8a88 Privacy Policy — How We Handle Your Data

1. Introduction

8a88 ("we", "us", "the Platform") operates the online gaming platform accessible at 8a88.bio. We understand that privacy is important to our players, particularly when it involves financial transactions conducted via mobile payment services such as bKash and Nagad. This Privacy Policy describes how 8a88 collects, stores, uses, and shares personal information when you use our platform.

This Policy applies to all users of the 8a88 platform, regardless of where they are located within Bangladesh — from Dhaka and Chittagong to Sylhet, Rajshahi, Khulna, Barisal, Rangpur, and Mymensingh. By registering an account or using the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your information as described herein.

Our Core Privacy Commitments

2. Information We Collect

8a88 collects personal information through several channels — directly from you when you register and use the platform, automatically when you interact with our website, and from third-party providers involved in payment processing and identity verification. The categories of data we collect are set out in the table below:

Where you choose not to provide certain information — for example, an optional email address — this will not prevent you from using the core platform, but may limit access to certain features such as email-based account recovery or promotional communications.

3. How We Use Your Information

8a88 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose not listed below without first obtaining your consent or as required by law:

• Account creation, identity verification (KYC), and ongoing account management — including password resets, account security alerts, and compliance monitoring
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer — and maintaining accurate transaction records for financial and AML compliance purposes
• Providing access to casino games, sportsbook, live dealer tables, and all other platform services
• Delivering responsible gaming tools — including account-level deposit limits, loss limits, session reminders, and self-exclusion — and monitoring for indicators of problem gambling
• Sending service communications — transactional confirmations, deposit/withdrawal receipts, security alerts, and (where you have opted in) promotional offers and bonus notifications
• Improving platform performance — using aggregated, anonymised technical and gaming data to identify and fix issues, optimise page loading for Bangladeshi mobile networks, and develop new features

4. Legal Basis for Processing

8a88 processes your personal data on the following legal bases:

• Contractual necessity — processing required to create and manage your account and to process deposits and withdrawals as agreed in our Terms & Conditions
• Legal obligation — identity verification, age verification, AML screening, and record-keeping required by applicable financial regulations
• Legitimate interests — fraud prevention, platform security, abuse detection, and improving our services in ways that do not override your privacy rights
• Consent — where you have explicitly opted in to receive marketing communications or promotional offers. You may withdraw this consent at any time by contacting support.

5. Sharing Your Information

8a88 does not sell your personal data. We share data only in the limited circumstances described below, and only with parties who are contractually bound to protect it:

• Payment processors — bKash, Nagad, Rocket, Upay, and banking partners receive only the transaction data necessary to process your deposits and withdrawals. They do not receive your gaming history or broader account data.
• Game providers — Pragmatic Play, Evolution Gaming, Spribe, Jili, Ezugi, and other licensed providers may receive a session token and the minimum data required to initialise and authenticate your game session. They do not receive your payment details.
• KYC and identity verification partners — third-party identity verification services receive document images and identity data solely for the purpose of completing KYC verification as required by applicable regulations.
• Regulatory and law enforcement authorities — where required by applicable law, court order, or regulatory obligation, 8a88 may disclose your personal data to government bodies, financial regulators, or law enforcement agencies in Bangladesh or internationally.

All third parties with whom 8a88 shares personal data are required to implement appropriate technical and organisational measures to protect that data and to use it only for the specific purpose for which it was shared. 8a88 does not permit its data-processing partners to use your information for their own marketing purposes.

6. Payment Data and Mobile Wallets

When you deposit or withdraw funds using bKash, Nagad, Rocket, or Upay, the transaction is processed via the respective payment provider's secure API. 8a88 records the mobile wallet number used, the transaction amount, the transaction reference ID issued by the payment provider, and the timestamp of the transaction. 8a88 does not store your bKash or Nagad PIN, OTP codes, or any authentication credential used by the payment provider's own app.

Transaction records are retained for a minimum period as required by applicable financial regulations, which may exceed five years. These records are used for dispute resolution, AML compliance, and responding to regulatory inquiries. After the mandatory retention period expires, transaction records are securely deleted or anonymised.

7. Cookies and Tracking Technologies

8a88 uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies are used:

• Strictly necessary cookies — required for the platform to function, including session authentication, security tokens, and load balancing. These cannot be disabled without breaking core functionality.
• Performance and analytics cookies — anonymised data about how players navigate the platform, which pages load slowly on mobile, and where errors occur. This data is used to improve platform performance for Bangladeshi mobile users.
• Preference cookies — used to remember your language preference (English or Bengali) and other display settings so that you do not need to reset them each time you visit.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use the platform. 8a88 does not use advertising or behavioural targeting cookies, and does not share cookie data with advertising networks.

8. Data Retention

8a88 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. In practice, this means:

Active account data (identity, contact, and gaming data) is retained for the duration of your account and for a minimum of five years following account closure, in compliance with AML and financial record-keeping regulations. Transaction records may be retained for longer where required by specific regulatory obligations. Data held solely on the basis of your consent (such as marketing preferences) is deleted promptly upon withdrawal of that consent.

9. Your Privacy Rights

As a user of the 8a88 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team using the email address displayed in the footer of this website:

• Right of access — you may request a copy of all personal data 8a88 holds about you, including the categories of data, the purposes for which it is processed, and any third parties with whom it has been shared.
• Right to rectification — you may request correction of any inaccurate or incomplete personal data held about you.
• Right to erasure — subject to legal retention obligations, you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected or where you withdraw consent.
• Right to restriction of processing — you may request that 8a88 restrict the processing of your data in certain circumstances, such as where you contest its accuracy or where processing is unlawful.
• Right to data portability — where processing is based on your consent or on a contract, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format.
• Right to withdraw consent — where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

8a88 will respond to all privacy rights requests within a reasonable timeframe, and no later than 30 days of receipt. We may ask you to verify your identity before processing a request to ensure that your data is not disclosed to a third party.

10. Data Security

8a88 implements technical and organisational security measures designed to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include SSL/TLS encryption for all data in transit, hashed storage of passwords and authentication credentials, restricted internal access to personal data on a need-to-know basis, regular security assessments, and monitoring for unusual account activity or login attempts.

No security measure is infallible, and 8a88 cannot guarantee that its systems will never be compromised. In the event of a personal data breach that is likely to result in risk to your rights, 8a88 will notify affected users promptly and take all reasonable steps to contain and remedy the breach. If you suspect any unauthorised activity on your 8a88 account, please contact support immediately at the email address shown in the footer.

11. Children and Age Restriction

8a88 is strictly for users aged 21 and above. We do not knowingly collect personal data from any person under the age of 21. If 8a88 becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be closed. If you believe that a person under 21 has registered an account on 8a88, please contact support immediately so that we can investigate and take appropriate action.

12. Changes to This Privacy Policy

8a88 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or platform features. When we make material changes, we will update the effective date shown at the top of this policy and, where practicable, notify registered users via their registered contact details. Your continued use of the 8a88 platform after the effective date of any update constitutes your acceptance of the revised policy. We encourage you to review this page periodically to stay informed of how we handle your data.

13. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the way 8a88 handles your personal data, please contact our support team at the email address displayed in the footer of this website. We aim to acknowledge all privacy enquiries within 48 hours and to resolve them fully within 30 days. For responsible gaming concerns, please visit our Responsible Gaming page.