x8bd Privacy Policy

§ 01 Introduction & Scope

This Privacy Policy (hereinafter "Policy") describes how x8bd (the "Platform", "we", "us", or "our") collects, processes, stores, and protects the personal information of individuals who access or use the x8bd website, mobile web application, and all related services (collectively, the "Services"). This Policy applies to all registered players and unregistered visitors who interact with any part of the x8bd Platform.

By registering an account, depositing funds, placing bets, or otherwise using the x8bd Services, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal information as described herein. If you do not agree to this Policy, you must not use the x8bd Platform.

This Policy should be read alongside the x8bd Terms & Conditions and Responsible Gaming Policy, which together govern your relationship with x8bd. In the event of any inconsistency between this Policy and the Terms & Conditions regarding the treatment of personal data, this Privacy Policy shall prevail.

x8bd serves players primarily located in Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. Our data handling practices reflect the sensitivity of financial and personal information held on behalf of our Bangladeshi player community. x8bd applies security standards consistent with internationally recognised best practices for online gaming platforms.

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or operational needs. The "Last Updated" date at the top of this page will be revised whenever a substantive change is made. Where a change materially affects your rights or the way we handle your data, we will notify you via your registered email address prior to the change taking effect.

§ 02 Information We Collect

x8bd collects personal information through a combination of information you provide directly, data generated automatically by your use of the Platform, and information obtained from trusted third-party service providers (such as payment processors and identity verification partners). The categories of information we collect are described below.

Information You Provide Directly:

• Account Registration: Full name, date of birth, email address, mobile number (Bangladesh), and chosen username and password when you create an x8bd account.
• Identity Verification (KYC): Copies of government-issued identity documents such as your National Identity Card (NID), passport photo page, or birth registration certificate, submitted to satisfy our Know Your Customer obligations prior to your first withdrawal.
• Payment Information: Mobile wallet identifiers (bKash account number, Nagad account number, Rocket number, Upay number), bank account details for bank transfer transactions, and Visa/Mastercard card numbers (stored only in tokenised form — never as raw card numbers on x8bd's own servers).
• Communications: Records of any correspondence you send to x8bd via email ([email protected]), live chat, or any other support channel, including the content of your message and any attachments.
• Responsible Gaming Requests: Self-exclusion requests, deposit limit preferences, and time-out requests submitted via your account settings or through our support team.

Information Collected Automatically:

• Device & Technical Data: IP address, browser type and version, operating system, device model, screen resolution, and time zone (Bangladesh Standard Time, UTC+6).
• Usage Data: Pages visited, games played, betting history, session start and end times, deposit and withdrawal timestamps, and navigation paths through the Platform.
• Cookies & Similar Technologies: Session identifiers, preference cookies, and analytics tokens. See Section 5 for full details.
• Geolocation Data: Approximate location derived from your IP address, used solely to verify that access originates from a permitted region and to enforce responsible gaming geography-based controls.

§ 03 How We Use Your Information

x8bd processes your personal information only for specific, legitimate purposes. We do not use your data for purposes incompatible with those listed below, and we do not engage in large-scale automated profiling that produces legal or similarly significant effects on individual players.

1. Account Management: To create, authenticate, and maintain your x8bd player account, including verifying your identity, enabling secure login, and managing account settings and preferences.
2. Service Delivery: To provide access to cricket betting markets (including BPL, IPL, T20 World Cup, and other matches), casino games, fishing games, live dealer tables, and all other features of the x8bd Platform.
3. Payment Processing: To facilitate deposits via bKash, Nagad, Rocket, Upay, and bank transfer, and to process withdrawal requests to your verified payment method. Financial data is shared with payment processors only to the extent necessary to complete each transaction.
4. Identity Verification & Fraud Prevention: To verify that you meet the 18+ age requirement, confirm your identity as required by KYC obligations, detect and prevent fraudulent activity, money laundering, duplicate accounts, and other prohibited conduct described in the x8bd Terms & Conditions.
5. Responsible Gaming: To monitor betting patterns and session behaviour for indicators of problem gambling, enforce self-exclusion periods, apply deposit limits, and generate early intervention alerts in accordance with our Responsible Gaming Policy.
6. Customer Support: To respond to your enquiries, investigate disputes, process account closure requests, and communicate with you about your account status.
7. Platform Improvement: To analyse aggregated, anonymised usage data to improve the performance, reliability, and user experience of the x8bd Platform. Individual players are not identified in these internal analytics reports.
8. Legal & Regulatory Compliance: To retain records as required by applicable compliance standards, respond to lawful requests from competent authorities, and enforce our Terms & Conditions.
9. Communications: To send you transactional notifications (deposit confirmations, withdrawal updates, security alerts) and, where you have opted in, promotional communications about relevant x8bd offers. You may opt out of promotional communications at any time by contacting [email protected].

§ 04 Data Sharing & Third Parties

x8bd does not sell or rent your personal information to any third party. We share data only in the limited circumstances described below, and only to the minimum extent necessary for each stated purpose.

Categories of third parties with whom x8bd may share your data:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard receive transaction data (e.g., your account identifier and transaction amount) solely to process deposits and withdrawals. These providers operate under their own privacy policies and are independently regulated.
• Identity Verification Partners: x8bd works with KYC and anti-money laundering (AML) service providers to verify the identity and age of players. Your identity document data is shared with these providers under strict data processing agreements that prohibit secondary use.
• Game Technology Providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session tokens to facilitate game delivery. These providers do not receive your name, payment details, or contact information.
• IT & Hosting Infrastructure: x8bd's servers and cloud infrastructure providers may process your data as part of operating the Platform. All hosting partners are contractually required to implement security measures equivalent to those applied by x8bd itself.
• Legal & Regulatory Authorities: x8bd may disclose personal information to law enforcement agencies, regulatory bodies, or courts when required by applicable law, court order, or when x8bd reasonably believes disclosure is necessary to protect the rights, property, or safety of x8bd, our players, or the public.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of assets involving x8bd, player data may be transferred to the successor entity, subject to the same privacy protections described in this Policy. Players will be notified of any such transfer via their registered email address in advance.

§ 05 Cookies & Tracking Technologies

x8bd uses cookies and similar browser-based technologies to operate and improve the Platform. A cookie is a small text file stored on your device by your web browser when you visit a website. Cookies allow the Platform to recognise your device across page visits, maintain your logged-in session, and remember your preferences.

Types of cookies used by x8bd:

x8bd does not deploy third-party advertising cookies, retargeting pixels, or social media tracking scripts on the Platform. Your browsing activity on x8bd is not shared with advertising networks.

You may manage or delete cookies at any time through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your x8bd account, as the session authentication cookie is essential for secure platform operation. Disabling functional or analytics cookies will not prevent you from using the core Platform but may affect the convenience of certain features.

§ 06 Data Retention & Security

x8bd retains your personal information only for as long as is necessary for the purposes described in this Policy, or as required by applicable legal, compliance, or audit obligations. The following retention periods apply as a general guide:

• Active account data (identity, contact, financial records): Retained for the lifetime of your active x8bd account plus a minimum of 5 years following account closure, in accordance with standard financial record-keeping requirements.
• KYC/identity documents: Retained for the same period as your account data. Document images are stored in encrypted form and access is restricted to authorised compliance personnel only.
• Transaction records: Retained for a minimum of 5 years following each transaction.
• Support communications: Retained for 3 years following the resolution of each support ticket or dispute.
• Server and access logs: Retained for up to 12 months for security monitoring and fraud investigation purposes, then permanently deleted.
• Analytics data: Retained in anonymised, aggregated form only. Individual-level usage data is anonymised after 12 months.

When your data is no longer required and no legal obligation to retain it exists, x8bd will securely delete or irreversibly anonymise it.

Security Measures:

x8bd employs a layered security architecture to protect your personal information against unauthorised access, loss, misuse, disclosure, alteration, or destruction. Our key security controls include:

• 256-bit SSL/TLS encryption for all data in transit between your browser and x8bd's servers
• AES-256 encryption for sensitive data at rest, including identity documents and financial account identifiers
• Payment card numbers stored exclusively as tokenised references — raw card data is never stored on x8bd's infrastructure
• Multi-factor authentication options for player accounts (SMS OTP)
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Regular internal security reviews and vulnerability assessments
• Automated intrusion detection and anomaly monitoring systems

§ 07 Your Privacy Rights

As an x8bd player, you have a number of rights regarding the personal information we hold about you. x8bd is committed to honouring these rights promptly and without unnecessary barriers. To exercise any of the rights described below, please contact [email protected] with the subject line "Privacy Rights Request" and include your registered email address or mobile number so we can verify your identity before processing the request.

• Right of Access: You may request a copy of the personal data x8bd holds about you at any time. We will provide this information in a structured, readable format within 30 days of receiving a verified request. There is no charge for a single access request made in good faith within any 12-month period.
• Right to Rectification: If any personal information we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may update most account information directly from your profile settings page. For changes to identity documents or payment details, please contact our support team.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no legal obligation requires us to retain it. Please note that legal retention requirements (e.g., anti-money laundering record-keeping) may mean we are unable to fulfil an erasure request in full while those obligations subsist.
• Right to Restrict Processing: You may request that x8bd temporarily suspend the processing of your personal data in certain circumstances — for example, while you dispute the accuracy of information we hold, or while a complaint you have raised is under review.
• Right to Data Portability: You may request a machine-readable export of the personal data you provided directly to x8bd (e.g., account registration data and transaction history) for transfer to another platform.
• Right to Object to Marketing: You may opt out of receiving promotional communications from x8bd at any time by replying "STOP" to any SMS notification, using the unsubscribe link in any promotional email, or contacting [email protected] directly. Opting out of marketing will not affect transactional communications (e.g., deposit confirmations, security alerts).
• Right to Lodge a Complaint: If you are dissatisfied with how x8bd has handled your personal data or a privacy rights request, you have the right to raise a complaint through x8bd's internal dispute resolution process (contact [email protected]). x8bd will acknowledge all privacy complaints within 5 business days and provide a substantive response within 30 days.

§ 08 Contact & Policy Updates

x8bd welcomes questions, comments, and requests relating to this Privacy Policy. If you have concerns about how your personal data is being handled, or if you wish to exercise any of the rights described in Section 7, please contact our support team using the details below.

Primary Contact: [email protected]
(Plain text only — do not send sensitive financial information via email. Identity verification requests will be handled through a secure verification flow.)

Response Times: x8bd aims to acknowledge all privacy-related enquiries within 2 business days. Substantive responses to rights requests and complaints will be provided within 30 days. In the case of complex requests, we may extend this period by an additional 30 days, in which case we will notify you of the extension before the initial 30-day period expires.

Policy Updates: This Privacy Policy was last updated in January 2026. x8bd reviews this Policy at least annually and following any significant change in our data practices, technology infrastructure, or applicable legal requirements. The date shown in the "Last Updated" badge at the top of this page will be revised whenever a substantive update is made. We encourage you to review this page periodically to stay informed about how x8bd protects your data.

Where a proposed change to this Policy would materially reduce your privacy rights or significantly alter the way we process your personal information, x8bd will provide at least 14 days' advance notice via your registered email address before the change takes effect. Your continued use of x8bd following that notice period constitutes acceptance of the revised Policy.