8mbt Privacy Policy — How We Protect Your Personal Data
At 8mbt, protecting the privacy and personal data of every Bangladesh player is a core responsibility. This Privacy Policy explains clearly and honestly what data we collect, why we collect it, how it is stored and processed, and what rights you hold over your own information.
Privacy at a Glance
These cards highlight the six pillars of how 8mbt approaches your personal data. The full legal text below governs in all cases — but these summaries give you a quick, honest overview.
Data Security First
All personal data transmitted between your device and the 8mbt platform is protected by 256-bit SSL/TLS encryption. Data at rest is stored on secured servers with access controls and regular security audits to prevent unauthorised exposure.
Purpose-Limited Collection
8mbt collects only the personal data that is strictly necessary for account registration, identity verification (KYC), payment processing, fraud prevention and customer support. We do not collect data beyond what is required to deliver a safe, functional betting platform.
No Data Selling
8mbt does not sell, rent or trade your personal data to third-party advertisers or marketing companies. Data is shared only with essential service partners — payment processors, KYC verification providers and fraud-prevention systems — under strict contractual obligations.
Transparent Processing
This policy describes every category of data we collect, the legal basis for processing it, how long we retain it and with whom it may be shared. There are no hidden data practices at 8mbt. If you have any question not answered here, contact our support team directly.
Your Rights Are Real
As an 8mbt player, you have the right to access, correct, restrict the processing of, or request deletion of your personal data. You may also withdraw marketing consent at any time. These rights are described in detail in Section 8 of this policy and are acted upon within 30 days of a valid request.
Responsible Gaming & Minors
The 8mbt platform is strictly for players aged 21 and above. We do not knowingly collect personal data from individuals under 21. If we discover that a minor has provided personal data, that data is deleted and the account is closed immediately. We take our duty of care seriously.
Your Data Rights at 8mbt
As an 8mbt player based in Bangladesh, you hold specific rights over how your personal information is used. Here is a plain-English summary of what you are entitled to and how to exercise each right.
Right of Access
Request a full copy of the personal data 8mbt holds about you. We will respond within 30 days with a structured data export. Contact us at [email protected] to make a subject access request.
Right to Rectification
If any personal data we hold is inaccurate or incomplete, you have the right to request a correction. Account details such as address and contact information can also be updated directly in your account settings.
Right to Erasure
You may request that 8mbt delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations (such as anti-money-laundering record-keeping requirements).
Right to Restrict Processing
In certain circumstances you may request that 8mbt restrict the processing of your personal data — for example, while a disputed accuracy claim is under investigation — without requesting full deletion of that data.
Right to Data Portability
Where processing is based on your consent or on a contract with you, and is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format for transfer to another provider.
Right to Withdraw Consent
Where 8mbt relies on your consent as the legal basis for processing (e.g., for direct marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Contents
1 Introduction
This Privacy Policy ("Policy") sets out the basis on which 8mbt collects, stores, processes and shares personal data obtained from players, prospective players and visitors to the 8mbt platform at https://8mbt.io. This Policy applies to all services offered by 8mbt, including sports betting, live casino, slot games, promotional offers and customer support interactions.
8mbt is committed to handling your personal information with transparency, integrity and in accordance with internationally recognised data protection principles. By registering an account or continuing to use the 8mbt platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.
If you do not agree with the data practices described in this Policy, you should discontinue your use of the 8mbt platform and may request account closure by contacting [email protected] (plain-text contact — not a clickable link).
2 Data Controller
For the purposes of this Privacy Policy, 8mbt acts as the data controller in respect of all personal data collected through the platform from players based in Bangladesh. As data controller, 8mbt determines the purposes and means of processing personal data collected via the platform.
All data protection enquiries, subject access requests and right-to-erasure requests should be directed to the 8mbt data protection contact point:
- Email (plain text — not a clickable link): [email protected]
- Subject line for data requests: "Data Protection Request — [Your Account Username]"
- Response time: 8mbt will acknowledge all data protection requests within 5 business days and respond in full within 30 calendar days.
3 Personal Data We Collect
8mbt collects personal data across several categories depending on your level of interaction with the platform. The table below summarises the main categories of data collected:
| Data Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, NID/passport number, photograph | Account registration and KYC verification |
| Contact Data | Email address, phone number, residential address in Bangladesh | Account registration and profile updates |
| Financial Data | bKash/Nagad/Rocket account numbers, bank account details, transaction history | Deposit and withdrawal processing |
| Technical Data | IP address, device type, browser type, operating system, session tokens | Automatically on each platform visit |
| Usage Data | Pages visited, games played, bets placed, time on site, click paths | Automatically during active sessions |
| Communications Data | Support chat transcripts, email correspondence, complaint records | When you contact 8mbt support |
| Marketing Preferences | Email/SMS opt-in status, preferred communication channel | At registration and in account settings |
4 How We Collect Your Data
4.1 Direct Collection
Most personal data is collected directly from you during the following interactions:
- Completing the account registration form on the 8mbt platform.
- Submitting KYC documentation (NID, proof of address, payment method verification).
- Making deposits or requesting withdrawals via bKash, Nagad, Rocket, Upay or bank transfer.
- Contacting the 8mbt customer support team via live chat or email.
- Participating in promotional surveys, bonus claim forms or feedback requests.
4.2 Automated Collection
When you access the 8mbt website or mobile interface, certain technical and usage data is collected automatically via cookies, server logs and similar tracking technologies. This includes your IP address, browser fingerprint, session duration and navigation path within the site. This data is used primarily for security monitoring, fraud detection and platform performance optimisation.
4.3 Third-Party Sources
In limited circumstances, 8mbt may receive personal data about you from third-party sources, including:
- KYC verification partners: Identity verification services that cross-reference your submitted documents against authoritative databases.
- Payment processors: bKash, Nagad, Rocket, Upay and banking partners may share transaction confirmation data necessary to process your deposit or withdrawal.
- Fraud prevention databases: Industry-shared lists of flagged accounts, devices or payment instruments used to protect all players on the platform.
5 Legal Basis for Processing
8mbt processes personal data only where a valid legal basis exists. The following legal grounds are relied upon for the data processing activities described in this Policy:
- Performance of a Contract: Processing necessary to create and manage your 8mbt account, verify your identity, process payments and deliver the betting and gaming services you have requested.
- Legal Obligation: Processing required to comply with anti-money-laundering (AML) obligations, fraud prevention requirements, and regulatory record-keeping mandates applicable to internationally operated gaming platforms.
- Legitimate Interests: Processing for fraud detection, platform security monitoring, responsible gaming oversight, and service improvement analytics — where such interests are not overridden by your rights and interests.
- Consent: Processing for direct marketing communications (promotional emails, SMS updates) where you have actively opted in. You may withdraw consent at any time by contacting [email protected] or updating your account preferences.
6 How We Use Your Personal Data
8mbt uses the personal data collected for the following clearly defined purposes:
- Account Management: To create, maintain and administer your 8mbt player account, including login authentication and account security.
- Identity Verification (KYC): To verify your age (21+), identity and residential address in Bangladesh before processing withdrawal requests, as required by our anti-fraud and anti-money-laundering procedures.
- Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard and supported Bangladeshi bank accounts, and to maintain accurate transaction records.
- Fraud and Security: To detect, investigate and prevent fraudulent transactions, multiple account creation, bonus abuse and other security threats to the platform and its players.
- Responsible Gaming: To monitor betting patterns that may indicate problem gambling, to apply player-requested deposit limits or cooling-off periods, and to comply with self-exclusion requests.
- Customer Support: To respond to queries, complaints and support requests submitted via live chat or email, and to maintain records of those interactions for quality assurance purposes.
- Marketing (with consent): To send promotional offers, bonus notifications, BPL season specials, Eid promotions and other marketing communications to players who have opted in. Frequency is capped and unsubscribe mechanisms are always provided.
- Platform Improvement: To analyse aggregated, anonymised usage data to improve the platform's design, performance, game selection and customer experience for Bangladesh players.
- Legal Compliance: To fulfil record-keeping obligations, respond to lawful requests from regulatory bodies, and exercise or defend legal claims.
7 Sharing Your Personal Data
8mbt does not sell, rent or trade personal data. Data is shared only with the following categories of recipients, each of whom is bound by contractual data protection obligations:
7.1 Essential Service Partners
- Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank and card networks (Visa, Mastercard) receive the minimum data necessary to process your financial transactions.
- KYC and identity verification providers: Third-party services that verify your NID, passport or utility bill against secure identity databases to confirm your eligibility to hold an 8mbt account.
- Fraud prevention services: Shared-industry databases and fraud detection platforms that help 8mbt identify and block fraudulent activity before it affects our players.
- IT infrastructure and cloud providers: Hosting, database and content-delivery partners who store and process data on 8mbt's behalf on secured servers. All such partners operate under strict data processing agreements.
7.2 Legal and Regulatory Disclosure
8mbt may disclose personal data to regulatory authorities, law enforcement agencies or courts where required by applicable law, where necessary to protect the rights and safety of 8mbt players, or where required in connection with legal proceedings. Such disclosures are made only to the extent strictly necessary and are documented internally.
7.3 Business Transfers
In the event of a merger, acquisition, asset sale or restructuring of the 8mbt platform, personal data held by 8mbt may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any change to the data controller's identity.
8 Exercising Your Data Rights
To exercise any of the rights summarised in the "Your Data Rights" section above, please contact 8mbt using the following process:
- Send an email to [email protected] (plain-text address — not a clickable link) with the subject line "Data Rights Request — [Your Username]".
- Describe the specific right you wish to exercise (access, rectification, erasure, restriction, portability or consent withdrawal).
- Provide sufficient information for 8mbt to verify your identity before acting on the request (typically your registered email address, username and a copy of your NID).
- 8mbt will acknowledge the request within 5 business days and fulfil it within 30 calendar days. Complex requests may require an extension of up to a further 60 days, in which case you will be informed.
9 Data Retention
8mbt retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or to comply with applicable legal, regulatory and record-keeping obligations. The table below provides indicative retention periods by data category:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity data | Duration of account + 5 years after closure | Legal/AML obligation |
| Financial transaction records | 7 years from date of transaction | Legal/regulatory obligation |
| KYC documents | 5 years after account closure | AML compliance |
| Customer support records | 3 years from last interaction | Legitimate interest / dispute resolution |
| Technical and usage logs | 13 months from collection | Security and fraud monitoring |
| Marketing preferences | Until consent is withdrawn + 3 years | Consent / legal record |
After the applicable retention period has expired, personal data is securely deleted or anonymised in accordance with 8mbt's internal data lifecycle procedures.
10 Cookies and Tracking Technologies
The 8mbt platform uses cookies and similar tracking technologies to ensure platform functionality, maintain session security, analyse usage patterns and (where consent has been given) deliver relevant promotional content. The main categories of cookies in use are as follows:
- Strictly Necessary Cookies: Essential for the operation of the 8mbt platform. These include session authentication tokens, load-balancing cookies and fraud-prevention identifiers. These cookies cannot be disabled without impairing core platform functionality.
- Analytical / Performance Cookies: Used to measure how players interact with the 8mbt platform — which pages are most visited, session durations and error events. Data from these cookies is aggregated and anonymised before analysis.
- Functional Cookies: Used to remember your preferences, such as your preferred language settings and responsible gaming limit configurations, so that they persist between sessions.
- Marketing Cookies (consent required): Used to track whether a player has engaged with a promotional email or campaign, to help 8mbt measure the effectiveness of marketing activity. These cookies are only placed if you have given marketing consent.
You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in or using core platform features.
11 Security Measures
8mbt implements a layered approach to data security designed to protect your personal data against unauthorised access, loss, destruction or disclosure. Key security measures include:
- 256-bit SSL/TLS encryption on all data in transit between your device and the 8mbt platform.
- Encrypted data storage for all sensitive personal and financial data held on 8mbt servers.
- Role-based access controls restricting access to personal data to only those 8mbt staff members who require it to perform their job functions.
- Multi-factor authentication on internal systems used by 8mbt staff to access player data.
- Regular penetration testing and security audits conducted by independent third parties to identify and remediate vulnerabilities.
- Incident response procedures ensuring that any confirmed data breach is investigated, contained and (where required) reported to affected players and relevant authorities in a timely manner.
12 Third-Party Links and Game Providers
The 8mbt platform hosts games and content provided by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe and Ezugi. While these games are delivered within the 8mbt platform environment, they are operated by independent providers who may collect certain technical data (such as game session identifiers) independently of 8mbt.
8mbt is not responsible for the privacy practices of third-party game providers. Players who have concerns about data collected within specific game environments should review the relevant provider's privacy documentation. 8mbt does not share personally identifiable information (such as your name, address or payment details) with game providers beyond what is technically necessary to authenticate your game session.
This Policy does not apply to any third-party websites that may be referenced in marketing or promotional materials. 8mbt does not control the content or privacy practices of external websites and accepts no responsibility for them.
13 Changes to This Privacy Policy
8mbt reserves the right to update this Privacy Policy at any time to reflect changes in data processing practices, platform features, legal requirements or regulatory guidance. When material changes are made — meaning changes that substantively affect your rights or how your data is processed — 8mbt will provide advance notice via your registered email address at least 14 days before the changes take effect.
Minor or non-material amendments (such as clarifications, corrections of typographical errors or updates reflecting changes to third-party payment partners) may be made without prior notice and take effect immediately upon publication. The "Last Updated" date displayed at the top of this Policy always reflects the date of the most recent revision.
Continued use of the 8mbt platform following the effective date of any Policy update constitutes acceptance of the revised terms. If you do not accept the revised Policy, you should cease using the platform and request account closure before the effective date of the change.
14 Contact Us
For all data protection enquiries, subject access requests, consent withdrawals or general questions about this Privacy Policy, please contact the 8mbt data protection team through the following channels:
- Email (plain text — not a clickable link): [email protected]
- Subject line: "Privacy Policy Enquiry — [Your Username]"
- Response time: Within 5 business days for general enquiries; within 30 calendar days for formal data rights requests.
- Support hours: 24/7 live chat available on the 8mbt platform; email responses during Bangladesh Standard Time (UTC+6) business hours.
Ready to Explore 8mbt?
Now that you understand how 8mbt protects your privacy, explore our cricket betting markets, live casino tables, and slot games — all available in BDT with bKash, Nagad and Rocket support.