d8bsc Privacy Policy
At d8bsc, the privacy and security of your personal data are treated as non-negotiable. This Privacy Policy explains in plain, formal English exactly what information we collect when you use the d8bsc platform, why we collect it, how we store and protect it, and what rights you hold over your own data. We encourage every player to read this document carefully before registering an Account.
SSL Encryption at All Times
Every data transmission between your device and d8bsc servers is protected by industry-standard TLS/SSL encryption. This applies to account login, payment processing, KYC document upload, and all in-session activity — ensuring your personal information is never exposed in transit.
No Data Sold to Third Parties
d8bsc does not sell, rent, or trade your personal data to any commercial third party for marketing purposes. The only data shared with external parties relates to payment processing, identity verification, and game studio operation — all governed by strict contractual data-protection obligations.
Your Right to Access and Erasure
You may request a full copy of the personal data d8bsc holds about you at any time. Subject to legal retention requirements, you may also request correction or deletion of your data. Requests are handled by our data team within a reasonable period following identity verification.
KYC Data Stored Securely
Identity documents submitted for KYC verification — including Bangladesh National ID scans and passport images — are stored in isolated, access-controlled environments. Only authorised compliance staff may review these documents. They are never shared beyond verification purposes without explicit legal justification.
Payment Data Protection
d8bsc does not store full payment credentials such as bKash PINs, Nagad account passwords, or full card numbers. Payment transactions are processed via encrypted gateways operated by our payment partners. d8bsc retains only transaction reference numbers and amounts for accounting and AML compliance.
Policy Updates Notified
When material changes are made to this Privacy Policy, d8bsc will notify registered account holders via in-account notification before the revised policy takes effect. The updated policy will carry a new effective date at the top of this page. Continued use of d8bsc following notification constitutes acceptance of the updated terms.
Data Controller and Contact Information
The entity responsible for the collection and processing of personal data on the d8bsc platform is the operator of d8bsc.org (referred to throughout this document as "d8bsc", "we", "us", or "our"). d8bsc operates the platform primarily for adult players located in Bangladesh.
If you have any questions, concerns, or requests relating to the personal data d8bsc holds about you, you may contact our data team using the details below. All privacy-related communications must be submitted in writing.
Contact Details
Email: [email protected]
Subject line to use: "Privacy Request — [Your Registered Username]"
Response time: Within 5 business days (Bangladesh Standard Time, UTC+6)
Operating hours: 24/7 support available; data requests handled during BST business hours
For general account support, identity verification queries, or payment disputes, please use the 24/7 live chat function available inside your d8bsc Account, or write to the same email address with an appropriate subject line.
To protect your data from unauthorised access, d8bsc requires identity verification before fulfilling any data access, correction, or erasure request. You will be asked to confirm your registered mobile number and may be required to provide a copy of your government-issued identity document before the request is processed.
Policy at a Glance
- Data is collected only for lawful, stated purposes
- SSL encryption on all data transmissions
- No personal data sold to third parties
- KYC documents stored in restricted-access systems
- Payment credentials never stored by d8bsc
- You may request access or deletion at any time
- Material changes notified before taking effect
- Cookies used only for platform function and analytics
Personal Data We Collect
d8bsc collects personal data through several channels: directly from you during registration and account activity, automatically through your use of the platform, and in limited circumstances from trusted third-party verification and payment providers. The categories of personal data we collect are set out below.
| Category | Data Points Collected | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, gender, government ID number (Bangladesh National ID or passport number) | Provided by you during registration and KYC verification |
| Contact Data | Bangladesh mobile phone number, email address (if provided) | Provided by you during registration |
| Financial Data | bKash/Nagad/Rocket/Upay account reference numbers, transaction reference IDs, deposit and withdrawal amounts, account balance history | Generated through your use of the cashier; shared by payment providers |
| KYC Document Data | Scanned images or photographs of government-issued identity documents submitted for age and identity verification | Uploaded by you during the KYC verification process |
| Technical Data | IP address, device type and operating system, browser type and version, screen resolution, session timestamps, geolocation (country/city level) | Collected automatically when you access the platform |
| Usage Data | Pages visited, games played, wagers placed, bet amounts, win/loss records, session duration, login frequency, feature interactions | Collected automatically through platform analytics systems |
| Communications Data | Records of live chat conversations, support ticket content, email correspondence with the d8bsc support team | Generated through your interactions with our support channels |
| Responsible Gaming Data | Self-imposed deposit limits, loss limits, time-out periods, self-exclusion status, problem gambling risk flags generated by internal monitoring | Set by you via Account settings; generated by d8bsc's responsible gaming monitoring system |
Data We Do Not Collect
d8bsc does not collect full payment card numbers, bKash PINs, Nagad PINs, or any other payment authentication credentials. We do not collect biometric data, medical records, or any sensitive personal data beyond what is required for identity verification and responsible gaming compliance. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that an account has been registered by a person under 18, all associated data will be handled in accordance with our age verification and account closure procedures.
Legal Basis for Processing
d8bsc processes your personal data only when there is a valid legal basis for doing so. The legal bases we rely on are as follows:
- Contractual Necessity: Processing is necessary to perform the contract between you and d8bsc — specifically, to create and manage your Account, process deposits and withdrawals, settle wagers, and deliver the gaming and betting services you have requested.
- Legal Obligation: Processing is necessary to comply with applicable legal obligations, including anti-money laundering (AML) requirements, Know Your Customer (KYC) obligations, age verification duties, and record-keeping requirements imposed on platform operators.
- Legitimate Interests: Processing is necessary for purposes of d8bsc's legitimate business interests, provided those interests are not overridden by your data protection rights. This includes fraud detection and prevention, platform security, responsible gaming monitoring, internal analytics, and improving the quality of our services.
- Consent: Where processing is not covered by the above bases — for example, in relation to optional marketing communications — d8bsc will seek your explicit consent before processing. You may withdraw your consent at any time without this affecting the lawfulness of processing carried out prior to withdrawal.
Where d8bsc relies on legitimate interests as a legal basis, we have conducted a balancing assessment to confirm that the processing does not unduly prejudice your privacy rights. Details of these assessments are available upon written request to the data team.
How We Use Your Personal Data
d8bsc uses the personal data it collects for the following specific purposes. We do not use your data for any purpose beyond those listed below without first updating this Privacy Policy and, where required, obtaining your consent.
Account Creation and Management
Your identity and contact data are used to create and maintain your d8bsc Account, authenticate your identity on each login, recover your Account if access is lost, and communicate with you regarding Account status changes, security alerts, and support responses.
Payment Processing and Financial Record-Keeping
Financial data is used to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods; to maintain an accurate record of your transaction history; and to produce the financial reports required under our AML compliance obligations. d8bsc retains transaction records for a minimum of five years in accordance with standard financial compliance requirements.
Identity and Age Verification
KYC document data is used solely to verify that you are who you claim to be and that you meet the 18+ age requirement for real-money gaming. Verified KYC status is recorded against your Account and reviewed again only if your personal details change or if a re-verification request is triggered by compliance monitoring.
Fraud Detection and Platform Security
Technical and usage data — including IP addresses, device identifiers, login patterns, and betting behaviour — are analysed by automated systems and compliance staff to detect and prevent fraud, duplicate account creation, bonus abuse, money laundering, and other prohibited activity. This processing is essential to protecting the integrity of the platform and the interests of legitimate players.
Responsible Gaming Monitoring
Usage data and responsible gaming settings are monitored to identify account behaviour patterns that may indicate problem gambling. Where such patterns are detected, d8bsc may contact you proactively or apply protective account restrictions. This processing is carried out in the genuine interest of player welfare and is not used for any commercial profiling purpose.
Platform Improvement and Analytics
Aggregated and anonymised usage data is used to understand how players interact with d8bsc, identify areas for platform improvement, and optimise the performance and reliability of our services. This data is processed in aggregate form and cannot be used to identify individual players.
Legal Compliance and Regulatory Reporting
Where required by applicable law, regulation, or a valid order from a competent authority, d8bsc may use and disclose personal data to fulfil reporting obligations or to respond to lawful requests from regulatory or law enforcement bodies.
Data Sharing and Third-Party Disclosure
d8bsc does not sell, rent, or otherwise commercially transfer your personal data to any third party. Data is shared externally only in the limited circumstances described below, and only with parties who are contractually bound to protect your data to a standard consistent with this Privacy Policy.
Payment Providers
To process deposits and withdrawals, d8bsc shares the minimum necessary financial data with our payment partners — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card processing networks such as Visa and Mastercard. These providers receive only the transaction reference information and account identifiers required to complete the payment; they do not receive your full gaming history or identity documents.
Identity Verification Partners
In some circumstances, d8bsc uses third-party identity verification services to cross-reference submitted KYC documents against authoritative data sources. These partners operate under strict data processing agreements and are prohibited from using your data for any purpose other than the specific verification task d8bsc has commissioned.
Game Studio Providers
Games on the d8bsc platform are supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game, your wager data and session identifiers are transmitted to the relevant studio's servers to generate game outcomes and record results. Game studios do not receive your full identity data or payment details.
Legal and Regulatory Disclosure
d8bsc may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts when required to do so by applicable law, valid legal process, or a binding order. We will, where legally permissible, notify you of any such disclosure request before complying.
Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of d8bsc's business, personal data held by d8bsc may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and the privacy terms that will govern your data going forward before the transfer takes effect.
Where personal data is transferred to a service provider located outside Bangladesh, d8bsc ensures that appropriate contractual safeguards are in place to protect your data to a standard at least equivalent to the protections described in this Privacy Policy. Details of the safeguards applied to any specific transfer are available upon written request.
Cookies and Tracking Technologies
d8bsc uses cookies and similar tracking technologies on the platform to ensure it functions correctly, to remember your preferences, and to gather anonymised analytics data that helps us improve the service. This section explains what cookies we use and how you can manage them.
What Are Cookies?
Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits, remember your preferences, maintain your logged-in session, and collect usage data. Cookies do not execute code and cannot carry viruses or malware.
Types of Cookies Used by d8bsc
Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, remember your language and currency preferences, and enable the secure operation of the cashier and game lobby. These cookies cannot be disabled without breaking core platform functionality.
Analytics Cookies: d8bsc uses anonymised analytics cookies to understand how players navigate the platform — which pages are visited most frequently, where players spend the most time, and which features are rarely used. This data is processed in aggregate and cannot be linked to individual accounts. Analytics cookies may be disabled without affecting your ability to use d8bsc.
Security Cookies: These cookies support our fraud detection and account security systems by maintaining a record of the devices and IP addresses associated with a given Account session. They are essential for identifying unusual login activity and protecting your Account from unauthorised access.
Managing Cookies
Most modern web browsers allow you to view, manage, and delete cookies through the browser's settings menu. You may also set your browser to refuse cookies entirely; however, doing so will prevent some or all platform features from functioning correctly, including the ability to log in and access real-money games. Specific instructions for managing cookies in your browser are available in the browser's help documentation.
d8bsc does not currently use third-party advertising cookies or behavioural targeting cookies. If this changes in the future, this section will be updated and registered players will be notified before the change takes effect.
Data Retention Periods
d8bsc retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and compliance obligations. The retention periods applied to each category of data are set out below.
| Data Category | Retention Period | Reason for Retention |
|---|---|---|
| Account and Identity Data | Duration of Account plus 5 years after closure | AML compliance, regulatory record-keeping, fraud investigation |
| KYC Document Data | Duration of Account plus 5 years after closure | Age verification compliance, legal obligation |
| Financial Transaction Records | Minimum 5 years from transaction date | AML regulations, financial reporting obligations |
| Responsible Gaming Records | Duration of Account plus 5 years after closure | Self-exclusion enforcement, player welfare obligations |
| Communications Data | 2 years from last interaction | Quality assurance, dispute resolution |
| Technical and Usage Data | 13 months on a rolling basis | Platform analytics, fraud detection, security monitoring |
| Analytics Cookie Data | 13 months on a rolling basis | Aggregated platform improvement analysis |
When the applicable retention period expires, personal data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised aggregate data may be retained indefinitely for statistical analysis purposes, as it can no longer be linked to any individual player.
In some circumstances — for example, where data is subject to an active legal investigation, regulatory inquiry, or unresolved dispute — d8bsc may retain personal data beyond the standard retention periods until the matter is resolved. You will be informed if your data is being retained for this reason, unless informing you would prejudice the investigation.
Your Data Rights and How to Exercise Them
As a d8bsc player, you hold the following rights in respect of the personal data we hold about you. These rights may be exercised at any time by submitting a written request to [email protected] with the subject line "Privacy Request — [Your Registered Username]".
Right of Access
You have the right to request a copy of all personal data d8bsc holds about you, together with information about how it is being processed, the legal basis for processing, how long it will be retained, and with whom it has been shared. We will fulfil verified access requests within a reasonable timeframe.
Right to Rectification
If any personal data d8bsc holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For changes to core identity data such as your legal name or date of birth, documentary evidence of the correct information will be required before the correction is applied.
Right to Erasure
Subject to our legal retention obligations, you have the right to request that d8bsc delete the personal data we hold about you. This right does not apply where retention is required for AML compliance, financial record-keeping, or ongoing legal proceedings. Where erasure is granted, data will be securely deleted and you will be confirmed in writing that the request has been fulfilled.
Right to Restrict Processing
You may request that d8bsc restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where you object to processing based on legitimate interests. During a restriction period, d8bsc will store your data but will not actively process it beyond what is strictly necessary.
Right to Object
Where d8bsc processes your personal data on the basis of legitimate interests, you have the right to object to that processing. d8bsc will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your objection, or the processing is necessary for the establishment, exercise, or defence of legal claims.
Right to Withdraw Consent
Where processing is based on your consent — for example, optional marketing communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.
How to Submit a Request
All data rights requests must be submitted in writing to [email protected]. To protect your data, we will verify your identity before processing any request. We aim to respond to all verified requests within five business days. If a request is complex or voluminous, we may require additional time and will notify you accordingly.
d8bsc does not charge a fee for standard data rights requests. If a request is manifestly unfounded, repetitive, or excessive, we reserve the right to charge a reasonable administrative fee or decline to act on the request, in which case we will explain our reasons in writing within five business days of receiving the request.
Ready to Play on a Platform That Protects You?
d8bsc combines a rich library of casino games and cricket betting markets with genuine commitment to data security and responsible gaming. Explore what Bangladesh's trusted platform has to offer.
18+ For players aged 18 and above only. Please gamble responsibly and within your means.