8a888 Privacy Policy

📋 Introduction & Scope

This Privacy Policy ("Policy") describes how 8a888 ("we", "us", "our", "the Company") collects, uses, stores, shares, and protects personal information provided by users ("you", "your", "the User") of the online casino and sports betting platform accessible at https://8a888.app ("the Platform"). This Policy applies to all users who visit, register on, or interact with any part of the 8a888 Platform, regardless of the device or channel used to access it.

By registering an account with 8a888, depositing funds, placing a bet, or simply browsing the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must discontinue use of the Platform immediately.

This Policy should be read together with the 8a888 Terms & Conditions and Responsible Gaming Policy, both of which are available on this site. We may update this Policy from time to time. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of the Platform after publication of any amendment constitutes your acceptance of the updated Policy.

🗂️ Data We Collect

8a888 collects personal data through several channels: directly from you when you register or use the Platform, automatically through technical systems when you browse or play, and occasionally from third-party payment partners and identity verification providers. The categories of personal data we collect include:

2.1 — Registration and Identity Data

• Full name as it appears on your official identity document.
• Date of birth — collected for mandatory age verification (21+ policy enforcement).
• Username chosen at registration.
• Email address used as your primary account contact.
• Mobile phone number for account security and transaction notifications .
• Residential address including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar) and postal code.
• Nationality and country of residence for eligibility verification purposes.

2.2 — Identity Verification (KYC) Documents

• National Identity Card (NID) or passport scan — submitted during the KYC verification process.
• Proof of address such as a utility bill or bank statement dated within the last three months.
• Payment method confirmation — for bKash, Nagad, Rocket, or Upay accounts, we may request confirmation that the registered mobile banking number matches the account holder.
• Selfie or liveness check — where enhanced identity verification is required, we may request a photograph alongside your identity document.

2.3 — Financial and Transaction Data

• Deposit and withdrawal amounts in Bangladeshi Taka (৳ BDT).
• Payment method details (mobile wallet number, bank account reference — we do not store full card numbers).
• Transaction timestamps, reference numbers, and processing status.
• Bonus claims, wagering activity, and balance history.

2.4 — Technical and Device Data

• IP address and approximate geolocation (city/region level).
• Device type, operating system, browser type, and version.
• Session timestamps, pages visited, buttons clicked, and time spent on each section.
• Cookies and similar tracking technologies (see Section 8 for full cookie details).

2.5 — Communications Data

• Records of all correspondence between you and the 8a888 support team, including live chat transcripts and email exchanges.
• Responses to surveys, feedback forms, or promotional opt-in requests.
• Complaint records and resolution notes.

⚙️ How We Use Your Data

8a888 uses personal data only for legitimate, clearly defined purposes. We do not sell personal data to third parties for marketing purposes. The primary purposes for which we process your data are as follows:

🤝 Data Sharing & Third Parties

8a888 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data with the following categories of trusted partners and only to the extent strictly necessary for the purposes described in this Policy:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive transaction data necessary to process your deposits and withdrawals. Each of these partners operates under their own privacy and security frameworks.
• Identity Verification Providers: Third-party KYC (Know Your Customer) service providers may receive identity documents and personal details for the purpose of verifying your age and identity. These providers are bound by strict data processing agreements with 8a888.
• Game Software Suppliers: Game studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe may receive your session identifier and game participation data in order to deliver games and resolve game disputes. They do not receive your full personal profile.
• IT and Hosting Providers: Cloud infrastructure and hosting partners who store Platform data on our behalf operate under contractual obligations to maintain confidentiality and security.
• Fraud and Security Partners: Anti-fraud and cybersecurity technology providers may process technical data (IP address, device fingerprint) to detect and prevent prohibited activity on the Platform.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by applicable law or in response to a valid legal process. We will notify you of such disclosure wherever legally permitted to do so.

🗄️ Data Retention

8a888 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including meeting legal, regulatory, and business obligations. Our standard retention periods are as follows:

• Active Account Data: Retained for the full duration of your account relationship with 8a888, plus a minimum of five (5) years following account closure to satisfy anti-money laundering record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of five (5) years after account closure or the last transaction, whichever is later.
• Transaction Records: Financial transaction history is retained for a minimum of seven (7) years in line with standard financial record-keeping obligations.
• Support Communications: Correspondence records are retained for three (3) years following resolution of the relevant query or complaint.
• Technical and Device Data (Cookies and Logs): Session logs are typically retained for ninety (90) days. Cookie data is retained in accordance with the periods specified in Section 8 below.
• Marketing Consent Records: Where you have provided consent to receive marketing communications, that consent record is retained for the lifetime of the consent or until you withdraw it, whichever is earlier. After withdrawal, we retain a record of the withdrawal for compliance purposes.

After the applicable retention period has expired, personal data is securely deleted or anonymised so that it can no longer be associated with an identified or identifiable individual.

✅ Your Rights

As a user of the 8a888 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us in writing at [email protected] with the subject line "Data Rights Request":

• Right of Access: You have the right to request a copy of the personal data we hold about you and to receive information about how it is being used.
• Right to Rectification: If any of the personal data we hold is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances, you may request that we delete the personal data we hold about you. Note that this right is subject to legal and regulatory retention obligations — we cannot delete data that we are legally required to retain.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances, for example while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to Object: You have the right to object to the processing of your personal data where we rely on legitimate interests as the legal basis, including profiling for direct marketing purposes.

We will respond to all verifiable data rights requests within thirty (30) calendar days. In complex cases we may extend this period by a further sixty (60) days, in which case we will inform you of the extension and the reasons for it.

🔐 Data Security

8a888 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure. Key security measures include:

• SSL/TLS Encryption: All data transmitted between your device and the 8a888 Platform is encrypted using industry-standard SSL (Secure Socket Layer) / TLS (Transport Layer Security) protocols. Look for the padlock icon in your browser address bar.
• Data Encryption at Rest: Sensitive personal data stored on our servers is encrypted at rest using AES-256 or equivalent encryption standards.
• Access Controls: Access to personal data within the 8a888 organisation is restricted on a strict need-to-know basis. All staff with access to personal data are bound by confidentiality obligations.
• Two-Factor Authentication (2FA): We encourage all users to enable 2FA on their 8a888 account for an additional layer of login security.
• Regular Security Audits: Our Platform and infrastructure undergo regular security assessments and penetration testing to identify and address potential vulnerabilities.
• Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, 8a888 will notify affected users within a reasonable timeframe and take immediate remedial action.

🍪 Cookies & Tracking

8a888 uses cookies and similar tracking technologies to improve your experience on the Platform, maintain session security, and analyse usage patterns. A cookie is a small text file placed on your device by our Platform when you visit.

• Strictly Necessary Cookies: These are essential for the Platform to function correctly — for example, maintaining your login session, remembering your language preference, and processing your transactions. These cookies cannot be disabled.
• Analytical / Performance Cookies: These cookies collect anonymised information about how visitors use the Platform — which pages are visited most, where users spend the most time, and how they navigate between sections. This data helps us improve Platform performance and content relevance.
• Functional Cookies: These remember your preferences (e.g., game display settings, notification preferences) to personalise your experience on return visits.
• Marketing Cookies: With your consent, we may use cookies to deliver personalised promotional content related to 8a888 casino offers, cricket betting promotions, and seasonal events. You may opt out of marketing cookies at any time via your browser settings.

You can control and manage cookies through your browser settings. Please note that disabling strictly necessary cookies may impair the functionality of the Platform and prevent you from accessing certain features including account login, deposits, and gameplay. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

🔞 Protection of Minors

The 8a888 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to 8a888, please contact us immediately at [email protected]. We will investigate the matter and act promptly.

🛡️ Privacy Commitments at a Glance

These six commitments summarise how 8a888 handles your personal data every day.

📝 Changes to This Policy

8a888 reserves the right to update or amend this Privacy Policy at any time. When we make material changes — changes that significantly affect how we collect or use your personal data — we will notify active account holders by email and display a prominent notice on the Platform for a minimum of fourteen (14) days following publication.

For minor changes (such as clarifications, corrections of typographical errors, or updates to contact details), the revised Policy will simply be published with an updated "Last Updated" date. We encourage you to review this page periodically to stay informed about how 8a888 protects your data.

📬 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a privacy concern, please contact the 8a888 data team using the details below. All communications should be in English. We aim to acknowledge all data-related enquiries within two (2) business days and to resolve the majority of cases within thirty (30) calendar days.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the appropriate data protection authority in your jurisdiction.