Privacy Policy for 8kbd1

8kbd1 collects personal data from you in several ways — directly through account registration and activity on the Platform, automatically through your device and browser, and occasionally from trusted third-party sources as part of our verification and fraud-prevention processes. Below is a detailed breakdown of the categories of personal data we collect.

1.1 Registration and Identity Data

When you create an account on 8kbd1, we collect the following information:

• Full legal name as it appears on government-issued identification.
• Date of birth (used to verify you meet the 18+ age requirement).
• Gender (optional, collected for account personalisation purposes only).
• Residential address including city, district, and postal code (Bangladesh).
• Email address (used for account communications, security alerts, and promotions where consented).
• Mobile phone number (used for account verification and payment processing).
• National Identity Card (NID) number (collected as part of our mandatory KYC process).

1.2 Payment and Financial Data

To process deposits and withdrawals, 8kbd1 collects:

• Mobile financial service account numbers for bKash, Nagad, Rocket, and Upay transactions.
• Transaction reference numbers and amounts in BDT.
• Bank account details where bank transfers are used (Dutch-Bangla Bank, City Bank, BRAC Bank, Sonali Bank, Islami Bank, or other institutions).
• Documentation evidencing the source of funds for players subject to enhanced due diligence under our anti-money laundering procedures.

8kbd1 does not store full payment card numbers. Payment data is handled by PCI-DSS-compliant payment processors.

1.3 KYC Verification Documents

As part of our Know Your Customer (KYC) process, we may request and store copies of:

• National Identity Card (NID) — front and back.
• Passport (biographical data page).
• Recent utility bill or bank statement confirming your address (not older than three months).
• Selfie photograph for liveness verification purposes.

1.4 Usage and Activity Data

When you use the 8kbd1 Platform, we automatically collect:

• IP address and approximate geographic location.
• Device type, operating system, and browser version.
• Pages visited, game sessions played, betting history, and session duration.
• Login timestamps and frequency of access.
• Clickstream data and in-platform navigation patterns.

1.5 Communications Data

If you contact 8kbd1 via live chat, email, or any other channel, we retain records of your communications including the content of messages, the date and time of contact, and the resolution or response provided. This data is used to improve our support quality and to maintain a record of any disputes or complaints.

8kbd1 uses the personal data described in Section 1 for the following purposes. We only use your data where we have a valid legal basis to do so (see Section 3).

2.1 Marketing Communications. If you have given us your consent during registration or subsequently via your account settings, 8kbd1 may send you promotional emails or SMS messages about new games, seasonal bonuses (such as BPL cricket promotions, Eid offers, or Pohela Boishakh bonuses), and platform updates. You may withdraw your consent to marketing communications at any time by updating your preferences in your account settings or by emailing [email protected]. Withdrawing consent does not affect any other aspect of your account.

2.2 Automated Decision-Making. 8kbd1 may use automated systems to detect fraud, identify problem gambling indicators, and flag accounts for manual review. Where an automated decision has a significant effect on your account (for example, triggering a suspension pending investigation), you have the right to request human review of that decision by contacting our support team.

8kbd1 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contract Performance: Processing is necessary to provide the 8kbd1 service to you — including account creation, game access, payment processing, and customer support. Without this processing, we cannot fulfil our contractual obligations to you as a registered player.
• Legal Obligation: Processing is required to comply with applicable legal obligations, including age verification requirements, anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and mandatory record-keeping obligations.
• Legitimate Interest: Processing is necessary for the legitimate interests of 8kbd1, where those interests are not overridden by your rights and interests. This includes fraud detection and prevention, platform security, analytics to improve the Platform, and responsible gaming monitoring. Where we rely on legitimate interests, we balance our interests against your privacy rights and implement appropriate safeguards.
• Consent: For specific activities — primarily marketing communications — we rely on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

If you would like to understand which specific legal basis applies to a particular processing activity, please contact us at [email protected] with your query.

8kbd1 uses cookies and similar technologies (such as local storage, session storage, and pixel tags) to operate the Platform efficiently, maintain your session, and understand how players interact with our services. The following table describes the categories of cookies used on the 8kbd1 Platform.

4.1 No Third-Party Advertising Cookies. 8kbd1 does not use third-party advertising cookies to build marketing profiles or to serve targeted advertisements on external websites. We do not share cookie data with advertising networks or data brokers.

4.2 Managing Cookies. You can control or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may prevent certain features of the 8kbd1 Platform from functioning correctly, including the ability to log in or maintain your session. For guidance on managing cookies in popular browsers, consult your browser's official help documentation.

8kbd1 does not sell, rent, or trade your personal data to third parties for marketing purposes. We share your data only in the limited circumstances described below, and only with parties who are contractually bound to protect it.

5.1 Service Providers and Data Processors

We engage trusted third-party service providers who process personal data on our behalf to help us deliver the Platform. These include:

• Payment Processors: bKash, Nagad, Rocket, and Upay receive the payment account details and transaction amounts necessary to process your deposits and withdrawals in BDT.
• Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other platform partners receive a session token and anonymous player identifier to load and operate their games. Full personal data is not passed to game providers.
• Identity Verification Services: Third-party KYC providers may process copies of your identity documents to perform automated or manual verification checks.
• Fraud Detection Services: Specialist fraud-prevention providers analyse device fingerprints, IP addresses, and behavioural signals to protect the Platform and its players.
• Cloud Infrastructure: 8kbd1 uses reputable cloud hosting providers to store data securely. All cloud providers used are bound by data processing agreements that require them to maintain appropriate security standards.

5.2 Legal and Regulatory Disclosures

8kbd1 may disclose personal data to law enforcement authorities, courts, or regulatory bodies where required to do so by applicable law, a valid court order, or a binding regulatory instruction. In such cases, we disclose only the minimum data necessary to satisfy the legal requirement, and we will notify you where we are legally permitted to do so.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of 8kbd1's business or assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will provide reasonable advance notice before your data is transferred and becomes subject to a different privacy policy.

8kbd1 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory, and operational requirements. The following retention periods apply as a general guide:

After the applicable retention period has expired, 8kbd1 will securely delete or anonymise your personal data so that it can no longer be associated with you. Where anonymisation is not technically feasible, the data will be securely destroyed.

If you request account closure, 8kbd1 will cease active processing of your data immediately upon closure, but will retain records for the periods stated above as required by law. Deletion requests that conflict with our legal retention obligations will be partially fulfilled — we will delete data that we are not legally required to retain and will explain which data must be kept and why.

As a player whose personal data is processed by 8kbd1, you have the following rights with respect to your personal information. To exercise any of these rights, please contact us at [email protected] with a clear description of your request. We aim to respond to all valid data rights requests within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data that 8kbd1 holds about you, along with information about how it is used and with whom it is shared. We provide this free of charge in most circumstances.
• Right to Rectification: If any personal data held by 8kbd1 is inaccurate or incomplete, you have the right to request that it be corrected or updated. You can update basic account details (such as email address and phone number) directly through your account settings panel.
• Right to Erasure ("Right to Be Forgotten"): You may request that 8kbd1 delete your personal data. This right applies where the data is no longer necessary for the purpose for which it was collected, where consent has been withdrawn and no other legal basis applies, or where the data has been processed unlawfully. Please note that this right is subject to our legal retention obligations — we will explain any data we are required to retain.
• Right to Restriction of Processing: In certain circumstances (for example, while a dispute about the accuracy of your data is being resolved), you may request that we restrict processing of your data to storage only.
• Right to Data Portability: Where we process your data on the basis of contract performance or consent, and where processing is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON).
• Right to Object: You have the right to object to processing based on legitimate interests (including profiling for fraud prevention) and to processing for direct marketing purposes. Where you object to marketing, we will stop processing your data for that purpose immediately.
• Rights Related to Automated Decision-Making: Where an automated decision has a significant impact on your account, you have the right to request human review of that decision and to contest the outcome.

8kbd1 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure. Our security programme includes:

• SSL/TLS Encryption: All data transmitted between your device and the 8kbd1 Platform is encrypted using SSL/TLS protocols, protecting your information in transit from interception by third parties.
• Encryption at Rest: Sensitive personal data — including KYC documents, payment details, and account credentials — is stored in encrypted form. Encryption keys are managed through a dedicated key management system with strict access controls.
• Access Controls: Access to personal data within 8kbd1 is restricted on a strict need-to-know basis. Staff members are granted access only to the data required to perform their specific job function. All access is logged and periodically audited.
• Two-Factor Authentication (2FA): 8kbd1 supports and encourages the use of 2FA for player accounts. Internal staff with access to player data are required to use 2FA for all system logins.
• Regular Security Testing: 8kbd1 conducts periodic vulnerability assessments and penetration testing of the Platform to identify and remediate security weaknesses before they can be exploited.
• Incident Response: 8kbd1 maintains a documented data breach response procedure. In the event of a data breach that poses a risk to your rights, we will notify affected players promptly in accordance with our legal obligations.
• Staff Training: All 8kbd1 staff who handle personal data receive regular data protection and security awareness training.

While 8kbd1 takes all reasonable precautions to protect your data, no internet transmission or electronic storage system is completely secure. We encourage you to use a strong, unique password for your 8kbd1 account and to enable two-factor authentication to further protect your account from unauthorised access.

If you have any questions, concerns, or requests relating to this Privacy Policy or how 8kbd1 processes your personal data, please contact our Data Protection team using the details below. We are committed to handling all privacy enquiries promptly, professionally, and in good faith.

9.1 How to Contact Us

You may reach the 8kbd1 Data Protection team via the following channel:

• Email: [email protected] — please include "Privacy Request" or "Data Protection Enquiry" in the subject line so your message is routed to the correct team.
• Live Chat: Our 24/7 English-language live chat support is available directly within the 8kbd1 Platform. For data rights requests or formal complaints, we recommend using the email channel to ensure a written record is maintained.
• Response Time: We aim to acknowledge all privacy enquiries within two business days and to provide a substantive response within 30 calendar days of receipt. Complex requests may require additional time, in which case we will notify you of the extended timeline.
• Time Zone: Our support team operates on Bangladesh Standard Time (BST, UTC+6).

9.2 Formal Complaints

If you are not satisfied with how 8kbd1 has handled your personal data or responded to a data rights request, you have the right to lodge a formal complaint. To initiate a formal complaint, please write to [email protected] with the subject line "Formal Privacy Complaint" and provide a detailed description of your concern, the steps you have already taken to resolve it, and your preferred outcome. We will acknowledge your formal complaint within two business days and endeavour to provide a full written response within 30 calendar days.

9.3 Policy Updates

8kbd1 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or the features of the Platform. When we make material changes, we will notify registered players by email and by displaying a prominent notice on the 8kbd1 Platform for a minimum of 14 days before the revised policy takes effect. The effective date at the top of this document will always reflect the date of the most recent revision. Your continued use of the Platform after the effective date of a revised policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you must stop using the Platform and contact us to request account closure.