Privacy Policy — How 88b8 Protects Your Data

This Privacy Policy ("Policy") describes how 88b8 ("88b8", "we", "us", "our") collects, uses, stores, shares, and protects personal information about individuals ("you", "your", "the Player") who access or use the 88b8 online gaming and sports betting platform accessible at https://88b8.io ("the Platform").

88b8 is committed to safeguarding the privacy of all players based in Bangladesh and worldwide. This Policy applies to all personal data processed in connection with your use of the Platform, including account registration, deposits and withdrawals, gameplay, customer support interactions, and any communications between you and 88b8.

By registering an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside the Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference.

88b8 acts as the data controller for all personal data collected through the Platform. As data controller, 88b8 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

For all data-related enquiries, requests, or complaints, you may contact the 88b8 Data Protection team at:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: "Data Protection Request" followed by a brief description of your query
• Response Time: All data-related requests are acknowledged within 48 hours and resolved within 30 calendar days

88b8 collects personal data from you through a number of channels, including the account registration form, payment processing, identity verification, gameplay activity, customer support interactions, and your device and browser when you access the Platform. The categories of personal data we collect include:

88b8 does not knowingly collect sensitive personal data beyond what is strictly necessary for identity verification and anti-money laundering compliance. We do not collect data relating to racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or biometric data for identification purposes beyond what appears on standard government-issued identity documents submitted for KYC.

88b8 uses the personal data it collects for the following purposes:

• Account Management: To create, maintain, and administer your 88b8 account, including verifying your identity and age (21+ requirement), managing your account balance, and processing your account settings and preferences.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and approved banking channels, and to maintain accurate financial records of all transactions.
• Legal & Regulatory Compliance: To comply with applicable laws and regulations, including Know Your Customer (KYC) checks, anti-money laundering (AML) obligations, and fraud prevention requirements.
• Platform Security: To detect and prevent fraudulent activity, account takeovers, money laundering, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance.
• Responsible Gaming: To monitor gameplay patterns for indicators of problem gambling and to administer responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion requests.
• Personalisation: To tailor your experience on the Platform, including displaying relevant game recommendations and promotional offers based on your activity history, where you have consented to this.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications. You may opt out at any time via your account settings or by contacting [email protected].
• Platform Improvement: To analyse usage patterns, identify technical issues, and improve the performance, security, and user experience of the Platform.

88b8 processes your personal data on one or more of the following legal bases, depending on the specific activity:

• Contractual Necessity: Processing required to perform our contract with you — for example, creating your account, processing payments, and providing access to games and betting markets.
• Legal Obligation: Processing required to comply with applicable laws — for example, KYC identity verification, AML transaction monitoring, and record-keeping obligations.
• Legitimate Interests: Processing carried out for our legitimate business interests where those interests are not overridden by your rights — for example, fraud prevention, platform security, and improving our services.
• Consent: Processing based on your freely given, specific, and informed consent — for example, sending you marketing emails or enabling personalised game recommendations. You may withdraw consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

88b8 does not sell, rent, or trade your personal data. We may share your data with the following categories of third parties strictly as necessary to provide our services:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank, solely for the purpose of processing your deposits and withdrawals.
• Identity Verification Partners: Certified KYC and AML service providers who assist in verifying the identity and age of our players in compliance with our obligations.
• Game Technology Providers: Third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, who may process limited technical data (such as session tokens and bet history) to deliver game functionality. These providers operate under strict data processing agreements with 88b8.
• IT and Security Service Providers: Cloud hosting, cybersecurity, and platform infrastructure providers who support the operation of the 88b8 Platform and are bound by confidentiality obligations.
• Legal and Regulatory Authorities: Government bodies, law enforcement agencies, or courts where disclosure is required by applicable law or a lawful order, including for anti-money laundering reporting purposes.

All third-party service providers who process personal data on behalf of 88b8 are required to do so under a formal data processing agreement that obligates them to protect your data with the same standard of care that 88b8 applies internally.

88b8 processes payment data — including mobile wallet numbers for bKash, Nagad, Rocket, and Upay, as well as bank account details — exclusively for the purpose of facilitating deposits and withdrawals in Bangladeshi Taka (BDT). Payment data is transmitted via encrypted channels to our payment partners and is never stored on 88b8 servers in unencrypted form.

88b8 does not store full card numbers or full bank account credentials on its own servers. Payment tokens or references provided by our payment partners are used for reconciliation purposes only. Players are solely responsible for ensuring that the payment accounts they use are registered in their own name. Third-party payment accounts are not permitted under our Terms & Conditions.

88b8 uses cookies and similar tracking technologies to provide a functional, secure, and personalised platform experience. Cookies are small text files stored on your device when you visit the Platform. The categories of cookies we use are:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without affecting your ability to use the Platform.
• Functional Cookies: Used to remember your preferences such as language settings, display preferences, and last-visited game categories to personalise your experience.
• Analytics Cookies: Used to understand how players interact with the Platform — for example, which pages are visited most, how long sessions last, and where players encounter errors. This data is aggregated and anonymised where possible.
• Security Cookies: Used for fraud detection and prevention, including identifying unusual login patterns, detecting automated bots, and flagging suspicious account activity.

You may manage non-essential cookie preferences through your browser settings at any time. Please note that disabling functional or analytics cookies may limit some features of the Platform. 88b8 does not use third-party advertising cookies or cross-site tracking cookies for the purpose of serving advertisements on external websites.

88b8 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account Data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in accordance with our AML and record-keeping obligations.
• KYC & Identity Documents: Retained for a minimum of five (5) years from the date of submission, or longer where required by applicable law or an ongoing legal proceeding.
• Transaction Records: Retained for a minimum of seven (7) years in line with standard financial record-keeping requirements.
• Customer Support Communications: Retained for three (3) years from the date of the last interaction, or longer where a formal complaint or dispute is pending.
• Marketing Preferences: Retained until you withdraw consent or close your account, whichever is earlier.
• Technical and Usage Data: Retained in aggregated, anonymised form indefinitely for platform improvement purposes. Personally identifiable technical data is deleted or anonymised within twelve (12) months.

When personal data is no longer required, 88b8 securely deletes or anonymises it in accordance with our internal data disposal procedures.

88b8 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the Platform
• Encryption of sensitive data fields at rest within our database infrastructure
• Multi-factor authentication requirements for internal staff accessing player data systems
• Regular third-party security audits and penetration testing of Platform infrastructure
• Intrusion detection and real-time monitoring systems to identify and respond to security incidents
• Strict role-based access controls limiting internal staff access to player data on a need-to-know basis
• Incident response procedures with defined timelines for notifying affected players in the event of a data breach

While 88b8 takes all reasonable steps to protect your personal data, no system is entirely immune to risk. You also play an important role in keeping your account secure — please refer to the Account Security section of our Terms & Conditions for your responsibilities regarding password security and unauthorised access reporting.

As a player whose personal data is processed by 88b8, you hold the following rights with respect to your information. You may exercise any of these rights by contacting [email protected] with the subject line "Data Rights Request":

The 88b8 Platform is strictly intended for adults aged 21 years and above. 88b8 does not knowingly collect personal data from individuals under the age of 21. If you believe that a person under 21 has registered an account or provided us with personal data, please notify us immediately at [email protected] and we will investigate and, if confirmed, delete the account and all associated personal data without delay.

88b8 uses age verification as part of its KYC process to confirm that all players meet the 21+ requirement before any real-money transactions are permitted. Where age verification cannot be completed, the account will be restricted until documentation confirming the player's age is received and reviewed.

88b8 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform services. When a material change is made, we will:

• Update the "Last Updated" date at the top of this Policy
• Send a notification to your registered email address summarising the key changes
• Display a prominent notice on the Platform for a minimum of 14 days following the effective date of the change

Your continued use of the Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you must stop using the Platform and contact us to close your account and request data deletion.

The most current version of this Privacy Policy is always available at https://88b8.io/privacy-policy. We encourage you to review this page periodically to stay informed about how we protect your data.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the 88b8 Data Protection team using the details below. All communications must be in English:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: "Privacy Policy Enquiry" or "Data Rights Request" as appropriate
• Live Chat: Available 24/7 via the Platform for general privacy questions
• Acknowledgement: Within 48 hours of receipt
• Resolution: Within 30 calendar days for standard data rights requests

If you are not satisfied with how 88b8 has handled your personal data or responded to a data rights request, you have the right to escalate your complaint to the relevant data protection authority. 88b8 will cooperate fully with any such regulatory investigation.