8mbd Privacy Policy —
How We Protect Your Personal Data
At 8mbd, your privacy is treated as a non-negotiable obligation. This Privacy Policy explains in plain terms exactly what personal data we collect, why we collect it, how we use it, who we share it with, and what rights you hold over your own information as a player based in Bangladesh.
End-to-End Encryption
Every data transmission between your device and the 8mbd platform is protected by 256-bit SSL/TLS encryption. Your login credentials, payment details, and personal information are never transmitted or stored in plain text.
We Do Not Sell Your Data
8mbd does not sell, rent, or trade your personal information to third-party marketers or data brokers under any circumstances. Your data is used exclusively to deliver and improve the services you signed up for.
Your Rights Are Respected
You have the right to access, correct, or request deletion of your personal data at any time. Submit a request to our support team and we will respond within five business days. You remain in control of your information throughout your time with 8mbd.
Minimal Data Collection
We apply the principle of data minimisation — collecting only what is genuinely necessary to operate the platform, verify your identity, process payments, and comply with anti-money laundering obligations. We do not collect data speculatively.
Defined Retention Periods
Personal data is retained only for as long as it is necessary for its original purpose or required under applicable law. When the retention period expires, data is securely deleted or anonymised so it can no longer be linked to you as an individual.
Opt-Out of Marketing
All promotional emails and SMS notifications from 8mbd include a clear opt-out mechanism. You can also manage your marketing preferences at any time from within your account settings or by contacting our support team directly.
01 Who We Are
8mbd is an online casino and sports betting platform operating at https://8mbd.onl, designed and built specifically for adult players located in Bangladesh. References to "8mbd", "we", "us", or "our" in this Privacy Policy mean the 8mbd platform and its operating entity, including all affiliated personnel responsible for data processing decisions.
As the operator of this platform, 8mbd acts as the data controller with respect to personal information collected directly through the website. Where we engage third-party providers — such as payment processors, game studios, or identity verification services — those providers act as data processors operating under contractual obligations consistent with this policy.
02 Personal Data We Collect
8mbd collects personal data through several channels: information you provide directly during registration and account management, data generated automatically as you use the platform, and information received from trusted third-party partners in limited circumstances described below.
2.1 Information You Provide Directly
- Registration data: Full legal name, date of birth, mobile number, and email address provided when creating your 8mbd account.
- Identity verification documents: National ID card, passport, or utility bill submitted during KYC verification to confirm your identity and age.
- Payment information: Mobile financial service numbers (bKash, Nagad, Rocket, Upay) and bank account details provided when making deposits or requesting withdrawals. We do not store full card numbers — card payments are tokenised by our payment processors.
- Communication records: Messages, emails, and chat transcripts from your interactions with our customer support team.
- Responsible gaming preferences: Deposit limits, session reminders, self-exclusion requests, and cooling-off periods set within your account settings.
2.2 Data Collected Automatically
- Device and technical data: IP address, browser type, operating system, device identifiers, screen resolution, and language settings collected when you access the platform.
- Usage data: Pages visited, games played, wagers placed, time spent per session, navigation paths, and feature interactions logged to help us improve the platform experience.
- Transaction records: A complete log of all deposits, withdrawals, wagers, bonus activations, and account balance changes associated with your account.
- Geolocation data: Approximate geographic location derived from your IP address, used to verify that you are accessing the platform from an eligible location.
- Cookies and similar technologies: Session cookies, persistent cookies, and local storage values used to maintain your login session, remember preferences, and support analytics. See Section 6 for full details.
2.3 Data Received from Third Parties
- Payment providers: Transaction confirmation and status updates from bKash, Nagad, Rocket, Upay, DBBL, BRAC Bank, and card networks to verify deposit and withdrawal completion.
- Identity verification services: Results of document authenticity checks conducted by our KYC partners when verifying your identity.
- Fraud and risk screening: Risk scores or flags from fraud prevention services used to detect account abuse, multi-accounting, or suspicious financial activity.
| Data Category | Examples | Source |
|---|---|---|
| Identity Data | Name, date of birth, NID, passport | You / KYC partner |
| Contact Data | Mobile number, email address | You |
| Financial Data | bKash/Nagad number, bank account, transaction history | You / Payment providers |
| Technical Data | IP address, device ID, browser type | Automatically collected |
| Usage Data | Games played, sessions, wagers, navigation | Automatically collected |
| Communications Data | Support chat transcripts, emails | You |
| Responsible Gaming Data | Limits set, exclusion requests | You |
03 How We Use Your Personal Data
8mbd processes personal data for clearly defined purposes. We do not use your data for any purpose incompatible with those stated at the time of collection without first seeking your consent or establishing a separate lawful basis.
- Account creation and management: To register your account, verify your identity, maintain your account settings, and enable you to log in securely.
- Service delivery: To allow you to place bets, play casino games, participate in promotions, and access all features of the 8mbd platform.
- Payment processing: To verify and process your deposits and withdrawal requests via your chosen payment method, and to maintain an accurate record of your account balance.
- Identity and age verification (KYC): To confirm that you are who you say you are and that you meet the minimum age requirement of 21 years, in compliance with our anti-money laundering obligations.
- Fraud prevention and security: To detect, investigate, and prevent fraud, money laundering, multi-accounting, bot usage, and other activities that violate our Terms & Conditions or applicable law.
- Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide account assistance.
- Responsible gaming: To implement the limits, reminders, and exclusion tools you set, and to proactively identify and reach out to players who may be showing signs of problem gambling.
- Platform improvement: To analyse aggregated usage patterns, identify technical issues, and improve the features, performance, and user experience of the platform.
- Marketing communications: To send you promotional offers, bonus notifications, and game updates by email or SMS — only where you have not opted out. You may withdraw consent at any time.
- Legal and regulatory compliance: To maintain records required under applicable anti-money laundering, financial crime, and data protection obligations, and to respond to lawful requests from authorities.
04 Legal Basis for Processing
Every data processing activity carried out by 8mbd rests on one or more of the following lawful bases:
- Contractual necessity: Processing required to enter into or perform our contract with you — including account creation, payment processing, and service delivery.
- Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, KYC obligations, and responses to lawful authority requests.
- Legitimate interests: Processing pursued in our legitimate business interests where those interests are not overridden by your rights — including fraud prevention, platform security, and usage analytics.
- Consent: Processing for purposes where you have given clear, informed, and freely withdrawable consent — primarily marketing communications and non-essential cookies. You may withdraw consent at any time without penalty.
05 Sharing Your Personal Data
8mbd does not sell, rent, or trade your personal data. We share data only in the specific circumstances outlined below, and only to the minimum extent necessary for the stated purpose.
5.1 Payment Processors
To process your deposits and withdrawals, we share relevant financial and identity data with our payment partners including bKash, Nagad, Rocket, Upay, DBBL, BRAC Bank, and international card networks. These parties process data solely to facilitate your transactions and are contractually prohibited from using your data for any other purpose.
5.2 Game Providers
When you launch a game hosted by a third-party studio — such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, or Ezugi — a session token and limited account reference may be shared with that provider to initialise and authenticate your game session. These studios do not receive your name, payment details, or contact information.
5.3 Identity Verification Services
When KYC verification is required, your identity documents and personal details are shared with our contracted verification partner solely for the purpose of authenticating your identity and confirming your age. Verification partners are bound by strict confidentiality obligations and data processing agreements.
5.4 Fraud Prevention and Security Services
Technical identifiers such as IP addresses, device fingerprints, and behavioural signals may be shared with specialist fraud-detection services to identify and prevent account abuse, multi-accounting, and financial crime. These services process data on our behalf under binding data processing agreements.
5.5 Legal and Regulatory Authorities
We may disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities where required by applicable law, court order, or where we determine in good faith that disclosure is necessary to protect the rights, property, or safety of 8mbd, its users, or the public.
5.6 Business Transfers
In the event of a merger, acquisition, or sale of all or part of our business, personal data held by 8mbd may be transferred to the acquiring entity as part of that transaction. We will provide advance notice of any such transfer and the privacy practices of the acquiring entity before your data is transferred.
06 Cookies and Tracking Technologies
8mbd uses cookies and similar technologies to operate core platform functionality, remember your preferences, and improve our service. Below is a plain-language explanation of each category of cookie we use.
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Essential | Maintain your login session, remember your language and currency preferences, and ensure the platform functions correctly across page loads. | No — required for the platform to work |
| Analytics | Collect aggregated, anonymised data on page visits, feature usage, and navigation paths to help us identify areas for improvement. | Yes — via account settings or browser controls |
| Preference | Store your display preferences such as game lobby filters, odds format, and notification settings so they persist between sessions. | Yes — disabling resets preferences each session |
| Security | Support fraud detection by storing a session token and device fingerprint to identify suspicious login attempts or account takeovers. | No — required for account security |
You can manage or delete cookies through your browser settings at any time. Please note that disabling essential or security cookies may prevent you from logging in or using core platform features. 8mbd does not use third-party advertising cookies or cross-site tracking pixels.
07 Data Security
8mbd applies a defence-in-depth approach to data security, combining technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or destruction.
- Transport security: All data transmitted between your browser and our servers is encrypted using TLS 1.3 with 256-bit AES encryption. Our SSL certificate is validated and renewed on a rolling basis.
- At-rest encryption: Sensitive data fields — including identity document references, payment details, and authentication credentials — are stored in encrypted form in our databases.
- Access controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff with access to personal data are bound by confidentiality obligations and receive regular data protection training.
- Penetration testing: Our platform undergoes periodic security assessments by independent specialists to identify and remediate vulnerabilities before they can be exploited.
- Incident response: In the event of a data security incident that creates a risk to your rights, 8mbd will notify affected users and take all reasonable steps to contain the incident and mitigate harm without undue delay.
08 Data Retention
8mbd retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account and identity data | Duration of account + 5 years after closure | AML compliance and legal obligations |
| Financial transaction records | 7 years from transaction date | Financial record-keeping requirements |
| KYC documents | Duration of account + 5 years after closure | Regulatory obligations |
| Customer support communications | 3 years from last interaction | Dispute resolution and service quality |
| Usage and analytics data | 24 months (anonymised after 12 months) | Platform improvement |
| Marketing preferences and opt-outs | Indefinitely (to honour opt-out) | Compliance with marketing opt-outs |
Once the applicable retention period has expired, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with you as an individual.
09 Your Privacy Rights
As a user of the 8mbd platform, you hold the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Request" and your registered username. We will respond within five business days.
- Right of Access: You may request a copy of the personal data 8mbd holds about you, along with information about how and why it is being processed.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it without undue delay.
- Right to Erasure: You may request deletion of your personal data where it is no longer necessary for its original purpose, where you withdraw consent, or where it has been processed unlawfully. This right is subject to our legal retention obligations — we cannot delete data we are required by law to retain.
- Right to Restriction: You may request that we pause processing of your personal data in certain circumstances — for example, while a correction request is being resolved or while you contest the legitimate interest basis for processing.
- Right to Data Portability: Where processing is based on your consent or contractual necessity, and is carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format.
- Right to Object: You may object to processing of your personal data carried out on the basis of our legitimate interests, including profiling. We will stop such processing unless we can demonstrate compelling legitimate grounds that override your interests.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.
10 Children and Minors
The 8mbd platform is strictly intended for adults aged 21 and above. We do not knowingly collect, process, or retain personal data from any individual under the age of 21. If you are under 21 years old, you must not use this platform or provide any personal information to us.
If we become aware that personal data has been collected from a user under 21, we will take immediate steps to delete that data and permanently close the associated account. If you believe a minor has registered on the 8mbd platform, please contact us immediately at [email protected] so we can investigate and take appropriate action.
8mbd employs age verification measures — including document-based KYC — to reduce the risk of underage access. We take our responsibility to protect young people seriously and continuously review our age-gating processes.
11 Third-Party Links and Integrations
The 8mbd platform may contain references to game studios, payment providers, and other third parties. Where links to third-party websites or services are present, please be aware that those third parties operate under their own independent privacy policies, for which 8mbd accepts no responsibility.
We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of 8mbd — particularly your chosen payment provider (bKash, Nagad, Rocket, Upay, etc.) and your bank or card issuer. 8mbd has no control over, and assumes no liability for, the privacy practices of these third parties.
12 Updates to This Privacy Policy
8mbd reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or the services we offer. When material changes are made, we will notify registered users via the email address associated with their account and display a prominent notice on the platform.
The "Last Updated" date at the top of this page and in the hero section will be revised to reflect the date of the most recent amendment. We recommend reviewing this Privacy Policy periodically to stay informed about how we protect your data. Your continued use of the 8mbd platform after the effective date of any revised policy constitutes acceptance of those changes.
If any amendment materially reduces your privacy rights or significantly changes how we process your data, we will provide at least 14 days' advance notice before the revised policy takes effect, giving you the opportunity to close your account if you do not agree to the updated terms.
13 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way 8mbd handles your personal data, our privacy support team is available seven days a week in Bangladesh Standard Time (BST, UTC+6).
Privacy Enquiries: [email protected] — subject line: "Privacy Request"
General Support: [email protected] — available 24/7
Please include your registered username and a clear description of your query or request in all correspondence. For data subject rights requests, we will acknowledge receipt within 24 hours and aim to provide a full response within five business days.
Your Data Is Safe — Now Enjoy the Platform
You now know exactly how 8mbd protects your personal information. Explore our full casino, follow live BPL and IPL cricket odds, or review our FAQ for quick answers. All players must be 21 years or older.