Your Privacy Matters
at 8mbe

Introduction

This Privacy Policy ("Policy") describes how 8mbe ("the Platform", "We", "Us", "Our") collects, uses, stores, shares, and protects the personal data of individuals ("You", "Player", "User") who visit, register on, or otherwise interact with the 8mbe website at https://8mbe.io and all associated services, mobile interfaces, and communication channels.

8mbe is committed to handling your personal information with the highest standards of care, transparency, and security. We recognise that our players in Bangladesh and beyond place considerable trust in us when they share their personal data, and we take that responsibility seriously. This Policy is written in plain, accessible English so that every player can clearly understand what data we collect and why.

By registering an account on 8mbe, making a deposit, using any feature of the platform, or simply browsing the 8mbe website, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your data as described herein. If you do not agree with the terms of this Policy, you should not create an account or use the 8mbe platform.

This Policy must be read in conjunction with the 8mbe Terms and Conditions and Responsible Gaming Policy. Capitalised terms used but not defined in this Policy carry the meanings given to them in the 8mbe Terms and Conditions.

Data Controller

For the purposes of applicable data protection law, 8mbe acts as the data controller in respect of personal data collected through the https://8mbe.io website and associated services. As data controller, 8mbe determines the purposes for which and the means by which your personal data is processed.

You may contact the 8mbe data team at any time with questions, concerns, or requests relating to your personal data. Our primary contact channel for privacy-related matters is our support email: [email protected]. Please include "Privacy Request" in the subject line to ensure your query is directed to the appropriate team member promptly.

Data We Collect

The categories of personal data that 8mbe may collect from you, depending on how you interact with the platform, are set out below.

3.1 Identity & Contact Data

When you register an account, we collect your full legal name, date of birth, gender, nationality, country of residence, and a valid contact email address. Where required for verification purposes, we may also collect your National Identity Card number, passport number, or other government-issued identification details.

3.2 Financial Data

To facilitate deposits and withdrawals, we collect details relating to your preferred payment methods. For mobile money services (bKash, Nagad, Rocket, Upay), this includes your registered mobile number. For bank transfers (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), this may include account holder name and account number. For card payments (Visa, Mastercard), we collect card type, masked card number (last four digits only), and expiry date. 8mbe does not store full card numbers — full card data is handled exclusively by our PCI-DSS compliant payment processing partners.

3.3 Technical & Usage Data

When you access the 8mbe platform, we automatically collect certain technical information, including your IP address, device type and operating system, browser type and version, session duration, pages visited, features accessed, games played, bets placed, and general interaction patterns within the platform. This data is used for security, fraud prevention, platform optimisation, and regulatory compliance.

3.4 Communications Data

When you contact our support team via email, live chat, or WhatsApp, we retain a record of the communication, including the content of the exchange, timestamps, and the resolution provided. This data is used to manage our support relationship with you, improve service quality, and maintain a record of any formal complaints or disputes.

3.5 Responsible Gaming Data

Where you make use of our responsible gaming tools — such as setting deposit limits, activating a cooling-off period, or requesting self-exclusion — we record the details and status of those restrictions. This information is used solely to enforce the restrictions you have requested and to fulfil our duty of care obligations.

Data Category	Examples	Primary Purpose
Identity & Contact	Full name, DOB, email, NID number	Account registration, KYC verification
Financial	bKash number, masked card details, bank account	Deposits, withdrawals, AML compliance
Technical & Usage	IP address, device info, session logs, game history	Security, fraud prevention, platform improvement
Communications	Support chat transcripts, email correspondence	Customer support, dispute resolution
Responsible Gaming	Deposit limits, self-exclusion records	Player protection, duty of care
Marketing Preferences	Opt-in/opt-out status, communication preferences	Targeted promotions (with consent only)

How We Collect Data

4.1 Data You Provide Directly

We collect data that you actively provide to us when you register an account, complete the KYC verification process, make a deposit or withdrawal, contact our support team, respond to a survey or promotion, or update your account preferences. You are responsible for ensuring that all data you provide is accurate, complete, and up to date.

4.2 Data Collected Automatically

When you access and navigate the 8mbe platform, our servers and analytics systems automatically collect technical and usage data as described in Section 3.3. This collection occurs through standard web technologies including server logs, session tracking identifiers, and browser-based storage mechanisms such as cookies and local storage.

4.3 Data Received from Third Parties

We may receive personal data about you from third parties in the following circumstances: identity verification agencies (to confirm the accuracy of the information you provided during registration); payment service providers (to confirm the status of deposit and withdrawal transactions); fraud detection and anti-money-laundering screening services (to identify and prevent financial crime); and, where applicable, publicly available databases used for sanctions screening and politically exposed person (PEP) checks.

How We Use Your Data

8mbe uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your 8mbe player account, including verifying your identity and age, managing your preferences, and processing account closure requests.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to maintain accurate transaction records.
• Legal & Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering (AML) laws, know-your-customer (KYC) requirements, and other legal and regulatory obligations applicable to online gaming operators serving the Bangladesh market.
• Fraud & Security: To detect, investigate, and prevent fraudulent activity, account takeovers, bonus abuse, collusion, money laundering, and any other conduct that breaches our Terms and Conditions or applicable law.
• Customer Support: To respond to your enquiries, resolve disputes, manage complaints, and generally provide you with effective support across all available channels.
• Platform Improvement: To analyse usage patterns, diagnose technical issues, test new features, and make data-driven improvements to the 8mbe platform and the range of games and services available to players.
• Responsible Gaming: To monitor gaming activity for indicators of problem gambling behaviour, enforce the responsible gaming restrictions you have set, and fulfil our duty of care to all players.
• Marketing & Promotions: Where you have opted in, to send you personalised promotional communications about 8mbe bonuses, tournaments, seasonal campaigns (such as BPL and IPL promotions, Eid offers, or Pohela Boishakh specials), and other platform updates. You may withdraw your consent at any time.

8mbe will not use your personal data for any purpose that is materially different from those listed above without first obtaining your explicit consent, unless we are required to do so by law.

Legal Basis for Processing

Every processing activity carried out by 8mbe rests on one of the following legal bases:

• Performance of a Contract: Processing necessary to provide the services you have contracted for when registering an 8mbe account — including account creation, deposits, withdrawals, gameplay, and customer support.
• Legal Obligation: Processing required for us to comply with applicable laws, including AML regulations, KYC obligations, and responses to lawful requests from competent authorities.
• Legitimate Interests: Processing necessary for 8mbe's legitimate business interests, provided those interests are not overridden by your fundamental rights. This includes fraud detection, platform security, internal analytics, and responsible gaming monitoring.
• Consent: Processing for marketing communications and certain non-essential cookies, which occurs only where you have freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without detriment.

Data Sharing

7.1 Third-Party Service Providers

8mbe shares personal data with carefully selected third-party service providers who assist us in operating the platform. These include payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard), identity verification and KYC providers, game software suppliers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), fraud detection services, cloud infrastructure providers, and customer support tooling providers. All service providers are bound by contractual data processing agreements that require them to process data only on our instructions and to maintain appropriate security standards.

7.2 Law Enforcement & Regulatory Authorities

8mbe may be required to disclose personal data to law enforcement agencies, financial intelligence units, or other competent regulatory authorities where compelled to do so by applicable law, a court order, or a lawful regulatory demand. In such cases, we will disclose only the minimum amount of data strictly required to satisfy the legal obligation and will, where legally permissible, notify you of the disclosure.

7.3 Business Transfers

In the event that 8mbe undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it, with a reasonable opportunity to object before your data is transferred to an entity operating under materially different privacy terms.

7.4 No Sale of Data

8mbe does not sell, rent, lease, or otherwise commercially exploit your personal data for the benefit of third-party advertisers, data brokers, or marketing agencies. Any sharing of data is limited strictly to the operational purposes described in this section.

Cookies & Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device on subsequent visits and to retain certain preferences or session information. 8mbe uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a defined period).

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the 8mbe platform to function correctly. They include session management cookies that keep you logged in during an active session and security cookies that help protect against cross-site request forgery and other threats. These cookies cannot be disabled without significantly impairing your ability to use the platform.
• Functional Cookies: These cookies remember your preferences, such as your preferred language, currency display settings, and responsible gaming tool configurations, so that you do not need to re-enter them on each visit.
• Analytics Cookies: These cookies collect aggregate, anonymised data about how players navigate and use the 8mbe platform. This information is used to identify areas for improvement and to optimise the overall user experience. Analytics cookies are set only where you have given your consent.
• Marketing Cookies: Where you have opted in to promotional communications, marketing cookies may be used to track which promotions you have viewed and interacted with, enabling us to send you more relevant offers. These cookies are fully opt-in and can be withdrawn at any time.

8.3 Managing Cookies

You can manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies, though disabling strictly necessary cookies may affect the functionality of the 8mbe platform. Specific instructions for managing cookies are available in your browser's help documentation.

Data Retention

8mbe retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following retention periods apply as a general guide:

Data Type	Retention Period	Reason
Account & Identity Data	Duration of account + 5 years post-closure	Legal obligation, AML compliance
Financial Transaction Records	7 years from date of transaction	Legal obligation, audit trail
KYC Verification Documents	5 years post-account closure	Regulatory requirement
Support Communications	3 years from last interaction	Dispute resolution, service improvement
Technical & Usage Logs	12 months on a rolling basis	Security, fraud detection
Marketing Preferences	Until consent withdrawn + 3 years	Proof of consent

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual. Where anonymised data is retained for analytical purposes, it is no longer considered personal data and falls outside the scope of this Policy.

Security Measures

8mbe implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Key measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and 8mbe servers
• Encryption of sensitive data fields at rest, including identity documents and financial account references
• Role-based access controls ensuring that employee access to personal data is strictly limited to what is necessary for each individual's role
• Regular security assessments, penetration testing, and vulnerability scanning of the 8mbe platform and infrastructure
• Comprehensive internal security policies, mandatory staff training on data protection, and background checks on personnel with access to sensitive data
• Incident response procedures with defined timelines for internal escalation, containment, and player notification in the event of a data security incident

While 8mbe takes every reasonable precaution to protect your data, no online platform can guarantee absolute security against all possible threats. In the unlikely event of a data breach that poses a material risk to your rights and interests, 8mbe will notify affected players promptly and take all necessary steps to mitigate harm.

Your Rights

As a player on the 8mbe platform, you have the following rights in relation to your personal data:

• Right of Access: You have the right to request a copy of the personal data 8mbe holds about you, along with information about how it is being processed. We will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update many details directly through your account settings, or by contacting our support team.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the data has been unlawfully processed. Note that this right is subject to our legal obligations — certain data must be retained for AML and regulatory compliance purposes even after account closure.
• Right to Restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of the data is being resolved.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you have the right to receive a structured, machine-readable copy of the personal data you have provided to us.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on our legitimate interests. You also have an unconditional right to object to processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact us at [email protected] with the subject line "Data Rights Request — [Your Account Username]". We will verify your identity before processing any request and will respond within 30 calendar days. In complex cases, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it.

Children & Minors

The 8mbe platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, store, or process personal data from individuals under the age of 21. During the account registration process, all applicants are required to confirm their date of birth and to certify that they meet the minimum age requirement. Where age verification checks are triggered, players must provide valid documentary evidence of their age.

If 8mbe discovers or has reason to believe that a registered account belongs to a person under the age of 21, we will immediately suspend the account, refund any remaining balance in accordance with our Terms and Conditions, and permanently delete all personal data associated with that account to the fullest extent permitted by applicable law.

If you are a parent or guardian and believe that a minor in your care has registered on the 8mbe platform or submitted personal data to us, please contact us immediately at [email protected]. We will investigate promptly and take all necessary remedial action.

International Transfers

The operation of the 8mbe platform may involve the transfer of personal data to third-party service providers whose servers or offices are located outside Bangladesh. Such transfers may occur in connection with cloud infrastructure services, game platform integrations (including providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi), and payment processing partners with global operations.

Where personal data is transferred internationally, 8mbe takes all reasonable steps to ensure that the receiving party provides an adequate level of data protection. This may be achieved through the use of standard contractual clauses, binding corporate rules, or other legally recognised transfer mechanisms. We will not transfer your personal data to any country or organisation that cannot demonstrate an adequate standard of data protection equivalent to our own commitments under this Policy.

By using the 8mbe platform, you acknowledge that your personal data may be transferred to and processed in countries outside Bangladesh. In all cases, such transfers will be carried out in compliance with applicable data protection requirements and subject to the safeguards described in this section.

Changes to This Policy

8mbe reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the features and services available on the platform. The revised Policy will be published at https://8mbe.io/privacy-policy, and the "Last Updated" date at the top of this page will be amended accordingly.

Where any change to this Policy is material — for example, a significant change to the categories of data we collect, the purposes for which we use data, or the third parties with whom we share data — 8mbe will provide reasonable prior notice to registered players via email or a prominent notice on the platform. You will have a reasonable opportunity to review the changes before they take effect.

Your continued use of the 8mbe platform following the effective date of any amended Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any changes, you should stop using the platform and may request account closure in accordance with our Terms and Conditions.

Minor amendments that do not materially alter the substance of this Policy — such as corrections to typographical errors, clarifications, or updates required by minor legal changes — may be made without advance notice and take effect immediately upon publication.

Contact & Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or the way in which 8mbe processes your personal data, please contact us through any of the following channels:

• Email: [email protected] — please use the subject line "Privacy Request" or "Data Rights Request" as appropriate
• Live Chat: Available 24 hours a day, 7 days a week, directly on the 8mbe platform
• WhatsApp: +880 1700-000000 — available during Bangladesh Standard Time (BST, UTC+6) business hours

For formal privacy complaints, please submit your concern in writing to [email protected] with the subject line "Formal Privacy Complaint — [Your Account Username]". 8mbe aims to acknowledge all formal complaints within 24 hours and to provide a full written response within 10 business days. If you remain unsatisfied with the resolution we offer, you may escalate your complaint through applicable dispute resolution channels available to you under the laws of your jurisdiction.

This Privacy Policy was last reviewed and updated on 1 January 2026 and supersedes all previous versions. By continuing to use the 8mbe platform after this date, you confirm that you have read, understood, and agreed to this Policy in full.