88xx Privacy Policy — How We Collect, Use, and Protect Your Data

1. Who We Are

88xx ("we", "us", or "our") operates the online casino and sports betting platform accessible at https://88xx.asia and any associated mobile applications or sub-domains (collectively, the "Platform"). 88xx is the data controller responsible for the personal information collected from players and visitors in connection with the Platform.

This Privacy Policy applies to all individuals who access or use the Platform, including registered account holders ("Players") and unregistered visitors ("Visitors"). By accessing the Platform or registering an account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal information as described herein.

If you have questions about how your data is handled, you may contact our dedicated data support team at [email protected] at any time. Our support team operates 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6).

2. Data We Collect

88xx collects personal information through a number of channels, including account registration, KYC verification, gameplay activity, payment transactions, and your interactions with our support team. The categories of data we collect are described below.

2.1 Registration Data

When you create an 88xx account, we collect the following information:

• Full legal name as it appears on your national identification document
• Date of birth — used to verify that you meet the 21+ age requirement
• Email address — used as your primary account identifier and for account notifications
• Mobile phone number — used for account verification and security alerts
• Residential address — collected for KYC and fraud-prevention purposes
• Chosen username and password (passwords are stored in hashed form and never in plain text)

2.2 Identity Verification (KYC) Data

To comply with our Know Your Customer obligations and to protect the integrity of the platform, we may request copies of the following documents:

• National Identity Card (NID), passport, or driver's licence
• Proof of residential address (utility bill, bank statement, or equivalent document dated within 3 months)
• Proof of ownership of the payment method used (e.g., screenshot of a bKash, Nagad, Rocket, or Upay account showing the account holder's name)
• Source-of-funds documentation where deposit activity reaches applicable thresholds

2.3 Financial Transaction Data

Each deposit and withdrawal you make is recorded, including the transaction amount in Bangladeshi Taka (BDT), the payment method used, the date and time of the transaction, and the transaction reference number. We do not store complete payment card numbers or full mobile banking PINs.

2.4 Gameplay & Betting Activity Data

We record your gameplay history, including games played, wagers placed, outcomes, bonus usage, and session duration. This data is used for account management, responsible gaming monitoring, dispute resolution, and improving our game offering.

2.5 Technical & Device Data

When you access the Platform, we automatically collect certain technical data, including:

This technical data assists us in detecting fraudulent access, securing your account, and delivering a consistent platform experience across devices.

2.6 Communications Data

If you contact our support team via email or live chat, we retain records of that correspondence, including the content of messages, timestamps, and any attachments provided. This information is used to resolve your query and to improve our support quality.

3. How We Use Your Data

88xx uses the personal data we collect for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent or establishing a lawful basis for the new processing activity.

4. Legal Basis for Processing

88xx processes your personal data under one or more of the following lawful bases:

• Contractual necessity: Processing your registration data, KYC information, and transaction data is necessary to create and manage your account and to fulfil our obligations under our Terms & Conditions.
• Legal obligation: Certain data processing activities — including KYC verification, AML record-keeping, and the retention of transaction records — are required by applicable legal and regulatory frameworks.
• Legitimate interests: We process technical and gameplay data on the basis of legitimate interests in fraud prevention, platform security, and responsible gaming compliance. These interests do not override your fundamental privacy rights.
• Consent: Where we send you marketing communications or use non-essential cookies, we do so on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time by contacting [email protected].

5. Data Sharing & Third Parties

5.1 Service Providers

88xx engages carefully selected third-party service providers to support the operation of the Platform. These providers may process your personal data on our behalf and are contractually bound to do so only for the purposes we specify, under strict confidentiality obligations. Categories of service provider include:

• Payment processors: bKash, Nagad, Rocket, and Upay receive only the transaction data necessary to process your deposits and withdrawals.
• Game providers: Third-party studios such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and anonymised player identifier to deliver their game content. They do not receive your full name, NID, or payment details.
• KYC and fraud-detection providers: Identity verification and AML screening tools may process your KYC documents under dedicated data-processing agreements.
• Cloud infrastructure and hosting: Our servers and databases are managed by cloud infrastructure providers operating under enterprise-grade security and confidentiality standards.
• Customer support software: Our support ticketing system stores correspondence between you and our support team.

5.2 Legal Disclosures

88xx may disclose your personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, valid legal process, or to protect the rights, property, or safety of 88xx, its players, or the public. We will notify affected players of such disclosures where legally permissible.

5.3 No Sale of Personal Data

88xx does not sell, rent, lease, or otherwise commercially transfer your personal data to any third party for their own marketing or commercial purposes. This restriction applies without exception.

6. Cookies & Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites function correctly, to remember your preferences, and to provide analytics data to site operators. 88xx uses cookies and similar technologies including pixel tags and local storage objects.

6.2 Types of Cookies We Use

6.3 Managing Cookies

You may control non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Platform. Instructions for managing cookies in common browsers are available in each browser's help documentation. To withdraw consent for marketing cookies specifically, contact [email protected].

7. Data Retention

88xx retains personal data only for as long as is necessary to fulfil the purposes for which it was collected or as required by applicable law. The following retention periods apply:

At the end of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

8. Data Security

88xx implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption on all data transmitted between your device and our servers.
• At-rest encryption for all databases storing personal and financial data.
• Password hashing using industry-standard one-way cryptographic algorithms — your password is never stored in readable form.
• Role-based access control (RBAC) ensuring that staff members access only the data necessary for their specific job functions.
• Multi-factor authentication (MFA) for all internal administrative systems.
• Automated intrusion detection systems that monitor for anomalous access patterns in real time.
• Regular independent security audits conducted by qualified third-party cybersecurity specialists.
• Incident response procedures with defined timelines for identifying, containing, and notifying affected parties in the event of a data breach.

While 88xx takes all reasonable and technically feasible precautions to protect your data, no online platform can guarantee absolute security against all possible threats. In the unlikely event of a data breach that affects your personal information, 88xx will notify you at the email address registered to your account within the timeframes required by applicable law.

9. Your Rights

As a player on the 88xx Platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line DATA REQUEST and we will respond within 30 calendar days.

• Right of Access: You may request a copy of all personal data that 88xx holds about you, together with information about how it is being processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where there is no overriding legitimate interest or legal obligation requiring its retention.
• Right to Restriction of Processing: In certain circumstances you may request that we restrict how we process your data — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where processing is based on your consent or on a contract with you, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on our legitimate interests at any time. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent — such as marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

10. Children & Minors

The 88xx Platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from any individual under the age of 21. Account registration by persons under 21 is expressly prohibited.

If 88xx becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately suspended, all associated balances will be forfeited, and all personal data collected in connection with that account will be deleted as swiftly as legally permissible.

If you are a parent or guardian and believe that a minor in your care has registered an account on 88xx, please contact us immediately at [email protected] so that we can take prompt corrective action.

11. Policy Updates

88xx reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page.
• Send a notification to registered players at the email address associated with their account, summarising the nature of the changes.
• Display a prominent notice on the Platform for a period of at least 14 days following publication of the updated Policy.

Your continued use of the Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any change, you must discontinue use of the Platform and may request account closure at [email protected].

12. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please reach out to the 88xx data support team:

• Email: [email protected]
• Availability: 24/7 — Bangladesh Standard Time (UTC+6)
• Subject line for data requests: DATA REQUEST
• Response time: Within 30 calendar days of receiving a verified request

We take every privacy enquiry seriously and commit to handling your request with transparency, care, and urgency. 88xx's support team is available around the clock to assist players across Bangladesh with any data-related concerns.