8bdt Privacy Policy — Your Data, Our Responsibility

8bdt operates the online betting and gaming platform accessible at https://8bdt.io (the "Platform"). Throughout this Privacy Policy, references to "8bdt", "we", "us", or "our" refer to the entity responsible for operating the Platform and for processing your personal data as described herein.

8bdt is the data controller in respect of the personal information you provide when registering for and using the Platform. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing is carried out lawfully, fairly, and in a transparent manner consistent with the principles set out in this policy.

If you have any questions about how 8bdt handles your personal data, or if you wish to exercise any of your rights described in Section 9, please contact our support team at the details provided in Section 14.

8bdt collects personal data across several categories, each serving a specific and necessary function. The full breakdown is presented in the data table above. In summary, the categories are:

• Identity Data: Information that confirms who you are, including your full legal name, date of birth, and government-issued identification documents such as your National ID card or passport.
• Contact Data: Your registered mobile number, email address, and residential address in Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, or other cities).
• Financial Data: The mobile wallet number(s) linked to your account (bKash, Nagad, Rocket, or Upay), together with your complete deposit and withdrawal transaction history on the Platform.
• Technical Data: Automatically collected information about your device and connection, including your IP address, device type, operating system, browser version, and session timestamps.
• Usage Data: Records of your activity on the Platform, including the games you play, the bets you place, the cricket or sports markets you browse, the pages you visit, and how frequently you log in.
• Marketing Data: Your stated communication preferences and records of consent where you have opted in to receive promotional offers or bonus notifications from 8bdt.
• Document Data: Scanned copies of identity and address documents, and where required, selfie photographs submitted as part of the KYC verification process.

We do not collect or store full payment card numbers, CVV codes, or banking passwords. Payment authentication is handled entirely by the relevant mobile wallet provider (bKash, Nagad, Rocket, or Upay) through their own secure interfaces.

8bdt collects personal data through the following primary channels:

• Direct interactions: Information you provide when registering an account, completing the KYC verification process, making a deposit or withdrawal request, submitting a support ticket, or communicating with our team via email.
• Automated technologies: Data collected automatically as you navigate the Platform, including through cookies, server logs, and similar tracking technologies. See Section 6 for full details of our cookie practices.
• Third-party sources: Identity verification data may be cross-referenced with information provided by our payment processing partners (bKash, Nagad, Rocket, Upay) to confirm transaction authenticity and ownership of payment methods.
• Fraud prevention services: In limited circumstances, we may supplement the data you provide with information from third-party fraud detection or risk assessment services to protect the integrity of the Platform.

We do not purchase data lists or acquire personal data from data brokers for the purpose of marketing to individuals who have not previously interacted with the 8bdt Platform.

8bdt uses the personal data we collect for the following purposes. Where the lawful basis for processing is consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

• Account administration: Creating and maintaining your player account, processing your login credentials, and managing account settings and preferences.
• Identity and age verification: Fulfilling our obligation to confirm that all players are aged 21 or above and that account details are accurate and genuine.
• Payment processing: Facilitating deposits into your account balance and processing withdrawal requests to your registered bKash, Nagad, Rocket, or Upay wallet.
• Fraud and security monitoring: Detecting unusual account activity, preventing unauthorised access, identifying multi-accounting behaviour, and protecting the Platform against financial crime.
• Responsible gaming: Monitoring gameplay patterns to identify indicators of problem gambling, administering self-exclusion requests, and enforcing deposit limits and session time tools.
• Customer support: Investigating and responding to account queries, transaction disputes, technical issues, and formal complaints in English.
• Platform improvement: Analysing aggregated and anonymised usage data to understand player behaviour, identify technical issues, and improve the overall platform experience.
• Marketing communications: Where you have given explicit consent, sending you information about relevant promotions, bonus offers, and platform news. You may opt out at any time.
• Legal compliance: Meeting our obligations under applicable laws, including anti-money laundering (AML) requirements, and responding to lawful requests from regulatory or law enforcement authorities.

8bdt may share your personal data with the following categories of recipients, solely to the extent necessary for the stated purpose:

• Payment service providers: bKash, Nagad, Rocket, and Upay receive the minimum data necessary to authenticate and complete your deposit and withdrawal transactions. These providers operate under their own privacy policies and are independent data controllers for the purposes of payment processing.
• Identity verification providers: Third-party KYC service providers may process your identity documents and selfie photographs to assist us in confirming your identity and age. These providers are contractually bound to process your data only on our instructions and in accordance with this policy.
• Fraud prevention and risk services: We may share technical and transactional data (such as IP addresses and transaction patterns) with specialist fraud detection partners to protect the Platform and its players from financial crime.
• Legal and regulatory authorities: Where required by applicable law or a valid order from a competent authority, 8bdt may disclose personal data to law enforcement agencies, regulators, or other government bodies. We will notify you of such a disclosure where permitted by law.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of 8bdt's business assets, your personal data may be transferred to the successor entity. You will be notified in advance of any such transfer that materially affects the processing of your data.

All third-party service providers who receive personal data from 8bdt are subject to appropriate contractual obligations requiring them to maintain data confidentiality and to implement technical and organisational security measures consistent with the standards described in this policy.

8bdt uses cookies and similar technologies (including local storage and session tokens) to ensure the Platform functions correctly, to keep your session secure, and to gather anonymised analytics about how players use the Platform. The following cookie categories are in use:

• Strictly necessary cookies: These cookies are essential for the Platform to operate. They manage your login session, maintain your account security token, and remember your language and currency display preferences. These cookies cannot be disabled without impairing Platform functionality.
• Performance and analytics cookies: These cookies collect anonymised data about how players navigate the Platform — for example, which pages are visited most frequently, how long sessions last, and where technical errors occur. This data is used exclusively to improve the Platform.
• Functionality cookies: These cookies remember personalisation choices you make on the Platform, such as your preferred game categories or responsible gaming settings, so that you do not need to reset them each time you log in.

8bdt does not use advertising cookies, retargeting cookies, or any cookie technology that tracks your activity across third-party websites. We do not integrate third-party advertising networks into the Platform.

You may control cookie settings through your browser's built-in tools. Please note that disabling strictly necessary cookies will prevent you from logging in and using the Platform. Disabling performance or functionality cookies will not prevent access but may reduce the quality of your experience.

8bdt takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect it against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• TLS/SSL encryption for all data in transit between your browser or app and our servers.
• Encryption at rest for sensitive data categories, including identity documents and financial records.
• Access controls ensuring that only authorised 8bdt personnel can access personal data, and only to the extent required by their specific role.
• Regular internal security reviews and vulnerability assessments of Platform infrastructure.
• Incident response procedures to detect, contain, and report data security breaches within appropriate timeframes.
• Staff training on data protection obligations and secure data handling practices.

While 8bdt implements robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account password and for ensuring that you log out of your account when using a shared device. 8bdt will never ask you to disclose your password via email, chat, phone, or any other channel.

If you suspect that your account has been accessed without your authorisation, or if you become aware of a potential security issue, please contact our support team immediately at [email protected].

8bdt retains your personal data for as long as your account remains active, and for such further period as is necessary to fulfil the purposes described in this policy or to comply with applicable legal and regulatory obligations. Specific retention periods by data category are as follows:

• Account and identity data: Retained for the duration of your account plus a minimum of five years following account closure, in accordance with standard anti-money laundering record-keeping requirements.
• Transaction data: Retained for a minimum of five years from the date of each transaction, to support dispute resolution and compliance obligations.
• KYC documents: Retained for the duration of your account and for five years following account closure, or longer if required by applicable law.
• Technical and usage data: Retained for up to 24 months from the date of collection, after which it is aggregated and anonymised for analytical purposes.
• Marketing preferences: Retained until you withdraw consent or close your account, whichever occurs first.
• Support correspondence: Retained for three years from the date of the final communication in each support case.

At the end of the applicable retention period, personal data is securely deleted or anonymised in accordance with 8bdt's internal data destruction procedures. Where anonymisation is used, the resulting data no longer constitutes personal data and may be retained indefinitely for aggregate analytics.

As a player on the 8bdt Platform, you hold the following rights in respect of your personal data:

• Right of access: You may request a copy of the personal data 8bdt holds about you, together with information about how it is being processed.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you. Where practicable, you can update basic contact details directly in your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (if consent is the lawful basis), or where you object to processing on the basis of legitimate interests. This right is subject to our legal retention obligations, which may require us to retain certain data even after an account is closed.
• Right to restriction: You may request that 8bdt restricts the processing of your personal data in certain circumstances, for example while the accuracy of the data is being contested.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing based on legitimate interests at any time. You may also object to processing for direct marketing purposes, including profiling related to direct marketing, at any time — we will stop immediately upon receipt of such a request.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before the withdrawal.

To exercise any of these rights, contact [email protected]. Please note that these rights are subject to certain limitations and exemptions under applicable law, and 8bdt may be required to retain certain data despite a valid erasure request where retention is mandated by legal obligation.

If 8bdt discovers or is notified that personal data has been collected from an individual under the age of 21, we will promptly close the associated account, delete all personal data belonging to that individual, and return any deposited funds to the originating payment method where technically possible.

If you are a parent or guardian and you believe that a person under 21 in your care has registered an account or submitted personal data to 8bdt, please contact our support team immediately at [email protected]. We will investigate and act without delay.

If you believe a minor may have accessed your own account, please change your password immediately and contact our support team to request a full account security review.

8bdt may send you promotional communications — such as bonus offer notifications, seasonal promotions (for example, Eid, Pohela Boishakh, or BPL season offers), and platform news — where you have provided explicit consent to receive such communications.

Consent to receive marketing communications is entirely voluntary and is separate from the consent required to operate your account. You may withdraw consent to marketing at any time by:

• Adjusting your communication preferences in your account settings.
• Replying to any marketing message with an unsubscribe request.
• Contacting our support team at [email protected] and requesting removal from all marketing lists.

Withdrawing consent to marketing communications will not affect your ability to use the Platform, access your account balance, or receive transactional and account-management messages (such as deposit confirmations, withdrawal notifications, and security alerts). These operational communications are necessary for the administration of your account and will continue regardless of your marketing preferences.

8bdt does not engage in unsolicited bulk messaging, SMS spamming, or any other form of aggressive direct marketing. All promotional communications are clearly identified as originating from 8bdt and include a clear opt-out mechanism.

The 8bdt Platform does not contain links to third-party websites, applications, or services that are outside 8bdt's control. All navigation within the Platform directs you to pages and features operated solely by 8bdt.

Where the Platform integrates third-party payment interfaces — such as the bKash, Nagad, or Rocket payment screens — you will be redirected to that provider's own secure environment to complete authentication. At the point of redirection, that provider's privacy policy and terms of service apply. 8bdt has no visibility into or control over the data practices of third-party payment providers once you are within their authentication environment.

We recommend that you review the privacy policies of bKash, Nagad, Rocket, and any other payment method provider you use in connection with your 8bdt account, so that you understand how your payment data is handled by those independent services.

8bdt reserves the right to update or amend this Privacy Policy at any time. When we make material changes to the policy, we will notify registered players via their registered email address and display a prominent notice on the Platform for a period of at least 14 days prior to the changes taking effect.

Minor or non-material changes — such as corrections of typographical errors, clarifications of existing practices, or updates to contact details — may be made without advance notice, though the updated policy will always be available on this page with a revised "Last updated" date.

Your continued use of the Platform after a revised Privacy Policy has taken effect constitutes your acknowledgement of and agreement to the updated terms. If you do not agree with any changes to the policy, you should cease using the Platform and contact [email protected] to request account closure.

We encourage you to review this Privacy Policy periodically to stay informed about how 8bdt collects, uses, and protects your personal data. The current version is always accessible at https://8bdt.io/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 8bdt processes your personal data, please contact our support team using the details below. All privacy-related correspondence should be submitted in English and must include your registered username and the mobile number associated with your account so that we can identify your records accurately.

We treat all privacy-related communications with the highest priority and are committed to resolving your concerns promptly, fairly, and transparently. Where a request requires additional verification of your identity before we can act, our team will inform you of the specific information required within 5 business days of receiving your initial message.