Privacy Policy at
8bdt — Your Data, Protected
At 8bdt, protecting the personal information of our players is a core responsibility, not an afterthought. This Privacy Policy explains what data we collect when you use our platform, why we collect it, how it is stored and secured, and what rights you have over your own information. We are committed to transparency and handle all personal data in accordance with internationally recognised data protection principles.
Privacy at a Glance
Six Core Privacy Commitments
A summary of how 8bdt approaches your personal data — built around transparency, security, and your right to control your own information.
All personal data stored by 8bdt is protected using AES-256 encryption at rest and TLS 1.2+ in transit. Your account credentials are never stored in plain text under any circumstances.
8bdt does not sell, rent, or trade your personal data to third-party marketers or data brokers. Your information is used only to operate, secure, and improve the 8bdt platform and services.
We collect only the data we genuinely need to deliver our services, comply with legal obligations, and protect against fraud. We do not collect data speculatively or beyond what is necessary.
This Privacy Policy describes every category of data we collect and every purpose for which it is used. Nothing is hidden. If our data practices change, we notify registered players before the changes take effect.
Verified 8bdt players may request deletion of their personal data at any time, subject to legal retention obligations. Erasure requests are processed within 30 days of verification of identity.
We use cookies to keep the platform functional and to understand how players interact with it. Non-essential analytics cookies can be declined. Full details are in the Cookies section of this policy.
Section 1
Data We Collect
When you use the 8bdt platform — whether you are browsing as a guest, registering an account, depositing funds, placing bets, or contacting our support team — we may collect certain categories of personal data. We collect only what is necessary for the stated purpose. Below is a complete breakdown of every category of data 8bdt may hold about you and the context in which it is collected.
Registration & Identity Data
When you create an account on 8bdt, we collect the information you provide during the registration form, including your full legal name, date of birth, residential address (including city and country — for players in Bangladesh this typically includes Dhaka, Chittagong, Sylhet, Khulna, or other divisions), email address, and the mobile number associated with your bKash or Nagad account if provided. This data is used to create and manage your account, verify your identity, and fulfil our Know Your Customer (KYC) obligations.
Identity Verification (KYC) Documents
To comply with anti-money laundering (AML) regulations and to verify that players are aged 18 or above, 8bdt may request copies of government-issued identity documents. Accepted documents include the Bangladesh National Identity Card (NID), passport, and driving licence. These documents are processed securely, stored in encrypted form, and are never shared with parties other than those described in Section 3 of this policy.
Financial & Transaction Data
We record all deposit and withdrawal transactions made through your 8bdt account. This includes the transaction amount in BDT (৳), the payment method used (bKash, Nagad, Rocket, Upay, Visa, or Mastercard), transaction reference numbers, timestamps (in Bangladesh Standard Time, UTC+6), and transaction status. We do not store full card numbers or mobile banking PINs — these are handled directly by your payment provider.
Gaming & Betting Activity Data
8bdt logs all gaming and betting activity associated with your account. This includes the games played, bets placed, stakes wagered, outcomes, winnings and losses, bonus usage, and session durations. This data is used to calculate your account balance accurately, detect irregular patterns that may indicate problem gambling or fraud, and comply with regulatory reporting obligations.
Technical & Device Data
When you access the 8bdt platform via a browser or mobile device, our servers automatically record certain technical information. This includes your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session timestamps. This data is used for platform security, fraud prevention, and aggregate analytics. It is not used to build individual advertising profiles.
Communications Data
If you contact 8bdt via live chat, email, or WhatsApp, we retain records of those communications including the content of messages, the date and time of contact, and the resolution outcome. This allows us to provide consistent support and to reference prior interactions if a dispute arises. Support communications are retained for a minimum of 24 months.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity Data | Name, date of birth, address, email | Account creation, KYC, communications |
| Verification Documents | NID, passport, driving licence | Age & identity verification (18+ compliance) |
| Financial Data | Transaction amounts, payment method, timestamps | Cashier processing, AML compliance |
| Gaming Activity | Bets placed, game sessions, outcomes | Balance accuracy, fraud detection, responsible gaming |
| Technical Data | IP address, browser, device type | Security, fraud prevention, analytics |
| Communications | Support chat logs, email threads | Customer service, dispute resolution |
Section 2
How We Use Your Data
8bdt processes your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was collected. Every processing activity described below is grounded in one of the following legal bases: performance of a contract (your account agreement with 8bdt), compliance with a legal obligation, our legitimate interests (provided those interests are not overridden by your rights), or your explicit consent where required.
Account Management & Service Delivery
Your identity and contact data is used to create, manage, and maintain your 8bdt account. This includes processing logins, maintaining your account balance, crediting deposits, processing withdrawal requests, and delivering promotional offers you have opted into. Without this processing, we cannot provide the 8bdt service to you.
Identity Verification & Regulatory Compliance
8bdt is required under international gaming regulations and AML frameworks to verify the identity and age of all registered players. We use your registration data and KYC documents to fulfil this obligation. Players who do not complete identity verification may have withdrawal requests held until verification is satisfactory.
Fraud Prevention & Platform Security
Technical data, financial transaction records, and gaming activity logs are analysed — both by automated systems and by our compliance team — to detect and prevent fraudulent activity, bonus abuse, money laundering, and unauthorised account access. This processing is in the legitimate interests of 8bdt and of honest players on the platform.
Responsible Gaming Monitoring
8bdt uses gaming activity data to identify patterns that may indicate problem gambling behaviour, such as significantly increased bet sizes, extended uninterrupted play sessions, or repeated loss-chasing patterns. Where such patterns are detected, our responsible gaming team may make proactive contact with the player to offer support tools including deposit limits, cooling-off periods, or self-exclusion. This processing is in the vital interests of our players.
Customer Support
Communications data and account history are used by our support team to respond to your enquiries, resolve disputes, and provide continuity of service. Support agents access only the data necessary to handle a specific enquiry and are bound by strict confidentiality obligations.
Marketing Communications
If you have opted in to receive marketing communications from 8bdt, we will use your email address and, where applicable, your mobile number to send you information about promotions, bonuses, seasonal offers (such as BPL, IPL, or Eid promotions), and new game launches. You may withdraw your marketing consent at any time by contacting [email protected] or by using the unsubscribe link in any marketing email.
Section 3
Data Sharing & Third Parties
8bdt does not sell your personal data to any third party, ever. We do not share your data with advertisers, data brokers, or social media platforms for the purpose of building advertising profiles. Data sharing with external parties is limited strictly to what is necessary to operate the platform, comply with legal obligations, and protect the security of our players.
Categories of Third Parties We Share Data With
- Payment Processors: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, your transaction details are shared with the relevant payment processor solely for the purpose of completing that transaction. Each payment partner operates under its own privacy policy and is bound by applicable financial regulations.
- Game Studio Partners: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive your account session token and bet data in order to deliver their games to you within the 8bdt platform. They do not receive your full identity data, payment details, or communications history.
- KYC & Identity Verification Services: 8bdt uses third-party identity verification providers to assist with document checks and age verification. These providers process your KYC documents on our behalf under strict data processing agreements and are not permitted to use your data for any purpose other than the verification service they provide to 8bdt.
- Fraud Prevention & AML Services: We share technical and transaction data with fraud prevention and AML compliance service providers who help us identify suspicious activity. These services are used only for risk analysis and regulatory compliance.
- Legal & Regulatory Authorities: 8bdt will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by a valid legal order, court injunction, or applicable law. We will notify you of any such disclosure to the extent permitted by law.
- IT Infrastructure Providers: Our platform is hosted on secure cloud infrastructure. The cloud service providers we use act as data processors under our instruction and are contractually prohibited from accessing or using your data for any purpose beyond providing hosting services.
International Data Transfers
As an internationally operated platform, some of 8bdt's service providers are located outside Bangladesh. Where personal data is transferred internationally, 8bdt ensures that appropriate safeguards are in place, such as standard contractual clauses or equivalent data protection frameworks. We do not transfer personal data to countries without adequate data protection standards without first implementing compensating controls.
Section 4
Cookies & Tracking Technologies
The 8bdt website uses cookies and similar tracking technologies to make the platform function correctly, to remember your preferences, and to understand how players use the site in aggregate. This section explains exactly what types of cookies we use, why we use them, and how you can control them.
What Are Cookies?
Cookies are small text files that a website stores on your device when you visit it. They allow the website to remember information about your visit — such as your preferred language, your session status, or items in a cart — across different pages and between visits. Cookies set by the website you are visiting are called first-party cookies; those set by third-party services embedded in a page are called third-party cookies.
Types of Cookies Used by 8bdt
| Cookie Type | Purpose | Can Be Declined? |
|---|---|---|
| Strictly Necessary | Session management, login state, security tokens, CSRF protection. Required for the platform to function. | No — essential to service delivery |
| Functional | Remembering your language preference, display settings, and game lobby layout choices. | Yes — optional but improves experience |
| Analytics | Aggregate, anonymised data on page views, session length, navigation paths, and feature usage — used to improve the platform. | Yes — can be declined |
| Fraud Prevention | Device fingerprinting tokens used to detect suspicious login patterns and multi-account abuse. | No — required for platform security |
Third-Party Cookies
Some 8bdt game studio partners (such as Pragmatic Play and Evolution Gaming) may set their own cookies when their game content loads within the 8bdt platform. These cookies are governed by the respective studios' own privacy policies. 8bdt does not control these cookies directly but we limit the data accessible to game studio scripts to the minimum necessary for game delivery.
Managing & Declining Cookies
You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies, or to receive a notification before a cookie is stored. Note that disabling strictly necessary or fraud prevention cookies will prevent you from logging in to your 8bdt account or may cause instability in the platform. Instructions for managing cookies in common browsers:
- Google Chrome: Settings → Privacy and Security → Cookies and other site data
- Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data
- Safari (iOS/macOS): Settings → Safari → Privacy & Security
- Microsoft Edge: Settings → Cookies and Site Permissions
- Samsung Internet (Android): Settings → Privacy → Smart Anti-Tracking
Section 5
Data Retention & Deletion
8bdt retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. We do not retain data indefinitely and conduct periodic reviews of our data holdings to identify and securely delete data that is no longer required.
Standard Retention Periods
| Data Category | Retention Period | Basis for Retention |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | AML / regulatory compliance |
| KYC verification documents | Duration of account + 5 years after closure | Legal obligation (AML regulations) |
| Financial transaction records | 7 years from transaction date | Financial record-keeping regulations |
| Gaming & betting activity logs | 3 years from last activity | Dispute resolution, responsible gaming |
| Support communications | 24 months from last interaction | Customer service continuity |
| Technical / device logs | 12 months from collection | Security monitoring |
| Marketing preferences | Until consent is withdrawn | Consent-based processing |
Account Deletion Requests
If you close your 8bdt account voluntarily, or if your account is closed by 8bdt, most personal data associated with your account will be anonymised or deleted within 30 days of the closure date. However, where legal retention obligations apply (such as the 5-year AML record-keeping requirement), the relevant data will be retained in a restricted, access-controlled state for the required period before being permanently deleted.
Section 6
Data Security Measures
Protecting your personal data from unauthorised access, disclosure, alteration, or destruction is a priority for 8bdt. We implement a layered security architecture that addresses risks at the technical, organisational, and operational levels. Below is an overview of the key security controls in place on the 8bdt platform.
Technical Security Controls
- Transport Layer Encryption: All data transmitted between your browser or device and the 8bdt servers is encrypted using TLS 1.2 or higher. The padlock icon in your browser confirms that your connection to 8bdt.im is encrypted.
- Encryption at Rest: Personal data stored in 8bdt databases — including identity documents, account data, and transaction records — is encrypted using AES-256 encryption. Encryption keys are stored separately from the encrypted data and are rotated on a regular schedule.
- Password Security: Account passwords are hashed using a strong one-way hashing algorithm with a unique salt per account. 8bdt staff cannot see your password in plain text. This is why our support team will never ask you for your password.
- Access Controls: Access to personal data within 8bdt's internal systems is restricted on a strict need-to-know basis using role-based access control (RBAC). Staff who do not require access to personal data in order to perform their role cannot access it.
- Intrusion Detection: 8bdt's platform is monitored continuously by automated intrusion detection and anomaly detection systems. Unusual access patterns trigger immediate alerts to our security team for investigation.
- Vulnerability Management: The 8bdt platform undergoes regular security assessments, penetration testing, and dependency vulnerability scans. Critical vulnerabilities are patched within 48 hours of identification.
Organisational Security Controls
- All 8bdt employees and contractors who handle personal data are required to complete data protection training at onboarding and on an annual basis.
- Staff are bound by contractual confidentiality obligations that survive the termination of their engagement with 8bdt.
- Data access logs are reviewed periodically to detect any inappropriate internal access to player data.
- In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 8bdt will notify affected players without undue delay and will take immediate steps to contain the breach and mitigate its impact.
Section 7
Your Privacy Rights
As a player on the 8bdt platform, you have a meaningful set of rights over your personal data. These rights are provided to you in accordance with internationally recognised data protection principles. 8bdt is committed to honouring these rights promptly and without imposing unnecessary obstacles. To exercise any of the rights described below, please contact us at [email protected] with the subject line "Privacy Rights Request".
Right of Access
You have the right to request a copy of all personal data that 8bdt holds about you. This is sometimes called a Subject Access Request (SAR). Upon receiving a verified SAR, 8bdt will provide a structured summary of your data within 30 calendar days. There is no charge for a standard SAR.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account information (such as your email address) directly through your account settings. For corrections to identity or KYC data, please contact support so that a compliance team member can assist you through the verified amendment process.
Right to Erasure ("Right to be Forgotten")
You have the right to request the deletion of your personal data from 8bdt's systems. We will honour erasure requests in full where no legal retention obligation prevents deletion. Where certain data must be retained (for example, financial transaction records subject to a 7-year retention period under AML regulations), we will inform you clearly of the specific data that cannot yet be deleted and the expected deletion date.
Right to Restriction of Processing
In certain circumstances — for example, if you contest the accuracy of data we hold, or if you have objected to our processing your data and the objection is under assessment — you may request that we restrict our use of your data to storage only, pending resolution of the matter.
Right to Data Portability
Where 8bdt processes your data on the basis of your consent or as part of a contract with you, and that processing is carried out by automated means, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format (such as JSON or CSV) so that you can transfer it to another service if you choose.
Right to Object to Marketing
You have the right to object to the processing of your personal data for direct marketing purposes at any time. If you no longer wish to receive promotional communications from 8bdt, you may withdraw your marketing consent by emailing [email protected] or by clicking the unsubscribe link in any marketing email. Withdrawal of marketing consent does not affect the lawfulness of processing conducted before the withdrawal.
Response Timeframes
- Access requests (SARs): responded to within 30 calendar days.
- Rectification requests: completed within 14 calendar days of identity verification.
- Erasure requests: processed within 30 calendar days, with confirmation of deletion sent to your registered email.
- Marketing opt-out: effective within 5 business days of receiving your request.
Section 8
Contact & Data Controller
If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have a concern about the way 8bdt handles your personal data, please contact us using the details below. We aim to respond to all privacy-related enquiries within 5 business days and to resolve substantive concerns within 30 calendar days.
Data Controller
8bdt operates as an internationally licensed online casino and sports betting platform. For the purposes of this Privacy Policy, 8bdt is the data controller responsible for determining the purposes and means by which your personal data is processed. All data protection enquiries should be directed to our support team, who will escalate to the relevant compliance officer where necessary.
How to Contact Us
- Email (General & Privacy Enquiries): — Subject line: "Privacy Rights Request" for data subject rights, or "Privacy Enquiry" for general questions.
- Live Chat: Available 24 hours a day, 7 days a week via the 8bdt platform. Live chat agents can handle general privacy questions and log formal rights requests on your behalf.
- WhatsApp Support: Available 8 AM to 12 AM Bangladesh Standard Time (UTC+6). WhatsApp is suitable for general enquiries; formal rights requests should be submitted by email for audit-trail purposes.
- Response Language: All privacy communications are handled in English.
Updates to This Privacy Policy
8bdt reviews this Privacy Policy periodically and updates it when our data practices change, when new regulatory obligations arise, or when we introduce new features that affect how personal data is processed. When material changes are made, we will notify registered players by email at least 14 days before the changes take effect. The "Last Updated" date at the top of this page always reflects the date of the most recent revision. Continued use of the 8bdt platform after the effective date of any update constitutes acceptance of the revised policy.
Continue Exploring 8bdt
Ready to Play? Your Privacy Is Protected.
Now that you know exactly how 8bdt handles your personal data, explore our full range of casino games and sports betting markets — all secured with the privacy protections described in this policy.