8bd9 Privacy Policy

Introduction

8bd9 is an online betting and casino platform serving players in Bangladesh. We are committed to protecting the privacy and personal data of every individual who interacts with our platform, whether as a registered player, a visitor browsing our site, or a person contacting our support team.

This Privacy Policy sets out the types of personal data 8bd9 collects, the purposes for which that data is processed, the parties with whom it may be shared, the period for which it is retained, and the rights available to you as a data subject. This policy applies to all services offered through the 8bd9 platform, including sports betting, live casino, online slots, payment processing, promotional campaigns, and customer support interactions.

This Privacy Policy should be read alongside the 8bd9 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference and form part of the overall agreement between you and 8bd9.

Data We Collect

8bd9 collects personal data through several channels: directly from you during registration and account use, automatically through platform interactions, and in limited cases from third-party payment processors. The categories of data we collect are outlined below.

2.1 Data You Provide Directly

• Identity data: Full legal name, date of birth, gender, and nationality as provided during account registration or KYC verification.
• Contact data: Email address, mobile phone number (required for MFS payment linkage via bKash, Nagad, Rocket, or Upay), and physical address where required for KYC purposes.
• Identity verification documents: Scanned copies or photographs of your National Identity Card (NID), passport, or driving licence provided during the KYC process.
• Account credentials: Your chosen username and encrypted password hash. 8bd9 never stores passwords in plaintext.
• Payment data: Mobile wallet numbers (bKash, Nagad, Rocket, Upay), bank account or routing numbers, and Visa/Mastercard details (card number, expiry, and cardholder name) entered during deposit or withdrawal requests.
• Support communications: The content of emails, live chat transcripts, and any other communications you send to the 8bd9 support team.
• Responsible gaming self-declarations: Information you voluntarily provide when setting deposit limits, cooling-off periods, or self-exclusion requests.

2.2 Data Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device type, screen resolution, and time zone settings (displayed as BST for Bangladesh players).
• Usage data: Pages visited on 8bd9.io, time spent on each page, navigation path through the platform, bet history, game session data, and deposit/withdrawal transaction logs.
• Cookies and similar technologies: Session cookies, persistent cookies, and local storage data used to maintain your login state, remember preferences, and gather aggregate analytics. See Section 6 for full cookie details.
• Geolocation data: Approximate location derived from your IP address, used solely for fraud prevention and jurisdiction eligibility checking.

2.3 Data From Third Parties

• Payment processors: Transaction confirmation data from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card payment networks. We receive only the minimum data necessary to confirm a transaction (reference number, amount, status) — we do not receive your full MFS PIN or full card CVV from processors.
• Game providers: Aggregated game session and outcome data from licensed third-party game suppliers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi, used for dispute resolution and fair-play auditing.
• Fraud prevention services: Device fingerprint risk scores from anti-fraud technology partners, used to detect account takeover attempts and multi-accounting behaviour.

How We Use Your Data

8bd9 uses the personal data we collect for specific, defined purposes. We do not process personal data for purposes incompatible with those stated at the time of collection. The principal purposes for which we use your data are:

• Account management: Creating, maintaining, and administering your 8bd9 player account, including password resets, username changes, and account preference updates.
• Service delivery: Processing your bets, settling wagers, running casino game sessions, calculating and crediting winnings, and maintaining your account balance in BDT.
• Payment processing: Facilitating deposits via bKash, Nagad, Rocket, Upay, bank transfer, and card payment, and processing withdrawal requests to verified payment methods in your name.
• Identity verification (KYC): Verifying your identity and age (21+ requirement) before processing withdrawals above specified thresholds, as set out in the 8bd9 Terms & Conditions.
• Fraud prevention and security: Detecting and preventing fraudulent account activity, multi-accounting, money laundering, bonus abuse, and unauthorised access attempts. This includes automated risk scoring and manual review by the 8bd9 security team.
• Responsible gaming: Monitoring betting patterns to identify potential signs of problem gambling, enforcing deposit limits and self-exclusion requests, and reaching out to players who may require responsible gaming support.
• Customer support: Responding to your queries, resolving disputes, processing complaints, and maintaining records of support interactions for quality assurance.
• Legal compliance: Maintaining transaction records and account logs as required by applicable anti-fraud and financial compliance standards, and responding to lawful requests from regulatory or law enforcement authorities.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the 8bd9 user interface, game catalogue, payment flow, and overall player experience.
• Marketing communications (with consent): Sending promotional emails, SMS notifications about bonuses, and personalised offers where you have explicitly opted in to receive such communications. You may withdraw consent at any time through your account settings.

Legal Basis for Processing

8bd9 processes personal data under the following lawful bases, applied according to the nature and purpose of each processing activity:

• Contractual necessity: Processing required to perform the contract between you and 8bd9 — including account creation, bet settlement, payment processing, and KYC verification. Without this processing, 8bd9 cannot provide its services to you.
• Legitimate interests: Processing carried out for the legitimate interests of 8bd9 and its players, including fraud prevention, platform security, responsible gaming monitoring, and product analytics, where these interests are not overridden by your rights and interests.
• Legal obligation: Processing required to comply with applicable laws and lawful requests from competent authorities, including maintaining financial transaction records and responding to formal legal processes.
• Consent: Processing based on your freely given, specific, and informed consent — primarily used for optional marketing communications and for setting personalised notification preferences. Consent may be withdrawn at any time without penalty to your account status.

Data Sharing

8bd9 does not sell, rent, or trade your personal data. We share personal data with third parties only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and card payment network processors receive your payment credentials and transaction data solely to process your deposit and withdrawal requests.
• Game technology providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, and other certified game suppliers receive your player session identifier and stake/result data to deliver and audit their games. They do not receive your full identity or payment data.
• Identity verification services: Third-party KYC technology providers may process your identity documents to assist 8bd9 in verifying your identity and age. All such providers are bound by strict data processing agreements and may not use your data for any other purpose.
• Fraud prevention and security partners: Anti-fraud technology vendors receive anonymised or pseudonymised device and behavioural data to generate risk scores. These partners do not receive your name or payment details.
• Legal and regulatory authorities: 8bd9 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required by law or in response to a valid legal order. We will notify you of such disclosures where permitted by law.
• Business successors: In the event of a merger, acquisition, or sale of all or part of 8bd9's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the successor entity.

Cookies & Tracking Technologies

8bd9 uses cookies and similar local storage technologies on the 8bd9.io platform. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit, CSRF protection tokens, and load-balancing cookies. These cookies cannot be disabled without impairing the platform's basic functionality.
• Functional cookies: Store your preferences such as preferred language, notification settings, and last-selected payment method to improve your experience on repeat visits. These cookies persist across sessions but are not used for tracking or advertising.
• Analytics cookies: Aggregate, anonymised data about how players navigate 8bd9.io — including most-visited pages, average session duration, and device type distribution — used solely to improve the platform. No individual player is identifiable from analytics data.
• Security cookies: Used by 8bd9's fraud prevention systems to detect suspicious device behaviour, bot traffic, and automated account access attempts. These cookies assign a non-personally-identifiable device fingerprint token.

8bd9 does not use advertising cookies, retargeting pixels, or third-party tracking cookies that follow your activity across other websites. You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging in and using the platform.

Data Retention

8bd9 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law or legitimate operational need. The following retention periods apply:

• Active account data: Retained for the duration of your account's active status plus a post-closure period of 5 years for financial records and identity verification documentation, in line with standard anti-fraud record-keeping practices.
• Transaction records: Deposit and withdrawal records, bet history, and game session logs are retained for 5 years from the date of the transaction.
• KYC documents: Identity verification documents (NID, passport, bank statements) are retained for 5 years from the date of verification or from the date of account closure, whichever is later.
• Support communications: Email and live chat records are retained for 2 years from the date of the most recent interaction, after which they are securely deleted.
• Marketing consent records: Records of your consent or opt-out for marketing communications are retained for the duration of your account plus 2 years, to demonstrate compliance with applicable consent requirements.
• Anonymised analytics data: Aggregate, anonymised usage data from which no individual can be identified may be retained indefinitely for platform improvement purposes.

Upon expiry of the applicable retention period, personal data is either securely and permanently deleted from 8bd9's systems, or anonymised such that it can no longer be linked to any identified or identifiable individual.

Data Security

8bd9 implements a layered security architecture to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• TLS/SSL encryption: All data transmitted between your browser or app and 8bd9's servers is encrypted using current TLS standards. The 8bd9.io domain enforces HTTPS on all pages.
• At-rest encryption: Sensitive data fields — including identity document data, payment credentials, and authentication tokens — are encrypted at rest using AES-256 or equivalent standards.
• Password hashing: Account passwords are never stored in plaintext. They are hashed using a strong, salted one-way hashing algorithm (bcrypt) so that even in the event of a server breach, your password cannot be recovered.
• Access controls: Access to personal data within 8bd9's internal systems is restricted on a strict need-to-know basis. Staff with access to sensitive player data undergo background screening and are bound by confidentiality obligations.
• Intrusion detection: 8bd9's infrastructure is monitored 24/7 by automated intrusion detection systems. Suspicious access patterns trigger immediate alerts to the security team.
• Penetration testing: 8bd9 conducts periodic independent security assessments and penetration tests to identify and address vulnerabilities before they can be exploited.

While 8bd9 takes all reasonable steps to protect your personal data, no internet-based system can guarantee absolute security. In the event of a data breach that poses a risk to your rights and interests, 8bd9 will notify affected players without undue delay and take all available steps to contain and remediate the breach.

Your Rights

As a player on the 8bd9 platform, you hold the following rights in relation to your personal data. These rights apply regardless of the legal basis under which your data is processed:

To exercise any of these rights, contact the 8bd9 support team at [email protected] with the subject line "Data Rights Request". Include your registered username and a description of the right you wish to exercise. 8bd9 will acknowledge your request within 5 business days and complete it within 30 calendar days. We may request proof of identity before fulfilling requests involving sensitive data.

Children's Privacy

8bd9 is strictly an adults-only platform. In Bangladesh, players must be at least 21 years of age to register an account and use any of the services offered on 8bd9.io. We do not knowingly collect, store, or process personal data belonging to any person under the age of 21.

During the account registration process, all users are required to confirm their date of birth. Where there is a reasonable basis to suspect that a registered account is held by a person under 21, 8bd9 will suspend the account pending identity and age verification. If verification confirms the account holder is underage, the account will be permanently closed and any remaining balance will be handled in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that a minor in your care has registered an account on 8bd9.io, please contact our support team at [email protected] immediately. We will investigate and take appropriate action without delay.

International Data Transfers

8bd9 is a platform serving players in Bangladesh. The majority of your personal data is stored and processed on servers located within or close to the South Asia region to minimise latency and comply with data localisation best practices.

In some cases, data may be transferred to or accessed from systems located outside Bangladesh — for example, when using third-party game providers such as Evolution Gaming or Pragmatic Play, whose server infrastructure may operate from European or other international data centres. Wherever such transfers occur, 8bd9 ensures that appropriate contractual safeguards are in place with the receiving party, including data processing agreements that require the recipient to maintain data protection standards equivalent to those applied by 8bd9 itself.

8bd9 will not transfer your personal data to any jurisdiction that does not provide an adequate level of protection without first implementing appropriate safeguards and, where required, obtaining your explicit consent.

Third-Party Links

The 8bd9 platform may occasionally reference or display content associated with third-party game providers, payment processors, or sports data suppliers. While 8bd9 takes care to work only with reputable partners, we do not control the privacy practices of third-party organisations and cannot accept responsibility for how they handle personal data.

This Privacy Policy applies solely to personal data collected and processed by 8bd9 through the 8bd9.io platform. If you interact directly with a third-party service (for example, by accessing your bKash app or your bank's online portal to complete a deposit), that interaction is governed by the privacy policy of the relevant third party, not by this document.

We encourage you to review the privacy policies of any third-party services you use in connection with your 8bd9 account, including your mobile financial service provider and your device's operating system.

Policy Updates

8bd9 reviews this Privacy Policy on a regular basis and may update it from time to time to reflect changes in our data practices, changes in the services we offer, or changes in applicable law. All updates will be published on this page at 8bd9.io/privacy-policy.

Where a change to this Privacy Policy is material — meaning it affects your rights or the way in which we use your personal data in a way that may be unexpected — 8bd9 will notify registered players by email to the address associated with their account at least 14 days before the updated policy comes into effect. The effective date at the top of this page will always reflect the date of the most recent revision.

Your continued use of the 8bd9 platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with an updated policy, you may close your account by contacting support before the effective date of the change.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 8bd9 handles your personal data, please contact our Data & Privacy team through the following channel:

• Email: [email protected]
• Subject line for data rights requests: "Data Rights Request — [Your Username]"
• Subject line for general privacy queries: "Privacy Policy Query — [Your Username]"
• Response time: Standard queries within 24 hours; data rights requests within 5 business days (completed within 30 calendar days)
• Support hours: 24 hours a day, 7 days a week, 365 days a year (Bangladesh Standard Time, UTC+6)
• Platform: 8bd9.io

When contacting us regarding a data rights request, please include your registered username, the email address associated with your account, and a clear description of your request. This will help us locate your records and process your request as efficiently as possible.