8b99 Privacy Policy — How We Handle Your Personal Data

Information You Provide Directly

When you register an account, complete identity verification, make a deposit or withdrawal, or contact 8b99 support, you provide us with personal information that may include:

• Full name as it appears on your official identity document.
• Date of birth, used to verify that you meet the 21+ age requirement.
• Registered mobile phone number, used as your primary account identifier and for security verifications.
• KYC documentation including national ID, passport, or other government-issued identity document, as required for account verification and withdrawal processing.
• Payment account information, including bKash, Nagad, Rocket, or Upay registered mobile numbers or Visa/Mastercard details, solely for the purpose of processing deposits and withdrawals.

Information Collected Automatically

When you access and use the 8b99 platform, certain technical and behavioural data is automatically collected by our systems. This includes:

• IP address and approximate geolocation data derived from it, used to detect access from restricted jurisdictions and to support fraud prevention.
• Device type, operating system version, browser type, and screen resolution, used to optimise platform rendering and diagnose technical issues.
• Session data including login timestamps, pages visited, games played, bets placed, and session duration, used for account security monitoring and responsible gaming analysis.
• Transaction data including deposit amounts, withdrawal amounts, dates, and payment method references, retained for financial record-keeping and regulatory compliance purposes.

Cookies and Similar Technologies

8b99 uses cookies and similar tracking technologies to maintain session state, remember your preferences, and analyse platform usage patterns. A full explanation of the cookies used by 8b99 is provided in the Cookies section of this policy below.

Account Registration and Authentication

Your name, mobile number, date of birth, and identity documents are used to create and authenticate your 8b99 account, verify that you meet the eligibility requirements (including the 21+ age requirement), and confirm that you are the authorised holder of any payment method used on the account. This processing is necessary to perform the contract between you and 8b99.

Payment Processing and Financial Record-Keeping

Transaction data, payment method details, and account balance information are used to process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard. Financial transaction records are retained as required by applicable anti-money laundering obligations and standard financial record-keeping requirements. This processing is necessary to perform the contract and to comply with legal obligations.

Platform Security and Fraud Prevention

IP address data, device information, session logs, and account activity patterns are analysed by 8b99's security systems to detect and prevent account fraud, bonus abuse, money laundering, multi-accounting, and unauthorised access attempts. Where suspicious activity is detected, this data may be used to suspend or close an account and, where required by law, to share information with relevant authorities. This processing is based on 8b99's legitimate interest in maintaining platform integrity and protecting players from fraud.

Responsible Gaming Compliance

Session data, betting patterns, deposit frequency, and account balance trends are used by 8b99's responsible gaming systems to identify players who may be exhibiting problem gambling behaviour and to proactively apply appropriate protections such as deposit limits, time-outs, or self-exclusion. This processing is based on 8b99's legal and ethical obligation to promote responsible gaming practices for all eligible players.

Platform Communications and Support

Your contact details are used to send you transactional messages related to your account, including deposit confirmations, withdrawal notifications, security alerts, and KYC verification requests. Where you have opted in to receive promotional communications, your contact details and game preferences may also be used to send you relevant bonus offers and platform updates. You may withdraw consent to marketing communications at any time by contacting 8b99 support.

Game and Technology Providers

8b99 shares limited technical data with its certified game providers — Pragmatic Play, Evolution Gaming, Ezugi, Spribe, NetEnt, PG Soft, Microgaming, and others — to the extent required for game session management, bet processing, and outcome delivery. These providers operate under strict data processing agreements and are not permitted to use your data for their own marketing or to share it with further third parties.

Payment Service Providers

When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the relevant payment details are transmitted to the applicable payment processing partner solely for the purpose of completing the financial transaction. Payment data is transmitted over encrypted connections and is not stored in full by 8b99 beyond what is required for transaction records.

Legal and Regulatory Obligations

8b99 may be required by applicable law, court order, or lawful instruction from a competent authority to disclose certain personal data to regulators, law enforcement agencies, or other government bodies. In such cases, 8b99 will comply with the legal requirement and will disclose only the minimum amount of data required to satisfy the lawful demand. Where legally permitted to do so, 8b99 will notify the affected player of any such disclosure.

Types of Cookies Used by 8b99

8b99 uses the following categories of cookies when you access the platform:

• Essential cookies: Required for the platform to function. These cookies maintain your login session, remember your language preference, and ensure security tokens are passed correctly between pages. These cookies cannot be disabled without breaking core platform functionality.
• Analytics cookies: Used to understand how players interact with the platform — which pages are visited most frequently, where users drop off, and how features are used. This data is aggregated and anonymised; it is not used to identify individual players.
• Security cookies: Short-lived cookies used to support fraud detection, detect bot activity, and verify that actions taken during a session originate from a legitimate user rather than an automated script.

Managing Your Cookie Preferences

You can manage or disable non-essential cookies through your device's browser settings. Please note that disabling essential cookies will prevent key platform features from working correctly, including the ability to log in and maintain an active session. 8b99 does not use third-party advertising cookies or share cookie data with advertising networks.

Technical Security Measures

8b99 implements industry-standard technical security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include SSL/TLS encryption for all data transmitted between your device and 8b99's servers; encrypted storage of sensitive data including KYC documents and financial records; access controls that restrict internal access to personal data on a need-to-know basis; and regular security reviews of platform systems and third-party integrations.

Breach Notification

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, 8b99 will take prompt action to contain the breach, assess its scope and severity, notify affected players as soon as reasonably practicable, and implement remediation measures. Players will be informed of any breach that directly affects their personal data and provided with clear guidance on any steps they should take to protect themselves.

Retention Periods

8b99 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Account registration data and KYC documents are retained for the duration of your account and for a period of five years following account closure, in compliance with standard anti-money laundering record-keeping requirements. Financial transaction records are retained for a minimum of five years from the date of the transaction. Communications records, including support conversations, are retained for three years. Session and analytical data is retained in anonymised or aggregated form for up to two years.

Deletion of Data

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Where you submit a valid data deletion request and no overriding legal obligation requires the data to be retained, 8b99 will process the deletion request within 30 days of receipt. Please note that certain data required for legal compliance, fraud prevention, or financial record-keeping cannot be deleted upon request and will be retained for the legally mandated minimum period regardless of a deletion request.

Right to Access

You have the right to request a copy of the personal data that 8b99 holds about you, together with information about how it is being used and with whom it has been shared. 8b99 will provide this information in a clear and accessible format within 30 days of receiving your request.

Right to Correction

If any personal data held by 8b99 about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly through your account settings. For corrections that require identity verification or involve KYC documents, please contact 8b99 support.

Right to Deletion

You may request the deletion of your personal data held by 8b99. As noted in the Data Retention section, certain data cannot be deleted where its retention is required by law or is necessary for fraud prevention, financial record-keeping, or the defence of legal claims. Where deletion is possible, 8b99 will confirm the deletion within 30 days.

Right to Withdraw Consent

Where 8b99 processes your personal data on the basis of your consent — for example, for marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. To withdraw consent to marketing communications, contact 8b99 support or use the opt-out mechanism in any marketing message received.

Changes to This Privacy Policy

8b99 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, the revised policy will be published at 8b99.ws/privacy-policy with an updated effective date. Where changes are significant, 8b99 may also notify registered players via their registered contact details. Your continued use of the 8b99 platform following publication of a revised Privacy Policy constitutes acceptance of those changes. We recommend reviewing this policy periodically to remain informed of how your data is handled.

Contact Us About Your Privacy

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how 8b99 has handled your personal data, please contact the 8b99 support team. We aim to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 30 days.

Written correspondence can be directed to: [email protected]