8mbts Privacy Policy

1. Information We Collect

8mbts collects personal data from players through a number of channels: directly when you register an account or contact support, automatically when you use the platform, and occasionally from third-party verification services. The categories of data we collect are set out below.

1.1 Account Registration Data

When you create an 8mbts account, we collect:

• Full legal name
• Date of birth (to verify you are 18 or older)
• Email address
• Mobile phone number (used for bKash, Nagad, and Rocket transaction verification)
• Preferred username and encrypted password
• City of residence (e.g., Dhaka, Chittagong, Sylhet, Khulna)

1.2 Identity Verification (KYC) Data

To comply with our anti-money laundering (AML) obligations and to protect the integrity of the platform, 8mbts may request the following documents:

• Government-issued photo identification (National ID card, passport, or driving licence)
• Proof of address (utility bill, bank statement, or official correspondence dated within 90 days)
• Proof of the payment method used (e.g., a screenshot of your bKash or Nagad wallet showing your registered mobile number)

1.3 Financial Transaction Data

When you make a deposit or request a withdrawal, we record:

• Transaction amount in Bangladeshi Taka (৳)
• Payment method used (bKash, Nagad, Rocket, Upay, bank transfer, or card)
• Transaction reference numbers provided by the payment network
• Date, time, and IP address associated with the transaction

1.4 Gameplay and Activity Data

As you use the 8mbts platform, we automatically collect records of your gaming activity. This includes game sessions played, bet amounts, game outcomes, bonus usage, and session duration. This data is used to personalise your experience, detect problem gambling patterns, and ensure fair play compliance.

1.5 Technical and Device Data

We collect standard technical information including:

• IP address and approximate geolocation (country and city level)
• Browser type and version
• Operating system and device type (desktop or mobile)
• Pages visited on the 8mbts platform and time spent on each page
• Referral source (if you arrived at 8mbts via a link)

1.6 Communications Data

When you contact the 8mbts support team — whether via live chat, email, or any other channel — we retain a record of that correspondence, including the content of the messages and any attachments you provide.

2. How We Use Your Data

8mbts uses the personal data we collect for the following purposes. In each case the purpose is connected to the legitimate operation of the platform and the delivery of a safe, compliant gaming experience to our Bangladeshi players.

Purpose	Data Used
Account creation and authentication	Registration data, device data, IP address
Age and identity verification (18+)	Date of birth, KYC documents
Payment processing	Financial transaction data, payment method details
Fraud and AML monitoring	Transaction data, IP address, gameplay patterns
Responsible gaming monitoring	Gameplay data, session duration, deposit frequency
Customer support	Communications data, account data
Promotional communications (with consent)	Email address, mobile number, gameplay preferences
Platform analytics and improvement	Technical data, gameplay data, page interaction data
Legal and regulatory compliance	All categories as required by applicable law

8mbts does not use automated decision-making processes that produce significant legal effects on players without human review. Where automated systems flag an account for review (for example, in an AML or responsible gaming context), a qualified member of our compliance team reviews the case before any consequential action is taken.

3. Legal Basis for Processing

8mbts processes personal data on the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing your account registration data, payment information, and gameplay data is necessary to deliver the services described in our Terms & Conditions. Without this processing, we cannot operate your account.
• Legal obligation: We are required by law to verify player identities, maintain transaction records, and report certain activity to relevant authorities. KYC and AML-related data processing falls under this basis.
• Legitimate interests: We process technical and analytics data to maintain the security of the platform, detect fraud, prevent multi-accounting, and improve the overall player experience. These interests do not override your fundamental privacy rights.
• Consent: Where we send you promotional communications (bonus offers, tournament notifications, seasonal promotions tied to events like Eid or Pohela Boishakh), we do so only on the basis of your freely given, specific consent. You may withdraw this consent at any time without affecting your ability to use 8mbts.

4. Data Sharing & Disclosure

8mbts does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the specific circumstances described below, and only to the minimum extent necessary.

4.1 Payment Partners

To process deposits and withdrawals, we transmit the necessary transaction data to our payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard. Each of these partners operates under its own privacy policy and is independently responsible for data it processes on its own systems.

4.2 Game Studio Partners

Our game studio partners — including Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, Ezugi, and Hacksaw Gaming — may receive a player session token and anonymised gameplay data for the purpose of delivering the game experience and calculating RTP outcomes. These partners do not receive your full name, payment information, or KYC documents.

4.3 Identity Verification Services

We may engage third-party identity verification providers to assist with KYC processing. These providers are contractually bound to process the data they receive solely for the purpose of identity verification on our behalf and in accordance with applicable data protection standards.

4.4 Legal and Regulatory Disclosure

8mbts may be required to disclose personal data in response to a lawful request from a competent authority, court order, or regulatory body. In such cases, we will disclose only the data specifically requested and will inform the affected player where legally permitted to do so.

4.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of 8mbts's business assets, player data may be transferred to the acquiring entity as part of that transaction. Affected players will be notified of any such transfer and of any resulting changes to this Privacy Policy.

5. Cookies & Tracking Technologies

8mbts uses cookies and similar tracking technologies to keep the platform functioning correctly, to remember your preferences, and to understand how players interact with our pages. The following categories of cookies are used:

Cookie Type	Purpose	Can Be Disabled?
Strictly Necessary	Session management, login authentication, security tokens. Required for the platform to function.	No — disabling these breaks platform functionality
Functional	Remembering your preferred language, display settings, and last-visited game category.	Yes — via browser settings
Analytical	Aggregated page view and interaction statistics used to improve the platform. Data is anonymised before analysis.	Yes — via browser settings
Marketing / Retargeting	Used only if you have given explicit consent to receive personalised promotions. Not used by default.	Yes — withdraw consent via account settings

You can manage or delete cookies at any time through your browser's settings panel. Please be aware that disabling functional or analytical cookies may affect your experience on the 8mbts platform. For guidance on managing cookies in popular browsers used by Bangladeshi players (Chrome for Android, Samsung Internet, Firefox), refer to your browser's own help documentation.

6. Data Retention

8mbts retains personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, and in compliance with any applicable legal retention obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the lifetime of the account and for a period of five (5) years after account closure, to meet anti-money laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by applicable financial record-keeping regulations.
• KYC verification documents: Retained for five (5) years from the date of submission or from the date of account closure, whichever is later.
• Customer support communications: Retained for two (2) years from the date of the last interaction in a support thread, unless the thread is linked to an ongoing dispute or legal matter.
• Technical and analytics data: Aggregated and anonymised after thirteen (13) months. Raw log data is deleted after 90 days.
• Marketing consent records: Retained for as long as you maintain your consent, plus two (2) years after withdrawal to demonstrate compliance.

When data is no longer required under the above retention schedules, it is securely deleted or irreversibly anonymised so that it can no longer be linked to an identifiable individual.

7. Your Data Rights

As a player on the 8mbts platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our data team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving your request.

• Right of Access: You may request a copy of all personal data that 8mbts holds about you, including account data, transaction history, and gameplay records.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to processing and there is no overriding legitimate interest. This right is subject to our legal retention obligations — we cannot delete data we are legally required to keep.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: You may request that we provide your personal data in a structured, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including direct marketing. Where you object to direct marketing, we will cease that processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal.

8. Security Measures

8mbts takes the security of player data seriously and maintains a layered security architecture to protect personal information from unauthorised access, disclosure, alteration, or destruction. Our key security controls include:

• SSL/TLS Encryption: All data transmitted between your browser or mobile device and the 8mbts servers is encrypted using TLS 1.2 or higher, ensuring that data in transit cannot be intercepted by third parties.
• Encryption at Rest: Sensitive personal data, including KYC documents and financial records, is stored in encrypted form on our servers. Encryption keys are managed separately from the data they protect.
• Access Controls: Access to player data within 8mbts is granted on a strict need-to-know basis. Staff members with access to personal data are trained in data protection obligations and subject to confidentiality agreements.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their 8mbts account to provide an additional layer of protection against unauthorised login attempts.
• Intrusion Detection: Our infrastructure is monitored continuously for anomalous activity. Automated alerts trigger immediate review by our security operations team.
• Regular Security Testing: 8mbts conducts periodic security assessments to identify and remediate potential vulnerabilities before they can be exploited.

Despite these measures, no internet-connected system can be guaranteed 100% secure. In the event of a data breach that poses a risk to your personal data, 8mbts will notify affected players as soon as reasonably practicable and take all necessary steps to contain the breach and mitigate its impact.

9. Third-Party Services

The 8mbts platform integrates with a number of third-party service providers to deliver a full-featured gaming experience. Each of these providers operates under its own privacy policy, and 8mbts encourages players to review those policies for complete transparency. Key third-party integrations include:

• Game Studios: Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, Ezugi, and Hacksaw Gaming deliver games embedded within the 8mbts platform. These studios may set their own session cookies and collect anonymised gameplay telemetry as necessary to operate their games.
• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard process financial transactions. These providers are governed by their own privacy frameworks and regulatory obligations under Bangladeshi financial law.
• Analytics Providers: 8mbts may use privacy-respecting analytics tools to understand aggregated user behaviour on the platform. These tools are configured to anonymise IP addresses and do not allow the analytics provider to identify individual players.
• Customer Support Platform: Our live chat and ticketing system is operated by a third-party support platform. Communications conducted through this channel are stored on that provider's servers and subject to its own data retention practices, in addition to ours.

8mbts is not responsible for the privacy practices of third-party providers once data leaves the 8mbts platform in the course of a legitimate transaction or integration. We select our partners carefully and require contractual commitments to data protection standards wherever commercially feasible.

10. Policy Updates & Contact

10.1 Changes to This Policy

8mbts reviews this Privacy Policy regularly and may update it to reflect changes in the platform, our data processing practices, or applicable law. When material changes are made, we will notify registered players via the email address on their account and display a prominent notice on the platform for a minimum of 14 days before the changes take effect. The "Last updated" date at the top of this page will always reflect the most recent revision.

Continued use of the 8mbts platform after the effective date of a revised Privacy Policy constitutes acceptance of the updated terms. If you do not agree with a material change to this Policy, you may close your account before the change takes effect, and any real-money balance will be returned to your registered payment method.

10.2 Contacting 8mbts About Privacy

If you have any question about this Privacy Policy, wish to exercise a data right, or wish to make a complaint about how 8mbts has handled your personal data, please contact us using the following details:

• Data Enquiries Email: [email protected] (subject line: "Privacy Enquiry" or "Data Rights Request")
• Response Time: We aim to respond to all privacy-related enquiries within 5 business days and to fulfil data rights requests within 30 calendar days.
• Language: All privacy correspondence is handled in English, consistent with the operating language of the 8mbts platform.