Privacy Policy

1. Introduction

8mbats ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all individuals who visit, register with, or use the services available at 8mbats.app ("the Platform"). This Privacy Policy ("Policy") sets out the categories of personal data we collect, the purposes for which that data is used, the legal bases on which processing is carried out, the circumstances under which data may be shared, and the rights available to individuals in respect of their personal data.

This Policy is intended to be read alongside the 8mbats Terms & Conditions and Responsible Gaming Policy. Together, these documents form the complete framework governing your relationship with the 8mbats platform. Where any conflict exists between this Policy and the Terms & Conditions on the subject of personal data, this Policy shall prevail.

8mbats operates as a safe and reliable online betting and gaming platform. We apply internationally recognised data protection principles — including purpose limitation, data minimisation, storage limitation, and data integrity — to all personal data processing activities, regardless of the jurisdiction from which a player accesses the platform.

2. Data Controller

For the purposes of this Policy, 8mbats acts as the data controller in respect of personal data collected from players, prospective players, and visitors to 8mbats.app. As data controller, 8mbats determines the purposes and means of processing personal data collected through the platform. Where 8mbats engages third-party service providers to process personal data on its behalf, such providers act as data processors under contractual arrangements that require them to process data only in accordance with 8mbats's documented instructions and to implement appropriate technical and organisational security measures.

3. Data We Collect

8mbats collects personal data in three primary ways: directly from you when you register or interact with the platform; automatically through your use of the platform; and, in limited circumstances, from trusted third-party sources for the purposes of identity and payment verification.

3.1 Data You Provide Directly

When you register an account, make a deposit or withdrawal, contact our support team, or participate in a promotion, you may provide the following categories of personal data:

• Identity data: full name, date of birth, gender, national identification number or passport number;
• Contact data: email address, mobile phone number, residential address (including city, district, and postcode);
• Financial data: mobile financial service (MFS) account details (bKash, Nagad, Rocket, Upay), bank account details, payment card details (Visa, Mastercard — processed via our payment partners, not stored on 8mbats servers), and transaction history;
• Verification data: copies of government-issued identity documents, proof of address documents, and selfie photographs submitted for KYC (Know Your Customer) purposes;
• Communications data: the content of any correspondence you send to 8mbats support via email or live chat, including complaint records and support ticket history.

3.2 Data Collected Automatically

When you access 8mbats.app, our servers and analytics systems automatically collect the following technical and behavioural data:

• Device and access data: IP address, device type, operating system, browser type and version, screen resolution, and time zone setting;
• Usage data: pages visited, features used, games played, bets placed, session duration, click-path data, and search queries entered within the platform;
• Cookie and tracking data: session identifiers, preference cookies, and first-party analytics identifiers. See Section 8 for full cookie details.

3.3 Data from Third Parties

In limited circumstances, 8mbats may receive personal data about you from third-party sources, including:

• Identity verification and age-check service providers, who confirm the accuracy of the details you have provided during registration;
• Payment processors, who confirm the status and outcome of deposit and withdrawal transactions;
• Fraud-prevention and anti-money-laundering screening services, which may flag accounts or transactions associated with known fraudulent activity or financial crime risk indicators.

4. How We Use Your Personal Data

8mbats uses the personal data it collects for specific, documented purposes. The table below summarises the primary purposes, the categories of data involved, and the legal basis for each processing activity.

8mbats will not use your personal data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required, obtaining your consent.

5. Legal Basis for Processing

5.1 Contract Performance: The majority of personal data processing carried out by 8mbats is necessary for the performance of the contract between you and 8mbats — specifically, the Terms & Conditions you accept upon registration. This includes processing your identity data to create your account, your financial data to process transactions, and your contact data to communicate with you about your account.

5.2 Legal Obligation: Certain processing activities are required by applicable law. In particular, identity verification, age verification, anti-money-laundering (AML) screening, and the retention of financial transaction records are carried out because 8mbats is legally obligated to maintain these controls and records.

5.3 Legitimate Interests: Where processing is not required for contract performance or legal compliance, 8mbats may process personal data on the basis of its legitimate interests — for example, in preventing fraud, maintaining platform security, monitoring for responsible gaming indicators, and improving service quality through analytics. When relying on legitimate interests, 8mbats has assessed that such interests are not overridden by the rights and interests of the data subjects concerned.

5.4 Consent: Where 8mbats seeks to use your personal data for optional purposes — such as sending you promotional emails or SMS messages about new games, bonuses, or special offers — we will ask for your explicit consent at the point of registration or subsequently. You may withdraw consent at any time by contacting our support team or adjusting your account communication preferences.

6. Data Sharing and Disclosure

6.1 8mbats does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes. Data is shared only where strictly necessary for the operation of the platform and only with the categories of recipient described below.

6.1 Payment Processors

To process deposits and withdrawals, 8mbats shares relevant financial and identity data with approved payment processing partners, including MFS providers (bKash, Nagad, Rocket, Upay), banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), and card payment networks (Visa, Mastercard). These partners receive only the minimum data required to complete the relevant transaction and are contractually prohibited from using it for any other purpose.

6.2 Game and Content Providers

Certain game providers (including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi) may receive a session token or pseudonymous player identifier to authenticate your gaming session. These providers do not receive your full identity or payment data.

6.3 Identity Verification and Fraud Prevention

8mbats uses third-party KYC and AML service providers to verify the identity of players and to screen for fraud and financial crime risk. These providers process identity data and verification documents solely for the purposes of identity confirmation and risk assessment.

6.4 Legal and Regulatory Disclosure

8mbats may disclose personal data where required to do so by applicable law, court order, or the lawful request of a competent government authority. In such cases, 8mbats will disclose only the minimum data required to satisfy the legal obligation and will, where legally permitted, inform the relevant player of the disclosure.

6.5 Business Transfers

In the event that 8mbats undergoes a merger, acquisition, or sale of substantially all of its assets, player personal data may be transferred to the acquiring entity as part of the transaction. In such circumstances, 8mbats will notify affected players and ensure that the acquiring entity is bound by privacy obligations at least as protective as those set out in this Policy.

7. Data Retention

8mbats retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or to comply with applicable legal and regulatory retention obligations. The following general retention periods apply:

• Account and identity data: retained for the duration of your active account plus five (5) years following account closure, to satisfy AML and financial record-keeping obligations;
• Transaction records: retained for seven (7) years from the date of the transaction in accordance with standard financial record-keeping requirements;
• KYC and verification documents: retained for five (5) years following account closure or the conclusion of any related investigation;
• Customer support communications: retained for three (3) years from the date of the most recent interaction;
• Analytics and usage data: retained in aggregated, anonymised form indefinitely; individual-level data retained for up to twenty-four (24) months;
• Marketing consent records: retained for three (3) years from the date of consent or withdrawal of consent, whichever is later.

At the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised such that it can no longer be attributed to an identifiable individual.

8. Cookies and Tracking Technologies

8mbats uses cookies and similar tracking technologies on 8mbats.app to enable essential platform functionality, maintain session security, and collect analytics data that helps us improve the player experience.

8.1 Essential Cookies

These cookies are strictly necessary for the platform to function. They include session authentication tokens, CSRF (cross-site request forgery) protection tokens, and load-balancing identifiers. Without these cookies, the platform cannot operate correctly and login sessions cannot be maintained. These cookies are placed automatically and do not require your consent.

8.2 Analytics Cookies

8mbats uses first-party analytics cookies to understand how players navigate the platform, which features are used most frequently, and where technical errors occur. This data is collected in aggregate and is used solely to improve platform performance and usability. These cookies do not track you across third-party websites.

8.3 Preference Cookies

Preference cookies store your platform settings such as your preferred language, display settings, and notification preferences. These cookies improve your experience by ensuring the platform remembers your choices between sessions.

8.4 Cookie Management

You can manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies will prevent you from logging in and using core platform features. Disabling analytics or preference cookies will not prevent you from using the platform but may result in a less personalised experience.

9. Security Measures

8mbats implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS 1.2 / 1.3 encryption for all data in transit between your device and 8mbats servers;
• AES-256 encryption for personal and financial data stored at rest;
• Bcrypt hashing for all account passwords — passwords are never stored in plain text;
• Role-based access controls that restrict internal access to personal data to staff who require it to perform their duties;
• Regular third-party penetration testing and vulnerability assessments of the platform infrastructure;
• 24/7 automated intrusion detection and anomaly-monitoring systems;
• Formal data breach response procedures, including internal escalation protocols and player notification obligations where a breach poses a risk to individual rights and freedoms.

While 8mbats takes all reasonable steps to protect personal data, no method of electronic transmission or storage is completely secure. Players are also responsible for maintaining the security of their own account credentials. If you suspect that your account has been compromised, please contact support immediately.

10. Your Data Protection Rights

Subject to applicable law and certain limitations, you have the following rights in respect of your personal data held by 8mbats:

• Right of Access: You may request a copy of the personal data 8mbats holds about you, along with information about how it is used.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations.
• Right to Restriction: You may request that 8mbats restrict processing of your personal data in certain circumstances, for example while a dispute about accuracy is resolved.
• Right to Data Portability: Where processing is based on consent or contract and is carried out by automated means, you may request a machine-readable copy of your personal data for transfer to another service provider.
• Right to Object: You may object to processing based on legitimate interests, including profiling for marketing or analytics purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please submit a written request to [email protected]. 8mbats will acknowledge your request within 48 hours and respond substantively within 30 calendar days. In complex cases, this period may be extended by a further 30 days with notification to you.

11. Children's Privacy

8mbats does not knowingly collect, process, or store personal data from persons under the age of 18. The platform is intended exclusively for adults aged 18 years and above. If 8mbats becomes aware that it has inadvertently collected personal data from a person under the age of 18, it will take immediate steps to delete that data and close the associated account. If you have reason to believe that a minor has registered an account on 8mbats, please contact our support team immediately at [email protected].

12. Third-Party Links and Services

The 8mbats platform may contain references to or integrations with third-party game providers, payment services, and other service partners. While 8mbats takes care to work only with reputable partners, this Privacy Policy applies solely to personal data processed by 8mbats. 8mbats is not responsible for the privacy practices of third-party providers. Players are encouraged to review the privacy policies of any third-party services they interact with in connection with their use of the platform.

13. Changes to This Privacy Policy

8mbats reserves the right to update or revise this Privacy Policy at any time. Where a material change is made — for example, a new category of data collected, a new purpose introduced, or a change to data sharing arrangements — 8mbats will notify registered players via a notice displayed on the platform or by email to the address associated with your account. The revised Policy will take effect on the date indicated at the top of the document. Your continued use of 8mbats following the effective date of any revision constitutes your acknowledgement of the updated Policy. If you do not agree with a revised Policy, you should cease using the platform and may request account closure in accordance with the Terms & Conditions.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 8mbats processes your personal data, please contact us using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the 8mbats platform
• Response Commitment: All privacy-related queries are acknowledged within 48 hours and resolved within 30 calendar days