8kbd2 Privacy Policy — How We Handle Your Data

1. Information We Collect

When you register for an account on 8kbd2 or use any of our services — including casino games, sports betting, live dealer tables, and payment transactions — we collect certain categories of personal information. This section describes exactly what data we gather and the circumstances in which it is collected.

1.1 Information You Provide Directly

When you create an 8kbd2 account, make a deposit or withdrawal, contact support, or complete identity verification (KYC), you voluntarily provide us with personal information. This includes:

• Identity data: Full legal name, date of birth, gender, National Identity Card (NID) number, and passport or birth certificate details where required for KYC verification.
• Contact data: Residential address in Bangladesh (including district and division), mobile phone number, and email address.
• Financial data: bKash account number, Nagad wallet number, Rocket mobile banking number, Upay account details, Visa or Mastercard card number (partial — last four digits only), and bank account details where applicable for withdrawal processing.
• Account credentials: Username and hashed password. We never store your password in plain text.
• Communications data: The content of any messages, support tickets, or feedback you send to our customer support team at [email protected].

1.2 Information Collected Automatically

When you visit the 8kbd2 website or use our mobile interface, we automatically collect certain technical and behavioural data, including:

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and preferred language settings.
• Usage data: Pages visited, time spent on each page, games played, bets placed, session start and end times, and click-path data.
• Transaction logs: A complete record of all deposits, withdrawals, wagers, wins, and bonus claims associated with your account, including timestamps in Bangladesh Standard Time (BST, UTC+6).
• Cookie and tracking data: Data collected via cookies, web beacons, and similar technologies. See Section 4 (Cookies) for full details.

1.3 Information from Third Parties

In limited circumstances, we may receive personal information about you from third parties, including:

• Payment providers: bKash, Nagad, Rocket, Upay, and card payment processors may share transaction confirmation data with us to verify deposits and withdrawals.
• Identity verification services: Where we use a third-party KYC service to verify your National Identity Card or passport, that provider may share verification results with us.
• Fraud prevention services: We may receive risk-scoring or flagging data from fraud detection partners to protect the integrity of the platform.

2. How We Use Your Data

8kbd2 uses the personal data it collects strictly for legitimate, clearly defined purposes. The table below sets out the primary purposes for which we process your data, the categories of data involved, and the legal basis for each processing activity.

8kbd2 does not use your personal data for automated decision-making processes that produce legal or similarly significant effects without a human review stage. Where automated tools are used for fraud detection or responsible gaming alerts, a qualified team member reviews any action taken against your account before it is implemented.

3. Data Sharing & Disclosure

8kbd2 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only in the specific, limited circumstances described below, and only to the extent necessary for the stated purpose.

3.1 Service Providers and Processors

We engage carefully selected third-party service providers who process personal data on our behalf, under strict contractual data processing agreements that require them to handle your data securely and only for the purposes we specify. These providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, and card payment networks (Visa, Mastercard) receive the financial and identity data necessary to process your transactions.
• KYC and identity verification partners: Where we use a third-party service to verify your NID or passport, that provider processes your identity documents under a restricted data processing agreement.
• Game providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player identifier and session data to deliver and audit game outcomes. They do not receive your full name, contact details, or financial data.
• Fraud and security services: Providers that help us detect unusual login activity, payment fraud, or multi-accounting may process device fingerprints, IP addresses, and transaction metadata.
• Cloud infrastructure providers: Our platform is hosted on secure cloud infrastructure. The hosting provider processes technical data (server logs, session data) strictly as a data processor under our instruction.

3.2 Legal and Regulatory Disclosure

8kbd2 may disclose your personal data to competent authorities, law enforcement agencies, or regulatory bodies where we are legally required to do so, or where disclosure is necessary to:

• Comply with a legal obligation, court order, or regulatory requirement.
• Investigate, prevent, or take action regarding suspected fraud, money laundering, or other illegal activity.
• Protect the rights, property, or safety of 8kbd2, our players, or third parties.

4. Cookies & Tracking Technologies

The 8kbd2 website uses cookies and similar tracking technologies to operate correctly, improve performance, and deliver a personalised experience to players. This section explains what cookies we use, why we use them, and how you can manage your preferences.

4.1 What Are Cookies?

Cookies are small text files that a website stores on your device when you visit. They allow the website to remember information about your visit — such as your login session, preferred language, or recent game selections — so that your next visit is smoother and more relevant.

4.2 Types of Cookies We Use

• Strictly necessary cookies: These are essential for the platform to function. They maintain your login session, remember items in your account preferences, and ensure security features operate correctly. These cookies cannot be disabled without breaking the platform's core functionality.
• Performance and analytics cookies: These cookies collect aggregated, anonymised data about how players use the 8kbd2 website — which pages are visited most, where sessions end, and how navigation flows across the site. This data helps us improve the platform experience.
• Functional cookies: These remember your personalisation choices, such as your preferred deposit method or notification settings, so you do not have to re-enter them on each visit.
• Targeting and advertising cookies: Where applicable, these cookies record your visits to the 8kbd2 platform and may be used to display relevant promotional content within the platform. We do not use these cookies to track your activity on third-party websites.

4.3 Managing Cookie Preferences

You can manage or disable non-essential cookies through your browser settings at any time. Most modern browsers allow you to block or delete cookies via the privacy or settings menu. Please note that disabling strictly necessary cookies will affect your ability to log in and use the 8kbd2 platform. Disabling performance or functional cookies will not prevent you from using the platform but may reduce the quality of your experience.

5. Data Retention

8kbd2 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

Where data is no longer required and the applicable retention period has expired, 8kbd2 will securely delete or anonymise the data in accordance with our internal data lifecycle procedures. Anonymised data — from which it is no longer possible to identify an individual — may be retained indefinitely for aggregated platform analytics.

6. Your Privacy Rights

As a player on the 8kbd2 platform, you hold meaningful rights over your personal data. 8kbd2 is committed to upholding these rights and responding to valid requests in a timely and transparent manner. Your rights include:

• Right of access: You have the right to request a copy of the personal data that 8kbd2 holds about you, including the categories of data, the purposes for which it is processed, and the third parties with whom it has been shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. For changes to verified KYC data (such as your legal name or date of birth), additional identity documentation may be required.
• Right to erasure ("right to be forgotten"): In certain circumstances, you have the right to request that 8kbd2 delete the personal data we hold about you. This right is subject to limitations where data retention is required by law (for example, financial transaction records retained for AML compliance cannot be deleted on request).
• Right to restriction of processing: You may request that 8kbd2 restrict the processing of your personal data in specific circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to data portability: Where processing is based on your consent or a contract with you, and is carried out by automated means, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests, where your individual rights and freedoms outweigh those interests.
• Right to withdraw consent: Where processing is based solely on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

We may need to verify your identity before processing a data rights request to ensure we are disclosing or modifying data only at the direction of the account holder. Identity verification for this purpose does not affect your right to submit the request.

7. Data Security

8kbd2 takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following key controls:

• Encryption in transit: All data transmitted between your device and the 8kbd2 platform is protected by 256-bit SSL/TLS encryption. The padlock icon in your browser confirms that your connection is secure at all times.
• Encryption at rest: Sensitive data stored in our databases — including identity documents, financial data, and hashed account credentials — is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data within 8kbd2's internal systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of access required to perform their duties, and all access events are logged and audited.
• Password security: Account passwords are stored using one-way cryptographic hashing with salting. 8kbd2 staff cannot view your password in plain text under any circumstances.
• Two-factor authentication (2FA): Players are encouraged to enable two-factor authentication on their 8kbd2 account as an additional layer of security against unauthorised access.
• Penetration testing: The 8kbd2 platform undergoes regular security assessments, including vulnerability scanning and penetration testing, to identify and remediate security weaknesses before they can be exploited.
• Incident response: 8kbd2 maintains a documented data breach response procedure. In the event of a security incident that affects your personal data, we will notify affected players promptly and take all reasonable steps to contain and remediate the incident.

8. Contact & Data Protection

8kbd2 is committed to transparency and accountability in all matters relating to the personal data of our players. If you have any questions, concerns, or requests regarding this Privacy Policy or the way in which your data is handled, we encourage you to contact us directly.

Data Protection Contact

All privacy-related enquiries, data rights requests, and data breach reports should be directed to the 8kbd2 Data Protection team. You can reach us at the following address:

• Email: [email protected] (include "Privacy Request" in the subject line for fastest routing)
• Response time: Acknowledgement within 5 business days; substantive response within 30 days
• Languages handled: English
• Hours: 24/7 for initial submission; business-hours review applies to complex data rights requests

Policy Updates

8kbd2 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered players via the email address associated with their account and update the "Last updated" date at the top of this page. We encourage you to review this policy periodically to stay informed about how we protect your data.

Governing Framework

This Privacy Policy is informed by internationally recognised data protection principles, including purpose limitation, data minimisation, storage limitation, integrity and confidentiality, and accountability. 8kbd2 applies these principles across all data processing activities affecting players registered on our Bangladesh platform, regardless of where our infrastructure is physically located.