m8bets Privacy Policy

1 Introduction

m8bets ("we", "us", "our") operates the online casino and sports betting platform accessible at m8bets.biz. As part of providing this service to players in Bangladesh, we necessarily collect and process certain personal data. This Privacy Policy sets out, in plain and formal terms, the categories of personal data we collect, the purposes for which it is processed, the parties with whom it may be shared, the security measures we apply, and the rights available to you as a data subject.

This policy applies to all individuals who visit the m8bets website, register a player account, make a deposit or withdrawal, place a bet, play a casino game, or contact our support team. By using the m8bets platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of it, you should discontinue use of the platform and contact [email protected] to close your account.

This Privacy Policy is to be read alongside the m8bets Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference into the overall framework governing your use of the platform.

2 Data Controller

For the purposes of this Privacy Policy, m8bets acts as the data controller in respect of all personal data collected from players and site visitors through the m8bets.biz platform and associated services. As the data controller, m8bets is responsible for determining the purposes and means of processing personal data.

All data protection enquiries, subject access requests, and complaints should be directed to:

• Contact: [email protected]
• Response Time: m8bets aims to respond to all privacy-related correspondence within 30 days of receipt.

3 Data We Collect

m8bets collects personal data across several categories, depending on the nature of your interaction with the platform. The table below summarises the primary categories of data we collect and the typical source of that data:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, or health data, except where strictly required by anti-money-laundering or responsible gaming obligations and only to the minimum extent necessary.

4 How We Collect Data

m8bets collects personal data through the following primary channels:

• Direct interactions: Data you provide when completing the registration form, submitting KYC documents, making deposits or withdrawal requests, setting responsible gaming limits, or contacting our support team.
• Automated technologies: Data collected automatically as you navigate the m8bets platform, including through server logs, session tracking, and first-party analytics. This includes Technical Data and Usage Data as described in Section 3.
• Payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and other integrated payment services when you make deposits or withdraw funds. This data is limited to what is necessary to verify and reconcile transactions.
• Third-party game providers: Aggregated or anonymised game session data received from providers such as Evolution Gaming, Pragmatic Play, Spribe, Ezugi, NetEnt, and Microgaming for the purpose of resolving disputes and auditing game outcomes. These providers are contractually bound to process data only on m8bets' instructions.
• Publicly available sources: In limited circumstances, m8bets may verify identity information against publicly available records as part of its fraud prevention obligations.

5 How We Use Your Data

m8bets processes personal data only for specified, explicit, and legitimate purposes. The primary purposes for which your data is used are set out below:

• Account administration: To create, maintain, and manage your m8bets player account, including authenticating your identity at login and processing account settings changes.
• Service delivery: To process deposits and withdrawals via bKash, Nagad, Rocket, and other supported methods; to settle bets and casino game rounds; to credit and administer bonus balances and promotions.
• Identity verification (KYC): To verify your identity and age in compliance with our responsible gaming and anti-fraud obligations before processing withdrawals or upon request. We require all players to be aged 18 or above.
• Fraud and crime prevention: To detect, investigate, and prevent fraudulent transactions, money laundering, underage gambling, multi-accounting, and other prohibited conduct as defined in the m8bets Terms & Conditions.
• Responsible gaming: To monitor gameplay patterns for signs of problem gambling; to enforce deposit limits, loss limits, session limits, and self-exclusion elections made by you; and to contact you where responsible gaming concerns arise.
• Customer support: To respond to your support enquiries, resolve disputes, and maintain a record of communications for quality assurance purposes.
• Platform improvement: To analyse aggregate usage patterns, identify technical issues, and improve the overall performance and user experience of the m8bets platform. Analytics used for this purpose are conducted on anonymised or pseudonymised data wherever possible.
• Legal compliance: To comply with applicable laws, regulatory requirements, and lawful requests from competent authorities.
• Marketing communications: Where you have provided explicit consent, to send you promotional offers, bonus notifications, and platform news relevant to Bangladesh players. You may withdraw marketing consent at any time by contacting [email protected].

m8bets does not use personal data for automated individual decision-making that produces significant legal effects, other than automated screening for fraud and responsible gaming alerts, which are always subject to human review before any account action is taken.

6 Legal Basis for Processing

For each processing activity carried out by m8bets, the applicable legal basis is as follows:

• Contractual necessity: Account creation, bet settlement, payment processing, and KYC verification are necessary for the performance of the contract between you and m8bets (i.e., the Terms & Conditions).
• Legitimate interests: Fraud detection, security monitoring, platform analytics, and abuse prevention are carried out on the basis of m8bets' legitimate interest in operating a safe and reliable platform, provided that interest is not overridden by your fundamental rights.
• Legal obligation: Anti-money-laundering checks, age verification, record-keeping for financial transactions, and cooperation with lawful authority requests are carried out to comply with legal obligations applicable to m8bets.
• Consent: Marketing communications and any optional data processing activities (such as personalised game recommendations) are carried out only where you have given freely given, specific, informed, and unambiguous consent. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

7 Data Sharing

m8bets does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Your data may be shared in the following limited circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, and other integrated payment processors receive only the transaction data necessary to complete your deposit or withdrawal. These providers operate under their own privacy policies and data security standards.
• Game content providers: Evolution Gaming, Pragmatic Play, Spribe, Ezugi, NetEnt, Microgaming, and other game studios may receive pseudonymised session data necessary for game integrity verification and dispute resolution. Personal identity data is not shared with game providers.
• Identity verification services: Third-party KYC and fraud screening providers may process your identity documents and verification data solely on m8bets' instructions, under contractual data processing agreements that prohibit independent use of your data.
• Professional advisers: Lawyers, auditors, and compliance consultants engaged by m8bets may access personal data on a need-to-know basis and are bound by confidentiality obligations.
• Law enforcement and regulatory bodies: m8bets will disclose personal data where required to do so by law, court order, or lawful request from a competent authority, or where necessary to protect the rights, property, or safety of m8bets, its players, or the public.
• Business transfers: In the event that m8bets undergoes a merger, acquisition, or sale of assets, player data may be transferred to the successor entity, subject to the same privacy protections as described in this policy. Players will be notified of any such transfer in advance.

8 Cookies & Tracking Technologies

m8bets uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your session, and analyse aggregate usage patterns. The following types of cookies may be set when you use the m8bets platform:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load balancing cookies. They cannot be disabled without breaking core platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings or last visited game category, so you do not need to re-enter them on each visit.
• Analytics cookies: Used to collect anonymised data about how players navigate the platform — which pages are visited most frequently, where users encounter difficulties, and how overall platform performance can be improved. This data is processed in aggregate and is not linked to individual identities.
• Security cookies: Used to detect and prevent fraudulent activity, including bot activity and multi-account attempts.

Most web browsers allow you to control cookie settings through their preferences menu. Disabling strictly necessary cookies may prevent you from logging in or using core platform features. Disabling analytics or functional cookies will not prevent you from accessing the platform but may affect the quality of your experience.

9 Data Retention

m8bets retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and transaction data: Retained for a minimum of 5 years following account closure, in line with standard financial record-keeping obligations. This includes deposit and withdrawal history, bet records, and bonus usage data.
• KYC and identity verification documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Support communications: Retained for 3 years from the date of the last communication in a given thread, to facilitate dispute resolution and quality assurance.
• Marketing consent records: Retained for as long as you remain opted in, plus 1 year after consent is withdrawn, to evidence the lawfulness of any marketing communications sent during the opt-in period.
• Technical and usage logs: Retained for up to 12 months in identifiable form, after which they are anonymised and may be retained indefinitely for aggregate analytics purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with m8bets' internal data lifecycle management procedures.

10 Data Security

m8bets applies a layered approach to data security, combining technical controls, procedural safeguards, and staff training to protect personal data against unauthorised access, loss, alteration, or disclosure. Specific measures include:

• SSL/TLS encryption: All data transmitted between your browser or device and the m8bets platform is encrypted in transit using industry-standard SSL/TLS protocols. You can verify the secure connection via the padlock icon in your browser address bar.
• Encrypted data storage: Sensitive data fields, including identity document scans and payment account references, are encrypted at rest using strong encryption standards.
• Access controls: Access to player personal data within m8bets is restricted on a strict need-to-know basis. Staff members with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Monitoring and alerts: m8bets employs automated monitoring systems to detect unusual access patterns or potential security incidents. Any suspected data breach is subject to an immediate internal incident response process.
• Third-party security standards: All third-party service providers who process personal data on m8bets' behalf are required to maintain equivalent data security standards as a contractual condition of their engagement.

Notwithstanding the above, no internet-based data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your m8bets account or personal data has been compromised, you should contact [email protected] immediately.

11 Your Rights

As a data subject, you have the following rights in relation to your personal data held by m8bets. To exercise any of these rights, please contact [email protected] with your request, including your registered account username and a description of the right you wish to exercise:

• Right of access: You have the right to request a copy of the personal data m8bets holds about you, together with information about how that data is processed. m8bets will provide this information within 30 days of receiving a valid request.
• Right to rectification: If any personal data held by m8bets is inaccurate or incomplete, you have the right to request that it be corrected. Account holders can update basic contact details directly within account settings; other corrections should be requested via support.
• Right to erasure: You may request that m8bets delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where processing is unlawful. This right is subject to overriding legal obligations that may require m8bets to retain certain data — for example, financial records required for anti-money-laundering compliance.
• Right to restriction of processing: In certain circumstances, you may request that m8bets restrict processing of your personal data while a dispute regarding its accuracy or lawfulness is resolved.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive a copy of the data you provided to m8bets in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for fraud prevention purposes. m8bets will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

12 Children's Privacy

The m8bets platform is strictly intended for adults aged 18 and above. m8bets does not knowingly collect personal data from individuals under the age of 18. Age verification checks are applied as part of the registration process and before processing any withdrawal.

If m8bets becomes aware that personal data has been collected from an individual who is under 18, that data will be deleted immediately, the associated account will be closed, and any funds held in the account will be subject to review in accordance with the m8bets Terms & Conditions. If you believe a minor has registered an account on the m8bets platform, please contact [email protected] immediately.

13 Third-Party Links

The m8bets platform may contain references to third-party game providers, payment services, and other external content. Where the platform links to or integrates with third-party services, those services operate under their own independent privacy policies. m8bets accepts no responsibility for the data practices of third-party providers and recommends that you review the privacy policy of any third-party service you interact with.

In particular, payment providers such as bKash, Nagad, and Rocket have their own terms of service and privacy policies governing the data they collect when you use their services to deposit or withdraw funds. The data m8bets receives from those providers is limited to what is necessary to verify and reconcile your transactions.

14 Changes to This Policy

m8bets reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform services. When a material change is made, we will notify registered players via the email address associated with their account and display a prominent notice on the platform for a period of at least 14 days prior to the change taking effect.

The date at the top of this policy indicates when it was last updated. Continued use of the m8bets platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the changes, you should cease use of the platform and request account closure by contacting [email protected]. The current version of this Privacy Policy is always accessible at m8bets.biz/privacy-policy.

15 Contact Us

For any privacy-related enquiries, subject access requests, complaints, or requests to exercise your data rights, please contact the m8bets data protection team using the details below. Please include your registered account username and a clear description of your request to allow us to respond efficiently:

• Email: [email protected]
• Response Time: m8bets will acknowledge all privacy requests within 5 business days and provide a substantive response within 30 days. In complex cases, this period may be extended by a further 30 days, in which case you will be notified of the extension and its reason.
• Hours: The m8bets support team is available 24 hours a day, 7 days a week, including Bangladesh public holidays such as Eid, Pohela Boishakh, Victory Day (16 December), and Independence Day (26 March).