Data Protection & Privacy
8xk Privacy Policy
Your privacy is a fundamental right, not an afterthought. This Privacy Policy explains in plain English exactly what personal data 8xk collects from Bangladesh players, why we collect it, how we store and protect it, who we may share it with, and what rights you have over your own information. We encourage every player to read this document carefully.
Privacy at a Glance
How 8xk Handles Your Data
8xk is committed to handling all personal data responsibly, transparently, and in accordance with applicable data protection principles. The platform is operated exclusively for players in Bangladesh, and all data processing activities are designed with the interests and rights of Bangladesh players in mind. We do not sell personal data. We do not share personal data with advertisers. We use the data we collect solely to operate, improve, and secure the 8xk platform.
SSL Encryption on Every Page
Every page and every transaction on 8xk is protected by SSL/TLS encryption. Data transmitted between your device and 8xk servers is encrypted in transit at all times, preventing interception by third parties.
We Never Sell Your Data
8xk does not sell, rent, or trade your personal information to any third party for marketing purposes. Your data is used only to operate your account, process payments, prevent fraud, and meet legal obligations.
Purpose-Limited Collection
We collect only the data that is strictly necessary to deliver our services. Every category of data collected is linked to a specific, documented purpose. If the purpose no longer applies, the data is deleted or anonymised.
Transparent KYC Process
Identity verification documents submitted during KYC are stored securely, used only for verification purposes, and never shared with any party outside of mandatory legal or regulatory obligations.
Your Controls, Your Choice
You have the right to access, correct, and request deletion of your personal data at any time. 8xk provides clear channels for exercising these rights without unnecessary delay or bureaucracy.
Bangladesh-Focused Data Practices
Our data practices are tailored to the Bangladesh market. Payment data from bKash, Nagad, Rocket, and Upay transactions is handled with the care and confidentiality appropriate to local financial services norms.
Section 1
Data We Collect
8xk collects personal data from players through several channels: during the account registration process, when players make deposits or withdrawals, when players interact with customer support, and automatically through the platform's technical systems as players browse and use the site. The following table summarises the categories of data collected and the primary reason for collection.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, National ID number, passport number | Account registration and KYC identity verification |
| Contact Data | Mobile number, email address, residential address (city/district) | Account communication, support, and transaction notifications |
| Financial Data | bKash/Nagad/Rocket/Upay mobile wallet number, bank account details, transaction history | Processing deposits, withdrawals, and anti-money laundering compliance |
| Gaming Activity Data | Bet history, game sessions, wagering amounts, win/loss records, bonus usage | Account management, responsible gaming monitoring, bonus administration |
| Technical Data | IP address, device type, browser, operating system, session timestamps | Security monitoring, fraud detection, and platform optimisation |
| Communications Data | Live chat transcripts, support email threads, complaint records | Customer service quality assurance and dispute resolution |
| Cookie & Usage Data | Pages visited, click patterns, session duration, referring URLs | Platform improvement, personalisation, and analytics |
We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a minor has provided personal data during registration, that account will be closed and the associated data deleted promptly. Parents or guardians who believe a minor has registered an account should contact support immediately.
Section 2
How We Use Your Data
8xk processes personal data only where a lawful basis exists for doing so. The primary lawful bases we rely upon are: performance of the contract between 8xk and the player (i.e., operating your account), compliance with legal obligations (e.g., anti-money laundering requirements), and legitimate interests (e.g., fraud prevention and platform security). Where we rely on consent — for example, for optional marketing communications — we will obtain that consent separately and explicitly.
The specific purposes for which 8xk uses your personal data include the following:
- Creating and managing your 8xk player account, including verifying your identity at registration and through ongoing KYC processes.
- Processing deposits to your account from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank, and processing withdrawal requests to your registered payment method.
- Providing customer support via live chat and email, including investigating complaints, resolving disputes, and maintaining support records for quality assurance.
- Detecting, investigating, and preventing fraudulent activity, account abuse, money laundering, and any other conduct that violates 8xk's Terms & Conditions or applicable law.
- Monitoring gaming activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling and triggering appropriate interventions.
- Sending transactional notifications, including deposit confirmations, withdrawal status updates, and security alerts related to your account.
- Analysing aggregate, anonymised usage data to improve the platform's performance, design, game selection, and overall player experience.
- Complying with legal and regulatory obligations, including responding to lawful requests from authorities where required by law.
Section 3
Data Sharing & Third Parties
8xk does not sell personal data to any third party. We do not share personal data with advertising networks, data brokers, or any commercial third party for marketing purposes. We may, however, share personal data with a limited set of third-party service providers and authorities in the specific circumstances described below.
- Payment Processors: Financial data necessary to process transactions is shared with the relevant payment provider (e.g., bKash, Nagad, Rocket, Upay, or the relevant bank) solely for the purpose of executing the requested transaction. Payment providers handle this data under their own privacy and security frameworks.
- Identity Verification Partners: Where automated KYC verification tools are used, identity data may be passed to a third-party verification service. These partners are contractually bound to use the data only for the specific verification task and to maintain appropriate data security standards.
- Game Software Providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical data (e.g., a session token or anonymised player identifier) as part of the game-loading process. These providers do not receive personally identifiable information such as your name, mobile number, or financial account details.
- Fraud Prevention Services: Aggregated technical data, including IP addresses and device fingerprints, may be shared with fraud detection partners to identify suspicious activity and protect the integrity of the platform.
- Legal and Regulatory Authorities: 8xk will disclose personal data to law enforcement, financial intelligence units, or other government authorities where required to do so by law, court order, or in response to a lawful regulatory request. We will notify affected players of such disclosures where we are legally permitted to do so.
- Business Transfers: In the event that 8xk undergoes a merger, acquisition, or sale of all or part of its assets, player data may be transferred to the acquiring entity. Players will be notified of any such transfer and given the opportunity to close their accounts if they do not wish their data to be transferred.
All third-party service providers who receive personal data from 8xk are required to maintain adequate data security measures and to use the data only for the specific purpose for which it was shared. 8xk does not permit service providers to use player data for their own commercial purposes.
Section 5
Data Security
Protecting your personal data against unauthorised access, loss, or misuse is one of 8xk's core operational priorities. We implement a multi-layered approach to data security that covers technical, organisational, and procedural safeguards.
- Encryption in Transit: All communications between your device and 8xk servers are encrypted using SSL/TLS protocols. This applies to every page of the platform, including account login, the cashier, game pages, and support chat.
- Encryption at Rest: Sensitive personal data stored on 8xk servers — including identity documents, financial account details, and password hashes — is encrypted at rest using industry-standard encryption algorithms.
- Access Controls: Access to personal data within 8xk's systems is restricted to staff members who require it to perform their job functions. Access is role-based and subject to regular review. All staff with access to personal data undergo data protection training.
- Password Security: Player passwords are stored as salted cryptographic hashes. 8xk staff cannot view your password in plain text. If you forget your password, a reset process will be triggered — your existing password cannot be retrieved.
- Fraud Monitoring: 8xk operates continuous automated monitoring of account activity to detect suspicious login attempts, unusual transaction patterns, and potential account compromise. Suspicious activity triggers an immediate security review.
- Incident Response: In the event of a data security incident that affects player personal data, 8xk will assess the scope and risk of the incident promptly and notify affected players within a reasonable timeframe where required by applicable obligations.
While 8xk takes all reasonable technical and organisational steps to protect your personal data, no digital platform can guarantee absolute security against all possible threats. Players are encouraged to use strong, unique passwords for their 8xk accounts and to contact support immediately if they suspect any unauthorised access.
Section 6
Data Retention
8xk retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention principles apply:
- Active Accounts: Personal data associated with an active player account is retained for the full duration of the account's active status. This includes identity data, contact data, financial data, and gaming activity records.
- Closed Accounts: Following account closure — whether voluntary or initiated by 8xk — personal data is retained for a minimum period of five years to comply with anti-money laundering record-keeping obligations and to enable investigation of any post-closure disputes or regulatory inquiries.
- KYC Documents: Identity documents submitted for KYC verification are retained for a minimum of five years from the date of submission or from the date of account closure, whichever is later.
- Transaction Records: Financial transaction records, including deposit and withdrawal histories, are retained for a minimum of five years in accordance with financial record-keeping requirements.
- Support Communications: Customer support transcripts and complaint records are retained for a minimum of two years from the date of the interaction.
- Analytics Data: Anonymised, aggregated analytics data that cannot be linked back to any individual player may be retained indefinitely for platform improvement purposes.
When personal data is no longer required and its retention period has expired, it is securely deleted or anonymised in a manner that prevents its recovery or reconstruction. Players may request early deletion of their personal data under the rights described in Section 7, subject to any overriding legal obligations that require continued retention.
Section 7
Your Privacy Rights
As an 8xk player, you have a number of rights with respect to the personal data we hold about you. 8xk is committed to facilitating the exercise of these rights in a straightforward and timely manner. To exercise any of the rights described below, contact the support team via live chat or email [email protected] (plain text — not a clickable link), clearly stating the right you wish to exercise and providing sufficient information to allow us to identify your account.
Right of Access
You have the right to request a copy of the personal data 8xk holds about you, along with information about how it is used and with whom it is shared.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for its original purpose, subject to overriding legal obligations requiring retention.
Right to Restriction
You may request that we restrict processing of your personal data in certain circumstances, such as while the accuracy of data is being contested.
Right to Portability
Where processing is based on your consent or on a contract, you may request a copy of your data in a structured, machine-readable format.
Right to Object
You may object to the processing of your personal data for direct marketing purposes at any time. We will action such requests without delay.
8xk will respond to all valid privacy rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it. There is no fee for exercising your rights unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.
Section 8
Policy Updates & Contact
8xk reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, changes in applicable law, or improvements to our platform. When material changes are made — meaning changes that significantly affect player rights or the way we handle personal data — we will publish a notice on the 8xk platform and update the effective date shown at the top of this document.
Players are encouraged to review this Privacy Policy periodically. Continued use of the 8xk platform following a posted update to this policy constitutes acceptance of the revised terms. If you disagree with a material change to this policy, you may close your account by contacting support before the effective date of the change.
If you have any questions about this Privacy Policy, wish to exercise a privacy right, or wish to raise a concern about the way 8xk handles your personal data, please contact the 8xk support team. Our support team is available 24 hours a day, seven days a week, via the live chat feature on the platform. For formal written correspondence, you may write to us at: [email protected] (plain text — not a clickable link).
Have Questions About Your Privacy?
Our support team is available around the clock to answer any questions about how 8xk handles your data. You can also explore our FAQ for quick answers or visit the 8xk Casino to start playing securely.
18+ For players aged 18 and above only. Please gamble responsibly.