8app Privacy Policy — How We Collect, Use, and Protect Your Personal Data
Your privacy matters to us. This Privacy Policy explains what personal data 8app collects from players in Bangladesh, why we collect it, how it is used, who it may be shared with, and the rights you hold over your own information. Please read this document in full before creating an account.
8app ("we", "us", "our") is committed to handling your personal data responsibly, transparently, and in compliance with applicable data protection principles. This Privacy Policy applies to all players who access the 8app platform at https://8app.ws, including individuals browsing the site, registered account holders, and any person who contacts our support team. By using 8app, you acknowledge that you have read and understood this policy and that your personal data will be processed as described herein.
SSL-Encrypted Transmission
All data transferred between your device and the 8app platform is encrypted via HTTPS and SSL. This protects your personal and payment information from interception in transit on any network.
Access Controls
Access to your personal data within 8app's systems is restricted to authorised personnel only, on a strict need-to-know basis. All staff with data access are bound by confidentiality obligations.
No Data Sales
8app does not sell, rent, or trade your personal data to any third party for their own marketing purposes. Data sharing is limited strictly to operational necessity and legal obligation.
Defined Retention Periods
We do not hold your data indefinitely. Retention periods are defined by purpose — active account data, closed account records, and transaction logs each have distinct maximum storage durations.
Your Rights Are Real
You have the right to access, correct, export, and request deletion of your personal data. These rights are exercisable at any time by contacting our support team — no legal jargon required.
Breach Notification
In the unlikely event of a personal data breach that poses a risk to affected players, 8app will notify impacted account holders promptly in accordance with applicable notification requirements.
1 Data We Collect and Why
1.1 Registration Data. When you create an 8app account, we collect the information you provide during the registration process. This includes your full name, date of birth, email address, mobile phone number, and chosen username. This data is necessary to create and manage your account, verify your identity, and communicate with you about your account activity.
1.2 Identity Verification (KYC) Data. Before processing your first withdrawal, we are required to verify your identity. During this process, we collect copies of identity documents such as your National Identity Card (NID) or passport, together with a selfie photograph. This data is collected to satisfy our anti-money laundering (AML) obligations and to confirm that you meet the minimum age requirement of 18 years.
1.3 Financial Data. To facilitate deposits and withdrawals, we collect information about the payment methods you use. This includes mobile wallet account numbers (bKash, Nagad, Rocket, Upay), bank account details (Dutch-Bangla Bank, City Bank), and partial card details (Visa, Mastercard). We do not store full card numbers on our servers; complete card data is handled by our certified payment processing partners.
1.4 Transaction and Activity Data. We automatically record details of all transactions and platform activity associated with your account. This includes deposit and withdrawal history, bet placement records, game session data, bonus claims, and account login timestamps. This data is used for account management, fraud detection, dispute resolution, and regulatory compliance.
1.5 Technical and Device Data. When you access 8app, our servers automatically collect technical data about your device and connection, including your IP address, browser type and version, operating system, device identifiers, and approximate geolocation derived from your IP address. This data is used for security monitoring, fraud prevention, and platform optimisation.
1.6 Communications Data. If you contact our support team by email or through any messaging channel, we retain records of those communications, including the content of your messages and our responses. This helps us track the resolution of issues and maintain a consistent service history.
1.7 Data You Choose to Provide. You may voluntarily provide additional information in certain circumstances, such as when completing a responsible gaming self-assessment, submitting a complaint, or participating in a survey. This data is used solely for the stated purpose at the time of collection.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Registration Data | Name, email, phone number, date of birth | Account creation, identity confirmation, communication |
| KYC / Identity Data | NID copy, passport scan, selfie photograph | Age verification, AML compliance, fraud prevention |
| Financial Data | bKash number, Nagad number, partial card details | Deposit and withdrawal processing |
| Transaction Data | Bet history, deposit records, withdrawal logs | Account management, dispute resolution, compliance |
| Technical Data | IP address, browser type, device ID | Security monitoring, fraud detection, optimisation |
| Communications Data | Support ticket content, email correspondence | Issue resolution, service quality, record keeping |
2 Legal Basis for Processing
2.1 Contractual Necessity. The majority of personal data processing carried out by 8app is necessary for the performance of the contract between you and us — that is, the provision of the online casino and sports betting services described in our Terms & Conditions. Without this processing, we cannot operate your account, process your bets, or pay your winnings.
2.2 Legal Obligation. Certain processing activities are required by applicable law. These include identity verification under anti-money laundering regulations, the retention of financial transaction records for audit purposes, and the reporting of suspicious activity to relevant authorities where required.
2.3 Legitimate Interests. We may process certain data on the basis of our legitimate business interests, where those interests are not overridden by your rights and freedoms. This includes fraud detection and prevention, platform security monitoring, responsible gaming oversight, and the improvement of our services through anonymised analytics.
2.4 Consent. Where we rely on your consent as the legal basis for processing — for example, to send you promotional communications about bonuses or new games — we will ask for your explicit consent at the relevant time. You may withdraw consent at any time by contacting support at [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before your withdrawal.
Note: 8app does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. Fraud detection flags are reviewed by a member of our security team before any account action is taken.
3 How We Use Your Personal Data
Your personal data is used exclusively for the purposes for which it was collected. The principal uses of data held by 8app are as follows:
- Account Management: Creating, maintaining, and securing your 8app account, including password reset processes, login verification, and account status updates.
- Payment Processing: Facilitating deposits via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank, and processing withdrawal requests to your verified payment method.
- Identity and Age Verification: Confirming that you are who you say you are and that you are at least 18 years of age before any withdrawal is approved. 18+
- Fraud and AML Compliance: Monitoring transactions and account behaviour for patterns indicative of money laundering, fraudulent activity, or terms violations. Flagged activity may be reported to relevant authorities.
- Responsible Gaming: Using your activity data to identify potential signs of problem gambling behaviour and, where appropriate, applying responsible gaming interventions such as cooling-off periods or account restrictions.
- Customer Support: Responding to your queries, resolving disputes, and maintaining a record of your support history to ensure continuity of service.
- Platform Improvement: Analysing aggregated and anonymised usage data to improve the platform's performance, game offering, and user experience.
- Marketing Communications: Sending you information about bonuses, promotions, and new games where you have consented to receive such communications. You may opt out at any time.
- Legal and Regulatory Compliance: Retaining records as required by applicable financial regulations and responding to lawful requests from regulatory bodies or law enforcement agencies.
Important: 8app will never use your personal data to contact you on behalf of a third-party advertiser, nor will your data be used to serve you targeted advertisements on external websites or platforms outside of 8app.
4 Data Sharing and Third Parties
4.1 Payment Processors. To process your deposits and withdrawals, we share the minimum necessary financial information with our certified payment partners, including bKash, Nagad, Rocket, Upay, and card processing networks. These partners are contractually obligated to use your data solely for payment processing purposes and to maintain appropriate security standards.
4.2 Game Providers. Game software on the 8app platform is supplied by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may collect anonymised session data (such as game outcomes and session duration) within their own systems for auditing and RNG certification purposes. They do not receive your name, contact details, or financial information.
4.3 Identity Verification Partners. We may use third-party KYC and identity verification services to assist in confirming the authenticity of identity documents submitted during the verification process. These partners process your KYC data under strict data processing agreements and are prohibited from using it for any other purpose.
4.4 Analytics Providers. We use privacy-compliant analytics tools to understand how players interact with the 8app platform. Analytics data is collected in an aggregated and anonymised form wherever possible and is not used to identify individual players.
4.5 Legal and Regulatory Disclosure. 8app may disclose your personal data to governmental bodies, law enforcement agencies, or financial intelligence units where required to do so by applicable law, a court order, or in connection with the investigation of suspected money laundering or fraud. We will not notify you of such disclosure where doing so would be prohibited by law or would prejudice an ongoing investigation.
4.6 Corporate Transactions. In the event of a merger, acquisition, or sale of all or part of 8app's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and your rights will be preserved.
4.7 No Sale of Data. 8app does not sell, rent, lease, or otherwise transfer your personal data to any third party for their own commercial or marketing purposes. This principle applies unconditionally and without exception.
5 Cookies and Tracking Technologies
5.1 What Are Cookies. Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and to store information about your preferences and session state. 8app uses cookies and similar technologies (such as local storage and session tokens) to operate the platform reliably and securely.
5.2 Categories of Cookies Used. The cookies used on the 8app platform fall into the following categories:
| Cookie Type | Purpose | Retention |
|---|---|---|
| Strictly Necessary | Maintain your logged-in session, remember your cart/bet slip state, prevent CSRF attacks | Session duration |
| Functional | Remember your language and display preferences, store responsible gaming limit settings | Up to 12 months |
| Analytics | Understand which pages are visited most, identify navigation bottlenecks, improve UX | Up to 24 months |
| Security | Detect and prevent fraudulent login attempts, flag unusual device or IP behaviour | Up to 6 months |
5.3 Managing Cookies. You may control or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in or using the platform, as these cookies are essential to its operation. Disabling functional or analytics cookies will not prevent you from using 8app but may affect your experience.
5.4 No Third-Party Advertising Cookies. 8app does not place third-party advertising or retargeting cookies on your device. You will not be tracked across other websites for advertising purposes as a result of visiting 8app.
6 Data Retention Periods
6.1 Active Accounts. Personal data associated with an active 8app account is retained for as long as the account remains open and for a defined period following account closure. We do not hold data for longer than is necessary for its stated purpose.
6.2 Closed Accounts. Upon account closure, your registration data, KYC documents, and transaction history are retained for a minimum of five years from the date of closure. This retention period reflects our obligations under applicable anti-money laundering regulations and financial record-keeping requirements.
6.3 Retention Schedule.
| Data Type | Retention Period | Basis |
|---|---|---|
| Account Registration Data | Duration of account + 5 years post-closure | Legal obligation (AML regulations) |
| KYC Identity Documents | Duration of account + 5 years post-closure | Legal obligation (AML regulations) |
| Transaction Records | Duration of account + 7 years post-closure | Financial record-keeping requirements |
| Support Communications | 3 years from last contact | Legitimate interest (dispute resolution) |
| Technical / Log Data | Up to 12 months | Legitimate interest (security monitoring) |
| Marketing Consent Records | Until consent is withdrawn + 3 years | Legal obligation (consent records) |
6.4 Deletion Requests. Where you request deletion of your personal data and no legal retention obligation applies, 8app will process your deletion request within 30 days. Where retention is legally required, we will inform you of the specific retention period applicable to your data and the legal basis for continued retention.
Anonymisation: After the applicable retention period expires, 8app will either securely delete your personal data or anonymise it such that it can no longer be linked to you as an individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.
7 Your Privacy Rights
As a data subject whose personal information is processed by 8app, you hold the following rights with respect to your data. These rights are available to all registered players and may be exercised free of charge by contacting our support team.
- Right of Access: You have the right to request a copy of the personal data we hold about you. We will respond to access requests within 30 days of receipt and provide the data in a clear, readable format.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account information (such as your email address or phone number) directly through your account settings. For KYC document corrections, contact support.
- Right to Erasure: You may request that we delete your personal data where it is no longer necessary for its original purpose, where you have withdrawn consent and no other legal basis applies, or where the data has been processed unlawfully. This right is subject to our legal retention obligations as described in Section 6.
- Right to Restrict Processing: In certain circumstances — for example, while a dispute about data accuracy is being resolved — you may request that we restrict further processing of your personal data to storage only.
- Right to Data Portability: You have the right to receive a copy of the personal data you provided to us in a structured, machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
- Right to Object: You may object at any time to processing carried out on the basis of our legitimate interests, including profiling for responsible gaming purposes. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.
Exercising Your Rights: To exercise any of the rights listed above, contact us at [email protected] with the subject line "Privacy Rights Request" and a description of your request. We may need to verify your identity before fulfilling the request to protect against unauthorised access to another person's data.
8 Contact and Data Enquiries
8.1 Primary Contact. For all privacy-related questions, data access requests, correction requests, deletion requests, or concerns about how your data is handled by 8app, you may reach our support and data team at the following address:
8app Privacy Team
Email: [email protected]
Subject Line: "Privacy Rights Request" or "Data Enquiry"
Response Time: Within 5 business days for general enquiries; within 30 days for formal data subject rights requests.
8.2 Policy Updates. 8app reserves the right to update this Privacy Policy at any time. When material changes are made, we will update the "Last Updated" date at the top of this page and, where the changes are significant, notify registered players via their account email address. Continued use of the platform following notification of changes constitutes acceptance of the revised policy.
8.3 Links to Other Pages. This Privacy Policy applies solely to the 8app platform at https://8app.ws. It does not apply to third-party game provider interfaces or payment provider websites that may be accessible from within the platform. We encourage you to review the privacy policies of those third parties directly.
8.4 Children and Minors. 8app is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that data has been collected from a minor, the associated account will be closed immediately, the data will be deleted, and any deposited funds will be returned to the originating payment method. 18+
Responsible Gaming and Privacy: Data collected through our responsible gaming tools — including self-assessment responses, deposit limit settings, and self-exclusion requests — is treated with the highest level of confidentiality. This data is used only to protect your wellbeing and is never used for marketing, profiling, or shared with third parties outside of legal obligations. Visit our Responsible Gaming page to access these tools.
Your Data Is Safe With 8app
Now that you understand how we protect your privacy, explore the full 8app platform with confidence. Our cricket betting, slots, and live casino games are all available to verified players across Bangladesh.