Your Privacy Matters to 8app
At 8app, we handle your personal information with care, transparency, and the highest level of security. This Privacy Policy explains exactly what data we collect, how we use it, and the controls you have over your own information as a registered player on our platform.
How We Protect Your Data
These six principles guide every decision 8app makes about collecting, processing, and securing the personal information of our players across Bangladesh.
Table of Contents
- 1. Introduction and Scope
- 2. Data Controller Information
- 3. Data We Collect
- 4. How We Use Your Data
- 5. Legal Bases for Processing
- 6. Cookies and Tracking Technologies
- 7. Sharing Your Data with Third Parties
- 8. International Data Transfers
- 9. Data Retention Periods
- 10. Your Privacy Rights
- 11. Security Measures
- 12. Children and Minors
- 13. Links to Third-Party Sites
- 14. Changes to This Policy
- 15. Contact and Data Requests
Introduction and Scope
This Privacy Policy describes how 8app collects, uses, stores, shares, and protects the personal information of individuals who access or use the 8app platform, available at https://8app.asia. It applies to all registered players, prospective registrants who interact with the platform without completing registration, and visitors who browse the website without creating an account.
By accessing the 8app platform or creating an account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent to any part of this policy, you should not proceed to register or use the platform.
Scope note: This Privacy Policy covers the 8app website at https://8app.asia and all associated subdomains and features. It does not cover the privacy practices of third-party payment processors, game content providers, or any other external services that may be linked to or integrated with the 8app platform. Players are encouraged to review the privacy policies of those third parties independently.
This policy is written in formal English and is effective as of 1 January 2026. It supersedes all prior versions of the 8app Privacy Policy. Where conflicts exist between this document and any earlier version, this current version shall prevail.
Data Controller Information
For the purposes of applicable data protection legislation, 8app acts as the data controller in respect of all personal data collected from players and site visitors through the 8app platform. As data controller, 8app determines the purposes and means by which your personal data is processed.
All data protection enquiries, subject access requests, and consent withdrawal notices should be directed to the 8app data protection contact:
- Platform name: 8app
- Website: https://8app.asia
- Data protection contact email: [email protected]
- Support hours: 24 hours a day, 7 days a week
- Operational time zone: Bangladesh Standard Time (BST, UTC+6)
8app will acknowledge all data protection requests within 48 hours of receipt and will endeavour to respond substantively within 30 calendar days. In cases where a request is complex or involves a high volume of data, we may extend the response period by a further 30 days, in which case we will notify you of the extension within the initial 30-day period.
Data We Collect
8app collects personal data in several ways: directly from you when you register, make a deposit, contact support, or otherwise interact with the platform; automatically through your use of the website; and, in limited circumstances, from third-party sources such as payment processors and identity verification services.
The categories of personal data we collect are set out in the table below:
| Category | Examples of Data Collected | Collection Method |
|---|---|---|
| Identity Data | Full name, date of birth, gender, National ID number, passport number | Registration form, KYC document upload |
| Contact Data | Email address, mobile phone number, residential address, city (e.g., Dhaka, Chittagong, Sylhet) | Registration form, account profile updates |
| Financial Data | bKash / Nagad / Rocket / Upay wallet numbers, transaction reference IDs, deposit and withdrawal amounts in BDT | Payment processing, transaction logs |
| Technical Data | IP address, browser type and version, device type, operating system, screen resolution, session duration | Automatic collection via server logs and cookies |
| Usage Data | Pages viewed, games played, bets placed, time spent on each game, click-through paths, search queries | Automatic collection via analytics tools |
| Communication Data | Contents of support tickets, live chat transcripts, email correspondence, WhatsApp message records | Customer support interactions |
| Responsible Gaming Data | Self-exclusion requests, deposit limit settings, cooling-off period activations, responsible gaming tool usage history | Account dashboard interactions, support requests |
We do not collect special category personal data (such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, health data, or data concerning sexual orientation) unless you voluntarily provide such information in the context of a support communication, in which case it is treated with the highest level of protection and used solely for the purpose of resolving your query.
How We Use Your Data
8app uses the personal data we collect for the following purposes. Where we rely on a specific legal basis for processing, that basis is identified in Section 5 of this policy.
- Account registration and management: To create and maintain your player account, verify your identity and age (minimum 21 years), and manage your account settings and preferences.
- Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; to record transaction histories; and to detect and prevent fraudulent financial activity.
- Platform delivery: To provide access to cricket betting markets, live casino games, slots, crash games, and all other 8app platform features; to personalise your experience based on your game preferences and betting history.
- Customer support: To respond to your queries, complaints, and requests submitted via live chat, email, or WhatsApp; to maintain records of your interactions with our support team for quality assurance and training purposes.
- Responsible gaming compliance: To administer self-exclusion requests, enforce deposit limits and loss limits, and monitor account activity for indicators of problematic gambling behaviour in accordance with our Responsible Gaming Policy.
- Legal and regulatory compliance: To comply with applicable anti-money laundering (AML) obligations, fraud prevention requirements, and the terms of 8app's international offshore gaming licence; to cooperate with law enforcement agencies and financial intelligence units where required by law.
- Marketing communications: To send you promotional offers, bonus notifications, and platform updates by email or SMS, where you have provided explicit consent to receive such communications. You may withdraw your marketing consent at any time by contacting [email protected] or using the unsubscribe mechanism in any marketing email.
- Platform improvement: To analyse usage patterns, identify technical issues, conduct A/B testing, and improve the overall user experience of the 8app platform.
- Security monitoring: To detect and investigate suspicious login attempts, unusual betting patterns, and potential security breaches; to enforce the 8app Terms & Conditions where violations are identified.
Legal Bases for Processing
8app processes your personal data on the following legal bases, depending on the purpose of the processing activity:
- Contractual necessity: Processing that is necessary to perform our contractual obligations to you as a registered player — including account management, transaction processing, and platform delivery — is carried out on the basis that it is required to fulfil our agreement with you.
- Legal obligation: Processing carried out to comply with our legal obligations under applicable anti-money laundering regulations, gaming licence conditions, and law enforcement cooperation requirements is carried out on the basis of legal obligation.
- Legitimate interests: Processing carried out for fraud detection, platform security, responsible gaming monitoring, and platform improvement is carried out on the basis of 8app's legitimate interests, provided that those interests are not overridden by your fundamental rights and freedoms.
- Consent: Processing carried out for direct marketing communications — including promotional emails, SMS offers, and bonus notifications — is carried out exclusively on the basis of your freely given, informed, and explicit consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
Where 8app relies on legitimate interests as a legal basis for processing, we conduct a balancing test to ensure that our interests do not disproportionately override your privacy rights. The results of such balancing tests are available upon written request to [email protected].
Cookies and Tracking Technologies
8app uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse usage patterns, and deliver a consistent experience across sessions. A cookie is a small text file placed on your device by a website you visit. Cookies themselves do not contain personally identifiable information, but they may be used in conjunction with other data we hold to identify you.
The categories of cookies used on the 8app platform are:
- Strictly necessary cookies: These cookies are essential for the platform to function correctly. They enable core features such as session authentication, account security, and payment processing flows. These cookies cannot be disabled without impairing your ability to use the platform.
- Functional cookies: These cookies remember your preferences — such as language settings, time zone, and display options — to provide a more personalised experience. Disabling them may reduce the quality of your experience on the platform.
- Analytics cookies: These cookies allow 8app to understand how players use the platform, which pages receive the most traffic, and where technical errors occur. Analytics data is used in aggregated, anonymised form where possible. These cookies can be disabled without affecting your ability to use the platform.
- Marketing cookies: Where you have consented, these cookies enable us to show you relevant promotional content related to 8app offers and to measure the effectiveness of our marketing campaigns. You may withdraw consent for marketing cookies at any time.
You can manage your cookie preferences through your browser settings. Most modern browsers allow you to refuse all cookies, accept only certain types of cookies, or delete cookies that have already been placed on your device. Please note that disabling cookies may affect the functionality of certain parts of the 8app platform.
Sharing Your Data with Third Parties
8app does not sell, rent, or trade your personal data to third parties for their own independent commercial purposes. We share your personal data with third parties only in the following limited circumstances, and only to the extent necessary for the stated purpose:
- Payment processors: We share transaction data with mobile payment providers (bKash, Nagad, Rocket, Upay) and card networks (Visa, Mastercard) to process your deposits and withdrawals. These providers operate under their own privacy policies and data protection frameworks.
- Identity verification services: Where KYC verification is required, we may share identity document images and personal details with third-party identity verification platforms that operate under strict confidentiality and security obligations.
- Game content providers: Game providers such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe may receive technical data (such as session tokens and bet amounts) necessary to deliver their games within the 8app platform. These providers do not receive your full personal profile.
- Fraud prevention and AML vendors: We may share transaction patterns and account behaviour data with specialist fraud detection and anti-money laundering service providers to protect the integrity of the platform and comply with our legal obligations.
- Legal and regulatory authorities: We will disclose personal data to law enforcement agencies, financial intelligence units, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to protect the safety of our players or the public.
- Corporate transactions: In the event of a merger, acquisition, or sale of all or part of 8app's business operations, your personal data may be transferred to the acquiring entity, subject to that entity agreeing to honour the terms of this Privacy Policy.
All third parties with whom 8app shares personal data are required to maintain appropriate technical and organisational security measures and to process your data only for the specified purpose and in accordance with our instructions.
International Data Transfers
8app operates as an international online platform, and some of the personal data we collect may be processed or stored on servers located outside of Bangladesh. In particular, our hosting infrastructure, game content delivery networks, and certain third-party service providers may be based in jurisdictions other than the one in which you reside.
Where personal data is transferred outside of Bangladesh, 8app takes steps to ensure that an adequate level of data protection is maintained, including by:
- Ensuring that data transfers are made only to countries or organisations that provide an equivalent standard of data protection to that which applies in Bangladesh.
- Incorporating contractual data protection clauses into agreements with third-party processors based in jurisdictions that do not have an equivalent data protection framework.
- Applying technical security measures — including encryption in transit and at rest — to all data regardless of where it is processed or stored.
If you would like further information about the specific international data transfers that affect your personal data, or the safeguards in place for such transfers, please contact us at [email protected].
Data Retention Periods
8app retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention schedule applies to the principal categories of personal data we hold:
| Data Category | Retention Period | Reason for Retention |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Contractual record-keeping, AML compliance |
| KYC / identity documents | Duration of account + 5 years after closure | Anti-money laundering regulatory requirements |
| Financial transaction records | 7 years from transaction date | Financial reporting and AML obligations |
| Responsible gaming records | Duration of account + 5 years after closure | Regulatory compliance, player protection |
| Customer support communications | 3 years from last interaction | Quality assurance, dispute resolution |
| Marketing consent records | Until consent is withdrawn + 1 year | Evidence of lawful processing basis |
| Technical and usage data (logs) | 13 months from collection | Security monitoring, platform analytics |
| Cookie data | Up to 13 months (varies by cookie type) | Platform functionality, analytics |
When the applicable retention period expires, 8app will securely delete or anonymise your personal data so that it can no longer be linked to your identity. If you request deletion of your data before the end of the standard retention period, 8app will action the request to the extent permitted by its legal and regulatory obligations. Where data must be retained for legal reasons despite a deletion request, we will inform you of the specific legal basis for continued retention.
Your Privacy Rights
As a data subject, you have the following rights in respect of the personal data that 8app holds about you. These rights may be exercised by submitting a written request to [email protected]. 8app will respond to all valid requests within 30 calendar days.
- Right of access: You have the right to request a copy of all personal data that 8app holds about you, together with information about how it is being used and with whom it has been shared.
- Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
- Right to erasure ("right to be forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where you object to processing based on legitimate interests and no overriding legitimate grounds exist. This right is subject to our legal and regulatory retention obligations.
- Right to restriction of processing: You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data, or where you have objected to processing and a determination of whether our legitimate grounds override your interests is pending.
- Right to data portability: Where processing is carried out by automated means on the basis of your consent or a contract, you have the right to receive a structured, commonly used, machine-readable copy of the personal data you have provided to us, and to request that we transmit it directly to another data controller where technically feasible.
- Right to object: You have the right to object at any time to the processing of your personal data for direct marketing purposes. You also have the right to object to processing based on legitimate interests, on grounds relating to your particular situation. Where you object to legitimate-interest processing, 8app will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
- Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
How to exercise your rights: Submit your request in writing to [email protected], clearly identifying yourself, the right you wish to exercise, and the specific data or processing activity your request relates to. We may ask you to verify your identity before processing the request to protect against unauthorised access to another person's data.
Security Measures
8app implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:
- Transport Layer Security (TLS): All data transmitted between your browser or device and the 8app platform is protected using industry-standard TLS encryption, preventing interception by unauthorised third parties.
- Data encryption at rest: Sensitive data fields — including identity document images, financial account identifiers, and authentication credentials — are encrypted when stored in our databases using strong encryption algorithms.
- Access control and role separation: Access to personal data within 8app is restricted to authorised personnel who require it for legitimate operational purposes. Access rights are reviewed regularly, and access is revoked promptly when no longer required.
- Intrusion detection and monitoring: 8app employs continuous monitoring of its systems for signs of unauthorised access, anomalous activity, and potential security incidents. Alerts are triaged by our security operations team around the clock.
- Password security: Player passwords are stored using strong one-way cryptographic hashing with salting. 8app does not store passwords in plain text and cannot recover a forgotten password — only a password reset flow is available.
- Two-step verification: Players are encouraged to enable two-step verification on their accounts, which provides an additional layer of protection against unauthorised access even if login credentials are compromised.
- Incident response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 8app will notify affected players promptly and take all necessary steps to contain and remediate the breach.
While 8app takes all reasonable precautions to protect your personal data, no internet-based system can be guaranteed to be completely secure. Players are also responsible for maintaining the security of their own devices and account credentials. Please refer to Section 4 of the 8app Terms & Conditions for guidance on account security obligations.
Children and Minors
The 8app platform is strictly for adults aged 21 years and above. We do not knowingly collect, process, or store personal data from individuals under the age of 21. The registration process includes an age declaration, and 8app reserves the right to request documentary proof of age at any stage of the account lifecycle.
If 8app becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that a minor in your care has registered on the 8app platform, please contact us immediately at [email protected]. We will investigate and act upon all such reports promptly.
8app strongly encourages parents and guardians to use parental control software to restrict access to online gambling platforms on devices used by minors. For guidance on available tools, please visit our Responsible Gaming page.
Links to Third-Party Sites
The 8app platform may contain references to third-party services, including payment providers (bKash, Nagad, Rocket, Upay), game content studios (Evolution Gaming, Pragmatic Play, Spribe), and sports data providers. While 8app takes care in its selection of third-party integrations, we are not responsible for the privacy practices or content of those external services.
This Privacy Policy applies exclusively to the 8app platform at https://8app.asia. When you interact with a third-party service — whether through an integrated payment flow, a game provider interface, or any other mechanism — you are subject to that third party's own privacy policy and terms of service. We strongly recommend that you review those policies before providing your personal data to any third-party service.
Changes to This Policy
8app reserves the right to update, amend, or replace this Privacy Policy at any time. When material changes are made — particularly changes that affect how we use your personal data or the rights available to you — we will notify registered players by posting a prominent notice on the 8app platform and, where reasonably practicable, by sending a notification to the email address registered on your account.
The effective date of the current version of this Privacy Policy is stated at the top of this document. We encourage you to review this policy periodically to remain informed about how we protect your personal data. Your continued use of the 8app platform following the publication of a revised Privacy Policy constitutes your acceptance of the changes.
If you do not agree with any material change to this Privacy Policy, you should cease using the platform and request account closure by contacting [email protected] before the effective date of the changes.
Contact and Data Requests
If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data that 8app holds about you, please contact our data protection team using the details below. All communications regarding data protection are handled by dedicated personnel and are treated with the highest level of confidentiality.
- Email: [email protected]
- Live Chat: Available 24/7 from your account dashboard
- WhatsApp: +880 1700 000000 (09:00–01:00 BST)
- Response time: Within 48 hours for acknowledgement; within 30 calendar days for substantive response
When submitting a data protection request, please include your full name, the email address registered on your 8app account, and a clear description of your request or concern. This helps us locate your records efficiently and respond accurately. We may ask you to verify your identity before we process any request that involves accessing, amending, or deleting your personal data.
Last reviewed: 1 January 2026. This Privacy Policy was reviewed and approved by the 8app compliance team on the effective date stated above. The next scheduled review is 1 January 2027, or sooner if material changes to our data practices or applicable law require an earlier revision.
Have Questions About Your Privacy?
Our 24/7 English-language support team is ready to handle any data protection enquiry, subject access request, or consent withdrawal. You can also explore our FAQ for quick answers or visit our Responsible Gaming page for player safety guidance.