Your Privacy Is Our Commitment

1. Introduction

This Privacy Policy ("Policy") describes how 8l88 ("8l88", "we", "us", "our") collects, uses, stores, and protects the personal information of players and visitors ("you", "your", "User") who access or use the 8l88.io platform, including all associated games, betting markets, casino products, and support services.

This Policy forms part of our overall Terms & Conditions and should be read alongside them. By creating an account on 8l88.io or by continuing to use the platform after this Policy has been published, you consent to the data practices described herein. If you do not agree with any part of this Policy, you should discontinue use of the platform immediately and request account closure.

8l88 is committed to protecting the privacy and personal data of every player, particularly given the sensitivity of financial and identity data involved in online gaming and sports betting. This commitment extends to all players based in Bangladesh and is reflected in our technical and operational processes.

Effective Date: 1 January 2026. This Policy supersedes all previous versions.

2. Personal Data We Collect

8l88 collects the following categories of personal data, depending on how you interact with the platform:

Category	Examples	When Collected
Identity Data	Full legal name, date of birth, NID / passport number, photograph	Registration & KYC verification
Contact Data	Mobile number (+880), email address	Registration
Financial Data	bKash / Nagad / Rocket wallet numbers, bank account details, transaction history, deposit and withdrawal records	First deposit onward
Gaming & Betting Data	Game history, bet records, session duration, win/loss records, bonus usage	During gameplay
Technical Data	IP address, device type, operating system, browser type, device ID, mobile network operator	Every platform visit
Location Data	Approximate geographic location derived from IP address (country, region, city)	Every platform visit
Communications Data	Support chat transcripts, email correspondence, WhatsApp messages sent to support	When you contact support
Preference Data	Language settings, notification preferences, self-imposed responsible gaming limits	Account settings updates

We do not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where identity verification documents incidentally contain such information (e.g., a photograph on a National Identity Card). Such incidental data is used solely for identity verification purposes and is not processed for any other reason.

3. How We Collect Your Data

8l88 collects personal data through the following means:

• Direct provision: Information you provide when you register an account, complete KYC, make a deposit, contact customer support, or update your account settings.
• Automated collection: Technical and usage data collected automatically when you access the platform via our servers, cookies, log files, and analytics systems.
• Third-party sources: Identity verification data cross-referenced with government-issued identity databases where applicable for KYC compliance; payment confirmation data received from mobile financial service providers such as bKash, Nagad, and Rocket.
• Game provider data feeds: Bet placement and game result data transmitted by our software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, which is necessary to maintain accurate account balances and betting histories.

4. How We Use Your Personal Data

8l88 uses collected personal data for the following defined purposes:

• Account creation and management: To set up, verify, and maintain your player account on 8l88.io.
• Identity verification and KYC: To confirm your identity and age (21+) as required under our responsible gaming commitments and anti-money-laundering obligations.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank transfer channels.
• Platform provision: To deliver the games, betting markets, live casino, and all other features you access on 8l88.io.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, abuse of promotional offers, money laundering, and unauthorised account access.
• Customer support: To respond to your enquiries, complaints, and requests submitted via email, WhatsApp, or live chat.
• Responsible gaming: To monitor gaming behaviour for indicators of problem gambling and to administer self-exclusion, deposit limits, and cooling-off periods when requested.
• Legal and regulatory compliance: To comply with applicable laws, court orders, and regulatory requirements.
• Service improvement: To analyse platform usage patterns and improve the user experience, game selection, and platform performance — using aggregated or anonymised data wherever possible.
• Marketing communications: To send you promotional offers and platform updates, where you have opted in to receive such communications. You may opt out at any time by contacting [email protected].

5. Legal Basis for Processing

Every data processing activity at 8l88 is conducted under one of the following legal bases:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as a registered player — including account maintenance, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable laws, including anti-money-laundering regulations, age verification requirements, and financial reporting obligations.
• Legitimate interests: Processing carried out in pursuit of our legitimate business interests — such as fraud detection, platform security, and service improvement — where those interests do not override your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You retain the right to withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

8l88 does not sell your personal data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank — to process your deposits and withdrawals.
• Game software providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed studios — limited to the data required to operate the games you play.
• Identity verification services: Third-party KYC and anti-fraud vendors who assist in verifying your identity and preventing financial crime.
• IT and hosting infrastructure providers: Cloud hosting and server infrastructure providers who process data on our behalf under strict data processing agreements.
• Legal and regulatory authorities: Government bodies, law enforcement agencies, or courts where disclosure is required by law or a valid legal order.

All third parties with whom 8l88 shares personal data are contractually required to implement appropriate security measures and to process your data only in accordance with our documented instructions and applicable data protection law.

7. Cookies & Tracking Technologies

8l88 uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the platform to function. These cookies manage your login session, security tokens, and platform state. They cannot be disabled without breaking core platform functionality.
• Performance cookies: Used to collect anonymous, aggregated information about how players use the platform — such as which pages are visited most frequently — helping us identify areas for improvement.
• Functional cookies: Store your preferences such as language settings, notification choices, and display settings to improve your experience on return visits.
• Analytics cookies: Provided by our analytics platform to help us understand traffic patterns and usage behaviour. Data collected is pseudonymised and aggregated.

You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your 8l88 account. Our platform does not currently respond to browser "Do Not Track" signals, but we respect opt-out choices made through account preferences.

8. Data Retention

8l88 retains your personal data for as long as your account remains active and for a defined period thereafter, in accordance with our legal obligations and legitimate interests. Specific retention periods are as follows:

• Account and identity data: Retained for the lifetime of your account plus a minimum of 5 years after account closure, to comply with anti-money-laundering and financial record-keeping requirements.
• Transaction and payment records: Retained for a minimum of 5 years from the date of the transaction, in line with financial compliance requirements.
• Gaming history: Retained for a minimum of 3 years from the date of each session to support dispute resolution and responsible gaming monitoring.
• Support communications: Retained for 2 years from the date of your last communication with our support team.
• Technical and log data: Retained for up to 12 months from collection, after which it is deleted or anonymised.
• Marketing consent records: Retained for the duration of your account plus 2 years after opt-out, to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be associated with you as an individual.

9. Security Measures

8l88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and our servers
• Encryption at rest for all personally identifiable and financial data stored in our databases
• Strict role-based access controls limiting internal access to personal data on a need-to-know basis
• Multi-factor authentication requirements for all internal systems that process personal data
• Regular penetration testing and vulnerability assessments conducted by our security team
• Continuous monitoring of systems for anomalous access patterns and potential security incidents
• Incident response procedures to contain, investigate, and report any data breaches in a timely manner

While we take every reasonable precaution, no internet-based system is entirely immune to security risks. You are responsible for maintaining the security of your own account credentials. If you suspect your account has been compromised, contact us immediately at [email protected].

10. Third-Party Services & External Links

The 8l88 platform integrates with third-party game providers and payment processors as described in Section 6. These third parties operate their own privacy policies and data protection practices. While we partner only with reputable, licensed providers, 8l88 is not responsible for the privacy practices of external third-party services.

The 8l88 platform does not contain links to external websites beyond those necessary for platform operation. Should any such links appear (for example, links to game provider certification pages), please be aware that those sites operate under their own privacy policies, which we encourage you to review before providing any personal data to them.

11. Children's Privacy & Age Restriction

8l88 operates a strict 21+ age policy. The platform is not directed at, and does not knowingly collect personal data from, individuals under the age of 21. Any account found to belong to a person under the age of 21 will be permanently closed, any deposited funds will be refunded where legally required, and all winnings will be voided.

If you are a parent or guardian and believe that a minor in your care has registered on 8l88.io, please contact us immediately at [email protected]. We will investigate and take appropriate action, including permanent account closure and deletion of the minor's data, as swiftly as possible.

12. Exercising Your Data Rights

To exercise any of the data rights outlined in this Policy (access, rectification, erasure, restriction, portability, objection, or withdrawal of consent), please submit a written request to our Data Protection team at [email protected] with the subject line "Data Rights Request". Please include:

• Your registered username on 8l88.io
• The specific right you wish to exercise
• Any relevant details or supporting context for your request

We will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. We reserve the right to request identity verification before processing sensitive data rights requests.

Please note that certain data rights may be limited where we are required to retain your data by law — for example, where anti-money-laundering regulations mandate a minimum retention period for financial records. In such cases, we will explain the limitation clearly in our response to your request.

13. Changes to This Privacy Policy

8l88 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered players via the mobile number or email address on file, and the "Effective Date" at the top of this page will be updated accordingly.

We encourage you to review this Policy periodically to stay informed about how we protect your data. Continued use of the platform after the updated Policy takes effect constitutes your acceptance of the revised terms. If you do not agree with the changes, you may close your account by contacting [email protected] before the revised Policy becomes effective.

14. Contact & Data Enquiries

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way 8l88 handles your personal data, please contact our support team through the following channels:

• Email: [email protected] — subject line: "Privacy Enquiry"
• WhatsApp: +880 1700 000 000
• Live Chat: Available 24/7 via the platform (Bangladesh Standard Time, UTC+6)

We treat all privacy-related enquiries with the highest priority. Our support team is available around the clock to address your concerns and ensure your data rights are fully respected at 8l88.