xk8bet Privacy Policy

1. Introduction and Scope

xk8bet ("the Company", "we", "us", or "our") operates the online betting and casino platform accessible at https://xk8bet.app. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed. Please read this policy carefully to understand our practices regarding your personal data.

This policy applies to all visitors to the xk8bet website, all registered players, and all individuals who interact with us through any channel, including our customer support service. It covers data collected through the platform itself, through account registration, through payment processing, and through any correspondence or communication between you and the Company.

2. Data Controller

xk8bet is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or about how your data is handled, please contact our dedicated privacy team at: [email protected] (plain text — not a clickable link).

3. Personal Data We Collect

3.1 Data You Provide Directly

When you register an account, make a deposit or withdrawal, contact customer support, or participate in any promotion, you may provide us with the following categories of personal data:

• Identity data: full legal name, date of birth, gender, and copies of government-issued identification documents where required for age or identity verification.
• Contact data: email address, mobile phone number, and residential address.
• Financial data: mobile banking account references (bKash, Nagad, Rocket, Upay), card details (Visa, Mastercard), and transaction history.
• Account credentials: username and encrypted password.
• Communications data: records of your interactions with our customer support team, including chat transcripts and email correspondence.

3.2 Data Collected Automatically

When you access and use the xk8bet platform, we automatically collect certain technical data about your device and browsing behaviour, including:

• Device and connection data: IP address, device type, operating system, browser type and version, and unique device identifiers.
• Usage data: pages visited, features used, time and duration of sessions, betting and game activity, and clickstream data.
• Cookie data: session cookies and persistent cookies used to maintain your login state, personalise your experience, and support security monitoring. See Section 9 for full details on our use of cookies.
• Geolocation data: approximate location derived from your IP address, used for fraud prevention and service eligibility checks.

3.3 Data from Third Parties

We may receive personal data about you from third parties including payment service providers (for transaction verification), identity verification service providers (for KYC compliance), and fraud prevention agencies. Data received from these sources is handled in accordance with this Privacy Policy and with any applicable agreements with those providers.

4. How We Use Your Personal Data

xk8bet processes your personal data for the following purposes, each of which rests on a legitimate legal basis:

• Account creation and management: to register and maintain your player account, verify your identity and age, and provide access to our services. Legal basis: performance of a contract.
• Transaction processing: to process deposits and withdrawals through your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and to maintain accurate financial records. Legal basis: performance of a contract.
• Regulatory compliance: to comply with anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, and any other applicable legal or regulatory obligations. Legal basis: legal obligation.
• Responsible gaming: to monitor betting patterns and account activity for signs of problem gambling, and to apply responsible gaming tools where appropriate. Legal basis: legitimate interests and legal obligation.
• Security and fraud prevention: to detect, investigate, and prevent fraudulent transactions, unauthorised account access, and other illegal or prohibited activities. Legal basis: legitimate interests and legal obligation.
• Customer support: to respond to your queries, resolve disputes, and maintain records of communications. Legal basis: performance of a contract and legitimate interests.
• Service improvement: to analyse usage patterns, test new features, and improve the overall performance and user experience of the xk8bet platform. Legal basis: legitimate interests.
• Marketing communications: to send you promotional offers, bonus notifications, and updates about new products or features — but only where you have given your explicit consent to receive such communications. Legal basis: consent.

5. Sharing Your Personal Data

xk8bet does not sell your personal data. We may share your data with the following categories of recipient where necessary and proportionate:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and their acquiring banks, for the purpose of processing financial transactions.
• Identity and age verification providers: third-party KYC service providers used to verify the identity and eligibility of registered players.
• Fraud prevention and AML agencies: organisations that assist us in detecting and preventing financial crime and account fraud.
• Game content providers: Pragmatic Play, Evolution Gaming, Spribe, Ezugi, Microgaming, and other certified studio partners whose games are hosted on the xk8bet platform. These providers may collect limited technical data to operate their games.
• Legal and regulatory authorities: law enforcement agencies, courts, or regulatory bodies where disclosure is required by law or in connection with legal proceedings.
• Corporate successors: in the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

All third parties with whom we share personal data are required to handle that data securely, in confidence, and only for the specific purpose for which it was shared. We do not permit third parties to use your data for their own independent marketing purposes.

6. Data Retention

We retain your personal data for as long as your account remains active and for a further period as required by applicable legal, regulatory, and financial record-keeping obligations. As a general guide:

• Account and identity data is retained for a minimum of five (5) years following account closure, in compliance with AML and KYC regulatory requirements.
• Transaction records are retained for a minimum of five (5) years from the date of the transaction.
• Support communications are retained for a minimum of two (2) years from the date of the interaction.
• Marketing consent records are retained until consent is withdrawn and for a reasonable period thereafter as evidence of consent.

When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with an identified individual.

7. Your Rights

Subject to applicable law, you have the following rights in relation to the personal data we hold about you:

• Right of access: you may request a copy of the personal data we hold about you at any time.
• Right to rectification: you may request that inaccurate or incomplete data be corrected or updated.
• Right to erasure: in certain circumstances you may request that we delete your personal data. Note that this right may be limited where retention is required by law.
• Right to restriction: you may request that we restrict the processing of your data while a complaint or correction request is being resolved.
• Right to data portability: where processing is based on your consent or on contract performance, you may request that we provide your data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: where processing is based solely on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to object: you may object to processing carried out on the basis of our legitimate interests where you believe your rights and freedoms override those interests.

To exercise any of the above rights, please contact our support team at [email protected] (displayed as plain text). We will respond to all valid requests within a reasonable period. We may require you to verify your identity before processing certain requests.

8. International Data Transfers

xk8bet serves players across Bangladesh, including Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh, and Cox's Bazar. Some of our third-party service providers and game content studios are located outside Bangladesh. Where personal data is transferred to a country that may not offer the same level of data protection as Bangladesh, we take steps to ensure that appropriate safeguards are in place — including data processing agreements and contractual obligations equivalent to those required under applicable data protection standards.

9. Cookies and Tracking Technologies

xk8bet uses cookies and similar tracking technologies to operate and improve the platform. The categories of cookies we use are as follows:

• Essential cookies: strictly necessary to enable core platform functionality, including maintaining your logged-in session and processing transactions. These cannot be disabled without affecting the operation of the platform.
• Performance cookies: used to collect anonymised data about how players use the platform — such as which pages are visited most frequently — to help us identify areas for improvement.
• Functional cookies: used to remember your preferences and settings, such as your preferred language or display options.
• Security cookies: used to detect fraudulent activity, protect against unauthorised access, and support our AML monitoring systems.

You may manage your cookie preferences through your browser settings. Please note that disabling essential cookies may prevent you from accessing certain features of the xk8bet platform. We do not use third-party advertising or behavioural tracking cookies.

10. Children and Minors

The xk8bet platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been submitted by a minor, that account will be immediately closed and all associated data deleted. If you believe a minor has registered an account on the platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

11. Security Measures

xk8bet implements a range of technical and organisational security measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include SSL/TLS encryption for all data in transit, encrypted storage of sensitive fields including passwords, role-based access controls limiting internal access to personal data, regular security assessments of our platform infrastructure, and staff training on data protection obligations.

While we take every reasonable precaution to protect your data, no internet transmission or electronic storage system can be guaranteed to be 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected players as required by applicable law.

12. Changes to This Privacy Policy

xk8bet reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify registered players by email or via an in-platform notification. Your continued use of the platform following the publication of any updated policy constitutes your acceptance of the revised terms.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way xk8bet handles your personal data, please contact our privacy and data protection team. Our team is available 24 hours a day, 7 days a week. Contact email: [email protected] (plain text — not a clickable link).