Privacy
Policy
88c8 Platform

When you create and use an 88c8 account, we collect and process several categories of personal data. The precise data collected depends on the stage of your relationship with the platform and the services you use.

Registration Data

During the account creation process, you provide us with the following information:

• Your chosen username and a secure password (stored in hashed form — never in plain text);
• Mobile phone number, used for SMS OTP verification and account security alerts;
• Email address, used for account notifications, promotional communications (if opted in), and official correspondence;
• Date of birth, collected to verify that you meet the 18+ age requirement;
• City or region of residence within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna), used for localisation and fraud detection purposes.

Identity Verification (KYC) Data

When you are required to complete our Know Your Customer process — either upon your first withdrawal request or when triggered by our compliance system — you will be asked to provide:

• A scanned copy or clear photograph of a government-issued identity document, such as a National Identity Card (NID), passport, or birth registration certificate;
• A recent utility bill, bank statement, or similar document confirming your address (in certain circumstances);
• A selfie photograph or short video clip for liveness verification, where required by our fraud prevention system.

KYC documents are processed securely and retained only for as long as required by our legal and regulatory obligations. These documents are not used for any purpose other than identity verification and compliance.

Financial Transaction Data

Each time you make a deposit or withdrawal on 88c8, we record the transaction details including the payment channel used (bKash, Nagad, Rocket, Upay, or bank transfer), the transaction reference number, the amount in BDT, the timestamp, and the outcome. We do not store your full bKash PIN, bank account password, or any other payment authentication credential. Mobile wallet numbers associated with transactions are retained solely for the purpose of processing withdrawals and conducting fraud checks.

Gameplay and Behavioural Data

As you use the 88c8 platform, we automatically record data about your activity, including:

• Games played, bet amounts, win/loss outcomes, and session durations;
• Sports markets accessed, bet slips submitted, and odds accepted;
• Pages and features visited within the platform, navigation patterns, and search queries;
• Device type, operating system, browser type and version, screen resolution, and IP address;
• Session login and logout timestamps, and approximate geographic location derived from IP address.

This behavioural data is used primarily for responsible gaming monitoring, fraud detection, platform performance improvement, and the delivery of a personalised player experience.

Communications Data

When you contact 88c8 customer support — whether via live chat, WhatsApp, or email — we retain a record of the conversation content, your contact details, and the outcome of the interaction. These records are used for quality assurance, dispute resolution, and staff training purposes.

88c8 uses the personal data we collect strictly for the purposes described in this Privacy Policy. We do not use your data in ways that are incompatible with the reason it was originally collected. The main purposes for which we process your personal data are as follows:

Account Management and Service Delivery

Your registration data is used to create and maintain your 88c8 player account, authenticate your identity when you log in, process your deposits and withdrawals, and deliver the games and betting services you access on the platform. Without this processing, we cannot provide you with the 88c8 service.

Identity Verification and Regulatory Compliance

We process KYC documents and financial transaction data to fulfil our obligations relating to age verification, anti-money laundering (AML) checks, and fraud prevention. This processing is a condition of operating a responsible gaming platform. We may be required to share certain data with relevant authorities where we are legally compelled to do so.

Responsible Gaming Monitoring

88c8 uses your gameplay and behavioural data to monitor for indicators of problem gambling, including unusual betting patterns, rapid session escalation, or frequent self-exclusion requests. Where our system detects a concern, a member of the responsible gaming team may make contact to offer support tools such as deposit limits or time-out periods. This processing is carried out in the interests of player welfare and platform integrity.

Fraud Detection and Security

Technical data — including IP addresses, device fingerprints, and login timestamps — is analysed by our automated security systems to detect suspicious activity, prevent unauthorised account access, identify duplicate account creation, and flag potentially fraudulent payment patterns. Where an automated flag is raised, a human reviewer will assess the case before any account action is taken.

Platform Improvement and Analytics

Aggregated and anonymised behavioural data is used to understand how players navigate the 88c8 platform, which games are most popular, and where the user experience can be improved. This analytical processing does not identify individual players and is used solely to improve the quality of the 88c8 service.

Marketing Communications

If you have opted in to marketing communications during registration or through your account settings, we may send you promotional emails or SMS messages about 88c8 bonuses, new games, seasonal offers (such as Eid promotions or BPL season specials), and platform updates. You may withdraw your marketing consent at any time by updating your notification preferences in the account dashboard or by contacting customer support. Withdrawing consent does not affect the lawfulness of any processing already carried out.

Payment Processors

To process your deposits and withdrawals, 88c8 shares the minimum required transaction data with our payment partners, including bKash, Nagad, Rocket, Upay, and selected Bangladeshi banks such as Dutch-Bangla Bank, BRAC Bank, and City Bank. These partners receive only the data necessary to complete the specific transaction and are contractually prohibited from using your data for any other purpose.

Game Content Providers

Third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive a player session token and certain account attributes (such as balance and currency) to enable game play. These providers do not receive your full name, contact details, or KYC documents. All data shared with game providers is governed by data processing agreements that restrict further use and require equivalent security standards.

Identity Verification Services

Where automated identity verification is used as part of our KYC process, your submitted documents and biometric liveness data may be processed by a contracted identity verification technology provider. This provider acts solely as a data processor on behalf of 88c8 and does not retain your data beyond the period required to complete the verification check.

Law Enforcement and Regulatory Authorities

88c8 may be required to disclose player data to law enforcement agencies, financial intelligence units, or other competent authorities where we receive a lawful request, court order, or are otherwise legally compelled to do so. In such cases, we will disclose only the data specifically requested and will, where legally permitted, notify the affected player that a disclosure has been made.

Business Transfers

In the event that 88c8 undergoes a merger, acquisition, or transfer of its business assets, player personal data held at that time may form part of the transferred assets. In such circumstances, the acquiring entity would be bound by the terms of this Privacy Policy with respect to existing player data, and players would be notified of any material change to data processing practices in advance.

88c8 uses cookies and similar tracking technologies to operate the platform reliably, maintain your login session, remember your preferences, and analyse usage patterns. A cookie is a small text file placed on your device by your browser when you visit the 88c8 website. Cookies do not execute code and cannot carry viruses.

Types of Cookies We Use

Managing Cookies

You may control non-essential cookies through your browser's privacy or settings menu. Most modern browsers allow you to block third-party cookies, clear existing cookies, or receive a notification before a cookie is placed. Note that disabling functional cookies may affect your experience on 88c8 — for example, you may need to re-enter your preferences on each visit. Disabling strictly necessary or fraud prevention cookies may prevent you from logging in or using certain features of the platform.

Session Tokens

When you log in to your 88c8 account, an encrypted session token is stored in your browser to authenticate your identity for the duration of the session. This token expires automatically when you log out or after a defined period of inactivity, whichever occurs first. You should always log out of your account when using a shared or public device to ensure the session token is invalidated immediately.

88c8 maintains a comprehensive set of technical and organisational security measures designed to protect player personal data against unauthorised access, accidental loss, destruction, or disclosure. While no digital system can guarantee absolute security, our layered approach significantly reduces the risk of a data breach.

Technical Safeguards

• SSL/TLS Encryption: All data in transit between your device and 88c8 servers is encrypted using 256-bit TLS. This includes all API calls, page loads, and file uploads.
• Password Hashing: Player passwords are stored using a strong one-way hashing algorithm with a unique per-account salt. Plain-text passwords are never stored or transmitted by 88c8.
• Two-Factor Authentication: SMS OTP verification is applied to new device logins and high-value withdrawal requests as a second layer of identity confirmation.
• Database Encryption: Sensitive fields within the 88c8 player database — including KYC document references and payment details — are encrypted at rest using AES-256 encryption.
• Firewalls and Intrusion Detection: The 88c8 platform infrastructure is protected by network-layer firewalls and automated intrusion detection systems that monitor for anomalous access patterns in real time.

Organisational Safeguards

• Access to player data within 88c8 is restricted by role, with staff granted the minimum permissions necessary to perform their duties;
• All staff with access to personal data are subject to confidentiality obligations as a condition of their engagement;
• Security awareness training is conducted periodically for all relevant staff members;
• Third-party data processors are vetted for security compliance and bound by data processing agreements before being granted any access to 88c8 player data.

Your Role in Account Security

While 88c8 takes every reasonable measure to protect your data on our side, the security of your account also depends on the steps you take to protect your login credentials. You should use a strong, unique password for your 88c8 account, enable SMS OTP verification, and never share your credentials with any third party. If you suspect your account has been compromised, contact our support team immediately at [email protected].

88c8 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or to comply with our legal, regulatory, and contractual obligations. The retention periods set out below represent our standard practice. In certain circumstances — such as an ongoing dispute, legal proceeding, or regulatory investigation — data may be retained for longer than the standard period.

When a retention period expires and there is no ongoing legal reason to extend it, personal data is securely deleted or anonymised in accordance with our internal data lifecycle procedures. Anonymised data — where all identifying attributes have been irreversibly removed — may be retained indefinitely for statistical and analytical purposes without further notice to the player.

As a player whose personal data is processed by 88c8, you hold a number of rights over that data. We are committed to honouring these rights in a timely and transparent manner. To exercise any of the rights described below, please contact our support team at [email protected]. We will respond to all verified requests within 30 days.

Right of Access

You have the right to request a copy of all personal data that 88c8 holds about you, along with information about how it is used, who it has been shared with, and how long it will be retained. This is sometimes referred to as a Subject Access Request (SAR). We will respond to all SAR requests within 30 days and provide the data in a clear, structured format.

Right to Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly through your 88c8 account settings. For changes to identity-verified fields — such as your registered name or date of birth — you will need to contact support and provide supporting documentation.

Right to Erasure

You may request that 88c8 delete your personal data. We will action erasure requests where the data is no longer necessary for the purpose it was collected, where you withdraw your consent (for consent-based processing), or where the processing has no other lawful basis. Please note that erasure requests may be partially declined where retention is required by our legal or regulatory obligations — for example, financial transaction records must be retained for a minimum of seven years regardless of an erasure request.

Right to Restrict Processing

In certain circumstances — for example, while the accuracy of your data is being disputed or while a complaint is under investigation — you may request that we restrict the processing of your personal data to storage only, without further active use.

Right to Data Portability

For data that you have provided to 88c8 directly and that is processed on the basis of your consent or a contract, you may request that we provide your data in a structured, commonly used, machine-readable format. This allows you to transfer your data to another service provider if you choose to do so.

Right to Withdraw Marketing Consent

If you have opted in to receive marketing communications from 88c8, you may withdraw that consent at any time by updating your notification preferences in the account dashboard or by contacting customer support. Withdrawal of consent does not affect the lawfulness of any marketing communications sent prior to your withdrawal.

88c8 reviews this Privacy Policy periodically and may update it to reflect changes in our data processing practices, new platform features, or evolving legal requirements. When material changes are made, we will notify registered players by email to the address on their account at least 14 days before the updated Policy takes effect. The effective date at the top of this page will always reflect the date of the most recent revision.

We encourage all 88c8 players to review this Privacy Policy on a regular basis to stay informed about how we protect their data. Continued use of the 88c8 platform following notification of a policy update constitutes acceptance of the revised Privacy Policy.

Minor, non-material changes — such as corrections to typographic errors, clarifications to existing language that do not change the substance of the policy, or updates to contact details — may be made without prior notice. The effective date will be updated accordingly.

Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 88c8 handles your personal data, please contact our support team. We take all privacy enquiries seriously and will provide a substantive response within 30 days of receipt.

• Email: [email protected]
• WhatsApp: +880 1700-000000
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)

For formal privacy rights requests such as Subject Access Requests or erasure requests, please include "Privacy Request" in your message subject and confirm the username associated with your 88c8 account so that we can verify your identity promptly and process your request without delay.