8upb Privacy Policy

This Privacy Policy ("Policy") describes how 8upb ("we", "us", "our", "the Company") collects, uses, stores, shares, and protects the personal data of individuals ("you", "the User", "the Player") who access or use the 8upb platform at 8upb.io, including all related subdomains, mobile experiences, and associated services.

By creating an 8upb account, depositing funds, placing a wager, or otherwise using any part of the 8upb platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you should immediately cease using the platform and contact us at [email protected] to request account closure.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which form part of the overall agreement between you and 8upb. In the event of a conflict between this Policy and any other document, this Privacy Policy shall govern with respect to data protection matters.

8upb collects personal data from several sources in the course of providing its services. The categories of data we collect are set out in the table below, together with the source of that data and the purpose for which it is initially collected.

We do not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, biometric data used for identification purposes, or health data) except where strictly required by applicable law or where you voluntarily disclose such information in the context of a responsible gaming self-assessment.

8upb uses the personal data we collect for the following specific purposes. We do not use your data for any purpose that is incompatible with the purposes listed below without first obtaining your explicit consent.

• Account creation and management: To register your account, verify your identity, maintain your account in good standing, and enable you to log in and access your account securely.
• Service delivery: To process your bets, calculate payouts, credit winnings to your account, and generally deliver the core betting and gaming services offered by 8upb.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, USDT, Bitcoin, Visa, and Mastercard, and to reconcile transaction records.
• Identity and age verification: To confirm that you meet the minimum age requirement of 21 years and that your identity matches the details provided at registration, in compliance with our KYC obligations.
• Anti-money laundering and fraud prevention: To monitor transactions and account activity for signs of money laundering, fraud, collusion, or other prohibited conduct, and to report suspicious activity where required by applicable law.
• Responsible gaming: To implement and administer deposit limits, loss limits, session time-outs, cool-off periods, and self-exclusion requests; and to identify accounts that may exhibit signs of problem gambling behaviour.
• Customer support: To respond to your queries, complaints, and support requests; to maintain records of communications for training and quality assurance purposes.
• Platform improvement: To analyse usage patterns, identify technical issues, test new features, and generally improve the functionality, performance, and user experience of the 8upb platform.
• Marketing communications: To send you promotional offers, bonus notifications, and updates about 8upb services — but only where you have provided explicit consent to receive such communications. You may withdraw consent at any time by contacting [email protected].
• Legal and regulatory compliance: To meet our obligations under applicable laws, including record-keeping requirements, and to respond to lawful requests from regulatory or law enforcement authorities.

8upb processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is required to perform the contract between you and 8upb — specifically, to create and manage your account, process payments, and deliver betting and gaming services. Without this processing, 8upb would be unable to provide its services to you.
• Legal obligation: Processing that is required to comply with applicable legal and regulatory obligations, including KYC verification, anti-money laundering checks, age verification, and the retention of financial records.
• Legitimate interests: Processing undertaken to further 8upb's legitimate business interests, provided those interests are not overridden by your rights and interests. This includes fraud prevention, platform security, responsible gaming monitoring, analytics, and product improvement. Where we rely on legitimate interests, we conduct a balancing assessment to ensure your rights are respected.
• Consent: Processing undertaken on the basis of your freely given, specific, informed, and unambiguous consent — in particular, the sending of direct marketing communications. You have the right to withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

8upb does not sell your personal data. We share your personal data only in the following strictly defined circumstances:

• Payment service providers: We share transaction-relevant personal data with bKash, Nagad, Rocket, Upay, and other payment processors solely to facilitate deposit and withdrawal transactions. Each payment provider operates under its own privacy policy and data protection framework.
• Identity verification partners: We share identity document data and selfie photographs with our KYC/AML verification partners for the purpose of verifying your identity and age. These partners are bound by strict contractual data protection obligations and may not use your data for any other purpose.
• Game studio providers: When you play games provided by third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe, your player session data (including wager amounts and game outcomes) is shared with the relevant studio for the purpose of delivering the game and settling results. These studios do not receive your identity or financial data.
• IT infrastructure and cloud providers: 8upb uses third-party hosting, cloud storage, and content delivery services to operate the platform. These providers have access to personal data only to the extent necessary to provide their technical services and are contractually prohibited from using data for any other purpose.
• Legal and regulatory authorities: We will disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are required to do so by applicable law, court order, or other legally binding process. Where permitted, we will notify you of such a disclosure.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of 8upb's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

8upb retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. The specific retention periods we apply are as follows:

• Account and identity data: Retained for the lifetime of your account and for a minimum of five (5) years following account closure, in line with standard AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of seven (7) years from the date of each transaction, in compliance with applicable financial record-keeping obligations.
• KYC verification documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later.
• Communications data (support tickets, emails): Retained for three (3) years from the date of the last communication, unless the communication relates to a dispute or legal proceeding, in which case it is retained until the matter is fully resolved.
• Technical and usage data (logs, analytics): Retained for up to twenty-four (24) months, after which it is anonymised or deleted.
• Marketing consent records: Retained for as long as you remain a registered 8upb player and for two (2) years following account closure or consent withdrawal, whichever is earlier.

When the retention period applicable to a given category of data expires, 8upb will securely delete or irreversibly anonymise that data. Where data cannot be deleted immediately due to system backup cycles, it will be isolated from active processing and deleted at the next available cycle.

8upb uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage objects) to operate the platform, maintain session security, and improve your experience. Cookies are small text files placed on your device when you visit 8upb.io. They do not contain executable code and cannot access other data on your device.

The categories of cookies used by 8upb are as follows:

• Strictly necessary cookies: These cookies are essential for the operation of the 8upb platform. They enable core functions such as session management, login authentication, and security features including CSRF protection. These cookies cannot be disabled without breaking the platform's core functionality.
• Performance and analytics cookies: These cookies collect aggregated, anonymised information about how users navigate the 8upb platform — which pages are visited most frequently, where users encounter errors, and how long sessions last. This data helps us improve the platform's performance and usability. No personally identifiable information is included in these analytics reports.
• Functional cookies: These cookies remember your preferences — such as your selected language, preferred game category, or notification settings — so that you do not need to re-enter them on each visit.
• Security cookies: These cookies are used to detect and prevent fraudulent activity, monitor for unusual login patterns, and support two-factor authentication flows. They are a core component of 8upb's account security infrastructure.

8upb does not use third-party behavioural advertising cookies or cross-site tracking cookies. We do not participate in advertising networks that profile users for targeted advertising purposes.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling cookies may affect the functionality of certain features on the 8upb platform, including the ability to maintain a logged-in session.

As a user of the 8upb platform, you have the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected], clearly identifying yourself and specifying the right you wish to exercise. 8upb will respond to all valid requests within 30 days of receipt.

• Right of access: You have the right to request a copy of all personal data that 8upb holds about you. We will provide this in a structured, commonly used format. We may charge a reasonable administrative fee for manifestly excessive or repetitive requests.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data held by 8upb be corrected or completed. Certain data fields can be updated directly in your account settings; others require a support request.
• Right to erasure ("right to be forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to our legal retention obligations as described in Section 6.
• Right to restriction of processing: You have the right to request that 8upb restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being considered.
• Right to data portability: You have the right to receive your personal data in a structured, machine-readable format and to transmit that data to another controller, where technically feasible and where processing is based on consent or contract.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests. You also have an unconditional right to object to the processing of your data for direct marketing purposes at any time.
• Rights in relation to automated decision-making: You have the right not to be subject to a decision based solely on automated processing — including profiling — that produces significant legal or similarly significant effects on you, without human review. Where 8upb uses automated decision-making, you have the right to request human review of any such decision.

8upb implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• TLS/SSL encryption: All data transmitted between your device and the 8upb platform is encrypted in transit using Transport Layer Security (TLS), ensuring that your personal data and payment information cannot be intercepted during transmission.
• Encryption at rest: Sensitive personal data stored on 8upb's servers — including identity documents and financial data — is encrypted at rest using AES-256 or equivalent standard encryption.
• Access controls: Access to personal data within 8upb is restricted on a strict need-to-know basis. Staff members are granted access only to the specific data categories required to perform their roles. All internal access is logged and audited.
• Two-factor authentication: All 8upb internal systems that hold personal data require multi-factor authentication for staff access. Players are also strongly encouraged to enable 2FA on their own accounts.
• Penetration testing and vulnerability assessments: 8upb conducts regular security assessments of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident response: 8upb maintains a documented data breach response procedure. In the event of a confirmed breach affecting your personal data, you will be notified without undue delay, and steps will be taken immediately to contain, assess, and remediate the incident.

While 8upb takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You also play an important role in protecting your own data by choosing a strong, unique password, enabling two-factor authentication, and notifying us immediately if you suspect any unauthorised access to your account.

The 8upb platform is strictly intended for use by individuals aged 21 years and above. 8upb does not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been collected from a person under the age of 21 — whether through a false declaration of age during registration or any other means — we will immediately suspend the relevant account, delete the data associated with it, and void any transactions conducted from that account.

If you are a parent or guardian and believe that a person under the age of 21 in your care has registered an account with 8upb or otherwise provided personal data to 8upb without your consent, please contact us immediately at [email protected]. We take underage access to gambling platforms with the utmost seriousness and will act swiftly on all reports of this nature.

The 8upb platform may, from time to time, contain references to or integrations with third-party services — for example, game studios, payment gateways, or identity verification providers. Where such third-party services have their own web presence or privacy documentation, links or references to those documents may appear within the platform interface.

8upb is not responsible for the privacy practices of any third-party service provider, game studio, or payment processor. Each third party operates under its own privacy policy, and we encourage you to review those policies before providing personal data to any third-party service. The inclusion of a third-party service within the 8upb platform does not constitute an endorsement of that party's data practices.

In particular, the following third-party relationships involve some degree of data interaction, and you should be aware of each provider's independent privacy framework:

• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard): Your payment data is processed directly by these providers under their own terms and privacy policies. 8upb does not store full payment card numbers or mobile banking PINs.
• Game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi): Game session data is shared with providers solely to deliver gameplay and settle results. These providers may maintain their own session logs in accordance with their operating licences.
• Cryptocurrency networks (Bitcoin, USDT/Tether): Blockchain transactions are publicly recorded on their respective networks. While wallet addresses are pseudonymous, they are permanently visible on the blockchain. 8upb has no control over data recorded on public blockchains.

8upb reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform and services. When we make changes, we will update the "Last Updated" date at the top of this page and increment the version number accordingly.

Where changes to this Policy are material — meaning they significantly affect how we collect, use, or share your personal data, or meaningfully alter your rights — 8upb will notify registered players via the email address associated with their account. The notification will clearly describe the nature of the changes and, where consent is required for any new processing activity, will provide you with the opportunity to provide or withhold that consent before the new processing begins.

Your continued use of the 8upb platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any revised version of this Policy, you must cease using the platform and contact [email protected] to arrange account closure and, where applicable, data deletion in accordance with our retention obligations.

If you have any questions, concerns, or complaints about this Privacy Policy, about how 8upb processes your personal data, or about the exercise of your data rights, please contact our Data Support team using the details below. All privacy-related communications are handled with strict confidentiality and in accordance with this Policy.

When contacting us about a data rights request, please include your registered username, the email address associated with your 8upb account, a clear description of your request, and any supporting information that will help us identify you and process your request accurately. We may ask for additional identity verification before acting on certain requests, particularly requests for data access, deletion, or portability.

If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint through appropriate legal channels available in your jurisdiction. 8upb is committed to resolving all data protection complaints fairly and in good faith.