b8bd Privacy Policy — How We Protect Your Personal Data

This Privacy Policy (hereinafter "the Policy") describes how b8bd (referred to in this document as "b8bd", "we", "us", or "our") collects, uses, stores, shares, and protects the personal data of individuals who access or use the b8bd website at b8bd.io and all associated products, services, betting markets, and payment facilities (collectively, the "Services").

b8bd takes the privacy of its Players seriously. We are committed to handling your personal data transparently, responsibly, and in a manner consistent with applicable data protection principles. This Policy is intended to give you a clear and complete understanding of our data practices so that you can make informed decisions about using the b8bd platform.

By registering a b8bd account, making a deposit, placing a bet, or otherwise using the Services, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein. If you do not consent, you must not use the Services.

This Policy should be read alongside the b8bd Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference and form part of the overall agreement between you and b8bd.

b8bd collects personal data from you directly (when you register, deposit funds, or contact support), automatically (through your use of the platform), and from third parties (such as identity verification and payment processing partners). The categories of personal data we collect are described below.

b8bd does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, unless such data is voluntarily provided by you in the context of a support interaction or verification process.

b8bd uses the personal data we collect for the following specific purposes. We will not use your data for any purpose that is incompatible with those listed below without first obtaining your explicit consent or as required by law.

• Account Registration and Management: To create and maintain your b8bd account, verify your identity, enforce the 21+ age restriction, and manage your account settings and preferences.
• Transaction Processing: To process deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and supported banking channels, and to maintain accurate financial records of all transactions.
• Service Delivery: To provide access to sports betting markets (including cricket, football, and other events), live casino games, slots, and card games available on the b8bd platform.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bot usage, and any other conduct that violates the b8bd Terms & Conditions.
• Responsible Gaming Compliance: To monitor betting patterns, enforce deposit limits and self-exclusion requests, and identify Players who may be exhibiting signs of problem gambling behaviour.
• Customer Support: To respond to your queries, complaints, and disputes, and to maintain records of support interactions for quality and training purposes.
• Legal and Regulatory Compliance: To meet applicable legal obligations, respond to lawful requests from regulatory bodies or law enforcement agencies, and maintain legally required records.
• Platform Improvement: To analyse aggregated usage data, identify technical issues, test new features, and improve the overall performance and user experience of the b8bd platform.
• Direct Marketing (where consent is given): To send you promotional communications about b8bd bonuses, seasonal offers (such as Eid specials or Pohela Boishakh promotions), and new game releases — only if you have opted in to receive such communications.

You may withdraw consent for direct marketing at any time by contacting b8bd support. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal, nor does it affect your ability to use the Services.

b8bd processes your personal data on the following legal grounds, depending on the specific purpose for which the data is being used:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted on registration — including account creation, transaction processing, game access, and customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering obligations, age verification requirements, and responses to lawful orders from competent authorities.
• Legitimate Interests: Processing necessary for b8bd's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving the quality of our Services — provided such interests are not overridden by your data protection rights.
• Consent: Processing based on your explicit consent, including sending direct marketing communications and placing non-essential cookies on your device. You may withdraw consent at any time without detriment to your use of the Services.

Where b8bd relies on legitimate interests as the legal basis for processing, we conduct a balancing test to ensure that our interests do not override your fundamental rights and freedoms. If you wish to obtain information about a specific balancing test conducted for any processing activity, please contact us using the details in Section 12.

b8bd does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

• Payment Processors: We share financial data (such as your bKash or Nagad number and transaction amounts) with payment processors solely to facilitate deposits and withdrawals in BDT. These processors are contractually bound to process your data only for payment purposes.
• Identity Verification Partners: We may share your identity data (name, date of birth, ID document details) with third-party identity verification services to confirm that you meet the 21+ age requirement and to prevent identity fraud.
• Fraud Prevention Services: We share technical data and transaction data with fraud detection platforms to identify and prevent unauthorised access, multi-accounting, and other fraudulent activity on the b8bd platform.
• Game Technology Providers: Certain games on b8bd are powered by third-party providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi). These providers may receive limited session data necessary to deliver the game experience. They do not receive your full identity or financial data.
• Legal and Regulatory Authorities: We may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law or in response to a valid legal order. b8bd will, where permitted, notify you of such disclosures.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of the b8bd business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to how your data is handled.

b8bd uses cookies and similar tracking technologies to operate the platform, personalise your experience, and analyse usage patterns. A cookie is a small text file placed on your device by a web server when you visit a website. Cookies do not contain executable code and cannot access files on your device.

b8bd uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the platform to function correctly. These include session authentication cookies that keep you logged in to your b8bd account and security cookies that prevent cross-site request forgery. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: Used to remember your preferences, such as your preferred language, display settings, and responsible gaming tool configurations. Disabling these cookies may reduce the personalisation of your experience.
• Analytics Cookies: Used to collect aggregated, anonymised data about how Players use the b8bd platform, including which games are most popular, how long sessions last, and which features are used most frequently. This data helps us improve the platform over time.
• Marketing Cookies (Consent Required): Used to track whether you arrived at b8bd via a specific marketing channel and to measure the effectiveness of promotional campaigns. These cookies are only placed with your explicit consent.

You can manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Note that blocking strictly necessary cookies will prevent the b8bd platform from functioning correctly. Blocking analytics or marketing cookies will not affect your ability to use the Services.

b8bd retains your personal data for as long as your account is active and for a defined period after account closure, as set out below. Retention periods are determined by the nature of the data, the purpose for which it was collected, and applicable legal and regulatory requirements.

• Account and Identity Data: Retained for the duration of the account relationship and for a minimum of five (5) years after account closure, in accordance with anti-money laundering recordkeeping requirements.
• Transaction and Betting Records: Retained for a minimum of five (5) years from the date of each transaction, as required for financial compliance and dispute resolution purposes.
• Support Communications: Retained for a minimum of three (3) years from the date of the communication, to support quality assurance and dispute resolution processes.
• Marketing Consent Records: Retained for as long as the consent remains active and for three (3) years after consent is withdrawn, as evidence that marketing was sent on a lawful basis.
• Technical and Usage Data: Typically retained for a rolling period of thirteen (13) months for analytics purposes, after which it is aggregated and anonymised.

When your data is no longer required for any of the purposes described above and no legal retention obligation applies, b8bd will securely delete or anonymise that data. You may request early deletion of certain categories of data subject to the conditions described in Section 9.

b8bd employs a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include, but are not limited to:

• SSL/TLS Encryption: All data transmitted between your device and the b8bd servers is encrypted using industry-standard SSL/TLS protocols. This applies to all pages of the platform, including registration, login, deposit, and withdrawal flows.
• Access Controls: Personal data held by b8bd is accessible only to staff and systems with a specific operational need to process that data. Access is governed by the principle of least privilege and is subject to regular review.
• Password Security: Player account passwords are stored in hashed form and are never stored or transmitted in plain text. b8bd staff cannot retrieve your password; only a password reset process is available if credentials are forgotten.
• Fraud Detection Systems: Automated systems continuously monitor the platform for suspicious activity, unusual login patterns, and signs of account compromise. Alerts generated by these systems are reviewed by the b8bd security team.
• Regular Security Reviews: b8bd conducts periodic internal security assessments and works with external partners to identify and address potential vulnerabilities in the platform infrastructure.
• Incident Response: In the event of a personal data breach that is likely to result in a risk to Players, b8bd will assess the breach, take containment measures, and notify affected Players as soon as reasonably practicable.

While b8bd takes all reasonable precautions to protect your data, no internet-based system is completely immune to security risks. Players are strongly encouraged to use a strong, unique password for their b8bd account and to contact support immediately if they suspect their account has been compromised.

As a player whose personal data is processed by b8bd, you have the following rights in relation to that data. b8bd will respond to all valid requests within a reasonable timeframe, typically within thirty (30) calendar days of receipt.

• Right of Access: You have the right to request a copy of the personal data that b8bd holds about you, along with information about how that data is being used. This is sometimes referred to as a Subject Access Request (SAR).
• Right to Rectification: You have the right to request that b8bd corrects any personal data that is inaccurate or incomplete. Where data has been shared with third parties, b8bd will inform those parties of the correction where reasonably practicable.
• Right to Erasure: You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. This right is subject to legal retention obligations that may prevent immediate deletion.
• Right to Restriction: You have the right to request that b8bd restricts the processing of your personal data in certain circumstances, such as while a dispute regarding the accuracy of the data is being resolved.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming purposes. b8bd will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., direct marketing), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.

To exercise any of the rights listed above, please contact the b8bd Data Support team using the contact details in Section 12. We may request proof of identity before processing your request to ensure that data is not disclosed to unauthorised parties.

The b8bd platform is strictly intended for adults aged 21 and above. b8bd does not knowingly collect, use, or retain the personal data of any person under the age of 21. If we discover or are notified that personal data belonging to a person under 21 has been collected, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and you believe that a person under 21 in your care has registered an account with b8bd, please contact our support team immediately using the contact details in Section 12. We will investigate the matter promptly and take appropriate action in accordance with our Child Protection and Age Verification obligations.

b8bd implements age verification procedures at the point of registration and may request documentary evidence of age at any stage of the account lifecycle. Accounts that cannot satisfy the 21+ age requirement will be closed and any deposited funds returned to the original payment source, net of any amounts already wagered.

b8bd reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the features and services offered on the platform. The date of the most recent revision is clearly displayed at the top of this document.

When we make material changes to this Policy — meaning changes that significantly affect how your personal data is collected, used, or shared — we will notify registered Players by email or through a prominent notice on the b8bd platform at least seven (7) days before the changes take effect. Where changes are required urgently due to legal or regulatory obligations, we may implement them with shorter notice.

Your continued use of the b8bd Services after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must cease using the Services and contact support to close your account. We recommend that you review this page periodically to stay informed of any updates.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data that b8bd holds about you, please contact the b8bd support team. Our agents are available 24 hours a day, 7 days a week, in both English and Bengali.

You may reach us by email at: support at b8bd.io (this address is displayed as plain text and is not a clickable link).

When contacting us about a data privacy matter, please include your registered username, a clear description of your request or concern, and any supporting information that will help us locate the relevant data quickly. We will acknowledge your message within 24 hours (Bangladesh Standard Time, UTC+6) and aim to provide a substantive response within thirty (30) calendar days.

If you are not satisfied with our response to a privacy-related complaint, you have the right to escalate the matter to the appropriate data protection authority or to seek a remedy through the applicable legal system.