8mbed Privacy Policy
Your privacy matters to us. This policy explains exactly what personal information 8mbed collects, why we collect it, how we use it, and the rights you hold over your own data.
Important: This Privacy Policy ("Policy") describes how 8mbed ("we", "us", "our", "the Platform") collects, uses, stores, discloses, and protects the personal information of players and visitors ("you", "your") who access or use the 8mbed website at https://8mbed.org and all associated services operated under the 8mbed brand. By registering an account or otherwise using the 8mbed platform, you confirm that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.
This Policy applies to all personal data processed in connection with your use of the 8mbed platform, including data collected during account registration, KYC verification, deposits and withdrawals via bKash, Nagad, Rocket and Upay, gameplay, customer support interactions, and marketing communications where you have provided your consent.
This Policy should be read alongside our Terms and Conditions, which are available at /terms-conditions. By accepting the Terms and Conditions, you also accept the terms of this Privacy Policy. If you do not agree with the practices described in this Policy, please do not use the 8mbed platform.
8mbed collects personal data through three primary channels: information you provide directly, information collected automatically through your use of the platform, and information obtained from trusted third-party sources where applicable.
Information You Provide Directly
When you register an account, complete KYC verification, make a deposit or withdrawal, or contact our support team, you may provide the following categories of personal data:
- Identity data: full legal name, date of birth, nationality, and government-issued identification document details (National Identity Card number, passport number, or driver's licence number).
- Contact data: mobile phone number (Bangladesh-registered), and email address where provided.
- Address data: residential address in Bangladesh, as provided for KYC verification purposes.
- Financial data: bKash, Nagad, Rocket or Upay mobile wallet numbers used for deposits and withdrawals; transaction reference numbers and amounts.
- Communications data: records of your communications with 8mbed customer support via live chat or email, including the content of those communications.
Information Collected Automatically
When you access and use the 8mbed platform, we automatically collect certain technical and behavioural data, including:
- Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
- Usage data: pages visited, time spent on each page, navigation paths, game titles accessed, bet amounts, session duration, and login timestamps.
- Geolocation data: approximate country and region derived from your IP address. 8mbed does not collect precise GPS-level location data.
- Cookie data: session cookies, persistent cookies, and similar tracking technologies as described in Section 7 of this Policy.
Information from Third Parties
8mbed may receive information about you from third-party sources in limited circumstances, including: identity verification data returned by KYC service providers during the age and identity verification process; fraud risk signals from payment networks (bKash, Nagad, Rocket, Upay) to protect against fraudulent transactions; and publicly available information where required to satisfy anti-money-laundering obligations. 8mbed does not purchase marketing lists or obtain personal data from data brokers.
8mbed uses the personal data it collects for the following purposes, each supported by a lawful basis for processing:
| Purpose | Data Used |
|---|---|
| Account registration and management | Identity data, contact data |
| Age and identity verification (KYC) | Identity data, address data, document scans |
| Processing deposits and withdrawals | Financial data, identity data |
| Fraud prevention and anti-money-laundering compliance | All categories of data, third-party risk signals |
| Platform improvement and analytics | Usage data, device data, cookie data |
| Marketing communications (where consented) | Contact data, usage data |
8mbed does not use your personal data for automated profiling that produces legal or similarly significant effects without human review. Where automated decision-making is used (for example, in fraud scoring), you have the right to request human review of any such decision that affects your account.
8mbed processes personal data only where a lawful basis exists. The primary legal bases relied upon are:
- Contractual necessity: processing required to fulfil the contract between you and 8mbed — including account creation, payment processing, and service delivery.
- Legal obligation: processing required to comply with applicable laws and regulations, including anti-money-laundering requirements, age verification obligations, and responses to lawful requests from competent authorities.
- Legitimate interests: processing carried out for purposes of fraud prevention, platform security, service improvement, and responsible gaming monitoring, where those interests are not overridden by your rights and interests.
- Consent: where 8mbed processes your data for marketing communications or optional analytics, it does so only where you have provided clear, informed consent. You may withdraw consent at any time by contacting [email protected].
8mbed does not sell, rent, or trade your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.
Payment Processors
To process your deposits and withdrawals, 8mbed shares the minimum necessary financial and identity data with the relevant payment network operators (bKash, Nagad, Rocket, Upay). Each payment provider operates under its own privacy policy and applicable financial regulations. 8mbed does not store complete mobile wallet credentials on its servers.
Game and Technology Providers
8mbed's gaming content is provided by licensed third-party game studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe. These providers may receive technical session data necessary to deliver the game (such as player session tokens and bet amounts) but do not receive your full identity or payment profile. All data sharing with game providers is governed by contractual data processing agreements requiring them to maintain appropriate security standards.
Identity Verification Services
To fulfil our age verification and KYC obligations, 8mbed works with specialist identity verification service providers. These providers receive the identity documents and personal data you submit during the KYC process and return a verification result to 8mbed. They are contractually bound to use your data solely for verification purposes and to maintain appropriate data security standards.
Legal and Regulatory Disclosures
8mbed may disclose your personal data to law enforcement agencies, regulatory authorities, or other competent bodies where required by applicable law or regulation, where necessary to prevent or detect crime, or where required to protect the rights, property, or safety of 8mbed, its players, or the public. Such disclosures are made only to the extent required by the relevant legal obligation and are logged internally for accountability purposes.
All financial transactions on the 8mbed platform are processed through the mobile financial services infrastructure of Bangladesh, specifically bKash, Nagad, Rocket, and Upay. When you initiate a deposit or withdrawal, the transaction is routed through the relevant payment network and 8mbed receives a confirmation reference. 8mbed does not store your full mobile wallet PIN, password, or authentication credentials at any point. The mobile wallet number you register for payments is stored securely and used solely to match transactions to your account and to process withdrawal requests.
All financial data held by 8mbed is subject to strict access controls. Only authorised 8mbed personnel with a legitimate operational need may access financial records, and all such access is logged. Financial transaction records are retained for a minimum period of five years in accordance with applicable anti-money-laundering record-keeping requirements.
8mbed uses cookies and similar tracking technologies to operate the platform, maintain your session, improve performance, and understand how players use the site. A cookie is a small text file stored on your device by your browser at the request of a website. Cookies do not contain executable code and cannot directly access other data stored on your device.
Types of Cookies We Use
- Essential cookies: these are strictly necessary to operate the platform. They maintain your login session, remember your preferences within a session, and enable core platform functions. Essential cookies cannot be disabled without preventing the platform from functioning correctly.
- Analytical cookies: these help us understand how players interact with the platform by collecting aggregated, anonymised data about page visits, session lengths, and navigation patterns. This data is used solely to improve the platform experience.
- Functionality cookies: these remember choices you make (such as preferred language) to provide a more personalised experience during your visits.
You may control or delete cookies at any time using your browser's settings. Disabling essential cookies will prevent you from logging into your 8mbed account and using core platform features. For instructions on managing cookies in your specific browser, please consult your browser's help documentation. 8mbed does not use third-party advertising cookies or cross-site tracking pixels.
8mbed retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply: account data and KYC records are retained for a minimum of five years after account closure to satisfy anti-money-laundering and record-keeping obligations; financial transaction records are retained for a minimum of five years; communications with customer support are retained for two years from the date of the last interaction; analytical and usage data in anonymised form may be retained indefinitely for platform improvement purposes.
When personal data is no longer required and no legal obligation requires its continued retention, 8mbed securely deletes or anonymises that data. Players may request earlier deletion of data that is not subject to a mandatory retention obligation by contacting [email protected], subject to 8mbed's obligations under applicable law.
8mbed implements appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:
- SSL/TLS encryption for all data in transit between your device and the 8mbed platform.
- Encryption of sensitive personal data stored in 8mbed's databases, including identity documents and financial records.
- Role-based access controls limiting access to personal data to only those employees and contractors with a documented operational need.
- Regular internal security reviews and vulnerability assessments of the platform's technical infrastructure.
In the event of a personal data breach that poses a risk to your rights and freedoms, 8mbed will notify affected players without undue delay and take all reasonable steps to mitigate the impact of the breach. While 8mbed takes data security seriously, no internet-based platform can guarantee absolute security. Players are responsible for maintaining the security of their own account credentials.
As a player on the 8mbed platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact 8mbed at [email protected]. 8mbed will respond to all valid rights requests within a reasonable period and in any event within 30 days of receipt.
- Right of access: you have the right to request a copy of the personal data that 8mbed holds about you, together with information about how that data is being used.
- Right to rectification: you have the right to request that 8mbed corrects any inaccurate or incomplete personal data it holds about you.
- Right to erasure: you have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other lawful basis applies), or where the data has been processed unlawfully. This right is subject to 8mbed's legal obligations to retain certain data.
- Right to restriction: you have the right to request that 8mbed restricts the processing of your personal data in certain circumstances, for example while a dispute about accuracy is being resolved.
- Right to data portability: where 8mbed processes your data on the basis of consent or contractual necessity, and processing is carried out by automated means, you have the right to receive a structured, machine-readable copy of your personal data.
- Right to object: you have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling for fraud prevention purposes. 8mbed will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
Please note that some of these rights are not absolute. In particular, the right to erasure and the right to object may be limited where 8mbed has a legal obligation to retain or process your data (for example, under anti-money-laundering legislation). 8mbed will always explain the reasons if it is unable to fulfil a rights request in full.
The 8mbed platform is strictly intended for adults aged 21 and above. 8mbed does not knowingly collect personal data from any person under the age of 21. If 8mbed becomes aware that personal data has been collected from a person under 21, it will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that a person under 21 in your care has registered on the 8mbed platform, please contact us immediately at [email protected].
8mbed's primary player base is located in Bangladesh and the platform is operated with Bangladesh-resident players as its primary audience. Some of our third-party technology and service providers (including game studios and identity verification services) may process personal data outside Bangladesh. Where such transfers occur, 8mbed takes reasonable steps to ensure that appropriate contractual protections are in place, requiring recipients to maintain data protection standards consistent with the principles set out in this Policy.
8mbed reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When a material change is made, 8mbed will publish a notice on the platform with the updated effective date displayed at the top of this page. We encourage you to review this Policy periodically to stay informed about how we protect your personal data.
Your continued use of the 8mbed platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a revised Policy, you should stop using the platform and may request account closure by contacting our support team.
8mbed is the data controller in respect of the personal data it processes about players on the platform. If you have any questions, concerns, or requests relating to this Privacy Policy or the way 8mbed handles your personal data, please contact our support team. All privacy-related enquiries are handled by our dedicated data team and will be responded to within 30 days of receipt.
Privacy and data enquiries email: [email protected]
Please note that the email address above is provided as plain text only and is not a clickable link. Response times for data rights requests may take up to 30 days. Please include your registered mobile number and a brief description of your request in your message to help us respond efficiently.