Your Privacy Matters to b8bd

1. Data Controller

For the purposes of this Privacy Policy, the data controller responsible for your personal information is b8bd, operating the online casino and sports betting platform accessible at https://b8bd.app (the "Platform"). All references to "b8bd", "we", "us", or "our" in this document refer to the data controller in this capacity.

If you have any questions, concerns, or requests relating to the processing of your personal data, you may contact us directly at any time using the following contact detail:

• Email: [email protected] (plain text — not a clickable link)
• Support hours: 24/7 | Timezone: Bangladesh Standard Time (BST, UTC+6)

b8bd is committed to handling all data-related enquiries promptly and in good faith. We aim to respond to all privacy-related correspondence within five (5) business days of receipt.

2. Information We Collect

b8bd collects personal data through several channels: directly from you during registration and ongoing use of the Platform, automatically through your device and browser interaction with our services, and from third-party payment and identity verification providers as part of the KYC process. The categories of data we collect are described below.

2.1 Registration Data

When you create a b8bd account, we collect the following information:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth
• Residential address (street, city, district, postcode)
• Email address
• Mobile phone number
• Username and encrypted password

2.2 Identity Verification (KYC) Data

To comply with our platform's age verification and anti-money laundering obligations, we collect:

• Scanned copies or photographs of government-issued identity documents (National ID Card, passport)
• Proof of address documents (utility bills, bank statements, official correspondence dated within three months)
• Confirmation documents for mobile financial service accounts (bKash, Nagad, Rocket, Upay) used for deposits or withdrawals
• Selfie or liveness-check images where enhanced verification is required

2.3 Financial Data

• Mobile financial service account numbers (bKash, Nagad, Rocket, Upay) used for deposits and withdrawals
• Transaction history: deposit amounts, withdrawal amounts, timestamps, and payment method references
• Bonus credits received, wagering activity, and account balance history

2.4 Usage and Technical Data

When you interact with the b8bd Platform, we automatically collect:

• IP address and approximate geographic location derived from it
• Device type, operating system, browser type and version
• Session timestamps, pages visited, features used, and click-path data
• Game session data: games played, bet amounts, outcomes, and session durations
• Customer support interaction logs (chat transcripts, email correspondence)

3. How We Use Your Data

b8bd processes your personal data on one or more of the following lawful bases: performance of a contract (operating your account and providing our services), compliance with legal obligations (KYC, AML, age verification), legitimate interests (fraud prevention, platform security, service improvement), and in limited cases, your explicit consent (marketing communications where opted in).

The specific purposes for which we use your data are set out in the table below:

b8bd does not use your personal data for automated individual decision-making that produces significant legal effects, except where required by law or where you have given explicit consent. If you have concerns about any automated processing affecting your account, please contact [email protected].

4. Cookies & Tracking

b8bd uses cookies and similar tracking technologies to operate, maintain, and improve the Platform. A cookie is a small text file placed on your device by our web server when you visit the Platform. Cookies allow the Platform to recognise your device on return visits and to preserve your session state between page loads.

4.1 Categories of Cookies We Use

• Strictly Necessary Cookies: These are required for the Platform to function. They include session authentication tokens, CSRF protection cookies, and load-balancing identifiers. You cannot opt out of strictly necessary cookies while continuing to use the Platform.
• Functional Cookies: These remember your preferences, such as your selected language, last-visited game category, and display settings. They improve your experience but are not essential to Platform operation.
• Analytics Cookies: b8bd uses first-party analytics to understand aggregate usage patterns — which pages are most visited, how long sessions last, and which features are most used. This data is anonymised and is never linked back to individual user identities for marketing purposes.

4.2 Cookies We Do Not Use

b8bd does not use third-party advertising or retargeting cookies. We do not share your browsing behaviour with external ad networks, affiliate trackers operating outside your account scope, or any social media platform for advertising purposes.

4.3 Managing Cookies

You may control non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies via the privacy or settings menu. Please be aware that disabling functional or analytics cookies may affect certain features of the Platform. Strictly necessary cookies cannot be disabled without preventing you from using the Platform entirely.

5. Data Sharing & Third Parties

b8bd does not sell your personal data to any third party. We share your data with external parties only where strictly necessary to provide our services or to comply with legal requirements. The categories of third parties with whom we may share your data are as follows:

• Game Software Providers: When you play games on the b8bd Platform, session data (including bet amounts, game outcomes, and session timestamps) is transmitted to the relevant software provider (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi) to facilitate game delivery and dispute resolution. These providers are contractually obligated to handle such data in accordance with applicable data protection standards.
• Payment Processing Partners: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the minimum data necessary to process the transaction — including your account reference number and transaction amount — is shared with the relevant payment provider. b8bd does not share unnecessary personal detail beyond what the transaction requires.
• Identity Verification Services: b8bd may use third-party KYC verification providers to authenticate identity documents. These providers process your KYC data solely on our behalf and are bound by strict data processing agreements.
• Legal and Regulatory Authorities: b8bd may be required by law, court order, or regulatory instruction to disclose personal data to relevant authorities — including financial intelligence units, law enforcement agencies, or judicial bodies. We will notify you of such disclosures where legally permitted to do so.
• Infrastructure and Hosting Providers: Our Platform is hosted on secure cloud infrastructure. Our hosting and infrastructure providers have access to server-level data solely for the purposes of maintaining platform availability and security. They do not have access to your account-level personal data for any independent purpose.

All third-party service providers who process personal data on behalf of b8bd are required to enter into a data processing agreement confirming that they will process data only on our documented instructions and in compliance with applicable data protection law.

6. Data Retention

b8bd retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, including the duration of your account relationship with us and for a defined period thereafter to meet our legal, regulatory, and contractual obligations.

The following retention periods apply as standard:

• Active account data: Retained for the lifetime of your b8bd account plus five (5) years following account closure. This retention period is required to comply with financial record-keeping obligations and to resolve any post-closure disputes.
• KYC documents: Retained for five (5) years after the end of the business relationship, in line with standard anti-money laundering record-keeping requirements.
• Transaction records: Retained for five (5) years after the date of each transaction.
• Customer support communications: Retained for three (3) years after the closure of each support interaction, unless the matter forms part of an ongoing legal or regulatory investigation.
• Marketing consent records: Retained for the period during which consent remains active plus three (3) years following withdrawal of consent, to demonstrate compliance.
• Anonymised analytics data: May be retained indefinitely as it cannot be linked back to any individual.

When personal data is no longer required and the applicable retention period has expired, b8bd securely deletes or anonymises the data using industry-standard data destruction procedures. If you request early deletion of your data and there is no overriding legal obligation requiring its continued retention, we will process your request within 30 calendar days.

7. Your Rights

As a b8bd player whose personal data we process, you have the following rights with respect to your personal information. To exercise any of these rights, please contact us at [email protected] with your registered account email address and a clear description of your request.

• Right of Access: You have the right to request a copy of the personal data b8bd holds about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 calendar days of receiving your verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as spelling of a name or updating an address) can often be made directly through your account settings. For KYC-related corrections, supporting documentation will be required.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that this right is subject to overriding legal retention obligations — we cannot erase data that we are legally required to retain.
• Right to Restrict Processing: You may request that we restrict processing of your personal data in certain circumstances — for example, while a dispute about accuracy is being resolved, or where you have objected to processing and we are verifying whether our legitimate interests override your objection.
• Right to Data Portability: Where processing is based on your consent or on contract performance and is carried out by automated means, you have the right to receive your personal data in a portable format and to transmit it to another data controller.
• Right to Object: You have the right to object to the processing of your personal data where we rely on legitimate interests as our legal basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

b8bd will not charge a fee for processing any rights request unless the request is manifestly unfounded or excessive. In such cases, we may charge a reasonable administrative fee or decline to act on the request, providing written reasons for this decision.

8. Data Security

b8bd takes the security of your personal data seriously. We implement a layered set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, disclosure, or misuse. These measures include but are not limited to the following:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the b8bd Platform is encrypted using current TLS protocols. This protects login credentials, payment information, and personal details from interception during transmission.
• Data Encryption at Rest: Sensitive personal data stored in b8bd databases — including KYC documents and financial records — is encrypted using AES-256 encryption. Encryption keys are managed separately from the encrypted data and are rotated on a regular schedule.
• Access Controls: Access to personal data within b8bd's internal systems is restricted on a strict need-to-know basis. Staff access is governed by role-based permissions, and all access to sensitive data is logged and auditable. Privileged access requires multi-factor authentication.
• Regular Security Audits: b8bd conducts periodic internal and third-party security reviews of its Platform infrastructure, including vulnerability assessments and penetration testing, to identify and remediate potential security weaknesses before they can be exploited.
• Incident Response Procedures: In the event of a personal data breach, b8bd has documented incident response procedures in place. Where a breach poses a risk to your rights and freedoms, we will notify affected players without undue delay, describing the nature of the breach and the steps we are taking to address it.
• Staff Training: All b8bd personnel who handle personal data receive regular training on data protection obligations, secure data handling, and how to recognise and respond to potential security incidents.

While b8bd takes all reasonable steps to protect your personal data, no system is completely immune to risk. You also play an important role in keeping your data secure. We strongly recommend using a strong, unique password for your b8bd account, enabling any available two-factor authentication options, and promptly reporting any suspicious activity on your account to our support team.