Privacy Policy — How k8x8 Collects, Uses, and Protects Your Data

This Privacy Policy describes how k8x8 ("we", "us", "our", or "the Platform") collects, uses, stores, and protects the personal information of individuals ("you", "your", or "the Player") who register for and use the services available at k8x8.io — including sports betting, live casino games, slots, color games, fishing games, and all associated account and payment features.

k8x8 is committed to respecting the privacy of all players in Bangladesh and to handling personal data responsibly, transparently, and securely. This Privacy Policy applies to all personal data collected through the k8x8 website, any associated mobile interfaces, and all communications between you and k8x8 — including emails, live chat, and customer support interactions.

This Privacy Policy should be read alongside the k8x8 Terms & Conditions, which govern the overall relationship between you and the platform. Together, these documents form the complete agreement under which k8x8 processes your data.

k8x8 collects personal data in several ways — data you provide directly when registering or using the platform, data generated automatically through your use of the service, and data received from third-party service providers. The categories of personal data we collect are described in the table below.

k8x8 does not collect sensitive categories of personal data (such as racial or ethnic origin, religious beliefs, or health data) and does not request or store such information at any stage of the registration or verification process.

k8x8 uses the personal data collected from players for the following specific purposes. We do not use your data for purposes beyond those listed here without first obtaining your explicit consent.

• Account creation and management: To register your account, verify your identity, maintain your player profile, and manage your account settings and preferences.
• Service delivery: To process bets, settle winnings, facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer, and to ensure the correct operation of all games and betting markets.
• Identity verification (KYC): To comply with anti-money-laundering (AML) obligations, verify your age (21+), and confirm that your payment accounts belong to you personally.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, account abuse, bonus exploitation, multi-accounting, and other forms of prohibited conduct outlined in the Terms & Conditions.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and communicate important account-related information.
• Responsible gaming: To monitor gaming patterns and proactively identify players who may be exhibiting signs of problem gambling, in line with our Responsible Gaming obligations.
• Platform improvement: To analyse usage patterns and technical data in aggregate (anonymised) form to improve the k8x8 platform's performance, user experience, and product offering.
• Legal compliance: To meet legal, regulatory, and reporting obligations where required by applicable law, including cooperation with law enforcement and financial authorities.

k8x8 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. Any decisions regarding account restrictions, bonus eligibility, or withdrawal approvals that rely on automated signals are subject to manual oversight by k8x8's compliance and support teams.

k8x8 processes your personal data under the following legal bases, depending on the purpose of the processing activity:

• Contractual necessity: Processing required to perform the contract between you and k8x8 — including account registration, service delivery, payment processing, and dispute resolution.
• Legal obligation: Processing required to comply with applicable laws and regulations — including age verification (21+), anti-money-laundering checks, and cooperation with law enforcement where lawfully required.
• Legitimate interests: Processing carried out for k8x8's legitimate business interests — including fraud detection, platform security, responsible gaming monitoring, and aggregate analytics — where those interests do not override your fundamental rights.
• Consent: For processing activities not covered by the above — such as receiving promotional communications — k8x8 will seek your explicit consent before proceeding. You may withdraw consent at any time by contacting support@k8x8.io.

k8x8 does not sell, rent, or trade your personal data to any third party. However, in order to deliver its services, k8x8 may share specific categories of data with the following types of third-party organisations, strictly on a need-to-know basis and under data processing agreements that require those parties to maintain appropriate security standards:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank receive the transaction data necessary to process your deposits and withdrawals. k8x8 does not store full payment account credentials beyond what is needed for transaction reference matching.
• Game providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a pseudonymous player identifier and session data required to deliver their games within the k8x8 platform. They do not receive your full name, NID, or financial account details.
• Identity verification partners: Third-party KYC service providers may receive identity documents and selfies you submit during verification. These partners are bound by strict data processing agreements and may not use your data for any purpose other than verification.
• Law enforcement and regulatory authorities: k8x8 will disclose personal data to relevant authorities where required by law, court order, or in response to a legitimate law enforcement request — including financial intelligence units where suspicious transaction reporting obligations apply.
• IT and infrastructure providers: Cloud hosting, cybersecurity, and platform infrastructure providers may process technical data in the course of maintaining and securing the k8x8 platform. These providers operate under strict confidentiality and data security obligations.

k8x8 uses cookies and similar tracking technologies to operate the platform correctly, maintain session security, and understand how players use the service. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are required for the platform to function. They include session management cookies (to keep you logged in while navigating k8x8) and security cookies (to protect against cross-site request forgery). These cannot be disabled without breaking core platform functionality.
• Functional cookies: These cookies remember your preferences — such as your preferred language setting or display configuration — so you do not have to reconfigure them each time you return to k8x8.
• Analytical cookies: k8x8 uses anonymised analytics data to understand page-level traffic patterns, identify technical issues, and improve the platform experience. This data does not identify individual players and is processed in aggregate form only.
• Fraud-detection cookies: Certain cookies are used to detect suspicious behaviour patterns such as multiple accounts operating from the same device, automated bot access, or other indicators of prohibited conduct.

You may manage cookie preferences through your browser settings. However, disabling strictly necessary cookies will prevent you from accessing your k8x8 account. k8x8 does not use third-party advertising cookies or cross-site tracking cookies for retargeting purposes.

k8x8 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The general retention periods applied by k8x8 are as follows:

• Account data (name, contact details, account settings): Retained for the duration of your active account. Following account closure, retained for a minimum of 5 years to comply with anti-money-laundering and financial record-keeping obligations.
• Transaction records (deposits, withdrawals, betting history): Retained for a minimum of 5 years following the date of each transaction, in compliance with financial regulatory requirements.
• Identity verification documents (NID, passport, selfie): Retained for a minimum of 5 years following the completion of the KYC process, or for the duration required by applicable law, whichever is longer.
• Customer support communications: Retained for 2 years from the date of the interaction, unless the communication relates to an open dispute or legal matter, in which case it is retained until resolution.
• Technical and usage data: Retained in identifiable form for up to 12 months, after which it is either deleted or anonymised for aggregate analytical use.

When the applicable retention period expires, k8x8 securely deletes or anonymises the data so that it can no longer be associated with an identifiable individual. Anonymised data may be retained indefinitely for aggregate research and platform improvement purposes.

k8x8 applies a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Key security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your browser and k8x8 servers, preventing interception of personal and financial data in transit.
• Encrypted storage of sensitive data at rest, including financial account references and identity documents, using industry-standard encryption algorithms.
• Access controls restricting access to personal data to authorised k8x8 personnel only, on a strict need-to-know basis, with access logs maintained and reviewed.
• Intrusion detection and monitoring systems that continuously scan for unauthorised access attempts, anomalous activity, and potential data breaches.
• Regular security audits and penetration testing conducted by independent specialists to identify and address vulnerabilities before they can be exploited.
• Secure data centre infrastructure with physical access restrictions, redundant power and connectivity, and disaster recovery protocols.

While k8x8 employs rigorous security practices, no online platform can guarantee absolute security. You also have a responsibility to protect your account — use a strong, unique password for your k8x8 login and never share your credentials with anyone. If you suspect that your account has been compromised, contact support@k8x8.io immediately.

As a k8x8 player, you have the following rights in relation to your personal data. These rights may be exercised at any time by submitting a written request to support@k8x8.io. k8x8 will acknowledge your request within 2–4 hours and provide a substantive response within 5 business days (Bangladesh Standard Time, UTC+6).

To exercise any of these rights, email support@k8x8.io with the subject line "Data Rights Request" and specify which right you wish to exercise. k8x8 may need to verify your identity before processing the request, to ensure that data is not disclosed to an unauthorised third party.

k8x8 is strictly an adult platform. Access to k8x8 is prohibited for individuals under the age of 21. The platform does not knowingly collect, process, or retain personal data belonging to individuals under 21 years of age.

If k8x8 becomes aware that personal data has been submitted by or on behalf of an individual who is under 21, that data will be deleted immediately and the associated account will be permanently closed. Any funds held in such an account at the time of closure will be forfeited in line with the Terms & Conditions.

The k8x8 platform integrates third-party game content from providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers operate their games within the k8x8 environment under separate service agreements and their own privacy and data handling policies.

k8x8 limits the data shared with game providers to pseudonymous session identifiers and game-relevant transaction data. Full identity data (name, NID, financial account details) is not shared with game providers. However, k8x8 cannot accept responsibility for the data practices of third-party providers in respect of data that falls outside k8x8's direct control.

Payment service partners — bKash, Nagad, Rocket, Upay, and partner banks — operate under their own privacy policies and are independently responsible for data they collect and process in connection with payment transactions. k8x8 recommends that you review the privacy policy of any payment service you use in conjunction with your k8x8 account.

k8x8.io does not contain external links to third-party websites for commercial or advertising purposes. Any data you voluntarily provide to third-party services independent of the k8x8 platform is outside the scope of this Privacy Policy.

k8x8 reserves the right to update this Privacy Policy at any time. Where changes are material — such as introducing a new category of data collection, a new third-party sharing arrangement, or changes to player rights — k8x8 will notify registered players via their registered email address at least 7 days before the changes take effect.

Non-material amendments — such as typographic corrections, clarifications of existing provisions, or updates to contact details — may be made without prior notice and will take effect upon publication to the k8x8 website.

The effective date of the current version of this Privacy Policy is displayed at the top of this page. Your continued use of k8x8 following any update constitutes acceptance of the revised Privacy Policy. If you do not accept the revised policy, you should cease using the platform and may request account closure by contacting support@k8x8.io.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data k8x8 holds about you, please contact the k8x8 Data Support team using the details below. All privacy-related communications are handled with priority and strict confidentiality.

• Email: support@k8x8.io (plain text — not a clickable link)
• Subject line for data requests: "Data Rights Request"
• Subject line for privacy concerns: "Privacy Enquiry"
• Support hours: 24 hours a day, 7 days a week, 365 days a year
• Response time: Acknowledgement within 2–4 hours; substantive response within 5 business days
• Time zone: Bangladesh Standard Time (BST, UTC+6)

For questions about responsible gaming tools, self-exclusion, or deposit limits, please visit the Responsible Gaming page or include "Responsible Gaming Request" in your email subject line. For general platform rules and player obligations, please refer to the Terms & Conditions.