Privacy Policy

1 Introduction and Scope

bn8 ("we", "us", "our") operates the online gaming and sports betting platform accessible at bn8.onl (the "Platform"). This Privacy Policy describes how bn8 collects, uses, stores, shares, and protects personal data relating to individuals who access or use the Platform ("you", "your", "Player").

This policy applies to all personal data processed by bn8, regardless of the medium through which it is collected — including registration forms, deposit and withdrawal transactions, customer support interactions, in-game activity, and any other touchpoint on the Platform. It should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are available on this site.

bn8 takes its obligations regarding personal data seriously. We are committed to handling your information lawfully, fairly, and transparently, and to giving you meaningful control over how your data is used.

2 Data Controller

For the purposes of applicable data protection law, bn8 is the data controller in respect of personal data collected through the Platform. This means that bn8 determines the purposes for which and the means by which your personal data is processed. Where bn8 engages third-party service providers to process data on its behalf, those providers act as data processors and are bound by contractual obligations to handle your data only in accordance with bn8's instructions and applicable law.

If you have any questions or concerns about how your personal data is processed, or if you wish to exercise any of your data rights described in this policy, please contact us at: [email protected]

3 Personal Data We Collect

bn8 collects personal data in the following categories, depending on how you interact with the Platform:

3.1 Registration and Identity Data

• Full legal name as it appears on your national identity document.
• Date of birth (used to verify that you meet the 21+ age requirement).
• Residential address, including district, city, and postal code within Bangladesh.
• Mobile phone number registered to your bKash, Nagad, Rocket, or Upay account.
• Email address (where provided).
• Username and encrypted password credentials.

3.2 Identity Verification Documents

• Copies of government-issued photo ID (National Identity Card, passport, or driving licence).
• Proof of address documents where requested during enhanced due diligence.
• Selfie or liveness verification images where required by our KYC (Know Your Customer) process.

3.3 Financial and Transaction Data

• Deposit and withdrawal amounts, dates, and payment method identifiers.
• Mobile banking account references (bKash, Nagad, Rocket, Upay) — we do not store full mobile banking PINs or passwords.
• Transaction history, including game stakes, winnings, and bonus credits.
• Source-of-funds information where requested for anti-money laundering compliance.

3.4 Technical and Usage Data

• IP address and approximate geographic location derived from IP.
• Device type, operating system, browser type, and version.
• Pages visited, time spent on each page, and navigation paths through the Platform.
• Session start and end times, login frequency, and idle periods.
• Game play history, including games selected, session duration, and bet sizes.

3.5 Communications Data

• Content of messages sent to our customer support team via email or live chat.
• Records of any complaints or disputes and our responses thereto.
• Survey responses or feedback submitted voluntarily by you.

4 How We Use Your Personal Data

bn8 processes your personal data only for specific, legitimate purposes. The table below sets out our primary processing activities and the legal basis on which each rests.

Purpose	Legal Basis
Account registration and management	Contract performance
Age and identity verification (KYC)	Legal obligation
Processing deposits and withdrawals	Contract performance
Anti-money laundering (AML) checks	Legal obligation
Fraud prevention and security monitoring	Legitimate interest
Customer support and dispute resolution	Contract performance
Responsible Gaming monitoring and interventions	Legal obligation / legitimate interest
Platform improvement and bug fixing	Legitimate interest
Promotional communications (where opted in)	Consent
Legal compliance and regulatory reporting	Legal obligation

bn8 does not use your personal data for automated decision-making that produces significant legal effects without human oversight. Where automated tools are used in fraud detection or responsible gaming monitoring, any outcome that materially affects your Account is reviewed by a member of our compliance team before action is taken.

5 Cookies and Tracking Technologies

bn8 uses cookies and similar tracking technologies on the Platform to ensure that the site functions correctly, to remember your preferences, and to understand how Players navigate through the Platform so that we can improve the user experience.

The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to operate. These cannot be disabled without breaking core functionality such as login sessions and payment processing.
• Functional cookies: Remember your preferences such as language settings, preferred payment method, and previously viewed game categories.
• Analytical cookies: Collect anonymised data about how Players use the Platform, helping us identify popular pages, navigation drop-off points, and performance issues. No personally identifiable information is shared in this process.
• Session management cookies: Maintain your authenticated session securely for the duration of your visit and enforce automatic session timeouts for security.

bn8 does not use third-party advertising cookies or cross-site tracking technologies. You may manage cookie preferences through your browser settings, though disabling strictly necessary cookies will impair your ability to use the Platform.

6 Sharing Your Personal Data

bn8 does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. We share personal data only in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, and any other payment service providers used to process your transactions. These providers receive only the data necessary to complete your transaction and are bound by their own regulatory obligations.
• Game providers: Third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session tokens or player identifiers solely for the purpose of game session management and fairness certification. They do not receive your full identity data.
• Identity verification services: Third-party KYC and document verification providers engaged by bn8 to authenticate identity documents. These providers are contractually bound to process data solely for verification purposes and to delete documents after the verification process is complete.
• Fraud prevention partners: Industry-standard fraud detection services that analyse transaction patterns and IP data to detect and prevent fraudulent activity. Data shared is subject to strict contractual protections.
• Legal and regulatory authorities: Where bn8 is required by applicable law, court order, or regulatory authority to disclose personal data, we will comply with that requirement. Where permitted, we will notify you of such a request.
• Professional advisers: Lawyers, accountants, and auditors engaged by bn8 in the course of their professional duties, subject to obligations of confidentiality.

All third parties with whom bn8 shares personal data are required to implement appropriate technical and organisational security measures and to process data only for the specified purpose.

7 Data Retention

bn8 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and in accordance with applicable legal and regulatory requirements. The following general retention periods apply:

• Account data: Retained for the duration of your active Account, plus a minimum of five (5) years following Account closure, in accordance with standard AML record-keeping obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Identity verification documents: Retained for the duration of the Account and for five (5) years post-closure, then securely deleted or anonymised.
• Customer support communications: Retained for three (3) years from the date of the interaction, or longer if the matter relates to an ongoing dispute or legal proceeding.
• Technical and usage logs: Retained for up to twelve (12) months for performance and security monitoring purposes, then deleted.
• Self-exclusion records: Retained indefinitely to prevent circumvention of self-exclusion requests, even after Account closure.

Where data is no longer required for any legitimate purpose and no legal retention obligation applies, bn8 will securely delete or irreversibly anonymise that data.

8 Data Security

bn8 implements a layered security architecture to protect your personal data against unauthorised access, loss, destruction, or alteration. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encryption at rest for all sensitive database fields, including identity documents and payment references.
• Role-based access controls ensuring that only authorised personnel with a genuine business need may access personal data.
• Regular penetration testing and vulnerability scanning by qualified security professionals.
• Multi-factor authentication for all internal administrative systems.
• Automated intrusion detection and real-time alerting for anomalous activity.
• Secure data centre facilities with physical access controls.

While bn8 takes all reasonable precautions to protect your data, no internet-based service can guarantee absolute security. You are responsible for maintaining the security of your own Account credentials and for ensuring that your device is free from malware.

9 Your Rights

As a data subject, you have the following rights in relation to your personal data held by bn8. To exercise any of these rights, please contact us at [email protected] with your Account username and a clear description of your request. bn8 will respond within thirty (30) days.

• Right of access: You may request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations that may override this right.
• Right to restriction of processing: You may request that we restrict our processing of your data in certain circumstances, for example while a dispute regarding accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on contract performance, you may request that your data be provided to you in a structured, machine-readable format.
• Right to object: You may object to processing carried out on the basis of legitimate interest, including direct marketing. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

Please note that the exercise of some rights may affect your ability to use the Platform. For example, requesting deletion of your identity verification data may prevent us from allowing you to withdraw funds until re-verification is completed.

10 Marketing Communications

bn8 may send you promotional communications about bonuses, new games, seasonal offers, and BPL or IPL cricket betting promotions by SMS or push notification to the mobile number associated with your Account, but only where you have given your explicit consent to receive such communications during registration or thereafter.

You may withdraw your consent to receive marketing communications at any time by contacting [email protected] or by updating your communication preferences within your Account settings. Following a valid opt-out request, we will cease sending marketing messages within five (5) business days. Opting out of marketing does not affect the delivery of transactional messages (such as deposit confirmations, withdrawal notifications, and security alerts) which are sent as part of our service obligations.

11 Children and Minors

The bn8 Platform is strictly intended for adults aged 21 and above. bn8 does not knowingly collect personal data from individuals under the age of 21. If we discover or are notified that a registered Account belongs to a person under 21, we will immediately close the Account, delete all associated personal data to the extent not required for legal retention purposes, and report the matter in accordance with applicable legal requirements.

If you believe that a minor may have created an Account on the Platform, please contact us immediately at [email protected]. We take all such reports seriously and will investigate and act promptly.

12 Changes to This Privacy Policy

bn8 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, the revised policy will be published on this page with an updated "Last updated" date. Where the changes are significant, bn8 may notify active Players via their registered contact details as a courtesy.

It is your responsibility to review this Privacy Policy periodically. Your continued use of the Platform following publication of a revised policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should discontinue use of the Platform and request Account closure by contacting [email protected].

13 Contact and Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or bn8's data practices, please contact our Privacy team in the first instance:

• Email: [email protected] (plain text — not a clickable link)
• Response time: We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 days.

If you are not satisfied with our response, you may be entitled to lodge a complaint with the relevant data protection authority in your jurisdiction. bn8 will cooperate fully with any such inquiry.