big8 Privacy Policy

1. Introduction

big8 (hereinafter referred to as "we", "us", or "the Platform") is committed to protecting the privacy and personal data of every individual who visits or uses our online casino and sports betting services. This Privacy Policy sets out, in clear and plain language, the types of information we collect, the purposes for which we use it, the measures we take to keep it secure, and the rights you hold as a data subject.

This policy applies to all users, regardless of location, but is particularly relevant to players based in Bangladesh, including those in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh. If you disagree with any part of this policy, you should discontinue use of our platform immediately.

2. Information We Collect

In order to provide our services, verify your identity, process transactions, and comply with applicable regulations, big8 may collect the following categories of personal information:

• Identity information: full name, date of birth, nationality, and government-issued ID details required for account verification (KYC).
• Contact information: email address, mobile phone number, and residential address (including city and district within Bangladesh).
• Financial information: payment method details (bKash, Nagad, Rocket, Upay, Visa, Mastercard), transaction history, deposit and withdrawal records. We do not store full payment credentials on our servers.
• Technical data: IP address, browser type, operating system, device identifiers, cookie data, session tokens, and referring URLs collected automatically when you use our platform.
• Gameplay and behavioural data: game history, betting patterns, session durations, and feature usage logs retained for fraud prevention, responsible gaming monitoring, and platform improvement.
• Communications data: records of your support interactions, chat transcripts, emails, and feedback submissions so that we can maintain a quality service record.

3. How We Use Your Information

big8 processes your personal data only for legitimate, clearly defined purposes. We do not use your information for any purpose that is incompatible with what is stated below:

Account Management and Verification

We use identity and contact information to create and manage your account, verify your age (players must be 21 years or older), confirm your identity through our KYC process, and keep your account secure. This is necessary to comply with responsible gaming standards and to ensure our platform is only used by eligible adults.

Transaction Processing

Financial data is used exclusively to process deposits made via bKash, Nagad, Rocket, Upay, and card networks, to handle withdrawal requests, and to investigate any disputed or suspicious transactions. big8 employs industry-standard encryption for all payment flows to ensure your financial data stays protected.

Platform Improvement and Personalisation

Aggregated and anonymised behavioural data helps us understand how players interact with our cricket betting, live casino, slots, and crash game sections, enabling us to improve navigation, game recommendations, and loading performance. Individually identifiable data is not used for purely commercial profiling without your explicit consent.

4. Legal Basis for Processing

big8 relies on the following lawful bases when processing personal data. Each data processing activity is tied to at least one of these bases:

• Contractual necessity: processing required to fulfil our service agreement with you, including account creation, deposits, withdrawals, and gameplay.
• Legal obligation: processing required to comply with anti-money laundering (AML), know-your-customer (KYC), and responsible gaming regulations.
• Legitimate interests: processing for fraud prevention, platform security, internal analytics, and system integrity where our interests do not override your rights.
• Consent: where you have provided clear, explicit consent for optional data uses such as receiving promotional emails, personalised game recommendations, or participation in loyalty programmes.
• Vital interests: in rare circumstances, we may process data to protect the safety or welfare of a player, for example where we have reason to believe a user may be experiencing a gambling-related harm.

5. Sharing Your Information

big8 does not sell, lease, or trade your personal information to third parties. We may share your data only in the following limited circumstances, and only to the minimum extent necessary:

• Payment processors and financial partners (bKash, Nagad, Rocket, Visa, Mastercard) — only the data required to complete your transaction.
• Identity verification and KYC service providers — for the purpose of complying with account verification requirements.
• Game content providers (Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, Microgaming) — strictly limited to what is needed for game delivery and fairness audits.
• Law enforcement or regulatory authorities — where disclosure is required by applicable law, court order, or to prevent fraud and protect the rights of other users.

6. Cookies and Tracking Technologies

big8 uses cookies, session tokens, and similar tracking technologies to ensure the platform functions correctly, to keep you logged in during your session, to detect and prevent fraudulent activity, and to understand aggregate usage patterns. Cookies are small text files stored on your device that do not contain your password or financial credentials.

You may adjust your browser settings to decline non-essential cookies at any time. Note that disabling cookies may affect the functionality of certain features on the big8 platform, such as maintaining your login session or remembering your preferred language.

7. Data Retention

big8 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected. Specific retention periods are outlined below:

• Active account data is retained for the lifetime of your account plus a minimum of five (5) years after account closure to satisfy audit and regulatory requirements.
• Financial transaction records are kept for a minimum of seven (7) years in compliance with standard financial record-keeping practices.
• Technical and log data (such as IP access logs) is retained for a maximum of ninety (90) days unless required longer for an active investigation.
• Marketing consent records are retained until you withdraw consent, at which point they are deleted within thirty (30) days.

8. Your Rights as a Data Subject

big8 respects your rights in relation to your personal data. You may exercise any of the following rights by contacting our support team via the email address provided below:

• Right of access: request a copy of all personal data we hold about you.
• Right to rectification: request correction of any inaccurate or incomplete personal data.
• Right to erasure: request deletion of your personal data where there is no legitimate reason for continued processing.
• Right to restrict processing: request that we limit how we process your data while a complaint or investigation is pending.
• Right to object: object to our use of your data for direct marketing, profiling, or processing based on legitimate interests.

9. Data Security Measures

big8 implements a layered security framework to protect your personal data against unauthorised access, accidental loss, disclosure, or destruction. Our security measures include TLS/SSL encryption for all data in transit, AES-256 encryption for sensitive data at rest, multi-factor authentication options for player accounts, regular penetration testing and security audits, and strict role-based access controls limiting who within our team can view personal data.

While we take every reasonable precaution, no online system can guarantee absolute security. In the unlikely event of a data breach that affects your rights or freedoms, big8 will notify affected users as promptly as practicable and take immediate corrective action.

10. Children and Minors

big8 is strictly intended for adults. Our services are exclusively available to individuals who are 21 years of age or older. We do not knowingly collect, process, or retain personal data from any person under the age of 21. If we become aware that a minor has registered an account or provided personal data, we will take the following steps without delay:

• Immediately suspend the account pending investigation.
• Permanently delete all personal data associated with the account.
• Contact the individual or their guardian to confirm the account closure and data deletion.

11. International Data Transfers

big8 operates primarily to serve players in Bangladesh. However, some of our technical infrastructure and third-party service providers (including game content providers and payment processors) may be located outside of Bangladesh. When your data is transferred internationally, we ensure that appropriate safeguards are in place, including standard contractual clauses and data processing agreements, to maintain a level of protection consistent with this Privacy Policy.

• Standard contractual clauses between big8 and its data processors.
• Data processing agreements that require processors to handle your data under equivalent privacy protections.
• Technical security measures (encryption, access controls) applied regardless of the data's physical location.
• Ongoing due diligence to ensure third-party partners maintain adequate data protection standards.

12. Changes to This Privacy Policy

big8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our services, legal requirements, or data handling practices. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered users via email or an in-platform notification.

Your continued use of the big8 platform after any such update constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically, particularly after any significant update, to stay informed about how your data is being protected.

13. Governing Law

This Privacy Policy shall be interpreted and governed in accordance with applicable laws. big8 operates as a safe and reliable platform with SSL encryption and fair play standards. While we serve users across Bangladesh — including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar — we do not make specific claims regarding licensing or regulatory approval from any particular Bangladeshi government body.

Any dispute arising from this Privacy Policy that cannot be resolved informally through our support channels shall be subject to binding arbitration. Nothing in this clause limits your statutory rights as a consumer.