r8888 Privacy Policy

1 Data Controller

For the purposes of applicable data protection law, the data controller responsible for your personal information is the internationally licensed gaming company that operates the r8888 platform at https://r8888.io. When this Policy refers to "r8888", "we", "us", or "our", it refers to that operating entity and its authorised data-processing personnel.

If you have any questions about who controls your data or wish to exercise any of the rights described in this Policy, you may contact our dedicated data protection point of contact at [email protected] (plain text — not a clickable link). We aim to acknowledge all data-related enquiries within 48 hours and provide a substantive response within 15 business days, measured in Bangladesh Standard Time (BST, UTC+6).

2 Information We Collect

r8888 collects personal data in several ways: information you provide directly, information generated automatically by your use of the platform, and information received from trusted third parties. The categories of data we collect include:

r8888 does not knowingly collect or process special-category sensitive data (such as health information, religious beliefs, or political opinions) unless you voluntarily disclose such information in the course of a responsible gaming enquiry, in which case it is handled with the highest level of confidentiality.

3 How We Use Your Data

r8888 uses the personal data we collect for the following purposes, each of which is tied to a lawful basis described in Section 4:

• Account Creation and Management: To register your account, maintain your player profile, process deposits and withdrawals in BDT, and communicate essential account-related information.
• Identity and Age Verification (KYC): To confirm that you meet the minimum age requirement of 21 years and to verify your identity in compliance with our anti-fraud and responsible gaming obligations.
• Transaction Processing: To process deposits via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank, and to facilitate withdrawals to your verified payment method.
• Fraud and Security Monitoring: To detect and prevent fraudulent activity, money laundering, collusion, and other forms of prohibited conduct on the platform, including by analysing betting patterns and transaction sequences.
• Customer Support: To respond to your queries, resolve complaints, and assist with responsible gaming requests submitted via Live Chat, WhatsApp, or email.
• Personalisation and Responsible Gaming: To monitor your gaming activity for signs of problem gambling behaviour, to issue responsible gaming alerts, and to apply deposit limits or cooling-off periods you have requested.
• Marketing and Promotions (with consent): To send you information about r8888 promotions — including BPL season offers, Eid bonus campaigns, and Pohela Boishakh seasonal events — where you have opted in to receive such communications.
• Platform Improvement: To analyse aggregated usage data to improve website performance, game availability, payment options, and the overall user experience for players across Bangladesh including Dhaka, Chittagong, Sylhet, and Khulna.
• Legal and Regulatory Compliance: To comply with applicable legal obligations, including responding to lawful requests from competent authorities and maintaining records as required by anti-money-laundering rules.

4 Legal Bases for Processing

r8888 processes your personal data only where a valid legal basis applies. The primary legal bases we rely on are:

• Contractual Necessity: Processing required to perform the contract between you and r8888 — for example, operating your account, processing deposits, settling bets, and facilitating withdrawals.
• Legal Obligation: Processing required to comply with applicable law — for example, KYC identity checks, transaction record-keeping for anti-money-laundering compliance, and disclosure to authorities in response to lawful requests.
• Legitimate Interests: Processing carried out for r8888's legitimate business interests — for example, fraud detection, security monitoring, responsible gaming analysis, and platform improvement — where those interests are not overridden by your data protection rights.
• Consent: Processing carried out based on your freely given, specific, and informed consent — for example, sending you marketing emails or SMS notifications about promotions. You may withdraw consent at any time by contacting support or updating your notification preferences in your account settings, without affecting the lawfulness of processing already carried out.

5 Cookies and Tracking Technologies

r8888 uses cookies and similar tracking technologies to operate the platform, personalise your experience, and analyse site performance. The categories of cookies in use are:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication tokens, security cookies, and load-balancing identifiers. They cannot be disabled without disrupting platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method, and responsible gaming limits you have set in your account.
• Analytics Cookies: Collect anonymised data about how players interact with r8888 — including which games are most popular, which pages are visited most frequently, and where users encounter issues — to help us improve the platform.
• Marketing Cookies (with consent): Used only where you have consented, to track whether you have interacted with r8888 promotional content so that we can measure campaign effectiveness and avoid showing you irrelevant offers.

r8888 does not use cookies to track your activity on third-party websites unrelated to the r8888 platform.

6 Sharing Your Personal Data

r8888 does not sell, rent, or trade your personal data. We share your data only in the following limited and controlled circumstances:

• Payment Service Providers: We share financial transaction data with bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank to the extent necessary to process your deposits and withdrawals. These providers operate under their own privacy frameworks and are independently responsible for their data handling.
• KYC and Identity Verification Partners: We may use third-party identity verification services to assist with KYC checks. These providers access only the minimum data required to complete the verification and are contractually bound to handle it confidentially.
• Game Content Providers: Certified game studios such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, and Microgaming may receive session-level technical data (such as player ID and stake amounts) to the extent necessary to deliver their game content via the r8888 platform.
• Technology and Hosting Partners: r8888 uses third-party cloud infrastructure and cybersecurity providers to host and protect the platform. These providers access server-level data under strict data processing agreements.
• Legal and Regulatory Authorities: r8888 may disclose your personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law or in response to a valid legal order. Such disclosures are made only to the extent legally required and are not voluntary.
• Business Transfers: In the event of a merger, acquisition, or sale of the r8888 operating company, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection commitments.

In all cases where r8888 shares personal data with third-party processors, we require those parties to implement appropriate technical and organisational security measures and to use the data solely for the purposes we specify.

7 International Data Transfers

The r8888 platform serves players across Bangladesh and is operated by an internationally licensed gaming company. As a result, your personal data may be processed on servers located outside of Bangladesh. Where data is transferred internationally, r8888 takes steps to ensure that an adequate level of protection is in place, including:

• Transferring data only to jurisdictions that maintain adequate data protection standards.
• Implementing contractual data protection clauses with all third-party processors located outside the primary processing jurisdiction.
• Applying encryption and access controls to data in transit across international networks.

By creating an r8888 account and using the platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Bangladesh for the purposes described in this Policy.

8 Data Retention

r8888 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purpose of satisfying any legal, accounting, or reporting requirements. Our standard retention periods are as follows:

• Active Account Data: Retained for the full duration of your account's active status plus a minimum of five years following account closure.
• Transaction and Financial Records: Retained for a minimum of five years from the date of the transaction, in compliance with applicable anti-money-laundering retention requirements.
• KYC and Identity Documents: Retained for a minimum of five years post-account closure or post-transaction, whichever is later.
• Support and Communications Records: Retained for three years from the date of the last interaction, unless a complaint or dispute is ongoing in which case records are held until final resolution.
• Analytics and Usage Data: Aggregated and anonymised analytics data may be retained indefinitely; individually identifiable usage data is retained for a maximum of 24 months.
• Marketing Consent Records: Retained for the duration of your consent and for three years following withdrawal of consent to demonstrate compliance.

When personal data is no longer required, r8888 securely deletes or anonymises it in accordance with industry best practices. Anonymised data that can no longer be linked to an individual is not subject to this Policy and may be retained for statistical analysis.

9 Your Rights

Subject to applicable law and the verification of your identity, you have the following rights in relation to your personal data held by r8888:

• Right of Access: You may request a copy of the personal data r8888 holds about you, along with information about how it is being processed.
• Right to Rectification: You may request that r8888 correct any inaccurate or incomplete personal data we hold about you without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where there is no other overriding legal basis for retention. This right is subject to r8888's legal obligations to retain certain data as described in Section 8.
• Right to Restriction of Processing: You may request that r8888 restrict the processing of your data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request a machine-readable copy of the personal data you have provided to r8888.
• Right to Object: You may object to processing carried out on the basis of r8888's legitimate interests, including profiling for fraud detection purposes, unless r8888 can demonstrate compelling legitimate grounds for the processing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing already carried out before withdrawal.

10 Security Measures

r8888 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and r8888 servers is encrypted using industry-standard TLS protocols.
• Secure Server Infrastructure: r8888 servers are hosted in access-controlled data centres with 24/7 physical and logical security monitoring.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff who handle player data receive mandatory data protection training.
• Two-Factor Authentication (2FA): r8888 offers 2FA for player accounts and requires it for all administrative access to systems that handle personal data.
• Device Recognition and Anomaly Detection: r8888's platform monitors login attempts and transaction patterns for unusual activity, triggering additional verification steps where suspicious behaviour is detected.
• Regular Security Audits: r8888 engages independent third-party security professionals to conduct periodic vulnerability assessments and penetration tests of the platform.

Despite these measures, no online platform can guarantee absolute security. If you suspect that your r8888 account has been compromised or that your personal data has been accessed without authorisation, please contact us immediately via Live Chat or at [email protected] so that we can take prompt protective action.

11 Third-Party Services and Links

The r8888 platform integrates game content from certified third-party studios — including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe — and processes payments through third-party financial service providers including bKash and Nagad. While r8888 carefully selects these partners and contractually requires them to maintain appropriate data protection standards, each third-party provider operates under its own privacy policy.

r8888 is not responsible for the privacy practices of these third-party services beyond the contractual protections we have put in place. We encourage you to review the privacy policies of any payment service providers or game studios whose services you use in connection with the r8888 platform.

The r8888 website does not contain links to external third-party websites for general browsing purposes. Any integrations present on the platform are purely functional service integrations, not general outbound links.

12 Children and Minors

r8888 enforces a strict minimum age policy. The platform is intended exclusively for adults aged 21 years and above. r8888 does not knowingly collect personal data from individuals under the age of 21.

During registration and throughout the KYC process, r8888 takes reasonable steps to verify that all account holders meet the minimum age requirement. Where r8888 becomes aware that personal data has been collected from an individual who does not meet the age requirement, that account will be immediately suspended, all balances forfeited in accordance with the Terms & Conditions, and the personal data deleted from our systems without undue delay.

If you believe that a minor has registered an account on r8888 or has accessed the platform without authorisation, please report this to us immediately at [email protected] (plain text — not a clickable link) so that we can take immediate corrective action.

13 Marketing Communications

r8888 may send you promotional communications about bonus offers, seasonal campaigns (such as BPL season promotions, Eid specials, and Pohela Boishakh events), and new game launches where you have provided explicit consent to receive such communications at the time of registration or subsequently via your account notification settings.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your notification preferences in the account settings section of your r8888 profile.
• Clicking the unsubscribe link included in any r8888 promotional email.
• Contacting our support team via Live Chat or at [email protected] and requesting removal from our marketing lists.

Withdrawal of marketing consent does not affect r8888's ability to send you essential transactional communications related to your account — such as deposit confirmations, withdrawal notifications, KYC requests, and security alerts. These service communications are sent on the basis of contractual necessity and cannot be opted out of while your account remains active.

14 Updates to This Privacy Policy

r8888 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, legal requirements, or platform functionality. When material changes are made, we will notify registered players by:

• Posting a prominent notice on the r8888 platform homepage.
• Sending a notification to the email address or mobile number associated with your account, where we hold valid contact details.
• Updating the "Last Updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically. Continued use of the r8888 platform following notification of an update constitutes your acknowledgement of the revised Policy. If you do not accept a material update to this Policy, you must discontinue use of the platform and may request account closure by contacting our support team.

15 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or r8888's handling of your personal data, please contact us through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the r8888 platform. Average response time: 2–5 minutes.
• WhatsApp Support: Available 24/7. Contact details provided within the platform after login.

All data protection enquiries are handled by trained personnel. We commit to acknowledging your request within 48 hours and providing a full response within 15 business days, measured in Bangladesh Standard Time (BST, UTC+6).