Privacy Policy — xb8 Online Casino & Sportsbook

1 Data We Collect

xb8 collects personal data from players operating through our platform at xb8.club in order to provide a safe, compliant, and fully functional online casino and sportsbook experience. The categories of personal data we collect are set out below, together with the circumstances in which each category is gathered.

Registration Data

When you create an xb8 account, we collect the following information directly from you:

• Full legal name as it appears on your official identity document
• Date of birth (required for age verification — xb8 is an 18+ platform)
• Email address and mobile phone number registered in Bangladesh
• Username and encrypted account password
• Preferred currency (Bangladeshi Taka — ৳) and language setting

Identity Verification (KYC) Data

To comply with our Know Your Customer obligations and to prevent fraud, underage gambling, and financial crime, xb8 may request the following documentary evidence from players, particularly prior to processing withdrawal requests:

• Government-issued photo identification: National ID card, passport, or driving licence
• Proof of address: utility bill, bank statement, or official correspondence dated within the last 90 days
• Proof of payment method ownership: screenshot or statement confirming that the bKash, Nagad, Rocket, or bank account used for deposits belongs to you

Financial Transaction Data

xb8 records details of all financial transactions carried out through your account, including deposit amounts, withdrawal requests, payment method identifiers (mobile wallet numbers or partial bank account references), transaction timestamps, and the transaction reference numbers assigned by third-party payment processors.

Behavioural and Platform Usage Data

We automatically collect certain technical and behavioural data when you interact with the xb8 platform. This includes:

2 How We Use Your Data

xb8 processes your personal data for specific, legitimate purposes. We do not use your data in ways that are incompatible with those purposes. The primary reasons we process your information are set out below.

Account Management and Service Delivery

We use your registration data to create and maintain your xb8 account, authenticate your identity at login, process deposits and withdrawals in Bangladeshi Taka, deliver game access, and communicate important account-related updates to you via email or SMS. Without this processing, we cannot provide you with our services.

Legal and Regulatory Compliance

xb8 processes identity verification data to meet its obligations under applicable anti-money laundering standards and responsible gaming requirements. This includes verifying that all account holders are aged 18 or above, confirming the legitimacy of payment sources, and maintaining transaction records for the periods required by applicable law. Compliance processing is a legal obligation and cannot be opted out of while your account remains active.

Fraud Prevention and Platform Security

We analyse IP addresses, device fingerprints, session patterns, and betting behaviour to detect and prevent fraudulent activity, account takeovers, collusion between players, bonus abuse, and other threats to the integrity of the xb8 platform. Security processing protects both xb8 and the wider community of honest players using the platform.

Responsible Gaming Monitoring

xb8 uses session data and betting activity records to monitor for patterns that may indicate problem gambling behaviour — for example, unusually long sessions, rapid loss chasing, or significant increases in deposit frequency. Where such patterns are identified, our responsible gaming team may proactively reach out to offer support tools, in line with xb8's commitment to player welfare.

Customer Support

Communication records — including emails sent to [email protected] and chat transcripts — are used to resolve your queries, handle disputes, and improve the quality of our support service. Support records are retained for a period consistent with our data retention policy as described in Section 6.

Platform Improvement and Analytics

Aggregated and anonymised usage data helps xb8 understand how players navigate the platform, which games and features are most popular, and where technical or user experience improvements are most needed. Analytics processing uses data in a form that does not identify individual players wherever possible.

Marketing Communications

With your consent, xb8 may send you promotional communications about new games, seasonal bonus offers (including BPL season promotions, Eid specials, and Pohela Boishakh bonuses), and platform updates via email or SMS. You may withdraw your consent to marketing communications at any time by updating your notification preferences in your account settings or by contacting [email protected].

3 Data Sharing & Disclosure

xb8 does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for their own commercial purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for each specific purpose.

Payment Processing Partners

To process your deposits and withdrawals, xb8 shares the minimum necessary transaction data with our payment processing partners, including mobile financial service providers (bKash, Nagad, Rocket, Upay) and banking institutions (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank). These partners receive only the data required to execute the specific transaction and are contractually prohibited from using your information for any other purpose.

Identity Verification Providers

xb8 may engage specialist third-party identity verification services to assist with KYC document review. Any such provider operates under a strict data processing agreement that limits their use of your information to the verification task and requires data security standards equivalent to those maintained by xb8 itself.

Game Software Providers

The games available on xb8 are powered by reputable third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session identifiers to facilitate fair-play certification, game audit logs, and jackpot validation. They do not receive your full name, contact details, or payment information.

Legal and Regulatory Disclosure

xb8 may disclose your personal data to competent authorities, law enforcement agencies, or regulatory bodies where we are legally required to do so — for example, in connection with an investigation into fraud, money laundering, underage gambling, or other serious matters. We will notify you of any such disclosure to the extent permitted by law.

Business Transfers

In the event that xb8 undergoes a merger, acquisition, or transfer of substantially all of its assets, your personal data may be transferred to the successor entity as part of that transaction. We will notify affected players of any such change and the applicable privacy terms in advance where reasonably practicable.

4 Cookies & Tracking

xb8 uses cookies and similar tracking technologies on the xb8.club website to ensure the platform functions correctly, to remember your preferences, and to gather anonymised analytics data that helps us improve your experience as a player.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your browser on subsequent visits and to store certain information about your preferences or actions. Cookies are not executable programs and cannot access other files on your device.

Types of Cookies We Use

Managing Your Cookie Preferences

You may control or delete cookies through your browser's settings at any time. Most modern browsers allow you to block all cookies, block only third-party cookies, or clear cookies on exit. Please be aware that disabling essential or security cookies may prevent you from accessing certain features of the xb8 platform, including account login and game play. Your browser's help documentation provides specific instructions for managing cookies on your device.

5 Data Security

xb8 takes the security of your personal data seriously and maintains a comprehensive set of technical and organisational safeguards designed to protect your information against unauthorised access, disclosure, alteration, or destruction.

Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your browser and xb8.club is encrypted using industry-standard SSL/TLS protocols. The padlock icon visible in your browser's address bar confirms this encryption is active during your session.
• Password Hashing: Your account password is never stored in plain text. xb8 uses strong cryptographic hashing algorithms to store password credentials securely.
• Access Controls: Access to player personal data within xb8's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data necessary for their specific role and responsibilities.
• Secure Payment Infrastructure: Financial transaction data is processed through encrypted, PCI-DSS-aligned payment gateways. xb8 does not store complete card or mobile wallet credentials on its own servers.
• Intrusion Detection: xb8 operates continuous monitoring systems to detect and respond to potential security incidents, unusual access patterns, and attempted breaches of our infrastructure.

Organisational Safeguards

xb8 conducts regular internal reviews of its data handling practices and security controls. Staff with access to personal data receive training on data protection responsibilities. Third-party vendors who process data on behalf of xb8 are subject to contractual data security requirements before being granted any access to player information.

Security Incidents

In the unlikely event that a data security incident occurs that affects your personal data, xb8 will notify affected players as promptly as reasonably practicable, describing the nature of the incident, the categories of data affected, and the steps being taken in response. We will also report to relevant authorities as required by applicable law.

6 Data Retention

xb8 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or operational obligations. The specific retention periods that apply to different categories of data are described below.

Active Account Data

While your xb8 account remains active, we retain all registration data, KYC documents, transaction records, and platform usage history associated with your account. This data is required to operate your account, process payments, resolve disputes, and comply with ongoing legal obligations.

Post-Closure Retention

Following the closure or permanent self-exclusion of your xb8 account — whether by your request or by xb8's decision — we retain certain categories of data for the minimum periods required by our legal and regulatory obligations:

• Transaction records and financial data: Retained for a minimum of 5 years following the last transaction, consistent with anti-money laundering record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of 5 years following account closure.
• Responsible gaming records: Self-exclusion requests and problem gambling intervention records are retained for up to 7 years to protect the player's interests in the event of any future re-registration attempt.
• Support communications: Customer service records are retained for 3 years following the resolution of the relevant matter.
• Marketing consent records: Records of consent given or withdrawn for marketing communications are retained for 3 years from the date of the last consent action.

Anonymisation

Where xb8 retains data beyond the periods specified above for the purposes of platform analytics, fraud pattern research, or internal reporting, such data is anonymised so that it can no longer be attributed to any identifiable individual. Anonymised data falls outside the scope of this Privacy Policy.

7 Your Privacy Rights

As an xb8 player, you hold a number of rights in relation to the personal data we hold about you. xb8 is committed to honouring these rights promptly and without undue barriers. The rights available to you are described below.

Right of Access

You may request a copy of all personal data that xb8 holds about you at any time. We will provide this information in a clear, readable format within a reasonable period of receiving a verified request. To submit an access request, please contact [email protected] with the subject line "Data Access Request" and include your registered email address and account username for verification purposes.

Right to Rectification

If you believe that any personal data xb8 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Players may update basic contact information directly through their xb8 account settings. For corrections to identity documents or other sensitive data, please contact our support team.

Right to Erasure

You may request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis for processing applies. Please note that this right is subject to legal retention obligations — for example, xb8 is required to retain financial transaction records for the periods described in Section 6 regardless of an erasure request. We will inform you clearly of any such limitations when responding to your request.

Right to Restriction of Processing

In certain circumstances — for example, while xb8 investigates a dispute about the accuracy of your data — you may request that we restrict our processing of your information to storage only. We will notify you before lifting any such restriction.

Right to Data Portability

Where xb8 processes your data on the basis of consent or contract, and that processing is carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format. This right applies to registration data and transaction history associated with your account.

Right to Withdraw Consent

Where xb8 processes your data on the basis of your consent — for example, for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw marketing consent, update your notification settings in your account dashboard or email [email protected].

8 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way xb8 handles your personal data, please contact our support team using the details below. We take all privacy-related enquiries seriously and will respond with diligence and clarity.

How to Contact Us

The primary channel for all privacy-related communications is our support email address. Please include your registered xb8 username and a clear description of your enquiry to help us respond efficiently.

Support email: [email protected]
Subject line recommendation: "Privacy Enquiry" or "Data Rights Request"
Support hours: Available 24 hours a day, 7 days a week, including Eid, Victory Day (16 December), and Independence Day (26 March).

Complaints

If you are not satisfied with xb8's response to a privacy concern, you have the right to escalate your complaint. We encourage players to contact us first so that we have the opportunity to resolve matters directly. xb8 is committed to reaching a fair resolution in all privacy-related disputes.

Policy Updates

xb8 reviews this Privacy Policy periodically to ensure it remains accurate, up to date, and reflective of our current data practices. Where material changes are made — for example, the introduction of a new data processing purpose or a new category of third-party sharing — registered account holders will be notified by email prior to the changes taking effect. The effective date at the top of this document reflects when the current version of the policy came into force.