent is withdrawn, whichever is earlier.

When retention periods expire, data is securely deleted or anonymised such that it can no longer be linked to any identifiable individual. Anonymised aggregate data may be retained indefinitely for statistical and analytical purposes.

7 Your Privacy Rights

As a player on the 8z88 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Privacy Rights Request — [Your Username]". We will acknowledge your request within 3 business days and provide a substantive response within 10 business days.

• Right of Access: You may request a copy of all personal data that 8z88 holds about you, along with information about how it is used and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it. Minor account details such as your contact email or phone number can be updated directly through your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to our legal obligation to retain certain records as described in Section 6.
• Right to Restrict Processing: In certain circumstances, you may request that we restrict the processing of your data — for example, while a rectification request is being assessed.
• Right to Object: You may object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing based on our legitimate interests, though we may be entitled to continue processing where our legitimate grounds are compelling or where processing is necessary for legal claims.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that we provide your data in a structured, commonly used, machine-readable format.

8 Data Security Measures

8z88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security posture includes the following controls:

• SSL/TLS Encryption: All data in transit between your browser or mobile device and the 8z88 platform is encrypted using TLS 1.2 or higher.
• Password Hashing: Account passwords are stored as salted cryptographic hashes using industry-standard algorithms. Plain-text passwords are never written to disk or logs.
• Access Controls: Internal access to personal data is restricted on a need-to-know basis. Staff with access to sensitive player data are subject to background screening and confidentiality obligations.
• Document Vault Encryption: KYC documents are stored in an access-controlled, encrypted document management system. Access events are logged and auditable.
• Fraud Monitoring: Automated systems continuously monitor for unusual login patterns, suspicious transaction sequences, and other indicators of account compromise or fraudulent activity.
• Incident Response: In the event of a data breach that poses a risk to your rights, 8z88 will notify affected users via email as soon as reasonably practicable, and will take immediate remediation steps including forced password resets where appropriate.

While 8z88 takes all reasonable steps to secure your data, no internet-based platform can guarantee absolute security. You are responsible for keeping your own login credentials confidential and for ensuring that your devices are protected by up-to-date security software. If you suspect that your 8z88 account has been compromised, contact us immediately at [email protected].