Privacy Policy
Your privacy matters to us. This policy explains exactly what data bad8 collects, why we collect it, and how we keep it safe.
1. Introduction
bad8 ("we", "us", "our") is committed to protecting the privacy and personal data of all users who access or use the bad8 platform at bad8.ws. This Privacy Policy ("Policy") describes how we collect, use, store, share, and protect information about you when you use our services — including sports betting, live casino, slots, crash games, and color prediction games.
By registering an account or continuing to use bad8, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you must not use the bad8 platform. This Policy should be read in conjunction with our Terms and Conditions, which are incorporated by reference.
bad8 does not sell your personal data to third parties for marketing purposes. We collect only the data necessary to deliver our services, maintain security, and comply with our legal obligations. Your data is yours — we are merely its custodian.
2. Information We Collect
We collect personal data through several channels: information you provide directly when registering or using the platform, information generated automatically as you use our services, and information we receive from trusted third parties for identity and payment verification. The categories of data we may collect include:
- Identity data: full name, date of birth, national identification number or passport number, and profile photograph provided as part of KYC verification.
- Contact data: email address, phone number (including your bKash or Nagad registered mobile number), and residential address.
- Financial data: payment method details (masked card numbers, mobile banking account references), transaction history, deposit and withdrawal records, and account balances.
- Technical data: IP address, device type, operating system, browser type and version, time zone, and connection data collected automatically when you access bad8.
- Usage data: pages visited, games played, bets placed, session duration, click paths, and feature interactions within the platform.
Where we need to collect personal data to comply with legal obligations or to perform a contract with you, and you fail to provide that data when requested, we may be unable to perform the contract or service you have requested. In such cases, we will notify you at the point of collection.
3. How We Use Your Information
bad8 uses the personal data we collect only for legitimate, specified purposes. We will not use your data in any manner inconsistent with the purposes described in this Policy. The primary purposes for which we use your data are:
- Account registration and management: to create and maintain your bad8 account, verify your identity through KYC procedures, and authenticate your access to the platform.
- Service delivery: to process deposits and withdrawals via bKash, Nagad, Rocket, and other supported payment methods; to settle bets and game outcomes; and to credit winnings to your account.
- Legal compliance: to fulfil anti-money laundering (AML) obligations, respond to lawful requests from regulatory and law enforcement authorities, and maintain records required by applicable law.
- Security and fraud prevention: to detect, investigate, and prevent fraudulent transactions, unauthorised account access, bonus abuse, and other prohibited conduct described in our Terms and Conditions.
- Responsible gaming: to monitor gaming patterns and enforce responsible gaming tools including deposit limits, session limits, cooling-off periods, and self-exclusion requests.
- Platform improvement: to analyse aggregated, anonymised usage data for the purpose of improving the bad8 platform, fixing bugs, and developing new features. Individual user data is never used for profiling without your explicit consent.
4. Legal Basis for Processing
bad8 processes your personal data only where a valid legal basis exists. Depending on the nature of the processing, we rely on one or more of the following legal bases:
- Contractual necessity: processing required to open and operate your account, process your bets, and facilitate deposits and withdrawals — without which we cannot deliver the services you have contracted for.
- Legal obligation: processing required to comply with AML regulations, identity verification requirements, and other mandatory legal obligations applicable to online gaming platforms operating in or serving users in Bangladesh.
- Legitimate interests: processing for fraud prevention, security monitoring, platform improvement, and responsible gaming enforcement where our legitimate interests are not overridden by your rights and freedoms.
- Consent: processing for optional purposes such as sending you promotional communications or personalised offers. Where we rely on consent, you have the right to withdraw it at any time by contacting [email protected] or updating your account preferences.
5. Sharing Your Information
bad8 does not sell, rent, or trade your personal data to third parties. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:
- Payment processors and mobile banking providers: we share payment reference data with bKash, Nagad, Rocket, Upay, Visa, Mastercard, and our partner banking institutions solely to process your deposit and withdrawal transactions. These providers are bound by their own data protection obligations.
- Game providers: game play data (bet amounts, game outcomes, session identifiers) may be shared with our licensed game providers including Pragmatic Play, Evolution Gaming, Spribe, and Ezugi for the purpose of game auditing, RNG certification, and fair play verification.
- Identity verification services: to meet KYC obligations, we share identity documents and verification data with trusted third-party identity verification partners. These partners are contractually bound to process data only for verification purposes.
- Law enforcement and regulators: we will disclose personal data to government authorities, law enforcement agencies, or regulatory bodies when required to do so by applicable law, court order, or other legal process. We will, where permitted, notify you of any such disclosure.
We require all third parties to respect the security of your personal data and to treat it in accordance with applicable data protection law. We do not allow our third-party service providers to use your personal data for their own independent purposes.
6. Cookies and Tracking Technologies
bad8 uses cookies and similar tracking technologies (including local storage, session tokens, and device fingerprinting) to operate the platform, maintain your logged-in session, remember your preferences, and analyse how users interact with our services. A cookie is a small text file placed on your device by a web server when you visit a site.
We use the following categories of cookies:
- Strictly necessary cookies: essential to the operation of the bad8 platform. These include session authentication tokens and security cookies. The platform cannot function without them and they cannot be disabled.
- Performance and analytics cookies: collect anonymised data about how visitors use bad8, which pages are visited most frequently, and where error messages occur. This data helps us improve the platform experience.
- Preference cookies: remember your settings and choices — such as your preferred language — so you do not need to re-enter them each time you visit.
You can control cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the bad8 platform and may prevent you from accessing some features. Strictly necessary cookies cannot be disabled without compromising your ability to use the platform.
7. Data Retention
bad8 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations. The specific retention periods that apply to your data are determined by the nature of the data and the purpose for which it is held.
Account and transaction data is retained for a minimum of five (5) years after account closure to comply with AML record-keeping requirements. After the applicable retention period has expired and there is no ongoing legal basis to retain the data, bad8 will securely delete or anonymise your personal data so that it can no longer be associated with you.
8. Data Security
bad8 implements technical and organisational security measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or unauthorised access. Our security infrastructure includes SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, access controls limiting data access to authorised personnel only, and regular security assessments.
All payment transactions on bad8 are processed through encrypted channels. We do not store full card numbers or mobile banking PINs on our servers. Payment credentials are tokenised and handled directly by our PCI-compliant payment processing partners.
While we take every reasonable precaution to protect your data, no method of transmission over the internet or method of electronic storage is completely secure. If you become aware of any security vulnerability or suspect your account has been compromised, please contact us immediately at [email protected].
9. Your Rights
Depending on your jurisdiction and applicable law, you may have certain rights in relation to the personal data bad8 holds about you. bad8 respects these rights and will respond to valid requests in a timely manner. Your rights may include:
- Right of access: the right to request a copy of the personal data bad8 holds about you, together with information about how it is used and with whom it is shared.
- Right to rectification: the right to request correction of inaccurate or incomplete personal data we hold about you. You may also update many details directly through your account settings.
- Right to erasure: the right to request deletion of your personal data where there is no longer a legitimate basis for us to hold it. Note that certain data must be retained to comply with legal obligations even after account closure.
- Right to restrict processing: the right to request that we limit how we use your personal data in certain circumstances, for example while a query about its accuracy is being resolved.
- Right to withdraw consent: where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of the above rights, please contact bad8 at [email protected] with the subject line "Data Rights Request". We will verify your identity before processing any request and will respond within a reasonable time. We will not charge a fee for processing a rights request unless it is manifestly unfounded or excessive.
10. Children's Privacy
bad8 is strictly for adults aged 21 and above. We do not knowingly collect personal data from anyone under the age of 21. The registration process requires users to confirm their age, and identity verification is conducted as part of KYC to verify that all account holders meet the minimum age requirement.
If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account. If you believe a person under 21 is using bad8, please notify us at [email protected] so we can take prompt action.
11. Changes to This Privacy Policy
bad8 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes to this Policy, we will notify registered users by posting a prominent notice on the platform or by sending a notification to the email address associated with your account.
The date at the top of this Policy indicates when it was last revised. Your continued use of bad8 following the posting of a revised Policy constitutes your acceptance of the changes. We encourage you to review this Policy periodically to stay informed about how bad8 protects your information.
12. Contact Us
If you have questions, concerns, or requests relating to this Privacy Policy or the way bad8 handles your personal data, please contact our support team. We are committed to resolving privacy-related concerns promptly and transparently.
Email: [email protected] — Please include your registered username and a clear description of your request. We aim to acknowledge all data-related enquiries within 2 business days and to resolve them fully within 30 days.
Our Privacy Commitments
We believe transparency builds trust. Here is a summary of the six core commitments bad8 makes to every player on our platform.
SSL Encryption on Every Page
All data transmitted between your device and bad8 is protected by SSL/TLS encryption. Your login credentials, payment details, and personal information travel securely at all times.
No Data Selling
bad8 never sells your personal data to advertisers, data brokers, or any other third party for commercial gain. Your data is used only to provide you with the services you have requested.
Your Data, Your Control
You can request access to, correction of, or deletion of your personal data at any time. Contact our support team and we will respond within 30 days of your verified request.
Minimal Retention
We keep your data only as long as legally required or operationally necessary. Once that period ends and no legal hold applies, your data is securely deleted or anonymised.
Transparent Cookie Use
We use only necessary, performance, and preference cookies. We do not use third-party advertising or tracking cookies. You can manage your cookie preferences through your browser settings at any time.
Responsive Support
Got a privacy concern? Our support team is available around the clock. Email [email protected] and we will acknowledge your query within 2 business days, with full resolution within 30 days.
Ready to Play Safely?
Your data is protected. Now explore everything bad8 has to offer — from cricket betting to live casino games and slots.