8xk Privacy Policy — How We Collect, Use, and Protect Your Data

This Privacy Policy ("Policy") describes how 8xk ("the Company", "we", "us", "our") collects, processes, stores, and discloses personal data in connection with your use of the 8xk online casino and sports betting platform, accessible at 8xk.pro ("the Platform"). This Policy applies to all registered account holders, visitors to the Platform, and any individual whose personal data is processed by the Company in the course of operating the Platform.

By registering an account or using the Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

This Policy should be read alongside the 8xk Terms & Conditions, which govern the overall relationship between you and the Company. In the event of any conflict between this Policy and the Terms & Conditions on a privacy-specific matter, this Policy shall take precedence.

We may update this Policy periodically to reflect changes in applicable law, changes in our data processing activities, or improvements to our privacy practices. When material changes are made, we will notify registered account holders by email or through a prominent notice on the Platform. The "Last updated" date at the top of this page will always reflect the most recent revision.

We may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processing Partners: To facilitate deposits and withdrawals, relevant financial data is shared with payment service providers including bKash, Nagad, Rocket, Upay, and banking partners such as Dutch-Bangla Bank and City Bank. These providers process your data solely for the purpose of executing your requested transactions.
• Identity Verification Services: To fulfil our KYC obligations, identity data may be shared with third-party verification service providers who perform document checks and database screening on our behalf.
• Game Technology Providers: Technical session data necessary to deliver gameplay is shared with our licensed game providers, including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, solely for the purpose of operating the relevant games.
• Regulatory and Law Enforcement Authorities: We may be required by law to disclose personal data to government agencies, regulatory bodies, or law enforcement authorities. We will always seek to minimise the scope of such disclosure to what is strictly required.
• Professional Advisers: In the course of managing our legal, financial, and compliance obligations, personal data may be disclosed to lawyers, auditors, and other professional advisers who are bound by duties of confidentiality.

All third parties with whom 8xk shares personal data are required to process that data in accordance with applicable data protection laws and our contractual instructions. We do not permit third parties to use your personal data for their own independent purposes without your explicit consent.

The 8xk Platform uses cookies and similar tracking technologies to provide a functional, personalised, and secure user experience. A cookie is a small text file placed on your device by the Platform when you visit. Cookies are used for the following purposes:

• Essential Cookies: Required for the Platform to function correctly. These include session authentication cookies that keep you logged in during your visit and security cookies that help detect and prevent fraudulent access.
• Functional Cookies: Used to remember your preferences, such as your preferred language settings and responsible gaming configurations.
• Analytics Cookies: Used on an anonymised basis to understand how players navigate the Platform and which features are most frequently used. This data informs ongoing Platform improvements.
• Marketing Cookies: Where you have consented, these cookies may be used to deliver personalised promotional content and to measure the effectiveness of our marketing campaigns.

You can manage or disable cookies through your browser settings. Please note that disabling essential cookies may impair the functionality of the Platform, including your ability to log in and access your account. For detailed guidance on managing cookies in your browser, refer to your browser's help documentation.

8xk retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including the satisfaction of any legal, regulatory, accounting, or reporting obligations. The following general retention principles apply:

• Account data (identity, contact, and financial records) is retained for the duration of your account and for a minimum of five years following account closure, in line with standard AML and record-keeping obligations.
• Transaction records are retained for a minimum of five years from the date of the transaction.
• KYC and identity verification documents are retained for a minimum of five years from the date of verification or account closure, whichever is later.
• Support and communications records are retained for three years from the date of the last interaction, unless a dispute or legal claim requires longer retention.
• Marketing consent records are retained for the duration of your consent and for a reasonable period after withdrawal to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to an identifiable individual. Where anonymisation is used, the resulting data may be retained and used for analytical purposes without restriction.

8xk implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to, SSL/TLS encryption for all data in transit, access controls limiting data access to authorised personnel on a need-to-know basis, regular security assessments of Platform infrastructure, and secure data storage with appropriate backup procedures.

While we take the security of your personal data seriously and invest in maintaining robust safeguards, no system connected to the internet can be guaranteed as entirely immune from security threats. You play an important role in keeping your account secure by maintaining a strong, unique password and by notifying us immediately at [email protected] if you suspect any unauthorised access to your account.

In the event of a data breach that is likely to result in a risk to your rights and freedoms as a data subject, 8xk will take appropriate steps to contain and assess the breach and will notify affected individuals in accordance with applicable legal requirements.

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or have a concern about how 8xk has handled your personal data, please contact us by email at [email protected]. Please include your registered account username and a clear description of your request or concern so that we can respond efficiently.

If you are not satisfied with our response to a privacy complaint, you may have the right to escalate your complaint to the relevant data protection authority in the jurisdiction applicable to you. We encourage you to contact us first so that we have the opportunity to address your concern directly before any formal escalation.

This Privacy Policy is governed by and construed in accordance with the laws applicable to the jurisdiction in which 8xk is incorporated. It constitutes the complete statement of 8xk's privacy practices with respect to the Platform and supersedes all prior privacy notices.