Privacy Policy — How 8ffb Handles Your Data

1 Data We Collect

8ffb collects personal data through several channels: directly from you when you register an account or contact support; automatically when you use the platform; and from third-party payment providers when you make a deposit or withdrawal. The categories of data we collect are set out below.

1.1 Registration Data

When you create a 8ffb account, we collect the following information:

• Full legal name as it appears on your government-issued identity document
• Date of birth (used to verify that you meet the 18+ age requirement)
• Residential address in Bangladesh (city, district, and postal code)
• Email address (used for account communications and verification)
• Mobile number associated with a Bangladeshi network operator (bKash, Nagad, Grameenphone, Robi, Banglalink, Teletalk)
• Username and encrypted password (passwords are never stored in plain text)

1.2 Identity Verification (KYC) Data

To comply with Know Your Customer requirements and to process withdrawals, 8ffb may request copies of the following documents at any stage:

• National Identity Card (NID) — front and back
• Valid passport (biographical data page)
• Birth certificate issued by a recognised Bangladeshi authority
• Proof of address (utility bill, bank statement, or official correspondence dated within 90 days)
• Source-of-funds documentation where transactions exceed designated thresholds

Document images are used solely for identity verification purposes and are stored in an encrypted document management system with access restricted to authorised compliance personnel.

1.3 Transaction Data

Every deposit and withdrawal processed through your 8ffb account generates a transaction record that includes the amount in BDT, the payment method used (bKash, Nagad, Rocket, Upay, or bank transfer), the timestamp in Bangladesh Standard Time (UTC+6), and the transaction reference number provided by the payment processor. This data is retained for audit, anti-money-laundering monitoring, and dispute resolution purposes.

1.4 Gameplay and Betting Data

8ffb records your wagering activity — including bets placed, games played, outcomes, and session durations — for the purposes of account management, responsible gaming monitoring, bonus wagering tracking, and game dispute resolution. This data is associated with your account and may be reviewed by our compliance team as part of routine monitoring or in response to a specific investigation.

1.5 Technical and Device Data

When you access the 8ffb platform, our servers automatically log certain technical information:

• IP address and approximate geographic location derived from it
• Device type, operating system, and browser version
• Pages visited, time spent on each page, and navigation path through the site
• Date, time, and duration of each session
• Referral source (if you arrived via an internal link)

This technical data is used in aggregate for site performance monitoring, fraud detection, and security purposes. It is not used to build individual advertising profiles.

2 How We Use Your Data

8ffb processes your personal data only for the specific, legitimate purposes described in this section. We do not use your data for purposes incompatible with those for which it was originally collected without first obtaining your explicit consent or establishing a separate lawful basis for processing.

2.1 Marketing Communications

8ffb may send you promotional emails or SMS notifications about bonuses, seasonal offers (such as Eid, BPL season, or IPL tournament promotions), and platform updates — but only if you have explicitly opted in to receive such communications during registration or via your account settings. You may withdraw your consent at any time by updating your notification preferences in the account settings panel or by contacting our support team. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

2.2 Automated Decision-Making

8ffb uses automated systems to flag unusual transaction patterns, detect potential fraud, and identify accounts that may benefit from responsible gaming interventions (such as deposit limit suggestions or cooling-off period offers). Where an automated decision results in a material action affecting your account — such as a temporary withdrawal hold pending review — you have the right to request human review of that decision. Contact our support team to exercise this right.

3 Data Sharing & Third Parties

8ffb does not sell, rent, or trade your personal data to any third party for commercial purposes. We share data externally only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

3.1 Payment Processors

To process deposits and withdrawals, 8ffb shares the minimum necessary transaction data with the relevant payment service providers — including bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, and participating bank partners such as BRAC Bank, City Bank, Islami Bank, and Sonali Bank. These providers receive only the data required to execute and record the specific transaction. They are not permitted to use your data for any other purpose.

3.2 Game Studio Providers

When you play games powered by third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, a session token and anonymised player identifier are shared with the relevant studio to initialise and manage your game session. No directly identifying personal data (such as your full name or NID number) is shared with game studios.

3.3 Legal and Regulatory Disclosure

8ffb may disclose personal data to law enforcement agencies, financial intelligence units, or other government bodies where required to do so by applicable law, court order, or regulatory direction. Where legally permissible, we will notify you of such a disclosure request before complying with it.

3.4 Service Providers

8ffb engages a small number of trusted third-party service providers to assist with platform operations — including cloud hosting infrastructure, email delivery services, and security monitoring tools. These providers act as data processors on 8ffb's behalf and are contractually bound to process your data only in accordance with 8ffb's documented instructions and to maintain appropriate security standards.

4 Cookies & Tracking Technologies

8ffb uses cookies — small text files stored on your device by your browser — and similar technologies such as local storage to provide a functional, personalised, and secure experience on the platform. This section explains what cookies we use and why.

4.1 Strictly Necessary Cookies

These cookies are essential for the operation of the 8ffb platform and cannot be disabled without breaking core functionality. They include session authentication cookies (which keep you logged in as you navigate between pages), CSRF protection tokens (which prevent cross-site request forgery attacks), and load-balancing cookies (which direct your requests to the appropriate server). No personal profiling data is collected via strictly necessary cookies.

4.2 Preference Cookies

Preference cookies remember choices you make on the site — such as your preferred display language (English), your chosen currency view (BDT), and any accessibility settings you have configured. These cookies improve your experience by ensuring your preferences are applied consistently across sessions without requiring you to reconfigure them on every visit.

4.3 Analytics Cookies

8ffb uses privacy-respecting analytics cookies to collect aggregate, anonymised data about how players navigate the platform — including which pages are visited most frequently, which game categories attract the most interest, and where users typically exit the site. This data is used internally to improve site structure and content. Raw individual-level data is not retained beyond 90 days, and all analytics reporting uses aggregated, anonymised datasets.

4.4 Cookie Management

You can control and delete cookies at any time through your browser settings. Most modern browsers allow you to block all cookies, accept only first-party cookies, or receive a notification before any cookie is stored. Please note that disabling strictly necessary cookies will prevent you from logging in to your 8ffb account and using core platform features. Instructions for managing cookies in popular browsers are available through the support documentation of your chosen browser provider.

5 Data Retention & Storage

8ffb retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The retention periods applied to the main categories of personal data are summarised below.

5.1 Data Storage Location

All personal data collected by 8ffb is stored on servers located in secure data centres. Data is not transferred to countries with materially weaker data protection standards without appropriate contractual safeguards in place. Where cross-border data transfers are necessary for operational purposes — for example, to a game studio's session management infrastructure — these transfers are governed by data processing agreements that require the recipient to maintain security standards equivalent to those applied by 8ffb.

5.2 Secure Deletion

Upon expiry of the applicable retention period, personal data is permanently deleted from 8ffb's active systems using industry-standard secure deletion methods. Backups containing expired data are purged on a rolling schedule. Once data has been securely deleted, it cannot be recovered or restored.

6 Your Privacy Rights

As a player registered on the 8ffb platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team via on-site live chat and state clearly which right you wish to invoke. We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days.

6.1 Identity Verification for Data Requests

To protect your privacy, 8ffb requires identity verification before fulfilling any data access, rectification, or erasure request. You will be asked to confirm your registered email address and may be asked to provide additional verification consistent with the KYC process. This step ensures that your data is not disclosed to or deleted at the request of an unauthorised third party.

6.2 Limitations on the Right to Erasure

The right to erasure (sometimes called the "right to be forgotten") is not absolute. 8ffb may decline an erasure request where retaining the data is required to comply with a legal obligation (such as financial record-keeping requirements), to establish, exercise, or defend a legal claim, or to enforce the terms of a self-exclusion that the player themselves applied for. In such cases, we will explain the specific retention basis in writing.

7 Data Security Measures

8ffb applies a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. The following technical and organisational measures are in place at all times.

7.1 Technical Security Controls

• TLS/SSL Encryption: All data in transit between your browser and 8ffb servers is encrypted using TLS 1.2 or higher. The platform enforces HTTPS site-wide; plain HTTP connections are automatically redirected.
• Password Hashing: Account passwords are never stored in recoverable plain text. They are processed through a strong one-way hashing algorithm with per-account salting before being written to the database.
• Database Encryption: Personal data and KYC documents stored in 8ffb's database systems are encrypted at rest using AES-256 encryption.
• Access Controls: Access to production systems and personal data is restricted to authorised 8ffb personnel on a strict need-to-know basis. All access events are logged and reviewed periodically.
• Intrusion Detection: 8ffb's hosting infrastructure is monitored around the clock by automated intrusion detection systems that alert the security team to anomalous access patterns in real time.
• Session Management: Player sessions are protected by time-out controls and CSRF tokens. Sessions are invalidated immediately upon logout.

7.2 Organisational Security Measures

In addition to technical controls, 8ffb maintains organisational security practices including regular internal security reviews, defined incident response procedures, and contractual security obligations on all third-party service providers who handle personal data on 8ffb's behalf.

7.3 Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, 8ffb will notify affected players as promptly as possible via the registered email address on their account. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps 8ffb has taken or proposes to take to address it.

8 Policy Updates & Contact

8ffb reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. The effective date at the top of this document indicates when the current version came into force. We will notify registered players of any material changes to this Privacy Policy via a notice displayed prominently on the Site for a minimum of 14 days before the changes take effect.

8.1 Continued Use Constitutes Acceptance

By continuing to use the 8ffb platform after a revised Privacy Policy takes effect, you confirm your acceptance of the updated terms. If you do not agree with any change to this Privacy Policy, you should stop using the platform and contact our support team to close your account. Upon account closure, your data will be handled in accordance with the retention periods described in Section 5.

8.2 Relationship with Other Policies

This Privacy Policy should be read alongside the Terms & Conditions and the Responsible Gaming policy, both of which contain provisions that are relevant to how your account data is used. In the event of any conflict between this Privacy Policy and another document on the 8ffb platform, this Privacy Policy shall govern in respect of all personal data matters.

8.3 Contact for Privacy Matters

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the 8ffb support team via on-site live chat (available 24/7 in English, operating on Bangladesh Standard Time UTC+6). You may also reach us by email — our address is displayed in the footer of every page on this site as plain text. We aim to respond to all privacy-related enquiries within 5 business days.