8p88 Privacy Policy

1 Information We Collect

8p88 collects personal information from players registered in Bangladesh through several distinct channels. The categories of information collected, and the circumstances in which each is gathered, are described below.

1.1 Registration Information

When you create a player account on the 8p88 platform, we collect your full legal name, date of birth, residential address, mobile phone number, and email address. This information is required to verify your identity, confirm your eligibility to play, and maintain accurate account records.

1.2 Identity Verification (KYC) Documents

As part of our Know Your Customer (KYC) obligations, we may collect copies of government-issued identity documents, including your National Identity Card (NID), passport, or driving licence. We may also collect proof of residential address such as a recent utility bill or bank statement issued by an institution such as BRAC Bank, Dutch-Bangla Bank, or Sonali Bank. These documents are collected solely for identity verification and anti-money-laundering compliance purposes.

1.3 Financial and Payment Information

When you make a deposit or request a withdrawal, we collect transaction details including the payment method used (bKash, Nagad, Rocket, Upay, or bank card), the transaction amount in BDT (৳), and the timestamp of the transaction. We do not store full mobile banking PINs or card CVV numbers — these are handled directly by the payment provider.

1.4 Gameplay and Betting Activity

We record your gaming history, including the games played (slots, live dealer tables, cricket betting markets, Teen Patti, Andar Bahar, and other titles), wager amounts, outcomes, bonus usage, and session durations. This data is used to manage your account balance accurately, calculate bonus eligibility, and detect unusual patterns that may indicate problem gambling or fraudulent activity.

1.5 Device and Technical Information

When you access the 8p88 platform, our servers automatically record certain technical information, including your IP address, browser type and version, operating system, device type (mobile or desktop), screen resolution, referral URL, and time zone. This information is used for security monitoring, fraud prevention, and platform performance optimisation.

1.6 Communications

If you contact 8p88 support by email or live chat, we retain a record of the conversation, including the content of your messages and any attachments, for quality assurance and dispute resolution purposes. Support communications are stored for a minimum of 24 months.

2 How We Use Your Data

The personal information collected by 8p88 is used for the following purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected.

Where 8p88 intends to use your personal data for a purpose not listed above, we will notify you in advance and obtain any required consent before proceeding.

3 Legal Basis for Processing

8p88 processes your personal data on one or more of the following legal grounds, depending on the specific processing activity in question.

3.1 Contractual Necessity

The majority of data processing by 8p88 is necessary for the performance of the contract between you and 8p88 — namely, the provision of online gaming and sports betting services as described in the Terms & Conditions. This includes account creation, transaction processing, identity verification, and account management.

3.2 Legal Obligation

Certain processing activities are required by law, including KYC identity checks, the retention of financial transaction records for anti-money-laundering compliance, and the implementation of responsible gaming interventions in appropriate circumstances.

3.3 Legitimate Interests

8p88 processes some data — including device information, IP addresses, and session logs — on the basis of its legitimate interest in detecting and preventing fraud, maintaining platform security, and improving the quality and performance of its services. These interests are balanced against your privacy rights; we process only the minimum data necessary to achieve these objectives.

3.4 Consent

Where 8p88 sends you marketing communications or uses non-essential cookies, we do so on the basis of your consent, which is obtained at the point of registration or through your account preferences settings. You may withdraw your consent to marketing communications or non-essential cookies at any time without affecting the lawfulness of processing carried out prior to withdrawal.

4 Data Sharing & Third Parties

8p88 does not sell or rent your personal information to third parties. We share your data only in the limited circumstances described in this section, and only with parties that are bound by appropriate confidentiality and data protection obligations.

4.1 Payment Providers

To process your deposits and withdrawals, 8p88 shares necessary transaction data with our payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Islami Bank, and card processors such as Visa and Mastercard. These providers receive only the information needed to complete the specific transaction.

4.2 Game Software Providers

To deliver games on the 8p88 platform, we work with licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may process certain account and session data in order to render games, record outcomes, and calculate RTP. All game providers used by 8p88 are contractually required to process data solely for game delivery purposes.

4.3 Identity Verification Services

8p88 may use third-party KYC verification services to validate the authenticity of identity documents submitted by players. These services process document images and personal details for the sole purpose of confirming identity and age, and are prohibited from retaining or using the data for any other purpose.

4.4 Fraud Prevention and Security

8p88 may share account and transaction data with fraud detection services, cybersecurity providers, and, where legally required, with law enforcement agencies or financial intelligence authorities. Such sharing is limited to what is strictly necessary for the relevant investigation or security purpose.

4.5 Corporate Transactions

In the event of a merger, acquisition, or sale of all or part of the 8p88 business, your personal data may be transferred to the successor entity. You will be notified of any such transfer in advance, and the successor entity will be required to honour the commitments set out in this Privacy Policy.

5 Cookies & Tracking Technologies

The 8p88 platform uses cookies and similar tracking technologies to maintain session integrity, remember your preferences, and gather anonymised analytics data that helps us improve the platform experience for all Bangladeshi players.

5.1 Essential Cookies

Essential cookies are strictly necessary for the platform to function. They keep you logged in during a session, maintain your account state across page loads, and protect the security of your session. Essential cookies cannot be disabled without preventing core platform functionality from working correctly.

5.2 Analytics Cookies

With your consent, 8p88 uses analytics cookies to collect anonymised data about how players navigate and interact with the platform — for example, which game categories are most popular, which pages have the highest exit rates, and how long sessions typically last. This data is used exclusively to improve the platform and is never linked back to your individual identity.

5.3 Preference Cookies

Preference cookies remember your settings — such as your preferred language, last visited game category, and notification preferences — so that you do not need to reconfigure them on each visit.

5.4 Managing Cookies

You may manage your cookie preferences at any time through your account settings or through your browser's built-in cookie controls. Note that disabling analytics and preference cookies will not affect your ability to play games or make transactions, but may result in a slightly less personalised experience.

6 Data Retention

8p88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The general retention periods applied by 8p88 are as follows:

• Active account data — retained for the full duration of your account and for 5 years following account closure.
• Financial transaction records — retained for a minimum of 7 years from the date of the transaction, in compliance with financial record-keeping requirements.
• KYC identity documents — retained for 5 years following account closure or the completion of the relevant verification process, whichever is later.
• Support communications — retained for 24 months from the date of the final message in the relevant conversation thread.
• Technical and device logs — retained for 12 months from the date of recording, unless a security investigation requires extended retention.
• Marketing consent records — retained for the duration of the consent period and for 3 years following withdrawal of consent, as evidence of compliance.

After the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked back to any individual player.

7 Your Privacy Rights

As a player registered with 8p88, you have the following rights with respect to your personal data. To exercise any of these rights, please contact the 8p88 privacy team at [email protected] with the subject line "Privacy Rights Request", including your registered username and a description of the right you wish to exercise.

7.1 Right of Access

You may request a copy of all personal data that 8p88 holds about you, along with information about how that data is being used and with whom it has been shared. Access requests are fulfilled within 30 days of receipt.

7.2 Right to Rectification

If any personal data held by 8p88 is inaccurate or incomplete, you have the right to request that it be corrected. Where the inaccuracy relates to identity information, updated documentation may be required to support the correction.

7.3 Right to Erasure

Subject to our legal retention obligations (see Section 6), you may request the deletion of your personal data. This right applies most directly to marketing data, preference data, and analytics data. Financial and KYC records must be retained for the periods specified by law and cannot be deleted on request during those periods.

7.4 Right to Restrict Processing

You may request that 8p88 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is under review. During a restriction period, 8p88 will store your data but will not actively process it for any purpose other than security and legal compliance.

7.5 Right to Object to Marketing

You have an unconditional right to object to the use of your personal data for direct marketing purposes. You may exercise this right by clicking the unsubscribe link in any marketing email, by updating your preferences in your account settings, or by contacting support directly. Marketing will cease within 5 business days of your request being confirmed.

7.6 Right to Data Portability

Where processing is based on your consent or on a contract, you may request a copy of your personal data in a structured, commonly used, and machine-readable format (CSV or JSON), suitable for transfer to another service provider.

8 Data Security

8p88 implements a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and 8p88 servers.
• AES-256 encryption for sensitive data stored in our databases, including KYC documents and payment method details.
• Role-based access controls that ensure only authorised 8p88 personnel can access personal data, and only to the extent required by their specific job function.
• Multi-factor authentication (MFA) for all internal system access by 8p88 staff.
• Regular third-party security audits and penetration testing of the 8p88 platform and infrastructure.
• Automated intrusion detection systems that monitor for unusual access patterns and flag potential security incidents in real time.
• Secure data destruction protocols for any physical media containing personal data.

8.1 Data Breach Notification

In the unlikely event of a personal data breach that poses a risk to your rights or interests, 8p88 will notify affected players without undue delay and in any case within 72 hours of the breach being identified. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps 8p88 is taking to address the situation.

While 8p88 takes all reasonable steps to protect your data, no digital platform can guarantee absolute security. You play an important role in keeping your account secure by choosing a strong, unique password, enabling two-factor authentication where available, and not sharing your login credentials with any third party.

9 Children & Minors

The 8p88 platform is strictly restricted to individuals who are 18 years of age or older. 8p88 does not knowingly collect personal data from anyone under the age of 18. Age verification is a core component of the registration process, and additional documentary verification may be requested at any time.

If 8p88 becomes aware that personal data has been collected from an individual who is under 18 years of age, the relevant account will be closed immediately, all data associated with the account will be deleted in accordance with our data retention policy, and any funds deposited will be returned to the originating payment method. Where required, the matter may be reported to relevant authorities.

10 Policy Updates & Contact

10.1 Updates to This Policy

8p88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the features and services offered on the platform. When material changes are made, we will notify registered players by email and display a prominent notice on the platform at least 7 days before the changes take effect. The updated policy will carry a revised "Last Updated" date at the top.

Your continued use of the 8p88 platform after a policy update takes effect constitutes your acceptance of the revised Privacy Policy. If you do not agree with the revised policy, you should close your account before the effective date of the change.

10.2 Contact for Privacy Enquiries

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or have a concern about the way your personal data is being handled, please contact the 8p88 privacy team using the details below. All communications should be sent in English and include your registered username.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Privacy Policy Enquiry
• Response Time: We aim to respond to all privacy enquiries within 5 business days (Bangladesh Standard Time, UTC+6).

This Privacy Policy was last reviewed and approved on 1 January 2026 and supersedes all previous versions of the 8p88 Privacy Policy.