Your Privacy Matters
at 8mbat

Introduction

This Privacy Policy applies to all users of the 8mbat online betting and casino platform, accessible at 8mbat.io. It sets out the basis on which 8mbat collects, processes, stores, and shares the personal data of registered account holders, prospective players, and visitors to the platform. By accessing 8mbat.io or registering an account, you acknowledge that you have read and understood this Privacy Policy and that you consent to the processing of your personal data as described herein.

8mbat is designed specifically for players in Bangladesh and processes all account transactions in Bangladeshi Taka. Our platform supports payments via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank (DBBL), Visa, and Mastercard. The personal data we collect reflects the requirements of operating a responsible, secure, and legally compliant platform in this market.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are available on this website. Where any aspect of data processing is governed by a specific provision in those documents, this Privacy Policy provides the full technical and legal detail of how that processing is carried out.

8mbat is committed to the principles of data minimisation, purpose limitation, storage limitation, integrity, and confidentiality. We collect only the personal data that is strictly necessary to provide our services, and we retain it only for as long as is required by our operational and legal obligations.

Data Controller

For the purposes of this Privacy Policy, the data controller responsible for your personal information is 8mbat, operating the platform at 8mbat.io. The data controller determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection principles.

If you have any questions about how 8mbat processes your personal data, wish to exercise any of your data rights, or need to submit a data-related complaint, you may contact the 8mbat data team directly at [email protected]. Our support team operates 24 hours a day, 7 days a week, at Bangladesh Standard Time (BST, UTC+6), and will acknowledge your request within one business day.

Data We Collect

8mbat collects personal data across several categories depending on the nature of your interaction with the platform. The categories of personal data we may collect include, but are not limited to, the following:

8mbat does not collect special categories of sensitive personal data — such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information — unless this is strictly required for responsible gaming purposes (for example, where a player self-declares a gambling-related vulnerability) and the player has given explicit consent for such processing.

How We Collect Data

8mbat collects your personal data through the following channels and mechanisms:

4.1 Direct Collection

The majority of data we hold about you is provided directly by you at the time of account registration, during the identity verification process, when making deposits or withdrawals, when contacting our support team, or when responding to any survey or promotional invitation. You are in control of the personal information you submit to us directly.

4.2 Automated Collection

When you browse or use the 8mbat platform, we automatically collect certain technical and activity data through the use of cookies, web beacons, session logging, and similar technologies. This includes your IP address, device identifiers, browser type, session duration, pages visited, and in-game activity. This data is collected to ensure platform security, detect fraudulent patterns, and continuously improve the user experience.

4.3 Third-Party Sources

In limited circumstances, 8mbat may receive personal data about you from third parties, including:

• Payment processors (bKash, Nagad, Rocket, Upay, DBBL, Visa, Mastercard) — for transaction verification and fraud screening.
• Identity verification service providers — for KYC and AML compliance checks.
• Game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe) — for game session data necessary to settle bets and resolve disputes.
• Responsible gaming databases — to confirm self-exclusion status where applicable.

How We Use Your Data

8mbat processes your personal data only for lawful, specified, and legitimate purposes. The following table summarises the primary purposes for which we use your data, alongside the legal basis we rely upon for each category of processing:

• Account creation and management: We process identity and contact data to create and maintain your 8mbat account, verify your eligibility (including the 21+ age requirement), and administer your player profile throughout the account lifecycle.
• Transaction processing: We use financial data to process deposits and withdrawals via supported Bangladeshi payment methods, reconcile transactions, and maintain accurate financial records.
• Fraud prevention and security: Technical and activity data is processed to detect and prevent unauthorised access, fraudulent betting patterns, money laundering, bonus abuse, and other forms of platform misuse.
• Responsible gaming compliance: Activity and communications data is used to monitor player behaviour for indicators of problem gambling, enforce deposit limits and self-exclusion requests, and fulfil our duty of care to the player community.
• Customer support: Communications data is processed to respond to support requests, investigate complaints, and resolve disputes in a timely and accurate manner.
• Legal and regulatory compliance: We process personal data as required to meet our obligations under applicable anti-money laundering (AML), know-your-customer (KYC), and data protection frameworks.
• Platform improvement and analytics: Aggregated and anonymised activity and technical data is used to analyse platform performance, identify areas for improvement, and develop new features that better serve Bangladeshi players.
• Marketing and promotions: Where you have given explicit consent, we may use your contact data and preferences to send personalised bonus offers, seasonal promotions (including Eid, Pohela Boishakh, and Victory Day offers), and platform news. You may withdraw consent at any time.

Sharing Your Data

8mbat does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your data only in the following limited and controlled circumstances:

6.1 Service Providers

We engage trusted third-party service providers to support the operation of the 8mbat platform. These providers act as data processors on our behalf and are contractually bound to process your data only under our instruction and to maintain appropriate security standards. Categories of service providers include payment processors, identity verification providers, cloud infrastructure providers, customer support software vendors, and game content providers.

6.2 Legal and Regulatory Disclosure

8mbat may disclose your personal data to law enforcement agencies, regulatory bodies, or other government authorities where we are legally required to do so, or where disclosure is necessary to protect the safety, rights, or property of 8mbat, its players, or the general public. Any such disclosure will be limited to the minimum data necessary and will be documented in accordance with our internal compliance procedures.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of 8mbat's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material change to how your data is processed that results from it.

Data Retention

8mbat retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including the satisfaction of any legal, accounting, or reporting obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of your account being active on the 8mbat platform.
• Post-closure account data: Following account closure, core identity and financial records are retained for a minimum of five (5) years to comply with AML and KYC regulatory requirements.
• Transaction records: Deposit and withdrawal records, including payment method references, are retained for a minimum of seven (7) years for financial compliance and audit purposes.
• Support communications: Customer support correspondence is retained for three (3) years from the date of the last interaction, or longer where an unresolved dispute is pending.
• Marketing consent records: Records of your consent status and preference history are retained for the duration of the marketing relationship and for a further three (3) years after consent is withdrawn, to demonstrate compliance.
• Technical and log data: Server logs, IP records, and session data are retained for up to twelve (12) months and then deleted or anonymised, unless a specific security investigation requires extended retention.

Upon expiry of the applicable retention period, your personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual. Where anonymisation is applied, the resulting aggregate data may be retained indefinitely for statistical and analytical purposes.

Data Security

8mbat employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures include:

• SSL/TLS encryption: All data transmitted between your device and the 8mbat platform is encrypted using SSL/TLS protocols, ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Encrypted data storage: Sensitive personal data, including identity verification documents and payment references, is stored in encrypted form within our secure cloud infrastructure.
• Access controls: Access to personal data within 8mbat is restricted on a strict need-to-know basis. Staff members are granted access only to the data required to fulfil their specific job function, and all access is logged and audited.
• Multi-factor authentication: Administrative access to systems holding personal data is protected by multi-factor authentication to prevent unauthorised access in the event of credential compromise.
• Penetration testing and vulnerability management: 8mbat's platform undergoes regular security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a data breach, 8mbat has a documented incident response procedure in place to contain the breach, assess its impact, notify affected individuals where required, and prevent recurrence.

While 8mbat takes every reasonable precaution to protect your personal data, no online platform can guarantee absolute security. You play an important role in keeping your account secure by maintaining a strong, unique password and notifying us immediately at [email protected] if you suspect unauthorised access to your account.

Cookies & Tracking Technologies

8mbat uses cookies and similar tracking technologies to provide a functional, personalised, and secure platform experience. A cookie is a small text file placed on your device by your browser when you visit a website. Cookies do not contain executable code and cannot transmit viruses or malware.

9.1 Types of Cookies We Use

• Strictly necessary cookies: These cookies are essential for the operation of the 8mbat platform. They enable core functions such as session management, login authentication, and security enforcement. The platform cannot function correctly without these cookies, and they cannot be disabled.
• Functional cookies: These cookies remember your preferences — such as your preferred language, display settings, and any responsible gaming limits you have set — so that you do not have to reconfigure them on each visit.
• Analytical cookies: We use analytical cookies to understand how players navigate the platform, which features are most used, and where usability improvements are needed. This data is collected in aggregate and anonymised form where possible.
• Security cookies: These cookies help us detect and prevent fraudulent activity, identify suspicious login patterns, and protect accounts from unauthorised access attempts.

9.2 Managing Cookies

You may manage or disable non-essential cookies through your browser's settings. Please note that disabling cookies — particularly functional cookies — may impair your experience on the 8mbat platform and prevent certain features from operating correctly. Strictly necessary cookies cannot be disabled without rendering the platform inoperable, as they are integral to the authentication and security architecture.

Your Data Rights

As a user of the 8mbat platform, you hold a number of important rights in relation to your personal data. 8mbat is committed to honouring these rights promptly and transparently. The rights available to you are described below:

To exercise any of the above rights, please contact 8mbat at [email protected]. We aim to respond to all data rights requests within 30 days. In complex cases, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.

Marketing Communications

8mbat may send you promotional communications, including bonus offers, free bet notifications, seasonal promotions, and platform news, where you have given explicit consent to receive such communications at the time of registration or at a later date. We personalise marketing communications based on your activity data, game preferences, and betting history to ensure that offers are relevant and meaningful to you as a Bangladeshi player.

Marketing communications may be delivered via email or SMS to the contact details registered on your account. We do not engage in unsolicited cold marketing to individuals who have not created an 8mbat account or given prior consent.

Children & Minors

8mbat applies age verification checks as part of the account registration process and at any subsequent point where there is reason to question a player's age. Any account found to belong to a person under the age of 21 will be immediately suspended, any balance forfeited pending investigation, and the player's personal data handled in accordance with applicable data protection obligations governing data subjects under the minimum age.

Policy Changes

8mbat reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or the services we offer. When material changes are made, the revised policy will be published on this page with an updated effective date displayed prominently at the top of the document.

Where a change is particularly significant — for example, a new category of data being collected or a new third-party sharing arrangement — 8mbat will, where reasonably practicable, notify registered players by email in advance of the change taking effect. However, it remains your responsibility to review this Privacy Policy periodically to stay informed of how your data is being handled.

Your continued use of the 8mbat platform following the publication of any amendment to this Privacy Policy constitutes your acceptance of the revised terms. If you disagree with any change, you may close your account and request deletion of your personal data by contacting [email protected].

Contact & Requests

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 8mbat handles your personal data, please do not hesitate to get in touch. Our dedicated data and compliance team is available around the clock and will respond to all enquiries within one business day.

You may reach us by email at [email protected]. When submitting a data rights request, please include your registered account username and a clear description of your request so that we can process it as efficiently as possible. We may need to verify your identity before acting on certain types of requests to ensure that your data is not disclosed to or altered by an unauthorised party.

Our support team operates on Bangladesh Standard Time (BST, UTC+6) and handles enquiries from players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. Regardless of your location within Bangladesh, you are entitled to the same standard of data protection and the same rights set out in this Privacy Policy.