8mplay Privacy Policy

1 Introduction and Scope

This Privacy Policy ("Policy") describes how 8mplay ("we", "us", "our"), operating the platform at https://8mplay.biz, collects, processes, stores, and protects the personal data of individuals ("you", "your", "the Player") who access or use the 8mplay website, mobile interface, and associated services.

This Policy applies to all personal data collected through your use of the 8mplay platform, including during account registration, identity verification, deposits, withdrawals, gameplay, participation in promotions, and interactions with our customer support team.

By creating an account on 8mplay or by continuing to use our platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. This Policy should be read alongside the Terms & Conditions and the Responsible Gaming Policy.

2 Data Controller Information

For the purposes of data protection law, 8mplay is the data controller responsible for your personal data collected via https://8mplay.biz. As data controller, 8mplay determines the purposes and means by which your personal data is processed.

If you have any questions about how 8mplay handles your personal data, or if you wish to exercise any of your data rights described in Section 9, you may contact our Data Protection team using the details provided in Section 14 of this Policy.

3 Data We Collect

8mplay collects personal data from you in the following categories. We only collect data that is necessary and proportionate to the purpose for which it is being collected.

Data Category	Specific Data Points	Collection Method
Identity Data	Full legal name, date of birth, NID / passport number, photograph (for KYC)	Registration form; KYC document upload
Contact Data	Mobile number, email address	Registration form; account settings
Financial Data	bKash / Nagad / Rocket / Upay wallet number; transaction reference IDs; deposit and withdrawal amounts	Deposit and withdrawal flows; payment provider APIs
Technical Data	IP address, device type, operating system, browser type, session tokens	Automatically via server logs and cookies
Usage Data	Pages visited, games played, bet history, session duration, click patterns	Automatically via analytics and platform logging
Communications Data	Live chat transcripts, support ticket content, email correspondence	Customer support interactions
Marketing Preferences	Consent status for promotional communications; preferred channels	Registration form; account settings; opt-in/opt-out requests

4 How We Use Your Data

8mplay uses your personal data for the following purposes, each of which is underpinned by a specific legal basis detailed in Section 5:

• Account Management: To create, maintain, and administer your 8mplay account, including processing login authentication and password recovery.
• Identity Verification (KYC): To verify your identity and age in compliance with responsible gaming and anti-money-laundering obligations before processing your first withdrawal or when triggered by risk-based review.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other accepted payment methods, and to maintain accurate financial records of all transactions.
• Service Delivery: To provide access to casino games, sports betting markets, live dealer tables, and all other features of the 8mplay platform.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, money laundering, and unauthorised access to your account.
• Responsible Gaming: To monitor gambling behaviour for signs of problematic play, apply player-requested limits and exclusions, and fulfil player welfare obligations.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and maintain records of support interactions for quality assurance.
• Promotional Communications: To send you information about relevant promotions, bonuses, and platform updates, where you have given explicit consent to receive such communications.
• Platform Improvement: To analyse anonymised usage patterns in order to improve platform performance, game selection, and user experience.
• Legal Compliance: To meet record-keeping, reporting, and cooperation obligations required by applicable laws and regulations.

5 Legal Basis for Processing

8mplay processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to enter into or perform our agreement with you — for example, creating your account, processing payments, and delivering gaming services.
• Legal Obligation: Processing required for compliance with applicable legal obligations — for example, KYC identity checks, anti-money-laundering record-keeping, and cooperation with law enforcement where lawfully required.
• Legitimate Interests: Processing carried out for purposes that are in our legitimate business interests, where those interests are not overridden by your privacy rights — for example, fraud prevention, platform security, and service improvement through anonymised analytics.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — for example, sending marketing and promotional communications. You may withdraw this consent at any time.

6 Sharing Your Data

8mplay does not sell, rent, or trade your personal data. We may share your data with carefully selected third parties only in the following circumstances and only to the extent strictly necessary:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, and other payment processors receive the financial data needed to process your transactions. These providers are bound by their own data protection obligations and are not authorised to use your data for any other purpose.
• Game Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe may receive a session token and game-related activity data to facilitate gameplay. They do not receive your full identity or financial data.
• Identity Verification (KYC) Providers: Where automated KYC checks are performed, your identity documents may be processed by a third-party verification service operating under a data processing agreement with 8mplay.
• Fraud and Security Partners: Anonymised or pseudonymised technical data (such as IP addresses and device fingerprints) may be processed by fraud detection services to identify and prevent platform abuse.
• Legal and Regulatory Authorities: 8mplay may disclose your personal data to law enforcement or regulatory bodies where required by law, in response to a valid legal request, or where disclosure is necessary to protect the rights, property, or safety of 8mplay, its players, or the public.

7 Cookies and Tracking Technologies

8mplay uses cookies and similar tracking technologies to operate the platform, maintain your login session, remember your preferences, and gather anonymised analytics about how the platform is used. The following types of cookies are used on 8mplay:

• Strictly Necessary Cookies: These are essential for the platform to function and cannot be disabled. They include session authentication tokens, CSRF protection tokens, and load-balancing cookies. No consent is required for these cookies as they are operationally essential.
• Functional Cookies: These remember your preferences such as language settings and last-visited game categories to provide a more personalised experience.
• Analytics Cookies: These collect anonymised data about how visitors interact with the platform — for example, which pages are visited most frequently and how long sessions last. This data is used to improve platform performance and user experience.
• Marketing Cookies: Where you have given consent, these cookies may be used to deliver relevant promotional content. They are only active for players who have opted in to marketing communications.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging into your 8mplay account and using core platform features.

8 Data Retention

8mplay retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to applicable legal retention requirements. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, to meet anti-money-laundering record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction.
• KYC Identity Documents: Retained for the duration of your account relationship and for five (5) years after account closure. Copies are deleted securely at the end of the retention period.
• Customer Support Records: Live chat transcripts and email correspondence are retained for three (3) years from the date of the interaction.
• Marketing Consent Records: Retained for as long as you hold an active 8mplay account, or for three (3) years from the date consent was last confirmed, whichever is later.
• Technical and Usage Logs: Retained in identifiable form for up to twelve (12) months, after which they are anonymised or deleted.

When data reaches the end of its retention period, it is permanently and securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

9 Your Data Rights

As a player on 8mplay, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us via the 24/7 live chat or by email at [email protected]. We will respond to all verified data rights requests within thirty (30) days.

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you. For basic account details, you can update these directly via your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to legal retention obligations — we cannot delete financial records we are legally required to retain.
• Right to Restriction of Processing: You may request that we restrict processing of your data in certain circumstances, for example while a dispute about its accuracy is being resolved.
• Right to Data Portability: You may request a copy of the data you have provided to 8mplay in a structured, commonly used, and machine-readable format.
• Right to Object: You may object to processing of your personal data based on legitimate interests, including profiling for marketing purposes. Where you object to marketing, we will cease processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

10 Data Security

8mplay implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• 256-Bit TLS Encryption: All data in transit between your browser and 8mplay servers is encrypted using industry-standard TLS protocols.
• Encrypted Data Storage: Sensitive data fields — including identity document references and financial identifiers — are encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within 8mplay's internal systems is restricted on a strict need-to-know basis. All staff access is logged and audited.
• Two-Factor Authentication: Players are encouraged to enable SMS OTP two-factor authentication. Internal system access requires mandatory multi-factor authentication for all staff.
• Continuous Monitoring: 8mplay operates continuous security monitoring to detect and respond to anomalous activity, intrusion attempts, and data breach indicators.
• Third-Party Security Assessments: Our platform and data handling practices are subject to periodic security reviews to identify and address potential vulnerabilities.

While 8mplay takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. In the event of a personal data breach that poses a risk to your rights, 8mplay will notify affected players promptly and take all necessary remedial action.

11 Third-Party Links

The 8mplay platform may contain references to third-party game providers, payment services, or informational resources. 8mplay does not control the privacy practices of any third-party websites or services, and this Privacy Policy does not apply to them. We encourage you to review the privacy policies of any third-party services you access independently of the 8mplay platform.

8mplay is not responsible for the content, privacy practices, or data handling of any external service, even where a commercial relationship exists between 8mplay and that third party. Your interactions with third-party services are solely between you and that party.

12 Children's Privacy

If 8mplay becomes aware that personal data has been collected from a person under the age of 18, that account will be immediately closed, any balance will be withheld pending investigation, and all associated personal data will be deleted without undue delay. If you believe that a minor has created an account on 8mplay, please contact us at [email protected] immediately.

13 Changes to This Policy

8mplay reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered players via the email address associated with their account and display a prominent notice on the platform prior to the changes taking effect.

The most current version of this Privacy Policy is always available at https://8mplay.biz/privacy-policy. The version number and effective date are displayed at the top of this document. Your continued use of 8mplay following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 8mplay processes your personal data, please reach out to our team through the following channels:

• Live Chat: Available 24/7 directly on the 8mplay platform — the fastest way to reach our support and data protection team.
• Email: [email protected] — for data rights requests, include "Privacy Request" in your subject line.
• Response Time: Data rights requests are acknowledged within 24 hours and fully resolved within 30 days.
• Support Hours: 24 hours a day, 7 days a week, including all Bangladesh national holidays (Bangladesh Standard Time, UTC+6).