Privacy Policy — How 8kk Protects Your Data

8kk collects personal data that is necessary to provide you with a secure, personalised, and legally compliant gaming experience. We collect information in three primary ways: information you provide directly, information generated automatically through your use of the platform, and information received from trusted third-party partners such as identity verification providers and payment processors.

Information you provide directly:

• Registration data: Full legal name, date of birth, email address, mobile number (Bangladesh-registered), and a chosen username and password when you create your 8kk account.
• Identity verification (KYC) documents: Copies of government-issued identification such as a Bangladesh National Identity Card (NID), passport, or driver's licence; proof of address documents; and in some cases, proof of ownership of a payment method.
• Payment information: Mobile banking account details (bKash, Nagad, Rocket, Upay), bank account details for bank transfer methods, and USDT wallet addresses for cryptocurrency transactions. We do not store full payment credentials — these are processed via secure third-party payment gateways.
• Communications: Messages, emails, and chat transcripts you send to our customer support team, as well as responses to surveys, feedback forms, or promotional contact.

Information collected automatically:

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited on our platform, games played, bets placed, session duration, click-path data, and login timestamps.
• Location data: General geographic location inferred from your IP address. We do not use GPS or precise location tracking.
• Cookies and tracking technologies: As described in Section 4 of this policy, we use cookies and similar technologies to support platform functionality, user authentication, fraud prevention, and anonymised analytics.

Information from third parties:

• Identity verification partners: The results of identity and age verification checks conducted through our KYC partners, including document authenticity status and match scores.
• Payment processors: Transaction confirmation data, payment status, and fraud risk signals returned by our payment gateway partners.
• Fraud prevention services: Risk signals and device fingerprinting data from anti-fraud technology providers used to protect our platform and players.

8kk uses the personal data we collect for specific, clearly defined purposes. We process your data only where we have a lawful basis to do so. The table below summarises our primary data processing activities, the data types involved, and our lawful basis for each.

Marketing communications: If you have opted in to receive promotional emails or SMS messages from 8kk, we will use your contact details and game preference data to send you relevant offers, bonus notifications, and platform news. You may withdraw your consent to marketing communications at any time by adjusting your account notification preferences or by contacting our support team. Withdrawal of marketing consent does not affect our ability to send you transactional messages (such as deposit confirmations, withdrawal updates, or security alerts), which are sent as part of our contractual obligations to you.

8kk does not sell, rent, or trade your personal information to any third party for their own commercial purposes. We share personal data only in the following specific and necessary circumstances:

• Payment processors: We share transaction-relevant data with payment gateway partners who facilitate your bKash, Nagad, Rocket, Upay, bank transfer, and USDT transactions. These partners operate under their own privacy policies and are independently responsible for data they receive.
• Identity verification (KYC) providers: To fulfil our age verification and anti-money laundering obligations, we share identity document data with specialised KYC verification service providers. These providers are contractually obligated to process your data only for the purpose of identity verification and to maintain appropriate security standards.
• Game content providers: Third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical data (such as session tokens and game round IDs) necessary to deliver their games within our platform. These providers do not receive your full personal profile.
• Fraud and security service providers: We share device fingerprint data and risk signals with fraud prevention technology partners to protect your account and the integrity of our platform.
• Legal and regulatory authorities: We may be required to disclose personal data to law enforcement agencies, financial intelligence units, or other government authorities where required by applicable law — for example, in connection with an anti-money laundering investigation or a court order. We will notify you of any such disclosure where we are legally permitted to do so.
• Business successors: In the event of a merger, acquisition, or sale of all or part of 8kk's business, player data may be transferred to the acquiring entity as part of the transaction. We will notify affected players via email in advance of any such transfer where practicable.

All third-party data processors who handle personal data on our behalf are subject to data processing agreements that require them to implement appropriate security measures and to process personal data only for the specific purposes for which it was shared.

8kk uses cookies and similar tracking technologies (such as web beacons and local storage objects) to enable core platform functionality, enhance user experience, prevent fraud, and gather anonymised analytics data. A cookie is a small text file placed on your device by our web server when you visit our platform.

Categories of cookies we use:

• Strictly necessary cookies: These cookies are essential for the platform to function. They enable user authentication (keeping you logged in during a session), maintain your account preferences, and support security features such as session integrity checks. These cookies cannot be disabled without significantly impairing platform functionality.
• Functional cookies: These cookies remember your preferences — such as your chosen language display, notification settings, and game lobby filters — so that you do not need to reconfigure them on each visit.
• Analytics cookies: We use anonymised analytics tools to understand how players navigate our platform, which game categories are most popular, and where users encounter difficulties. This data helps us improve the platform over time. Analytics data is aggregated and does not identify individual players.
• Security and fraud-prevention cookies: These cookies support device fingerprinting and session risk scoring to detect suspicious login attempts, account takeover activity, and bot-driven behaviour.

Managing cookies: You can control the use of non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies on a per-site or global basis. Please note that disabling strictly necessary cookies will prevent you from logging in and using the platform. Disabling analytics or functional cookies will not prevent access but may degrade your experience. Instructions for managing cookies are available in the help section of your browser.

Third-party cookies: Some of our third-party game providers and analytics partners may set their own cookies when their content is delivered within our platform. These cookies are governed by the respective third party's own privacy and cookie policies, which are independent of this document.

8kk takes the security of your personal data seriously. We implement a layered technical and organisational security framework designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• Transport layer security: All data transmitted between your browser or mobile device and our servers is encrypted using TLS 1.2 or higher. Our platform enforces HTTPS across all pages and API endpoints, with no fallback to unencrypted HTTP connections.
• Data-at-rest encryption: Sensitive data stored in our databases — including identity documents, payment records, and account credentials — is encrypted at rest using industry-standard encryption algorithms.
• Password security: Player passwords are never stored in plain text. They are hashed using modern one-way cryptographic algorithms, meaning that even 8kk's own personnel cannot retrieve your original password.
• Access control: Internal systems are protected by role-based access controls. Employees can only access data relevant to their specific job function. All privileged access is logged and subject to periodic review.
• Infrastructure security: Our platform is hosted on hardened cloud infrastructure with firewall protection, intrusion detection systems, and regular vulnerability assessments.
• Incident response: We maintain a documented data breach response procedure. In the event of a security incident that affects your personal data, we will notify affected players and, where required by law, the relevant authorities, within a reasonable timeframe.

While we apply robust security controls, no digital platform can guarantee absolute security against all possible threats. We encourage you to protect your own account by using a strong, unique password, enabling any available account security features, and logging out of your account when using shared devices.

8kk retains personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard data retention periods are as follows:

Once the applicable retention period has expired, personal data is securely deleted or anonymised. Where anonymisation is not technically feasible, data is rendered inaccessible through secure archival measures. You may request early deletion of your personal data — subject to our legal obligations — as described in the Your Privacy Rights section below.

As a player on the 8kk platform, you hold specific rights in relation to your personal data. We are committed to honouring these rights promptly and transparently. Your rights include:

• Right of access: You have the right to request a copy of all personal data we hold about you. Upon a valid request, we will provide a summary of your data in a clear, readable format within 30 days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account details directly in your account profile, or contact our support team for assistance.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and there is no other lawful basis for processing. Please note that we cannot delete data that we are legally required to retain — for example, transaction records required for AML compliance.
• Right to restrict processing: You may request that we limit how we use your data in certain circumstances — for example, while a rectification request is being processed.
• Right to data portability: Where we process your data on the basis of your consent or contract performance, you have the right to receive your data in a structured, machine-readable format so that it can be transferred to another service provider.
• Right to object: You have the right to object to the processing of your personal data where we rely on legitimate interests as our lawful basis, including profiling for fraud prevention. You also have the right to object to direct marketing at any time.
• Right to withdraw consent: Where we process your data on the basis of consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

To exercise any of these rights, please contact our Data Protection team using the details in Section 8 of this policy. We will respond to all valid requests within 30 days. In some cases, we may request proof of identity before processing a data rights request to ensure that we are responding to the correct individual.

Data controller: 8kk operates as the data controller for all personal data processed in connection with the 8kk platform at https://8kk.today. As data controller, 8kk is responsible for determining the purposes and means of processing your personal data.

How to contact us about privacy: If you have any questions about this Privacy Policy, wish to exercise your data rights, have a concern about how your personal data has been handled, or wish to report a suspected data security incident, please contact us through one of the following channels:

• Email: [email protected] — please include "Privacy Request" or "Data Rights" in the subject line so your message is routed to the appropriate team.
• Live Chat: Our 24/7 live chat support team on the platform can direct you to the privacy team for data-related queries.
• Response time: We aim to acknowledge all privacy-related enquiries within 2 business days (Bangladesh Standard Time, UTC+6) and to resolve them within 30 calendar days.

Changes to this Privacy Policy: 8kk reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal requirements. The updated policy will be published at https://8kk.today/privacy-policy with a revised effective date. For material changes that significantly affect your rights, we will notify registered players via the email address on their account. We encourage you to review this page periodically to stay informed.

Children and minors: 8kk is strictly an adults-only platform. 18+ We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a minor has provided personal data to us, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on our platform, please contact us immediately at [email protected].