8m88 Privacy Policy

1 Introduction

8m88 ("we", "us", "our", or "the Platform") is committed to protecting the privacy and personal data of every player who uses the 8m88 website at https://8m88.io, including all associated subdomains, mobile interfaces, and related digital services. This Privacy Policy sets out the basis on which personal data collected from you, or that you provide to us, will be processed by 8m88.

This document should be read alongside the Terms & Conditions, which together form the complete legal framework governing your use of the 8m88 platform. By registering an account, depositing funds, or otherwise using any part of the 8m88 service, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

8m88 serves English-speaking players in Bangladesh and processes personal data in line with internationally recognised data protection principles. We do not sell your personal data to third parties for commercial marketing purposes under any circumstances.

2 Data We Collect

8m88 collects personal data through several channels: directly from you when you register, deposit, or contact support; automatically through your use of the platform; and, in limited circumstances, from trusted third-party verification and payment service providers. The categories of personal data we collect are set out below.

2.1 Data You Provide Directly

• Identity data: Full legal name, date of birth, and gender (where provided during registration or verification).
• Contact data: Email address and mobile phone number registered to your account.
• Verification documents: Copies of government-issued photo identification (national ID card, passport) submitted to complete identity or age verification.
• Financial data: bKash mobile number, Nagad mobile number, Rocket number, Upay account details, or bank card information associated with your deposits and withdrawals. Note: 8m88 does not store full card numbers; these are handled by our PCI-compliant payment processors.
• Account credentials: Username and encrypted password hash. Your password is never stored in plain text.
• Support correspondence: Any messages, chat transcripts, or documentation you send to the 8m88 support team.

2.2 Data Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device type, screen resolution, and time zone setting.
• Usage data: Pages visited, session duration, referring URLs, game pages accessed, betting markets viewed, and navigation paths within the platform.
• Transaction data: Records of all deposits, withdrawals, bets placed, games played, bonus redemptions, and account balance changes.
• Geolocation data: Approximate geographic location derived from IP address, used to verify that you are accessing the platform from a supported region.
• Cookie and tracking data: Information collected via cookies and similar technologies as described in Section 6 of this Policy.

2.3 Data from Third Parties

In some circumstances, 8m88 may receive personal data about you from third-party sources, including:

• Identity verification providers who confirm the authenticity of documents you submit.
• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) who confirm transaction status and flag suspicious activity.
• Anti-fraud and AML (anti-money laundering) screening services that cross-reference account details against watchlists or risk databases.

3 How We Use Your Data

8m88 uses the personal data we collect strictly for the purposes listed below. We do not use your data for purposes that are incompatible with the reason it was originally collected without first obtaining your consent or establishing a new lawful basis for processing.

• Account management: Creating, maintaining, and administering your 8m88 player account, including processing registrations, verifying your identity, and managing your account settings.
• Service delivery: Processing deposits and withdrawals, settling bets, crediting bonuses, and delivering the core betting and gaming services available on the platform.
• Identity and age verification: Confirming that you meet the minimum age requirement of 21 years and that the identity information you have provided is accurate and genuine.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as defined in the Terms & Conditions.
• Legal and regulatory compliance: Meeting applicable anti-money laundering (AML), know-your-customer (KYC), and other legal obligations, including responding to lawful requests from relevant authorities.
• Customer support: Responding to your enquiries, complaints, and support requests in a timely and effective manner.
• Responsible gaming: Monitoring gambling behaviour patterns to identify signs of potential problem gambling and to administer deposit limits, cooling-off periods, and self-exclusion tools.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the performance, reliability, and user experience of the 8m88 platform.
• Communications: Sending transactional notifications (deposit confirmations, withdrawal updates, security alerts) and, where you have opted in, relevant promotional communications about 8m88 offers and features.

4 Legal Basis for Processing

8m88 processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing activity:

• Contractual necessity: Processing that is required to fulfil our obligations under the Terms & Conditions, including account management, payment processing, and bet settlement.
• Legal obligation: Processing necessary to comply with applicable laws and regulations, including KYC, AML, and data retention requirements mandated by relevant authorities.
• Legitimate interests: Processing carried out for purposes that are in the legitimate interests of 8m88 or our players, provided those interests are not overridden by your data protection rights. This includes fraud detection, platform security, and responsible gaming monitoring.
• Consent: Where we rely on your consent to process your data — for example, for optional marketing communications — you may withdraw that consent at any time by contacting support or updating your account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5 Data Sharing & Third Parties

8m88 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data processing agreements or legal requirements:

5.1 Payment Service Providers

To process your deposits and withdrawals, 8m88 shares relevant transaction and identity data with payment processors including bKash, Nagad, Rocket, Upay, and card processing partners. These providers are contractually required to use your data solely for the purpose of processing your payment and are prohibited from using it for any other purpose.

5.2 Identity Verification Providers

Where identity or age verification is required, 8m88 may share your submitted identification documents with third-party KYC (Know Your Customer) verification service providers. These providers process your documents securely and return a verification result to 8m88; they do not retain your documents beyond the period necessary to complete the check.

5.3 Game Software Providers

Certain game content on the 8m88 platform is provided by third-party game studios including Pragmatic Play, NetEnt, Microgaming, Spribe, Evolution Gaming, and Ezugi. These providers may receive a session token or anonymised player identifier to facilitate game launch and result recording. They do not receive your full name, contact details, or financial information.

5.4 Legal and Regulatory Authorities

8m88 may be required by law to disclose your personal data to government bodies, law enforcement agencies, or regulatory authorities where we receive a lawful request to do so. We will only disclose the minimum amount of data necessary to comply with the specific legal obligation and will notify you of such disclosure where permitted to do so by law.

5.5 Anti-Fraud and AML Screening

8m88 may share account and transaction data with specialist anti-fraud and AML screening services to identify patterns of suspicious behaviour, comply with financial crime prevention obligations, and protect the integrity of the platform and its users.

6 Cookies & Tracking Technologies

The 8m88 platform uses cookies and similar tracking technologies to deliver core functionality, improve performance, and understand how players navigate the site. A cookie is a small text file placed on your device when you visit a website. It allows the site to recognise your device on subsequent visits and store certain preferences or session data.

6.1 Types of Cookies Used

• Essential cookies: Required for the platform to function correctly. These include session authentication cookies that keep you logged in, security tokens, and cookies that remember your language preference. These cannot be disabled without impairing core platform functionality.
• Functional cookies: Used to remember your account preferences, game settings, and display options to provide a personalised experience.
• Analytics cookies: Used to collect aggregated, anonymised data about how players use the 8m88 platform — including which pages are visited most frequently and how users navigate between sections. This data is used solely to improve platform performance and user experience.
• Security cookies: Used to detect and prevent fraudulent access attempts, bot activity, and other security threats.

6.2 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to block or delete cookies, or to set preferences for specific types of cookies. Please note that disabling essential cookies will affect your ability to log in and use core features of the 8m88 platform. Instructions for managing cookies in common browsers are available through the browser's own help documentation.

7 Data Retention

8m88 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. The retention periods below are indicative; actual retention may vary depending on legal obligations or ongoing investigations.

Once the applicable retention period expires, your personal data will be securely deleted or permanently anonymised so that it can no longer be associated with your identity.

8 Data Security

8m88 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the 8m88 platform is encrypted using industry-standard SSL/TLS protocols. This applies to login sessions, deposit and withdrawal flows, and all other data exchanges.
• Password hashing: Account passwords are stored as cryptographic hashes using a strong one-way hashing algorithm. 8m88 staff cannot view your password in plain text.
• Access controls: Access to personal data within 8m88's internal systems is restricted to authorised personnel on a need-to-know basis. All internal access is logged and subject to regular audit.
• Payment data security: Full payment card numbers are never stored on 8m88 servers. All card transactions are handled by PCI DSS-compliant payment processors.
• Infrastructure security: The 8m88 platform is hosted on secure, monitored infrastructure with firewall protection, intrusion detection, and regular security testing.

Whilst 8m88 employs robust security practices, no internet-based platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying 8m88 support immediately if you suspect any unauthorised access to your account.

9 Your Rights

As a data subject, you have a number of rights in relation to the personal data that 8m88 holds about you. 8m88 is committed to honouring these rights in a timely and transparent manner. To exercise any of the rights listed below, please contact the 8m88 support team via live chat or email at [email protected] (plain text only).

• Right of access: You have the right to request a copy of the personal data that 8m88 holds about you, along with information about how it is being processed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: In certain circumstances, you may request that 8m88 delete your personal data. This right is subject to limitations where data must be retained to comply with legal obligations or to resolve outstanding disputes.
• Right to restrict processing: You may request that 8m88 temporarily restrict the processing of your personal data while a correction request or objection is under review.
• Right to data portability: Where processing is based on your consent or on a contractual basis, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where it is based on legitimate interests. 8m88 will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

8m88 will respond to all valid data rights requests within 30 days of receipt. Where a request is complex or where we receive a high volume of requests, we may extend this period by a further 60 days, in which case we will inform you of the extension and the reason for it.

10 Children's Privacy

The 8m88 platform is strictly intended for adults aged 21 years and above. 8m88 does not knowingly collect, process, or store personal data belonging to individuals under the age of 21. If we become aware that personal data has been submitted by or on behalf of a person under the minimum age, we will immediately close the associated account, delete the data, and return any deposited funds to the originating payment method following standard review procedures.

If you are a parent or guardian and you believe that a minor under your care has registered an account on the 8m88 platform, please contact our support team immediately at [email protected] (plain text only). We will investigate and act promptly upon receiving such a report.

11 International Data Transfers

As an internationally operated online platform, 8m88 may transfer personal data to servers, service providers, or partners located outside of Bangladesh. Where such transfers occur, 8m88 takes steps to ensure that your personal data is afforded a level of protection consistent with this Privacy Policy and with applicable data protection standards.

Transfers to third-party service providers outside Bangladesh are governed by contractual data processing agreements that impose obligations on those providers to handle your data securely and only for the purposes for which it was shared. 8m88 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate safeguards.

12 Policy Updates

8m88 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made to this Policy, we will take reasonable steps to notify registered players — this may include a notification displayed on the platform or a message sent to the registered email address on file.

The effective date at the top of this document will be updated whenever a new version of the Privacy Policy is published. We encourage you to review this Policy periodically to stay informed about how 8m88 is protecting your data. Your continued use of the 8m88 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 8m88 handles your personal data, please contact us through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly within the 8m88 platform interface.
• Email: [email protected] (plain text — not a clickable link)
• Response Time: 8m88 aims to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 days (Bangladesh Standard Time, UTC+6).

For formal data subject rights requests (access, rectification, erasure, etc.), please include your registered account username, the nature of your request, and any relevant details to help us locate your records quickly. Identity verification will be required before any request is actioned.