8o88 Privacy Policy

Data We Collect

When you interact with the 8o88 platform — whether by browsing as a visitor, completing account registration, making a deposit, placing a wager, or contacting customer support — certain personal data is collected. The categories of data we collect, and the circumstances in which we collect them, are described in full below.

We do not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless specifically required by applicable law or directly relevant to a responsible gaming assessment. We do not collect personal data from individuals we know to be under 18 years of age, and any account found to belong to a minor will be closed immediately.

How We Use Your Data

8o88 uses the personal data it collects for specific, clearly defined purposes. We do not use your data in ways that are incompatible with the purposes described at the time of collection. The primary purposes for which we process personal data are as follows:

• Account Management: To create and maintain your 8o88 player account, verify your identity, authenticate your login sessions, and manage your account preferences and settings.
• Transaction Processing: To process deposits and withdrawals via your chosen payment method (including bKash, Nagad, Rocket, Upay, and supported Bangladeshi bank accounts), maintain accurate financial records, and issue correct account credits.
• Legal Compliance: To fulfil our obligations under applicable law, including anti-money laundering (AML) requirements, know-your-customer (KYC) verification, age verification, and any data disclosure obligations imposed by competent authorities.
• Responsible Gaming: To monitor gaming activity for patterns that may indicate problem gambling behaviour, apply responsible gaming tools at your request (such as deposit limits, session reminders, or self-exclusion), and comply with responsible gaming obligations.
• Platform Security: To detect, investigate, and prevent fraudulent activity, account takeover attempts, multi-accounting, money laundering, and other forms of abuse on the 8o88 platform.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and maintain a record of support interactions for quality assurance purposes.
• Platform Improvement: To analyse aggregated usage patterns, identify technical issues, test new features, and improve the overall user experience of the 8o88 platform.
• Marketing Communications: Where you have given explicit consent, to send you promotional offers, bonus notifications, and platform updates relevant to your interests. You may withdraw this consent at any time by contacting [email protected].

Legal Basis for Processing

Every instance of personal data processing at 8o88 rests on one of the following recognised legal bases. We have mapped each processing activity to the most appropriate basis to ensure full transparency about why we handle your data.

• Contractual Necessity: Processing required to perform the contract between you and 8o88 — specifically, the creation and management of your player account, the processing of deposits and withdrawals, and the provision of gaming and betting services.
• Legal Obligation: Processing required to comply with a legal obligation to which 8o88 is subject — including identity verification, anti-money laundering checks, age verification, and responding to lawful requests from competent authorities.
• Legitimate Interests: Processing carried out in pursuit of 8o88's legitimate business interests, where those interests are not overridden by your privacy rights — including fraud prevention, platform security monitoring, technical performance analysis, and responsible gaming surveillance.
• Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent — primarily in the context of marketing communications and optional data collection beyond what is required for the core service. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Where 8o88 relies on legitimate interests as the legal basis for processing, we have conducted a balancing assessment to confirm that our interests do not unfairly override your rights and freedoms. Details of these assessments are available on request by contacting [email protected].

Data Sharing & Third Parties

8o88 does not sell, rent, or trade your personal data. We share personal data with third parties only where necessary to operate the platform, fulfil a legal obligation, or protect the platform's integrity. All third-party recipients of personal data are contractually bound to handle it in accordance with applicable data protection standards.

The categories of third parties with whom we may share personal data are as follows:

• Payment Service Providers: Mobile financial services (bKash, Nagad, Rocket, Upay) and banking institutions (Dutch-Bangla Bank, City Bank, BRAC Bank, and others) receive the financial reference data necessary to process your deposit and withdrawal transactions. These providers operate under their own regulatory frameworks and privacy policies.
• Identity Verification Partners: Third-party KYC and AML compliance vendors may receive identity documents and personal data to assist in verifying your identity and screening against sanctions lists as required by applicable law.
• Game Software Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player identifier and session data necessary to deliver their games within the 8o88 platform. These providers do not receive your full identity data.
• Technology Infrastructure Providers: Cloud hosting, content delivery, and platform infrastructure providers may process technical and usage data on our behalf as data processors operating under binding data processing agreements.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or lawful request from a competent authority.
• Professional Advisers: Lawyers, auditors, and compliance consultants may receive limited personal data under strict confidentiality obligations where necessary to obtain professional advice.

Cookies & Tracking Technologies

The 8o88 platform uses cookies and similar tracking technologies to operate correctly, remember your preferences, maintain your authenticated session, and gather anonymised analytics about how the platform is used. This section explains what cookies we use and why.

A cookie is a small text file placed on your device by the 8o88 platform when you visit. Cookies are not executable programs and cannot be used to access other files on your device. The following categories of cookies are used on the 8o88 platform:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, remember your account preferences, and ensure secure access. The platform cannot operate without these cookies, and they cannot be disabled.
• Functional Cookies: These cookies remember your choices — such as your preferred language setting or display preferences — to provide a more personalised experience. Disabling these cookies may reduce platform functionality.
• Analytics Cookies: These cookies collect anonymised information about how visitors interact with the platform — such as which pages are visited most often and whether users encounter error messages. This data helps us improve the platform. Analytics cookies do not identify you personally.
• Security Cookies: These cookies assist in detecting and preventing fraudulent account access, bot activity, and other security threats. They are essential for platform integrity.

8o88 does not use third-party advertising cookies or behavioural tracking cookies to build profiles of your online activity for advertising purposes beyond the 8o88 platform.

Data Retention

8o88 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of personal data processed by 8o88:

• Account and Identity Data: Retained for the duration of the active account relationship and for a minimum of five years following account closure, in line with standard AML and KYC record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of seven years following the date of the transaction, as required for financial reporting and anti-money laundering compliance.
• Communications Data (Support Interactions): Retained for up to three years from the date of the last interaction, or longer where the communication relates to an unresolved dispute or legal proceeding.
• Technical and Usage Data: Retained in identifiable form for up to twelve months, after which it is anonymised and may be retained indefinitely in aggregated form for analytical purposes.
• Verification Documents: Retained for the duration of the account relationship and for five years following account closure.
• Marketing Consent Records: Retained for the duration of the consent and for three years following withdrawal of consent, as evidence of the consent status.

Upon expiry of the applicable retention period, personal data is securely and irreversibly deleted from 8o88's systems, unless ongoing legal proceedings, regulatory investigations, or other exceptional circumstances require its continued retention. Where data cannot be deleted immediately due to technical constraints, it will be isolated and protected from further active processing until deletion can be completed.

Your Privacy Rights

As a data subject, you hold the following rights with respect to the personal data that 8o88 holds about you. These rights are genuine and enforceable. To exercise any of these rights, submit a written request to [email protected] with sufficient detail for us to identify your account and the specific right you wish to exercise.

• Right of Access: You have the right to request a copy of all personal data that 8o88 holds about you, along with information about how it is used, where it came from, and with whom it has been shared. We will provide this information within 30 calendar days of receiving your request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay. You may also update certain account details directly through the Account Settings section of the platform.
• Right to Erasure: In certain circumstances — such as where data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies — you may request that we delete your personal data. Note that erasure requests may be declined where retention is required by law.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you have objected to processing pending verification of legitimate grounds.
• Right to Object: Where processing is based on legitimate interests, you have the right to object to that processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a machine-readable copy of your personal data for transfer to another service provider.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

Data Security Measures

8o88 takes the security of your personal data seriously and has implemented a layered set of technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures are reviewed and updated regularly in response to emerging threats and changes to our platform architecture.

Our current security measures include, but are not limited to, the following:

• SSL/TLS Encryption: All data transmitted between your device and the 8o88 platform is encrypted in transit using industry-standard TLS (Transport Layer Security) protocols, preventing interception by unauthorised parties.
• Encryption at Rest: Sensitive personal data stored on 8o88's servers — including identity documents, financial references, and authentication credentials — is encrypted at rest using strong encryption standards.
• Access Controls: Access to personal data within 8o88's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the categories of data required to perform their specific job functions, and all access is logged.
• Intrusion Detection: 8o88 employs automated intrusion detection and anomaly monitoring systems to identify and respond to suspicious activity on the platform infrastructure in real time.
• Staff Training: All 8o88 staff members who handle personal data receive mandatory data protection and information security training. Confidentiality obligations are embedded in all employment and contractor agreements.
• Vendor Security Assessments: Before engaging any third-party data processor, 8o88 conducts a security assessment to confirm that the vendor's data protection standards are consistent with our own obligations.

While 8o88 applies robust security measures, no digital platform can guarantee absolute security against all possible threats. In the event that a security incident results in a breach of your personal data, 8o88 will follow its incident response procedure, which includes prompt notification to affected individuals where the breach is likely to result in a risk to their rights or freedoms.

If you have any questions or concerns about this Privacy Policy, or wish to exercise any of your privacy rights, please contact the 8o88 data protection team at [email protected]. We are available seven days a week and will be glad to assist you.