xk8bet Privacy Policy
Your Data. Our Responsibility.

Information We Collect

xk8bet collects personal information from players in Bangladesh and other eligible regions through several channels: directly when you register an account or contact support, automatically when you interact with the platform, and from verified third-party sources such as payment processors and identity verification services. The categories of personal data we collect are described in full below.

1.1 Registration & Account Data

When you create an xk8bet account, we collect the following information:

• Full legal name (as it appears on your National Identity Card or passport)
• Date of birth (to verify you are aged 18 or older)
• Residential address, including city and district (e.g., Dhaka, Chittagong, Sylhet, Khulna)
• Email address (used for account notifications and support communications)
• Mobile phone number (used for SMS two-factor authentication and payment verification)
• Chosen username and encrypted password (passwords are stored in hashed form and are never readable by staff)
• Preferred currency (Bangladeshi Taka — BDT)

1.2 Identity Verification (KYC) Data

To comply with anti-money laundering (AML) obligations and to protect the integrity of the platform, xk8bet requires players to complete identity verification (KYC) before processing withdrawals or upon reaching certain account activity thresholds. KYC data collected includes:

• Scanned or photographed copies of government-issued photo ID (National Identity Card, passport)
• Proof of address documents (utility bills, bank statements dated within 90 days)
• Selfie or live photo for facial matching purposes (where applicable)
• Mobile financial service account confirmation screenshots (bKash, Nagad, Rocket, or Upay)

1.3 Financial Transaction Data

xk8bet records all financial transactions conducted through the platform. This includes deposit amounts, withdrawal requests, payment method references (mobile wallet numbers, last four digits of bank cards), transaction timestamps, processing status, and associated currency amounts in BDT. Full card numbers and mobile wallet PINs are never stored on xk8bet's own servers.

1.4 Gameplay & Betting Activity Data

Your in-platform activity is recorded to support responsible gaming monitoring, dispute resolution, fraud prevention, and service improvement. Gameplay data includes: game sessions played, wager amounts, win/loss records, bonus activations, sports bets placed (including cricket and BPL markets), session durations, and in-play betting activity.

1.5 Technical & Device Data

When you access xk8bet, our servers automatically record certain technical information. This data is collected for platform security, fraud detection, and performance optimisation purposes:

Data Type	Purpose	Retention
IP address	Geo-restriction, fraud detection, security logging	12 months
Device type & operating system	Platform compatibility, session management	12 months
Browser type & version	Technical support, display optimisation	6 months
Session timestamps	Security audit, responsible gaming monitoring	5 years
Referral / traffic source	Internal marketing analytics (anonymised)	24 months
Clickstream / navigation data	UX improvement, personalisation	6 months

1.6 Communications Data

When you contact xk8bet via live chat, email, or any other support channel, we retain records of those communications. This includes live chat transcripts, email correspondence, and any documents or screenshots you share. This data is used for support quality assurance, dispute resolution, and regulatory compliance.

How We Use Your Data

xk8bet processes your personal data only for defined, legitimate purposes. We do not use personal data for any purpose that is incompatible with the original reason it was collected. The lawful bases for our data processing activities are: contractual necessity (to deliver the service you registered for), legal obligation (AML and identity verification requirements), legitimate interest (fraud prevention, security, and platform improvement), and in limited cases, your consent.

2.1 Account Management

Your registration data is used to create and maintain your xk8bet account, authenticate your login sessions, reset passwords, and communicate essential account notifications such as deposit confirmations, withdrawal status updates, KYC requests, and security alerts. Account communications are sent in English to your registered email address and mobile number.

2.2 Identity Verification & Compliance

KYC data is used exclusively to verify your identity, confirm your age (18+), validate your payment methods, and fulfil our AML and fraud prevention obligations. xk8bet does not use KYC documents for any marketing, profiling, or commercial purpose beyond the compliance activities described in this Policy.

2.3 Payment Processing

Financial data is used to process deposit credits, withdrawal payments, bonus award calculations, and transaction record-keeping. Transaction data is retained for a minimum of five years to satisfy financial record-keeping obligations and to support any dispute or chargeback investigation.

2.4 Responsible Gaming Monitoring

Gameplay and session data is analysed by xk8bet's responsible gaming systems to identify behavioural patterns that may indicate problem gambling — such as rapid deposit cycling, extended uninterrupted session times, or unusual loss escalation. Where such patterns are detected, our support team may reach out proactively to offer responsible gaming tools. This monitoring is conducted in the interests of player welfare and is not used for commercial profiling.

2.5 Fraud Prevention & Security

Technical and device data, alongside transaction and gameplay records, are used by xk8bet's security systems to detect and prevent fraud, money laundering, account takeover attempts, bot usage, duplicate account creation, and bonus abuse. Automated and manual review processes are both employed. Where fraud is confirmed, affected data may be shared with law enforcement or payment dispute authorities.

2.6 Platform Improvement

Aggregated and anonymised usage data helps xk8bet understand how players interact with the platform, which games and sports markets (including BPL cricket, IPL, and T20 events) are most popular, and where technical or UX improvements can be made. Individual players are not identifiable from this aggregated data.

2.7 Marketing Communications

xk8bet may send you promotional communications about new games, seasonal bonuses (such as Eid or Pohela Boishakh special offers), and platform updates if you have opted in to marketing communications during registration or at any subsequent point in your account settings. You may withdraw your marketing consent at any time by updating your preferences in your account dashboard or by notifying support via live chat. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to that withdrawal.

Data Sharing & Disclosure

3.1 Payment Processing Partners

To process deposits and withdrawals, xk8bet shares necessary financial data with our payment processing partners. These include mobile financial service operators (bKash, Nagad, Rocket, Upay) and banking partners (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank) as well as international card networks (Visa, Mastercard). Data shared with payment partners is limited to the transaction reference, amount, and account identifier required to execute the payment — nothing more.

3.2 Identity Verification Services

xk8bet uses third-party identity verification services to perform KYC checks. When you submit identity documents, those documents are transmitted via encrypted channel to our verification partner's secure system, which performs the matching and authenticity check and returns a verification result. Document images are not retained by the verification partner beyond the duration of the verification process.

3.3 Game Technology Providers

Games hosted on xk8bet are supplied by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Habanero, Spribe, and Ezugi. These providers operate their own game servers and receive session data (player ID, stake amounts, game round results) necessary to run the game. They do not receive your name, address, payment details, or KYC documents. All game providers are contractually bound to handle session data in accordance with data protection standards consistent with this Policy.

3.4 Legal & Regulatory Authorities

xk8bet may disclose personal data to law enforcement agencies, financial intelligence units, or regulatory authorities where we are required to do so by applicable law, court order, or where we have a good-faith belief that such disclosure is necessary to prevent fraud, money laundering, or other criminal activity. Where legally permissible, we will notify you of such a disclosure.

3.5 Business Transfers

In the event that xk8bet undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. If such a transfer occurs, we will publish a notice on this Privacy Policy page and, where required, seek your renewed consent before the new entity uses your data in any materially different way.

Cookies & Tracking Technologies

xk8bet uses cookies and similar browser-based tracking technologies to operate the platform efficiently, keep your session secure, remember your preferences, and analyse how the site is used. Cookies are small text files stored on your device by your browser when you visit xk8bet. They do not contain executable code and cannot access any other information on your device.

4.1 Types of Cookies Used

Cookie Type	Purpose	Duration
Essential / Session	Maintain your login session, authenticate requests, prevent CSRF attacks	Session (deleted on browser close)
Functional / Preference	Remember language preference (English), game lobby layout, last visited section	Up to 12 months
Analytics	Measure page views, session duration, navigation paths — anonymised aggregate data only	Up to 24 months
Security	Device fingerprinting for fraud detection, duplicate account identification	Up to 12 months

4.2 Third-Party Cookies

xk8bet does not allow third-party advertising networks or social media platforms to place tracking cookies on the xk8bet domain. Game providers may set their own functional cookies within their embedded game iframes for game-state purposes only. These cookies are strictly scoped to the game provider's subdomain and are not accessible by xk8bet or any advertising third party.

4.3 Managing Cookies

You may manage or disable cookies at any time via your browser settings. Please note that disabling essential cookies will prevent you from logging in to your xk8bet account, as session authentication relies on essential cookies. Disabling functional cookies will mean your preferences are not saved between visits. Analytics and security cookies can typically be disabled without affecting core platform functionality, though doing so may limit our ability to detect and prevent fraudulent activity on your account.

Data Security & Storage

5.1 Technical Security Measures

• SSL/TLS Encryption: All data in transit between your device and xk8bet servers is encrypted using TLS 1.2 or higher.
• Password Hashing: User passwords are stored using a strong one-way cryptographic hashing algorithm. No xk8bet employee can read your password.
• Access Controls: Personal data is accessible internally only to staff members whose roles require it. Access is governed by role-based permissions and is logged.
• Firewalls & Intrusion Detection: xk8bet's infrastructure is protected by enterprise-grade firewalls, DDoS mitigation systems, and continuous intrusion detection monitoring.
• Two-Factor Authentication: Players are encouraged to enable SMS 2FA to protect their accounts from unauthorised login attempts.
• Data Minimisation: xk8bet does not retain personal data beyond the periods specified in this Policy. Data that is no longer required is securely deleted or anonymised.

5.2 Data Storage Location

xk8bet stores player data on secure servers. Data may be processed by payment or verification partners whose infrastructure is located outside Bangladesh. In all cases, xk8bet requires that any third party handling your data maintains security standards consistent with those described in this Policy and in any applicable data protection regulations.

5.3 Data Breach Response

In the event of a confirmed data breach that poses a risk to affected players, xk8bet will notify impacted users by email within 72 hours of confirming the breach. The notification will describe the nature of the data affected, the likely consequences, and the steps xk8bet has taken or proposes to take to address the breach. Affected players will be advised on protective steps they can take, such as changing passwords or contacting their payment provider.

Your Privacy Rights

As a registered xk8bet player, you hold the following rights with respect to your personal data. xk8bet will respond to all verified privacy requests within 15 business days of receipt. To submit a request, contact our support team via 24/7 live chat or by emailing [email protected] (plain text — not a clickable link) with the subject line "Privacy Rights Request".

6.1 Right of Access

You have the right to request a copy of the personal data xk8bet holds about you. Upon verification of your identity, we will provide a structured summary of your data in a readable format within 15 business days. This includes registration data, transaction history, KYC records, and gameplay activity records held on your account.

6.2 Right to Rectification

If any personal data xk8bet holds about you is inaccurate or out of date, you have the right to request that it be corrected. Name, address, and contact detail changes can often be made directly within your account settings. For changes to KYC documents or date of birth, you will be asked to provide supporting documentation.

6.3 Right to Erasure

You may request deletion of your personal data where: the data is no longer necessary for the purpose it was collected; you withdraw consent and there is no other lawful basis for processing; or the data has been processed unlawfully. Please note that xk8bet is required by financial record-keeping obligations to retain certain transaction and identity records for a minimum of five years following account closure. A request for erasure cannot override these statutory retention obligations.

6.4 Right to Restrict Processing

You have the right to request that xk8bet restricts its use of your personal data in certain circumstances — for example, while you contest the accuracy of data we hold, or where you have objected to processing and a decision on that objection is pending. During a restriction period, xk8bet will only store the relevant data and will not actively process it for other purposes.

6.5 Right to Data Portability

Where processing of your data is based on your consent or on a contract between you and xk8bet, and that processing is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format (such as JSON or CSV) and to transmit that data to another service provider.

6.6 Right to Object to Marketing

You have an absolute right to object to the use of your personal data for direct marketing purposes at any time. To opt out of marketing communications from xk8bet, update your preferences in your account settings or notify support via live chat. Opting out of marketing does not affect the delivery of essential transactional communications such as deposit confirmations and security alerts.

Data Retention Policy

xk8bet retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or financial record-keeping obligations. The table below summarises the principal retention periods applied across the main categories of personal data we hold.

Data Category	Retention Period	Basis
Account registration data	Duration of account + 5 years after closure	Legal / AML obligation
KYC identity documents	Duration of account + 5 years after closure	Legal / AML obligation
Financial transaction records	Minimum 5 years after last transaction	Legal / financial record-keeping
Gameplay & betting history	Duration of account + 2 years after closure	Dispute resolution / legitimate interest
Support communications	3 years from date of communication	Dispute resolution / quality assurance
Technical / device logs	6–12 months (see table in Section 1.5)	Security / fraud prevention
Marketing consent records	Duration of consent + 1 year after withdrawal	Legal compliance (consent audit trail)

When the applicable retention period expires, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual player. Anonymised or aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and platform improvement purposes.

Changes to This Policy

xk8bet reserves the right to update or modify this Privacy Policy at any time. When material changes are made, the updated Policy will be published on this page with a revised effective date displayed at the top of the document. For significant changes that affect how we use your personal data, we will send a notification to your registered email address at least seven days before the changes take effect.

Your continued use of the xk8bet platform following publication of an updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with any changes to this Policy, you should discontinue use of the platform and contact support to request account closure and a withdrawal of your remaining balance.

We recommend reviewing this Privacy Policy at least once every three months to remain informed about how xk8bet protects and handles your personal data. The current version of this Policy is always available at https://xk8bet.net/privacy-policy.