bx8 Privacy Policy

1. Data We Collect

bx8 collects personal data that is necessary to provide a safe, compliant, and functional online gaming service to players in Bangladesh. We do not collect data beyond what is reasonably required for the purposes described in this Privacy Policy. The categories of personal data we may collect are as follows:

1.1 Registration & Identity Data

When you create a bx8 account via the bx8 Login page, we collect the information you provide during registration. This includes your full legal name, date of birth, email address, and mobile phone number. For age and identity verification purposes — which are mandatory before your first withdrawal — we may additionally collect a copy of your National Identity Card (NID), passport, or birth certificate. This category of data is collected to verify that you meet the 18+ age requirement and to confirm that your identity matches the payment methods registered on your account.

1.2 Financial & Transaction Data

bx8 records transaction data associated with every deposit and withdrawal processed through your bx8 wallet. This includes the transaction amount in Bangladeshi Taka (৳), the payment method used (such as bKash, Nagad, Rocket, Upay, or bank transfer), transaction timestamps, and transaction reference numbers provided by the payment provider. bx8 does not store full card numbers or mobile banking PINs — card and mobile payment credentials are handled exclusively by the respective payment provider's secure infrastructure.

1.3 Usage & Gameplay Data

bx8 automatically records data about how you interact with the platform. This includes the games you play (such as cricket betting markets, slot titles, and live casino sessions), bet amounts and outcomes, session start and end times, in-platform navigation patterns, and any bonus offers you activate. This data is used for account management, responsible gaming monitoring, fraud detection, and product improvement purposes.

1.4 Device & Technical Data

When you access bx8, our servers automatically collect certain technical information about the device and connection you are using. This includes your IP address, browser type and version, operating system, device model, screen resolution, and referring URL. This data helps bx8 maintain platform security, detect suspicious login patterns, and optimise the user experience across different devices commonly used by players in Bangladesh — including Android smartphones, iPhones, and desktop browsers.

1.5 Communications Data

If you contact bx8 via email at [email protected] or through any other bx8 support channel, we retain a record of that correspondence — including the content of your messages, the date and time sent, and any attachments. This data is used to resolve support queries, maintain a history of account-related decisions, and improve the quality of our customer service.

2. How We Use Your Data

bx8 processes personal data only for the purposes listed below. We do not use your personal data for any purpose that is incompatible with the reason for which it was originally collected.

Purpose	Data Categories Used	Legal Basis
Account creation and management	Registration & identity data	Contractual necessity
Age and identity verification (KYC)	Identity documents, date of birth	Legal obligation
Processing deposits and withdrawals	Financial & transaction data	Contractual necessity
Fraud prevention and security monitoring	Device data, transaction data, usage data	Legitimate interest
Responsible gaming oversight	Gameplay data, usage patterns	Legal obligation / legitimate interest
Customer support and dispute resolution	Communications data, account data	Contractual necessity
Platform improvement and analytics	Usage data, device data (anonymised)	Legitimate interest
Promotional communications (opted-in only)	Email address, gameplay preferences	Consent

bx8 does not use your personal data to make fully automated decisions that produce significant legal or similarly significant effects on you without human review. Where automated systems flag an account for fraud review or responsible gaming intervention, a member of the bx8 team will review the case before any material action — such as account suspension or fund freezing — is taken.

If you have opted in to receive promotional communications from bx8, you may opt out at any time by contacting [email protected] and requesting removal from our mailing list. Opting out of marketing communications does not affect the processing of data that is necessary for account management or legal compliance.

3. Data Sharing & Third Parties

bx8 does not sell, rent, or trade your personal data to any third party for commercial purposes. Your data may be shared only in the following limited and controlled circumstances:

• Payment Providers: When you make a deposit or withdrawal, bx8 shares the minimum data necessary to process that transaction with your chosen payment provider — for example, bKash, Nagad, Rocket, Upay, or a participating bank such as Dutch-Bangla Bank or BRAC Bank. These providers operate under their own privacy and security frameworks and process your payment credentials independently of bx8.
• Game Software Providers: bx8 offers games developed and operated by third-party studio providers including Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi. When you play a game from one of these providers, anonymised session data (such as bet amount and game outcome) may be transmitted to the provider's servers to enable the game to function. These providers do not receive your name, NID, or financial account details.
• Identity Verification Services: bx8 may engage a third-party Know Your Customer (KYC) verification service to assist with age and identity checks. This service receives only the identity documents and data required to complete the verification and is contractually prohibited from using that data for any other purpose.
• Legal and Regulatory Authorities: bx8 may be required to disclose personal data to competent authorities where compelled to do so by applicable law, court order, or regulatory requirement. bx8 will, where legally permissible, notify the relevant account holder of such a disclosure.
• Business Transfers: In the event that bx8 undergoes a merger, acquisition, or sale of substantially all of its assets, personal data held by bx8 may be transferred to the acquiring entity as part of that transaction. Any such transfer would be subject to confidentiality obligations and the acquiring entity would be required to honour the terms of this Privacy Policy with respect to existing account holder data.

All third-party service providers engaged by bx8 are required to process personal data solely on bx8's documented instructions and to implement appropriate technical and organisational security measures consistent with the sensitivity of the data involved.

4. Cookies & Tracking Technologies

bx8 uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, and analyse site usage. A cookie is a small text file placed on your device by a web server. Cookies do not contain executable code and cannot carry viruses. The categories of cookies used on bx8 are as follows:

• Strictly Necessary Cookies: These cookies are essential for the bx8 platform to function. They enable core features such as maintaining your authenticated session after login, storing your BDT wallet balance display preferences, and ensuring security tokens function correctly. These cookies cannot be disabled without impairing platform functionality.
• Performance & Analytics Cookies: bx8 uses anonymised analytics data to understand how players navigate the platform — which game categories attract the most engagement, where users encounter difficulties, and how page load performance varies across different network conditions common in Bangladesh. This data is collected in aggregate and does not identify individual users.
• Functional Cookies: These cookies remember your preferences — such as your preferred deposit method (bKash, Nagad, etc.), your language setting (English), and any responsible gaming tool configurations you have applied to your account, such as session time reminders.
• Session Integrity Cookies: bx8 uses short-lived session cookies to protect against Cross-Site Request Forgery (CSRF) attacks and to validate that requests made to our servers originate from authenticated, legitimate bx8 sessions rather than from malicious third-party pages.

You may configure your browser to refuse or delete cookies. However, disabling strictly necessary cookies will prevent you from logging into your bx8 account and using the platform's core features. Instructions for managing cookies are available in the help documentation of all major browsers. Please note that bx8 does not use cookies to track your activity on third-party websites outside of https://bx8.bio.

5. Data Retention

bx8 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Account and identity data — Retained for the duration of your account and for a minimum of five years following account closure, to satisfy anti-money laundering record-keeping requirements.
• Transaction records — Retained for a minimum of five years from the date of each transaction, consistent with standard financial record-keeping obligations.
• Gameplay and wagering data — Retained for up to three years following your last active session, and used during the retention period for responsible gaming review, dispute resolution, and fraud analysis.
• Support communications — Retained for three years from the date of the most recent communication in each support thread, to support dispute resolution and quality assurance.
• Device and technical logs — Retained for up to 12 months from collection, after which they are deleted or permanently anonymised.

When personal data is no longer required and no legal retention obligation applies, bx8 will securely delete or irreversibly anonymise that data in a manner that prevents its reconstruction.

6. Your Privacy Rights

As a bx8 account holder, you have the following rights with respect to your personal data. To exercise any of these rights, contact bx8 at [email protected] from the email address registered to your account. bx8 will respond to all verified privacy rights requests within a reasonable timeframe.

• Right of Access: You may request a copy of the personal data that bx8 holds about you. bx8 will provide this in a structured, commonly used, and machine-readable format where technically feasible.
• Right to Rectification: If any personal data held by bx8 about you is inaccurate or incomplete, you have the right to request that it be corrected. Note that corrections to identity data used for KYC purposes must be supported by updated official documentation.
• Right to Erasure: You may request that bx8 delete your personal data. bx8 will honour such requests where no overriding legal retention obligation applies. Where a legal retention obligation does apply — for example, five-year financial record requirements — bx8 will explain why full deletion is not immediately possible and will delete the data as soon as the retention period expires.
• Right to Restrict Processing: You may request that bx8 restrict processing of your personal data in specific circumstances — for example, where you contest the accuracy of data held, or where you have objected to processing pending verification of whether bx8's legitimate interests override your own.
• Right to Object: Where bx8 processes your data on the basis of legitimate interest — such as for marketing analytics or fraud prevention profiling — you have the right to object to that processing. bx8 will cease processing for that purpose unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where bx8 processes your data based on your consent — for example, for promotional email communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7. Data Security

bx8 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. The security measures in place on the bx8 platform include:

• SSL/TLS Encryption: All data transmitted between your browser or device and bx8's servers is encrypted using industry-standard TLS protocols. This applies to all platform pages, including the bx8 Login page, account pages, and payment processing flows.
• Password Hashing: Account passwords are never stored in plain text. bx8 stores only cryptographically hashed representations of passwords, meaning that even in the event of an internal data access incident, raw passwords cannot be retrieved.
• Two-Factor Authentication (2FA): bx8 offers optional 2FA via SMS for all account holders. We strongly recommend enabling this feature, particularly if you access bx8 on shared or public devices.
• Access Controls: Access to personal data within bx8's internal systems is restricted to staff who have a documented operational need for that data. Access rights are reviewed periodically and revoked promptly when no longer required.
• Fraud Detection Systems: bx8 operates real-time monitoring systems that flag anomalous login attempts, unusual transaction patterns, and other indicators of potential account compromise or fraudulent activity.

Despite these measures, no online platform can guarantee absolute security. If bx8 becomes aware of a security incident that materially affects the confidentiality or integrity of personal data, we will notify affected account holders via their registered email address as promptly as circumstances permit.

You also have a responsibility to protect your own account. Keep your bx8 Login password confidential, do not share it with anyone, and contact [email protected] immediately if you suspect that your account has been accessed without your authorisation.

8. Policy Updates & Contact

bx8 may revise this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, the effective date at the top of this document will be updated. Where a change materially affects how we process your personal data, bx8 will notify registered account holders via email before the change takes effect. Your continued use of bx8 following notification constitutes acceptance of the revised Privacy Policy.

We encourage you to review this page periodically to stay informed about how bx8 handles your personal information. Previous versions of this Privacy Policy are available upon request by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data bx8 holds about you, please contact our support team:

• Email (plain text — not a clickable link): [email protected]
• Support Hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (UTC+6)
• Response Language: English