8mbest Privacy Policy

Introduction

8mbest ("we", "us", "our", "Company") operates the online gaming and sports betting platform available at 8mbest.app (the "Platform"). We are firmly committed to protecting the privacy and personal data of every player who registers, browses, or transacts on our Platform.

This Privacy Policy ("Policy") sets out in clear terms the categories of personal data we collect, the purposes for which that data is processed, the legal bases underpinning each processing activity, the parties with whom data may be shared, how long we retain data, the security measures we apply, and the rights available to you as a data subject.

This Policy applies to all users of the 8mbest Platform, including registered account holders, unregistered visitors, and individuals who contact our support team. It should be read alongside the Terms & Conditions and Responsible Gaming Policy, both of which are incorporated herein by reference.

Data Controller

8mbest acts as the data controller in respect of all personal data collected and processed through the Platform. As data controller, 8mbest determines the purposes for which personal data is processed and the means by which that processing is carried out.

For all data-related enquiries, requests to exercise your rights, or concerns regarding this Policy, you may contact us using the details provided in Section 16 of this document.

Data We Collect

We collect several categories of personal data depending on your interaction with the Platform. The categories and their descriptions are set out in the table below:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data except where strictly required by applicable responsible gaming obligations (for example, recording a self-exclusion request linked to problem gambling).

How We Collect Your Data

8mbest collects personal data through the following mechanisms:

Direct Collection

Data you provide to us directly when you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact our support team, or update your account profile. This represents the primary source of identity, contact, and financial data we hold.

Automated Collection

When you visit or use the Platform, we automatically collect technical and usage data through cookies, web beacons, pixel tags, server logs, and similar tracking technologies. This data is collected passively and does not require any action on your part. Please refer to Section 11 for our full Cookie Policy.

Third-Party Sources

We may receive data about you from third parties including:

• Payment service providers such as bKash, Nagad, Rocket, and Upay, for the purpose of confirming transaction completion and account ownership.
• Identity verification and fraud prevention services that help us confirm the authenticity of KYC documents.
• Game providers including Pragmatic Play, Evolution Gaming, NetEnt, and Microgaming, who may share session-level data with us for dispute resolution and fair-play auditing purposes.
• Analytics platforms that provide aggregated, anonymised behavioural insights to help us improve Platform performance.

How We Use Your Data

8mbest processes personal data only for specific, documented purposes. The table below maps each processing purpose to its corresponding data category and legal basis:

Legal Basis for Processing

Every processing activity carried out by 8mbest rests on one or more of the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations under the Player Account Agreement — including account creation, KYC verification, payment processing, and delivery of gaming services.
• Legal Obligation: Processing necessary to comply with applicable legal requirements, including anti-money-laundering obligations, age verification requirements, and responsible gaming duties.
• Legitimate Interests: Processing carried out in pursuit of 8mbest's legitimate business interests — including fraud prevention, security monitoring, Platform analytics, and customer support — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — principally for the sending of promotional and marketing communications. You may withdraw consent at any time by updating your account preferences or contacting support.

Data Sharing

8mbest does not sell, rent, or trade your personal data to any third party. We share personal data only in the following limited circumstances, and only to the extent strictly necessary for the stated purpose:

Service Providers and Processors

We engage trusted third-party service providers who process data on our behalf under written data processing agreements. These include payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank), identity verification services, fraud prevention platforms, cloud hosting providers, and analytics tools. All processors are contractually required to maintain appropriate security standards and to process data only as instructed by 8mbest.

Game Providers

Where you play games supplied by third-party providers such as Pragmatic Play, Evolution Gaming, NetEnt, or Microgaming, limited session and account data is shared with those providers for the purpose of game delivery, dispute resolution, and fair-play auditing. Game providers are required to treat this data in accordance with their own data protection obligations.

Legal and Regulatory Disclosure

We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by law, or where such disclosure is necessary to protect the rights, property, or safety of 8mbest, its players, or the public. Any such disclosure will be limited to the minimum data necessary.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 8mbest's business, player data may be transferred to the successor entity. Affected players will be notified in advance of any such transfer and of any changes to this Privacy Policy that may result.

International Data Transfers

As an online platform serving Bangladesh players, some of 8mbest's service providers and game partners are located in jurisdictions outside Bangladesh. Where personal data is transferred to a country that does not provide an equivalent level of data protection, 8mbest ensures that appropriate safeguards are in place, including contractual protections and data processing agreements that impose obligations on recipients equivalent to those applicable under this Policy.

By using the 8mbest Platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Bangladesh where necessary for the delivery of Platform services, subject to the safeguards described above.

Data Retention

8mbest retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of the account relationship and for a minimum of five years following account closure, in order to satisfy anti-money-laundering and fraud prevention obligations.
• Financial Transaction Records: Retained for a minimum of five years from the date of each transaction, in compliance with applicable financial record-keeping requirements.
• KYC Documents: Retained for a minimum of five years following account closure or the completion of the relevant KYC process, whichever is later.
• Communications and Support Records: Retained for three years from the date of the last communication, unless the subject matter relates to an unresolved dispute, in which case records are retained until the dispute is fully resolved.
• Responsible Gaming Records: Self-exclusion and deposit limit records are retained for the duration of the measure and for five years thereafter, to prevent circumvention through re-registration.
• Technical and Usage Data: Typically retained in identifiable form for 13 months and thereafter anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 8mbest's internal data destruction procedures.

Security Measures

8mbest applies robust technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security framework includes, but is not limited to, the following controls:

• Encryption in Transit: All data transmitted between your device and the 8mbest Platform is protected using 256-bit SSL/TLS encryption, ensuring that data cannot be intercepted or read by unauthorised third parties.
• Encryption at Rest: Sensitive personal data stored on 8mbest servers is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. 8mbest staff are granted access only to the data required to perform their specific role, and all access is logged and auditable.
• Two-Factor Authentication: Player accounts support two-factor authentication as an additional layer of protection. We strongly encourage all 8mbest account holders to enable this feature.
• Regular Security Assessments: 8mbest conducts periodic security assessments and vulnerability testing to identify and remediate potential weaknesses in the Platform's infrastructure.
• Incident Response: 8mbest maintains a documented data breach response procedure. In the event of a security incident that poses a risk to player data, affected individuals will be notified without undue delay.

Cookies and Tracking Technologies

The 8mbest Platform uses cookies and similar technologies to deliver and improve our services. A cookie is a small text file placed on your device by a web server. Cookies do not contain executable code and cannot be used to access files stored on your device.

Categories of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the Platform to function and cannot be switched off. They include session authentication tokens, security cookies, and cookies that remember your login state. No consent is required for these cookies as they are necessary for the provision of a service you have explicitly requested.
• Performance and Analytics Cookies: These cookies collect anonymised information about how visitors use the Platform — which pages are visited most frequently, how long sessions last, and where users navigate from. This data helps us understand usage patterns and improve Platform performance.
• Functional Cookies: These cookies remember your preferences and personalisation choices, such as your preferred language or recently played games, so that your experience is consistent across sessions.
• Targeting and Marketing Cookies: Where you have provided consent, these cookies may be used to deliver relevant promotional content based on your interests and prior activity on the Platform.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use core Platform features including login and deposit functionality. Disabling other cookie categories will not affect your ability to use the Platform but may reduce personalisation features.

Your Data Rights

As a data subject, you hold a number of rights in respect of the personal data that 8mbest holds about you. We are committed to facilitating the exercise of these rights promptly and without unnecessary obstruction. Your rights include:

• Right of Access: You have the right to request a copy of the personal data 8mbest holds about you, along with information about how that data is processed. We will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update most account information directly through the account settings panel; for KYC-related corrections, please contact support.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where consent has been withdrawn, or where processing is unlawful. This right is subject to 8mbest's legal obligation to retain certain data for the periods specified in Section 9.
• Right to Restriction: You have the right to request that processing of your data be restricted in certain circumstances, for example where you contest the accuracy of the data or have objected to processing pending verification of legitimate grounds.
• Right to Data Portability: Where processing is based on consent or contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling for direct marketing purposes. Where you object to marketing, we will cease processing your data for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please submit a written request to [email protected]. We may require you to verify your identity before processing any rights request to protect against unauthorised access. Requests will be responded to within 30 days; where a request is complex or numerous, this period may be extended by a further 60 days with notification.

Minors and Age Restriction

The 8mbest Platform is strictly intended for adults aged 18 years and over. We do not knowingly collect or process personal data from individuals under the age of 18. Age verification is a mandatory step in the 8mbest KYC process, and we implement technical measures designed to prevent underage individuals from accessing our Platform.

If 8mbest discovers or is notified that it has inadvertently collected personal data from an individual under the age of 18, we will immediately suspend the associated account, delete the data, and refund any deposits to the original payment source.

Third-Party Services and Links

The 8mbest Platform may display references to, or integrate content from, third-party game providers such as Pragmatic Play, Evolution Gaming, NetEnt, and Microgaming. These providers operate their own privacy practices, and their respective privacy policies govern the data they collect directly through their game software.

8mbest does not control the data practices of third-party game providers and accepts no responsibility for their privacy practices. We encourage you to review the privacy policy of any third party whose services you access through or in connection with the 8mbest Platform.

Payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank are independent data controllers in respect of the data they process for the purpose of payment transaction execution. Their collection and use of your financial data for payment purposes is governed by their own privacy policies.

Changes to This Privacy Policy

8mbest reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable legal requirements, or the evolution of our Platform and services. All amendments will be published on this page with an updated effective date clearly displayed at the top of the document.

Where changes are material — meaning they significantly affect how we collect or use your personal data, or the rights available to you — we will provide advance notice by email to your registered address and, where appropriate, via a prominent notice on the Platform, with a minimum notice period of 14 days before the changes take effect.

Your continued use of the 8mbest Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you should close your account and cease using the Platform prior to the effective date.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 8mbest processes your personal data, please contact our support team using the details below. All data-related enquiries are handled by our dedicated privacy team and will receive a response within 30 days.

• Email: [email protected]
• Subject line for data requests: "Privacy Request — [Your Registered Username]"
• Response Time: Within 30 days for rights requests; within 24 hours for general support enquiries.

Please note that the above email address is displayed as plain text only and is not a clickable link. Copy the address into your email client to get in touch. For responsible gaming support, please visit our dedicated Responsible Gaming page.