8fbd Privacy Policy —
How We Protect Your Personal Data

8fbd (referred to throughout this Privacy Policy as "8fbd", "the Platform", "we", "us", or "our") is an online casino and sports betting platform accessible at 8fbd.io. The platform is operated for and directed at adult players aged 21 and above located in Bangladesh.

For the purposes of this Privacy Policy, 8fbd acts as the data controller in respect of the personal data collected from players during registration, account management, and ongoing use of the platform. This means 8fbd determines the purposes for which your personal data is collected and the manner in which it is processed.

If you have any questions about this Privacy Policy, how 8fbd handles your data, or how to exercise your data rights, you may contact us at any time at [email protected] or via the 24/7 live chat facility on the platform.

8fbd collects personal data in the following categories. We collect only the data that is necessary for the specific purpose identified — the principle of data minimisation is central to how 8fbd operates.

2.1 Registration Data

• Full legal name
• Date of birth (used to verify the 21+ age requirement)
• Residential address (city, district, and postal code within Bangladesh)
• Email address
• Mobile phone number (used for account verification and security alerts)
• Chosen username and encrypted password

2.2 Identity Verification (KYC) Data

• Copy of government-issued photo ID (National ID card, passport, or driving licence)
• Proof of address document (where required)
• Selfie or live verification image (where required by the KYC process)
• Payment method ownership confirmation (e.g., screenshot confirming bKash or Nagad wallet registration in your name)

2.3 Transaction Data

• Deposit amounts, dates, and payment method references (bKash, Nagad, Rocket, Upay, bank transfer)
• Withdrawal requests, amounts, dates, and destination payment method references
• Account balance history
• Bonus credit and wagering progress records

2.4 Gaming Activity Data

• Games played, bet amounts, win/loss outcomes, and session duration
• Sports betting selections, stake amounts, and bet outcomes
• Responsible gaming tool usage (deposit limits set, cooling-off periods activated, self-exclusion requests)

2.5 Technical and Device Data

• IP address at the time of registration and each login
• Device type, operating system, and browser type
• Session timestamps and login/logout records
• Geolocation data (country and city level, derived from IP address — 8fbd does not access GPS-level location data)

2.6 Communications Data

• Content of messages sent to 8fbd customer support via live chat or email
• Records of promotional communications sent to you and your engagement with them (open/click data)
• Records of responsible gaming communications and any self-exclusion requests

8fbd collects personal data through the following channels and methods:

• Directly from you: During account registration, when you complete KYC verification, when you contact customer support, when you set responsible gaming limits, and when you respond to promotional communications.
• Automatically during platform use: Through server logs, session tracking, and cookies (see Section 7) that record your IP address, device information, pages visited, games played, and betting activity each time you access the 8fbd platform.
• From payment service providers: When you make a deposit or request a withdrawal, 8fbd receives transaction confirmation data from bKash, Nagad, Rocket, Upay, and bank partners. This data is limited to transaction reference numbers, amounts, and timestamps — 8fbd does not receive your full mobile banking PIN or bank account credentials.
• From KYC verification partners: Where 8fbd uses a third-party identity verification service to process your KYC documents, that service returns a verification result and confidence score to 8fbd. The underlying document images are retained by 8fbd for the duration required by our data retention policy (see Section 6).
• From game providers: Game providers such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi may provide 8fbd with aggregated gameplay data and session records for the purposes of game integrity monitoring and responsible gaming analysis.

8fbd processes your personal data only for legitimate, defined purposes. The table below sets out each processing purpose, the data categories involved, and the legal basis on which 8fbd relies to process that data.

8fbd does not sell, rent, or trade your personal data. We share personal data only with the categories of third-party service providers listed below, and only to the extent necessary for the specific purpose identified. All third-party partners are contractually required to process your data only on 8fbd's instructions and to maintain appropriate security standards.

• Payment processors: bKash, Nagad, Dutch-Bangla Bank (Rocket), Upay, City Bank, BRAC Bank, Islami Bank, and Sonali Bank receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are regulated financial institutions.
• KYC and identity verification partners: Third-party KYC providers receive your identity documents and registration data solely for the purpose of verifying your identity and age. Verification results are returned to 8fbd; underlying documents may be retained by the KYC provider in accordance with their own data retention obligations.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other game providers receive your player session token and relevant gameplay data to deliver their games to you. Game providers do not receive your full personal profile, financial account details, or KYC documents.
• Platform hosting and infrastructure: Cloud hosting and server infrastructure providers process technical and device data as part of operating the 8fbd platform. These providers act as data processors under strict contractual data processing agreements.
• Analytics providers: Anonymised or aggregated platform usage data may be shared with analytics providers to help 8fbd understand player behaviour and improve the platform. No individually identifiable personal data is shared for analytics purposes.
• Law enforcement and regulatory authorities: 8fbd may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory authorities where we are legally required to do so — for example, in connection with anti-money laundering investigations or court orders. 8fbd will notify affected players of such disclosures where legally permitted to do so.

All data shared with third parties is limited to what is strictly necessary for the purpose. 8fbd does not share your personal data with third parties for their own independent marketing or commercial purposes under any circumstances.

8fbd retains personal data for defined periods based on the purpose for which it was collected and applicable legal retention requirements. The following table summarises our standard retention periods by data category.

When a retention period expires, 8fbd will securely delete or anonymise the relevant data. Anonymised data — from which all identifying information has been irreversibly removed — may be retained indefinitely for statistical and platform improvement purposes without further notice, as it no longer constitutes personal data.

8fbd uses cookies and similar tracking technologies to operate the platform, remember your preferences, and understand how players use the site. Cookies are small text files placed on your device by your browser when you visit the 8fbd platform. They do not contain executable code and cannot access other files on your device.

7.1 Types of Cookies Used by 8fbd

7.2 What 8fbd Does NOT Use

• Third-party advertising or retargeting cookies (e.g., Google Ads, Facebook Pixel)
• Social media tracking pixels or widgets
• Cross-site tracking technologies that follow you outside the 8fbd platform
• Fingerprinting scripts designed to identify you without cookies

7.3 Managing Cookies

You can manage or delete cookies at any time through your browser's settings. Most modern browsers (Chrome, Firefox, Samsung Internet, Opera Mini) allow you to view, block, or delete individual cookies. Please note that disabling essential or security cookies will impair the functionality of your 8fbd account and may prevent you from logging in. If you need assistance managing cookies in relation to the 8fbd platform, please contact [email protected].

As a player on the 8fbd platform, you have the following rights in respect of the personal data we hold about you. These rights are not conditional on account status — you may exercise them at any time by contacting [email protected] with your registered account username and a clear description of your request.

• Right of Access: You have the right to request a copy of all personal data 8fbd holds about you. We will provide this in a structured, readable format within 30 days of receiving a valid request. If your request is complex or involves a large volume of data, we may extend this period by a further 30 days and will notify you accordingly.
• Right to Rectification: If any personal data 8fbd holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For data that you can update directly (such as your email address or phone number), please use the account settings section of the platform. For KYC data, correction requests must be submitted with supporting documentation to [email protected].
• Right to Erasure: You have the right to request deletion of your personal data. This right is subject to legal retention requirements — data that 8fbd is legally required to retain (such as KYC records and transaction history for AML compliance) cannot be deleted until the applicable retention period expires. We will inform you clearly which data can be deleted immediately and which must be retained and for how long.
• Right to Restrict Processing: You have the right to request that 8fbd restricts the processing of your personal data in certain circumstances — for example, while a rectification request is being investigated, or where you contest the legal basis for processing but do not yet wish to request full erasure.
• Right to Data Portability: You have the right to receive the personal data you have provided to 8fbd in a machine-readable format (JSON or CSV) and to transfer that data to another controller. This right applies to data processed on the basis of your consent or contract performance.
• Right to Object: You have the right to object to processing carried out on the basis of 8fbd's legitimate interests. You also have an absolute right to withdraw consent for marketing communications at any time — simply use the unsubscribe link in any promotional email or contact [email protected] to opt out.
• Right Not to Be Subject to Automated Decisions: If 8fbd makes a decision that significantly affects you (such as account suspension) based solely on automated processing, you have the right to request human review of that decision. Contact [email protected] with your account username and the decision reference number.

8fbd takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, and destruction. The following measures are in place at all times across the 8fbd platform:

• SSL/TLS Encryption in Transit: All data transmitted between your device and 8fbd servers is encrypted using TLS 1.2 or higher. The platform enforces HTTPS on every page with HTTP Strict Transport Security (HSTS) headers to prevent downgrade attacks.
• Encryption at Rest: Sensitive personal data — including KYC documents, identity verification results, and password hashes — is encrypted at rest using AES-256 encryption on 8fbd's storage systems.
• Password Security: Player passwords are never stored in plaintext. 8fbd uses a secure cryptographic hashing algorithm with salting to store password credentials. 8fbd staff cannot view your password. If you forget your password, you must reset it via the account recovery process — it cannot be retrieved.
• Access Controls: Access to player personal data is restricted to 8fbd staff and contractors who need it to perform their specific job functions. Access is granted on a role-based, least-privilege basis and is reviewed regularly. All staff with access to personal data are subject to confidentiality obligations.
• Two-Factor Authentication: 8fbd supports two-factor authentication (2FA) for player accounts. We strongly encourage all players to enable 2FA in their account security settings to add an additional layer of protection against unauthorised login.
• Security Monitoring: 8fbd operates continuous security monitoring across the platform infrastructure, including intrusion detection systems, anomaly detection for unusual login patterns, and automated alerts for suspicious account activity. Players are notified by email and/or SMS of logins from new devices or locations.
• Payment Data Isolation: Full payment credentials (mobile banking PINs, bank account numbers) are never transmitted to or stored on 8fbd servers. Payment processing is handled directly by regulated payment partners (bKash, Nagad, Rocket, Upay, and banking partners). 8fbd receives only transaction reference numbers and confirmation status.
• Incident Response: In the event of a personal data breach that poses a risk to players, 8fbd will notify affected players without undue delay and take immediate steps to contain the breach, assess its scope, and remediate the underlying cause. A full incident report will be made available to affected players on request.

While 8fbd takes all reasonable steps to protect your data, no internet-based service can guarantee absolute security. Players are responsible for keeping their account credentials confidential and for notifying 8fbd immediately at [email protected] if they suspect unauthorised access to their account.

The 8fbd platform is strictly intended for adults aged 21 and above. 8fbd does not knowingly collect, store, or process personal data belonging to individuals under the age of 21. The registration process requires all players to confirm that they are 21 years of age or older, and 8fbd conducts identity verification checks to enforce this requirement.

If 8fbd becomes aware that an account has been registered by or on behalf of a person under the age of 21, the account will be closed immediately, all funds will be handled in accordance with our Terms & Conditions, and all personal data associated with the account will be deleted as soon as legally permissible. If you are a parent or guardian and believe a person under 21 in your household has registered on the 8fbd platform, please contact us immediately at [email protected] so we can take prompt action.

The 8fbd platform may contain references to third-party game providers (such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi) whose software is integrated into the platform. While playing these games, you interact with the game provider's software within the 8fbd platform environment. Game providers may collect technical gameplay data as described in Section 3 of this policy.

8fbd is not responsible for the privacy practices of independent third-party websites or services that are not operated by 8fbd. If you navigate away from the 8fbd platform to an external website — for example, by following a link in an email — the privacy policy of that external website governs the data it collects, not this policy. 8fbd recommends that you review the privacy policy of any third-party website you visit.

Payment partners (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and Islami Bank) operate their own privacy policies and data protection practices as regulated financial institutions. 8fbd is not responsible for the data handling practices of these payment partners in respect of data they collect directly from you outside the 8fbd platform.

8fbd reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made to this policy, 8fbd will notify registered players by email to the address on file and/or by displaying a prominent notice on the platform at least 7 days before the updated policy takes effect.

For changes that are required urgently — for example, to address an immediate security concern or to comply with an emergency legal requirement — the updated policy may take effect immediately, and 8fbd will notify affected players as soon as reasonably practicable. In all cases, the effective date displayed at the top of this page will reflect when the current version became active.

Your continued use of the 8fbd platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree to the updated policy, you must cease using the platform and may request account closure, including withdrawal of any remaining real-money balance, before the updated policy takes effect.

The most current version of this Privacy Policy is always available at 8fbd.io/privacy-policy. Prior versions are available on request by contacting [email protected] — please include "Privacy Policy Version Request" in your email subject line.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 8fbd handles your personal data, please contact us using the details below. Our data support team is part of the broader 8fbd customer support operation, which is available 24 hours a day, 7 days a week, operating on Bangladesh Standard Time (UTC+6).

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: "Data Rights Request — [Your Username]"
• Subject line for privacy queries: "Privacy Policy Query — [Your Username]"
• Live Chat: Available 24/7 directly on the 8fbd platform
• Response time — Email: Acknowledgement within 48 hours; full response within 30 days for data rights requests, within 5 business days for general privacy queries
• Response time — Live Chat: Typically under 2 minutes during standard hours

When contacting us regarding a data rights or privacy matter, please include your registered account username, your full name as registered on the account, and a clear description of your query or request. This allows our team to locate your account records promptly and provide an accurate, timely response.