8tbaji Privacy Policy

Our Privacy Principles

Six commitments that guide how 8tbaji handles your personal data

1. Introduction

This Privacy Policy ("Policy") describes how 8tbaji ("Company", "Platform", "we", "us", "our") collects, uses, discloses, stores, and protects the personal information of users ("Player", "User", "you") who access or use the 8tbaji website at https://8tbaji.app, its sub-domains, mobile interfaces, and all associated services.

8tbaji is committed to handling your personal data responsibly and in a manner consistent with applicable data protection principles. This Policy is intended to give you clear, complete, and honest information about our data practices so that you can make informed decisions about your use of the platform.

This Policy forms part of the 8tbaji Terms & Conditions. By creating an account or using 8tbaji, you acknowledge that you have read this Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you should discontinue use of the platform.

We may update this Policy from time to time to reflect changes in our services, technology, or legal obligations. Where changes are material, we will notify you via the platform or your registered contact details. Continued use of 8tbaji after any such update constitutes your acceptance of the revised Policy.

2. Personal Data We Collect

8tbaji collects personal data in two primary ways: information you provide directly when registering and using the platform, and information collected automatically through your use of the service. The categories of personal data we may hold about you are set out below.

2.1 Data You Provide Directly

2.2 Data Collected Automatically

3. How We Use Your Personal Data

8tbaji processes your personal data only for specific, lawful purposes. Each processing activity is based on one or more of the following legal bases: performance of a contract (your use of 8tbaji), compliance with a legal obligation, protection of legitimate interests, or your explicit consent.

• Account Management: To create, maintain, and administer your 8tbaji account, including verifying your identity and age (21+ requirement) during registration and KYC processes.
• Service Delivery: To provide access to casino games, sports betting markets, live dealer tables, slots, and all other features available on the 8tbaji platform.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and supported bank transfer services.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other conduct that threatens the integrity of the platform or the security of other players.
• Legal & Regulatory Compliance: To meet applicable legal obligations, respond to lawful requests from regulatory or law enforcement authorities, and maintain records as required by law.
• Responsible Gaming: To monitor gameplay patterns and identify indicators of problem gambling behaviour, and to administer self-exclusion, deposit limits, and cooling-off periods where requested or required.
• Customer Support: To respond to your queries, complaints, and support requests in a timely and effective manner.
• Platform Improvement: To analyse usage patterns and technical performance data in order to improve the reliability, speed, and quality of 8tbaji services.
• Marketing Communications: To send you promotional offers, bonus announcements, and seasonal campaign notifications (e.g., BPL, IPL, Eid, Pohela Boishakh promotions) where you have provided consent to receive such communications. You may opt out at any time.

4. Sharing Your Personal Data

8tbaji does not sell your personal data. We share personal data only with trusted third parties who require it to deliver specific services on our behalf, and only to the extent necessary for those purposes. All third-party recipients are required to handle your data securely and in accordance with applicable data protection obligations.

4.1 Categories of Third-Party Recipients

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank) receive the minimum data necessary to authenticate and process your financial transactions.
• Game Technology Providers: Providers such as Evolution Gaming, Ezugi, Pragmatic Play, Spribe, NetEnt, and Microgaming may receive your player identifier and session data to facilitate game delivery. They do not receive your full identity or payment details.
• KYC & Identity Verification Partners: Third-party identity verification services may process your identity documents and biometric data solely to confirm your eligibility to use the platform.
• Hosting & Infrastructure Providers: Cloud hosting and content delivery partners store and transmit platform data on our behalf under strict data processing agreements.
• Analytics Providers: Platform performance and usage analytics providers receive anonymised or pseudonymised data to help us understand how the platform is being used and where improvements are needed.
• Legal & Regulatory Authorities: We may disclose personal data to government bodies, law enforcement agencies, or regulators where required by law or in response to a valid legal request.

4.2 International Data Transfers

Some of our third-party service providers are located outside Bangladesh. Where personal data is transferred internationally, 8tbaji ensures that appropriate safeguards are in place — including contractual obligations on the recipient — to protect your data to a standard equivalent to this Policy. By using 8tbaji, you acknowledge and consent to such transfers where necessary for the provision of the service.

5. Data Retention

8tbaji retains your personal data for as long as your account is active and for a reasonable period thereafter, or as required to comply with legal obligations — whichever is longer. The following general retention principles apply:

• Active Accounts: All account data is retained for the full duration of your active relationship with 8tbaji.
• Closed Accounts: Following account closure, core identity, transaction, and KYC records are retained for a minimum of five (5) years to satisfy applicable anti-money laundering, financial record-keeping, and fraud prevention obligations.
• Support Communications: Customer support records are retained for up to three (3) years from the date of the last interaction.
• Marketing Data: If you opt out of marketing communications, your preference record is retained indefinitely to ensure we do not inadvertently contact you again. Your other personal data is handled separately per the above timelines.
• Technical Logs: Server access logs and security event logs are retained for up to twelve (12) months before being automatically purged or anonymised.

When personal data reaches the end of its applicable retention period and no longer needs to be kept for legal or legitimate operational reasons, 8tbaji will securely delete or irreversibly anonymise it so that it can no longer be attributed to you as an individual.

6. Your Privacy Rights

As a user of 8tbaji, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] with your registered account details and a clear description of your request. We will respond within a reasonable timeframe — typically within 30 days.

• Right of Access: You may request a copy of the personal data 8tbaji holds about you, including information on how it is used and with whom it is shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly within your account settings.
• Right to Erasure: In certain circumstances — for example, where data is no longer necessary for the purpose it was collected, or where you withdraw consent — you may request that your personal data be deleted. This right is subject to legal retention obligations that may require us to retain certain records regardless of your request.
• Right to Restriction: You may request that we restrict the processing of your personal data in circumstances where you contest its accuracy, object to its use, or require it for legal claims.
• Right to Data Portability: Where data is processed on the basis of your consent or to perform a contract, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests, though such objections will be assessed on a case-by-case basis.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out prior to the withdrawal.

7. Cookies & Tracking Technologies

8tbaji uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to help us understand how players interact with the site. By using 8tbaji, you consent to our use of cookies as described below.

Types of Cookies We Use

You can control cookie settings through your browser preferences. Disabling essential cookies may prevent the platform from functioning correctly. Marketing and analytics cookies may be disabled without affecting core platform access.

8. Data Security

8tbaji takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and 8tbaji servers.
• Encryption of sensitive data at rest, including identity documents and financial records.
• Strict access controls ensuring that personal data is accessible only to authorised personnel who require it to perform their role.
• Regular internal security reviews, vulnerability assessments, and monitoring of system access logs.
• Two-factor authentication options available for player accounts to reduce the risk of unauthorised access.
• Staff training on data protection obligations and security best practices.

While 8tbaji employs industry-standard security practices, no online platform can guarantee absolute security. In the event of a personal data breach that poses a risk to your rights, we will notify affected users and take all necessary steps to contain and remediate the incident as quickly as possible.

9. Players Under 21

The 8tbaji platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an account or use the platform.

If 8tbaji becomes aware that personal data has been collected from a person under 21, that data will be deleted promptly, the associated account will be permanently closed, and any funds held in the account will be returned in accordance with our Terms & Conditions and applicable law.

Parents and guardians who believe their child may have registered an 8tbaji account should contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

10. Contact & Privacy Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to raise a concern about how 8tbaji has handled your personal information, please contact our support team using the details below. We take all privacy concerns seriously and will respond promptly.

• Email: [email protected]
• Support hours: 24/7, Bangladesh Standard Time (UTC+6)
• Response target: within 5 business days for privacy requests; within 30 days for formal data subject access requests

If you are not satisfied with our response to a privacy complaint, you retain the right to escalate the matter to the relevant data protection authority in your jurisdiction.