Your Privacy at 8o88 — Our Commitment

This Privacy Policy ("Policy") describes how 8o88 ("8o88", "We", "Us", or "Our") collects, processes, stores, and shares personal data obtained from individuals ("You", "Player", or "User") who access or use the online betting and casino platform operated at https://8o88.io (the "Platform").

We are committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy should be read alongside our Terms & Conditions and Responsible Gaming policy, which together form the full framework governing your relationship with 8o88.

By registering an account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact us to request account closure.

8o88 collects the following categories of personal data, depending on how you interact with the Platform:

We do not collect sensitive personal data such as biometric data, racial or ethnic origin, political opinions, religious beliefs, or health information, except where identity document uploads incidentally contain such information during the KYC process, in which case such data is processed solely for identity verification purposes and is not stored beyond what is legally required.

8o88 collects personal data through the following channels:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting our support team, or responding to surveys or promotions.
• Automated technologies: Technical and usage data collected automatically as you browse and interact with the Platform, including through cookies, server logs, and session tracking tools. See Section 9 for full details on our cookie practices.
• Third-party providers: Data received from payment processors (bKash, Nagad, Rocket, Upay, bank partners), identity verification services, and fraud prevention partners when you initiate a financial transaction or KYC check through the Platform.
• Publicly available sources: In limited circumstances, 8o88 may cross-reference publicly available information (such as publicly listed politically exposed persons (PEP) databases or sanctions lists) for the purpose of AML and fraud screening. This is a legal obligation, not a marketing activity.

8o88 uses the personal data it collects for the following specific purposes:

• Account management: Creating, maintaining, and securing your Player account, including password resets, session management, and account preference settings.
• Payment processing: Facilitating deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, or bank transfer), including fraud screening of individual transactions.
• KYC and identity verification: Verifying your age (21+), identity, and residential address as required before processing your first withdrawal or where triggered by our internal risk thresholds.
• Regulatory compliance: Meeting anti-money laundering (AML), counter-terrorist financing (CTF), and other applicable legal obligations, including transaction monitoring and suspicious activity reporting where required by law.
• Responsible gaming: Monitoring betting patterns and session behaviour to identify indicators of problem gambling, apply self-imposed limits, and enforce cooling-off periods or self-exclusion requests.
• Fraud and security: Detecting, investigating, and preventing fraudulent activity, multi-accounting, bonus abuse, and unauthorised account access.
• Platform improvement: Analysing aggregated usage data to improve the performance, design, and content of the Platform.
• Marketing communications: Sending promotional emails or SMS messages about bonuses, new games, and platform features — but only where you have given explicit consent. You may withdraw this consent at any time by updating your account preferences or contacting [email protected].
• Customer support: Responding to your enquiries, resolving disputes, and maintaining records of all support interactions as required for audit and legal purposes.

Each processing activity carried out by 8o88 rests on one of the following lawful bases:

• Contractual necessity: Processing required to deliver the services described in our Terms & Conditions — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable law, including AML regulations, age verification obligations, and tax reporting requirements.
• Legitimate interests: Processing carried out for 8o88's legitimate business interests — such as fraud prevention, platform security, and service improvement — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing activities that rely solely on your explicit consent, specifically the sending of marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

8o88 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Data is shared with third parties only in the following circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive only the transaction data necessary to process your deposit or withdrawal. These providers operate under their own privacy policies and applicable financial regulations.
• Game content providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Ezugi, and other studio partners may receive a pseudonymous player identifier and session data necessary to run the game and settle game outcomes. They do not receive your full identity data.
• KYC and identity verification services: Specialist third-party providers used to verify government-issued identity documents receive only the documents and data required to perform the verification check.
• Fraud prevention and security partners: Risk and fraud intelligence platforms may receive technical data (IP address, device fingerprint, behavioural signals) to assist in identifying fraudulent activity.
• Legal authorities: 8o88 will disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, or where we have a good-faith belief that disclosure is necessary to protect the rights, property, or safety of 8o88, its players, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of 8o88's business assets, personal data held by 8o88 may be transferred to the acquiring entity, subject to the same level of data protection as described in this Policy.

All third-party processors engaged by 8o88 are contractually required to process personal data only for the specific, documented purpose for which it was shared, and to maintain appropriate technical and organisational security measures.

8o88 retains personal data for the periods set out below, after which data is securely deleted or anonymised:

• Account and identity data: Retained for the duration of your active account relationship with 8o88, plus a minimum of five (5) years following account closure, in compliance with AML record-keeping obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by applicable financial regulations.
• KYC documents: Retained for a minimum of five (5) years following the completion of the verification check, or following the closure of your account, whichever is later.
• Support communications: Retained for three (3) years from the date of the interaction, unless the matter remains subject to an ongoing dispute or legal proceeding.
• Marketing preferences and consent records: Retained for the duration of your account, and for two (2) years following withdrawal of consent, as evidence of the consent history.
• Technical and usage data (logs): Retained for up to twelve (12) months in an identifiable form, after which data is aggregated and anonymised for statistical analysis.

8o88 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key measures include:

• Encryption in transit: All data transmitted between your device and 8o88's servers is encrypted using TLS 1.2 or higher (256-bit SSL), indicated by the padlock icon in your browser's address bar.
• Encryption at rest: Sensitive stored data, including financial records and identity documents, is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within 8o88's internal systems is restricted on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication for administrative access.
• Infrastructure monitoring: 8o88's server infrastructure is subject to continuous automated monitoring for anomalous access patterns, intrusion attempts, and data exfiltration signals.
• Regular security reviews: 8o88 conducts periodic internal security reviews and engages qualified third-party security professionals for independent assessments of its infrastructure and data handling practices.
• Incident response: In the event of a data breach that is likely to result in a risk to your rights and freedoms, 8o88 will notify affected players without undue delay, with full details of what occurred, what data was affected, and what remediation steps are being taken.

While 8o88 takes all reasonable and practicable steps to protect your data, no internet-based platform can guarantee absolute security. You are responsible for keeping your own login credentials confidential and for logging out of the Platform when using shared or public devices.

8o88 uses cookies and similar tracking technologies to support the operation of the Platform, improve user experience, and conduct analytics. The categories of cookies we use are as follows:

• Strictly necessary cookies: These cookies are essential to enable core platform functionality, including account login sessions, security tokens, and your cookie consent record. The Platform cannot function properly without these cookies and they do not require your consent to be set.
• Performance and analytics cookies: These cookies collect anonymised data about how Players interact with the Platform — pages visited, time on page, error events — to help us improve platform performance. These cookies are set only where you have consented.
• Functional cookies: These cookies remember your preferences (for example, preferred language or display settings) to personalise your experience on subsequent visits. They require your consent.
• Fraud prevention and security cookies: These cookies support our fraud detection and responsible gaming systems by identifying unusual session behaviour. They are treated as strictly necessary due to their security function.

You may control non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may impair the functionality of the Platform. Guidance on managing cookies is available in your browser's help documentation.

Subject to applicable law and certain limited exceptions (such as where retention is required for AML compliance), you have the following rights with respect to the personal data 8o88 holds about you:

To exercise any of the above rights, please contact us at [email protected] with the subject line "Data Rights Request" and include your registered username and a brief description of your request. We may need to verify your identity before processing the request. We will respond within 30 calendar days. If your request is complex or we receive a high volume of requests, we may extend this period by up to an additional 30 days, in which case we will inform you of the extension and the reason for it.

The 8o88 Platform is strictly intended for adults aged 21 years and above. 8o88 does not knowingly collect or process personal data from individuals under the age of 21. If you believe that a minor has registered an account or provided personal data to 8o88, please contact us immediately at [email protected].

Upon receiving a credible report that personal data has been collected from a minor, 8o88 will promptly investigate, close the relevant account, and delete all associated personal data to the extent permitted by applicable legal obligations, including any AML record-keeping requirements that may have been triggered.

8o88 operates primarily within a Bangladesh-facing context and endeavours to process player data within the region wherever practicable. However, certain third-party service providers — including game content providers such as Pragmatic Play, Evolution Gaming, and NetEnt — operate from data centres located outside Bangladesh.

Where personal data is transferred to a third party located in a jurisdiction that may not offer the same level of data protection as Bangladesh, 8o88 takes steps to ensure that appropriate safeguards are in place, including contractual data processing agreements that impose data protection obligations on the recipient consistent with the standards described in this Policy.

By using the Platform, you acknowledge that your data may be transferred to and processed in jurisdictions outside Bangladesh as described in this section. If you have questions about the safeguards in place for a specific transfer, please contact us at [email protected].

8o88 reserves the right to update or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. The effective date shown at the top of this Policy will be updated each time a change is made.

Where a change is material — meaning it affects the way we use your data in a way that could impact your rights or reasonable expectations — we will notify you by email at least 7 days before the change takes effect. Non-material changes (such as typographical corrections or clarifications that do not alter the substance of any section) may be made without advance notice.

Your continued use of the Platform after a revised Policy takes effect constitutes your acceptance of the revised terms. We recommend bookmarking this page and reviewing it periodically.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 8o88 handles your personal data, please reach out to our team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: "Privacy Enquiry" or "Data Rights Request"
• Support hours: Monday to Sunday, 09:00 – 01:00 BST (UTC+6)

We aim to acknowledge all privacy-related correspondence within 48 hours of receipt. For formal data rights requests, we will provide a substantive response within 30 calendar days as described in Section 10.

If you are not satisfied with our response to a privacy concern, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.