x8k Privacy Policy

Introduction

x8k ("we", "us", "our") operates the online casino and sports betting platform accessible at https://x8k.bio (the "Platform"). We are committed to protecting and respecting the privacy of every person who interacts with the Platform. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by x8k. Please read this Policy carefully before using the Platform.

This Policy applies to all users of the x8k Platform, regardless of how they access it — whether via mobile browser on Android or iOS, or via any other permitted access method. By registering for an x8k account or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should stop using the Platform and contact [email protected] to discuss your options.

Data We Collect

x8k collects personal data from you in two ways: data you provide to us directly, and data we collect automatically when you use the Platform. The categories of personal data we may collect include:

• Identity and contact data — your full name, date of birth, registered mobile number, and email address (where provided). This data is collected at registration and during KYC verification processes.
• Financial data — transaction history including deposit amounts, withdrawal amounts, payment method identifiers (e.g. the last four digits of a card, or the bKash or Nagad number used for a transaction), and account balance information. x8k does not store full card numbers or full mobile banking credentials.
• Gaming activity data — betting history, game session logs, win and loss records, bonus usage records, and responsible gaming tool settings (deposit limits, loss limits, session time limits, self-exclusion status). This data is used to operate the Platform, detect prohibited activity, and fulfil responsible gaming obligations.
• Technical and device data — IP address, device type, operating system, browser type and version, mobile network operator, screen resolution, session timestamps, and pages visited within the Platform. This data is collected automatically via server logs and analytics tools.
• Communications data — records of any communications between you and x8k's customer support team, including live chat transcripts and support ticket content. These records are retained to resolve disputes, improve support quality, and maintain a record of commitments made by x8k to individual players.

x8k collects only the minimum personal data required to operate the Platform safely, legally, and in compliance with responsible gaming standards. We do not collect sensitive personal data (such as racial or ethnic origin, religious beliefs, or health data) unless you voluntarily disclose such information in the context of a responsible gaming support interaction, in which case it will be treated with the highest level of confidentiality.

How We Use Your Data

x8k uses the personal data it collects for the following purposes:

• To create, operate, and maintain your x8k account — including verifying your identity and age during registration, processing your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and maintaining accurate records of your gaming activity and account balance.
• To comply with our legal and regulatory obligations — including anti-money laundering (AML) checks, know-your-customer (KYC) verification, fraud prevention, responsible gaming monitoring, and the maintenance of transaction records as required by applicable law.
• To improve the Platform — including analysing usage patterns, identifying technical issues, testing new features, and optimising the performance of the Platform for mobile users in Bangladesh.
• To communicate with you about your account — including sending transaction confirmations, security alerts, account verification requests, and responses to support queries. x8k will only send promotional communications where you have provided your consent, and you may withdraw consent at any time by contacting support.
• To protect the security and integrity of the Platform — including detecting and preventing fraud, money laundering, bonus abuse, the use of automated software, collusion, and other prohibited activities listed in the x8k Terms and Conditions.

x8k will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or without a valid legal basis for doing so.

Legal Basis for Processing

x8k processes your personal data on one or more of the following legal bases:

• Contractual necessity — processing is required to fulfil our obligations to you under the x8k Terms and Conditions, including operating your account, processing transactions, and providing access to games and betting markets.
• Legal obligation — processing is required for x8k to comply with applicable laws, including KYC verification, AML screening, age verification, and the retention of transaction records.
• Legitimate interests — processing is necessary for the legitimate interests of x8k, including fraud prevention, platform security, improving user experience, and responsible gaming monitoring, provided that those interests are not overridden by your data protection rights.
• Consent — where x8k has obtained your explicit consent to process your data for a specific purpose, such as sending promotional communications. You may withdraw consent at any time by contacting [email protected], and withdrawal of consent will not affect the lawfulness of processing carried out prior to withdrawal.

Sharing Your Data

x8k does not sell, rent, or trade your personal data to third parties for marketing purposes. x8k may share your personal data with third parties only in the following circumstances:

• Payment processors — x8k shares transaction data with bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other payment service providers as strictly necessary to process your deposits and withdrawals. These providers process your data under their own privacy policies and are contractually bound to handle your data securely.
• Game and technology providers — x8k shares session and wagering data with game providers such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, and Microgaming as required to operate live casino games, slots, and crash games. These providers are contractually obligated to process data only for the purpose of delivering their games to x8k players.
• Law enforcement and regulatory bodies — x8k will disclose personal data to law enforcement agencies, regulatory authorities, or courts when required to do so by applicable law, court order, or in connection with the investigation of fraud, money laundering, or other criminal activity.
• Business transfers — in the event that x8k or substantially all of its assets are acquired by a third party, personal data held about Platform users may be transferred as part of the transaction. You will be notified of any such transfer and any change to the privacy arrangements that apply to your data.

All third parties with whom x8k shares personal data are contractually required to maintain the confidentiality and security of that data and to use it only for the purposes for which it was shared. x8k does not authorise any third party to use your personal data for their own independent marketing or commercial purposes.

Cookies and Tracking Technologies

x8k uses cookies and similar tracking technologies (collectively, "Cookies") on the Platform. Cookies are small text files placed on your device when you visit the Platform. x8k uses the following categories of Cookies: (a) Essential Cookies — necessary for the Platform to function correctly, including session management, login state, and security tokens. These Cookies cannot be disabled without preventing the Platform from operating. (b) Analytical Cookies — used to collect aggregated, anonymised data about how users navigate the Platform, which pages receive the most visits, and where users experience errors. This data is used solely to improve the Platform and is not linked to individual identities. (c) Functional Cookies — used to remember your preferences, such as your selected language version of the Platform.

x8k does not use advertising cookies or cross-site tracking cookies that follow you across other websites. You may manage your Cookie preferences by adjusting your browser settings. Please note that disabling Essential Cookies will impair the functionality of the Platform. Analytical and Functional Cookies can be disabled without preventing the Platform from operating, but some features may not work as intended.

Data Retention

x8k retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. In particular: account data (identity, contact, and KYC documents) is retained for the duration of your account and for a minimum of five years after account closure, in order to comply with anti-money laundering record-keeping requirements. Transaction records are retained for a minimum of five years from the date of the transaction. Gaming activity logs are retained for a minimum of two years. Communications data (support ticket records and live chat transcripts) is retained for a minimum of two years from the date of the last interaction.

Where you request deletion of your personal data and x8k is not required by law to retain it, x8k will delete or anonymise your personal data within a reasonable period following receipt of a valid deletion request. Please note that anonymised data — data from which all identifying information has been irreversibly removed — may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data.

Data Security

x8k takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. These measures include SSL encryption for all data in transit between your device and the x8k Platform; secure, access-controlled server infrastructure; hashed and salted storage of account passwords (x8k never stores passwords in plain text); regular security assessments of the Platform's infrastructure; and strict internal access controls that limit access to personal data to only those x8k staff members who require it to perform their job functions.

Despite x8k's best efforts, no method of data transmission over the internet and no method of electronic data storage is completely secure. x8k cannot guarantee the absolute security of your personal data and accepts no liability for any loss or damage arising from a security breach that was not caused by x8k's failure to implement and maintain the security measures described in this Policy. In the event of a data breach that is likely to result in a risk to your rights and freedoms, x8k will notify affected users without undue delay.

Your Privacy Rights

As a user of the x8k Platform, you have the following rights in relation to the personal data x8k holds about you:

• Right of access — you have the right to request a copy of the personal data x8k holds about you. x8k will respond to valid access requests within 30 days of receipt. To make an access request, please contact [email protected] with the subject line "Data Access Request" and your registered mobile number.
• Right to rectification — if any personal data x8k holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. x8k will action valid rectification requests within 14 days.
• Right to erasure — subject to x8k's legal retention obligations, you have the right to request that x8k delete the personal data it holds about you. x8k will action valid erasure requests within 30 days where no legal basis exists to continue retaining the data.
• Right to restriction of processing — in certain circumstances, you have the right to request that x8k restrict the processing of your personal data, for example where you contest the accuracy of the data or where you have objected to processing based on legitimate interests.
• Right to object — you have the right to object to the processing of your personal data where x8k is relying on legitimate interests as the legal basis for processing. You also have an absolute right to object to the use of your personal data for direct marketing purposes at any time.

To exercise any of the rights listed above, please contact x8k's support team at [email protected]. Please include your full name, registered mobile number, and a clear description of your request. x8k may need to verify your identity before actioning your request. x8k will respond to all valid rights requests within 30 days of receipt.

Third-Party Links and Services

The x8k Platform does not contain links to external third-party websites or services for general browsing purposes. Where third-party services are integrated into the Platform (for example, game providers and payment processors), those services operate under their own privacy policies and x8k is not responsible for their data practices. x8k encourages you to review the privacy policies of any third-party services you interact with in connection with your use of the Platform, particularly those of your chosen payment method provider (bKash, Nagad, Rocket, Upay, Visa, or Mastercard).

Children and Minors

The x8k Platform is strictly intended for persons aged 21 and above. x8k does not knowingly collect personal data from persons under the age of 21. If x8k becomes aware that it has inadvertently collected personal data from a person under the age of 21, it will delete that data immediately and close the associated account. If you are a parent or guardian and believe that your child has registered for or used x8k, please contact [email protected] immediately so that the matter can be investigated and resolved without delay.

Changes to This Privacy Policy

x8k reserves the right to update or amend this Privacy Policy at any time. When material changes are made, x8k will update the "Last updated" date at the top of this page and, where practicable, will notify registered account holders via a notice on the Platform or via the mobile number associated with their account. Your continued use of the x8k Platform following the publication of any updated Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Policy periodically to stay informed about how x8k protects your personal data.

Contact and Data Queries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about the way in which x8k has handled your personal data, please contact us. x8k is committed to resolving all privacy-related queries promptly and transparently. All data-related requests will be acknowledged within 2 business days and resolved within 30 business days of receipt.

Support Email: [email protected]