8bed Privacy Policy

8bed collects personal data only to the extent necessary to provide a safe, compliant, and enjoyable gaming experience. We collect data in three broad categories: information you provide directly, information generated by your use of the Platform, and technical information collected automatically.

Information you provide directly

• Registration data: full legal name, date of birth, Bangladeshi mobile number, and a secure password chosen by you.
• Identity verification (KYC) documents: government-issued photo ID (such as NID or passport) and proof of address, submitted when requested for account verification or before processing a withdrawal.
• Correspondence: any messages, emails, or support tickets you send to the 8bed support team, including the content of those communications.
• Responsible gaming disclosures: any self-exclusion requests, deposit limit preferences, or responsible gaming elections you communicate to us.

Information generated by your use of the Platform

• Transaction records: all deposits, withdrawals, bonus credits, wagers placed, and game outcomes associated with your account, including timestamps and amounts.
• Gaming activity logs: game session start and end times, bet sizes, game types played, and win/loss records.
• Responsible gaming activity: session durations, time-on-site metrics, and any events that trigger our responsible gaming monitoring systems.
• Payment method data: the mobile number or masked account identifier associated with your bKash, Nagad, Rocket, or Upay account as returned by the payment provider during a transaction.

Technical information collected automatically

• Device and browser data: device type, operating system version, browser type and version, screen resolution, and device identifiers.
• Network data: IP address, approximate geolocation derived from IP (country and city level only), and mobile network operator information.
• Usage and analytics data: pages visited, features used, time spent on each section, and referral source — used to improve Platform performance and user experience.

8bed processes your personal data on the following legal bases, depending on the nature and purpose of the processing activity.

• Contractual necessity: processing required to register your account, process your transactions, and deliver the core Platform services you have requested.
• Legal obligation: processing necessary to comply with applicable anti-money laundering laws, KYC requirements, and other regulatory obligations applicable to online gaming operators.
• Legitimate interests: processing for fraud prevention, platform security, responsible gaming monitoring, and analytical improvements to the Platform — where these interests are not overridden by your rights.
• Consent: where we send you optional promotional communications (such as bonus offers and news updates), we do so on the basis of your consent, which you may withdraw at any time by contacting [email protected].

8bed takes the security of your financial information seriously. All payment transactions on the Platform are conducted through regulated third-party payment providers. 8bed does not store your full bKash, Nagad, Rocket, or Upay account credentials. The following specific protections apply to your payment data.

• Only the last four digits or a masked version of your payment account identifier is retained in 8bed's systems — sufficient to match your withdrawal to the correct account, but not enough to initiate an independent transaction.
• All financial data in transit between your device and 8bed's servers is encrypted using 256-bit SSL/TLS protocols. This applies to deposit initiation requests, withdrawal requests, and balance enquiries.
• Transaction records are retained for a minimum of five years following account closure to comply with applicable anti-money laundering record-keeping requirements. This retention is a legal obligation and cannot be waived at your request.
• 8bed will never request your bKash PIN, Nagad PIN, or any payment account password via any channel. Any communication claiming to be from 8bed that requests this information should be treated as fraudulent and reported to [email protected] immediately.

8bed retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, regulatory, and operational requirements. The specific retention periods below apply to the main categories of data we hold.

• Account and identity data: retained for the duration of your active account plus a minimum of 5 years following account closure, to comply with anti-money laundering record-keeping obligations.
• Transaction records: retained for a minimum of 5 years following each transaction date, regardless of account status, in accordance with applicable financial record-keeping requirements.
• Support correspondence and communications: retained for 3 years from the date of the last communication in each support thread, used to resolve any subsequent disputes or re-opened queries.

Once a retention period expires and no other legal obligation requires the continued storage of your data, 8bed will securely delete or anonymise the data in question. Anonymised data — from which you cannot be identified — may be retained indefinitely for aggregate analytics purposes.

8bed employs a layered approach to data security, combining technical, administrative, and operational safeguards to protect your personal information against unauthorised access, disclosure, alteration, and destruction.

• 256-bit SSL/TLS encryption for all data in transit between your device and 8bed's servers — the same encryption standard used by major financial institutions globally.
• Encrypted data storage: sensitive personal and financial data is encrypted at rest on 8bed's servers using industry-standard encryption algorithms.
• Access controls: access to personal data within 8bed's systems is restricted on a strict need-to-know basis. Internal access is logged and audited regularly.
• Incident response: 8bed maintains a documented data breach response procedure. In the event of a breach that poses a material risk to your rights, you will be notified without undue delay.

While 8bed implements robust security measures, no online platform can guarantee absolute security against all possible threats. You are responsible for keeping your login credentials confidential and for notifying us immediately if you suspect unauthorised access to your account.

8bed reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform services. When material changes are made, we will update the "last updated" date at the top of this page and, where practicable, notify active users via their registered contact details.

Your continued use of the 8bed Platform following any update to this Privacy Policy constitutes your acceptance of the revised policy. If you do not agree to the changes, you must discontinue use of the Platform and may request account closure by contacting [email protected].