Privacy Policy – 8bet

1. Who We Are

8bet operates the online casino and sports betting platform accessible at 8bet.lat ("the Platform"). For the purposes of this Privacy Policy, 8bet acts as the data controller in respect of personal data collected from Players and visitors to the Platform. References to "we", "us", or "our" throughout this document refer to 8bet.

This Privacy Policy applies to all personal data collected through the Platform, whether you are a registered Player or an unregistered visitor browsing the website. By registering an Account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy.

2. Data We Collect

8bet collects personal data through several channels — directly from you during registration and account management, automatically through your use of the Platform, and from third-party verification and payment services. The categories of personal data we collect are set out below.

8bet does not collect sensitive personal data such as biometric data, racial or ethnic origin, political opinions, religious beliefs, health information, or sexual orientation. CNIC images are collected solely for age and identity verification and are not retained beyond the period required to complete KYC.

3. How We Use Your Personal Data

3.1 Account Management. Identity, contact, and account data are used to create and maintain your 8bet Player Account, authenticate your logins, and communicate account-related information including transaction confirmations, security alerts, and responsible gaming notifications.

3.2 Payment Processing. Financial data is used exclusively to process deposits, execute withdrawals, and comply with anti-money laundering (AML) obligations. Payment details are verified against KYC identity data to ensure withdrawals are returned only to the verified account holder.

3.3 Regulatory Compliance. 8bet processes identity and transaction data as required to meet applicable regulatory obligations, including AML checks, age verification, and fraud prevention. We cooperate with lawful requests from competent authorities.

3.4 Platform Personalisation. Usage and account data are used to personalise your experience on 8bet — for example, displaying recently played games, recommending cricket betting markets relevant to upcoming PSL fixtures, or surfacing bonus offers applicable to your wagering history.

3.5 Security and Fraud Prevention. Technical data including IP address and device fingerprint is used to detect and prevent unauthorised access, account takeover, multi-account fraud, and other prohibited conduct as defined in the Terms & Conditions.

3.6 Responsible Gaming. Account and usage data are monitored to identify indicators of problem gambling, such as rapid escalations in deposit frequency or bet size. Where indicators are detected, 8bet may proactively reach out to the Player or apply responsible gaming tools as described in the Responsible Gaming policy.

3.7 Marketing Communications. With your explicit consent during registration, 8bet may send promotional communications including bonus alerts, event-based offers, and PSL season promotions. You may withdraw this consent at any time through account settings or by contacting support.

4. Legal Bases for Processing

8bet processes your personal data on the following legal grounds:

• Contractual Necessity — Processing required to fulfil the Player Account agreement, including account creation, payment processing, and game service delivery.
• Legal Obligation — Processing required to comply with applicable laws, including AML regulations, age verification requirements, and lawful authority requests.
• Legitimate Interests — Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where these interests are not overridden by your data protection rights.
• Consent — Processing for optional marketing communications, where you have provided explicit opt-in consent during registration or subsequently through account settings. Withdrawal of consent does not affect the lawfulness of prior processing.

5. Cookies & Tracking Technologies

5.1 Types of Cookies. The 8bet Platform uses the following categories of cookies and similar tracking technologies:

• Strictly Necessary Cookies: Required for the Platform to function, including session management, login authentication, and security tokens. These cannot be disabled without impairing Platform functionality.
• Analytics Cookies: Collect anonymised data on how visitors use the Platform — pages visited, session duration, error rates — to enable 8bet to improve performance and user experience.
• Preference Cookies: Remember your settings and choices within the Platform, such as language preferences, last-accessed game category, or responsible gaming reminders you have acknowledged.

5.2 Cookie Control. You may adjust cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the Platform. Analytics and preference cookies may be disabled without affecting core functionality.

5.3 No Third-Party Advertising Cookies. 8bet does not permit third-party advertising networks to set tracking cookies on the Platform. Your browsing behaviour on 8bet is not shared with external advertising platforms.

6. Data Sharing & Third Parties

8bet does not sell, rent, or trade your personal data to any third party. Data sharing is limited to the following categories of recipients, each bound by contractual data protection obligations:

• Payment Processors: JazzCash, Easypaisa, and banking partners receive only the financial data necessary to execute your specific transaction. They are not provided with your full account profile or betting history.
• KYC/Identity Verification Services: CNIC and identity documents may be processed by a third-party identity verification provider operating under strict data handling agreements with 8bet.
• Game Content Providers: Software providers supplying casino games and sports betting content may receive anonymised session identifiers to deliver game content. They do not receive your identity or contact data.
• Regulatory and Law Enforcement Authorities: 8bet will disclose personal data to competent authorities when required by law, court order, or where disclosure is necessary to prevent or investigate fraud, money laundering, or other criminal activity.
• Professional Advisers: Lawyers, auditors, and compliance consultants engaged by 8bet may access personal data under confidentiality obligations where required to provide professional services.

7. Data Retention

8bet retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to applicable legal retention obligations:

• Active Accounts: All account data is retained throughout the duration of the active Player relationship.
• Closed Accounts: Following account closure, identity, financial, and transaction data is retained for a minimum of five (5) years to meet AML and regulatory record-keeping requirements.
• KYC Documents: CNIC images and verification documents are retained for five (5) years post-account closure or last transaction, whichever is later.
• Technical and Usage Data: Server logs and anonymised analytics data are retained for up to twenty-four (24) months.
• Support Communications: Live chat transcripts and email correspondence are retained for three (3) years to facilitate dispute resolution and quality assurance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.

8. Security Measures

8bet implements technical and organisational security measures commensurate with the sensitivity of the personal data processed. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 8bet Platform;
• Password hashing using industry-standard cryptographic algorithms — plain-text passwords are never stored;
• Two-factor authentication (2FA) available to all Players for additional login security;
• Role-based access controls restricting staff access to personal data on a need-to-know basis;
• Regular internal security audits and penetration testing of Platform infrastructure;
• Encrypted storage of financial and identity data at rest;
• Automated fraud detection monitoring account activity for anomalous patterns.

Notwithstanding these measures, no method of internet transmission or electronic storage is completely secure. 8bet cannot guarantee absolute security but commits to promptly notifying affected Players in the event of a data breach that poses a risk to their rights and freedoms.

9. Your Data Rights

Subject to applicable law, you hold the following rights in relation to your personal data held by 8bet:

• Right of Access: You may request a copy of the personal data 8bet holds about you at any time.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. Some corrections (e.g., name changes) require supporting documentation.
• Right to Erasure: You may request deletion of your personal data, subject to 8bet's legal retention obligations. Data retained for AML compliance cannot be deleted during the mandatory retention period.
• Right to Restrict Processing: You may request that 8bet restrict processing of your personal data in certain circumstances, such as where you contest the accuracy of data held.
• Right to Data Portability: You may request a copy of your account and transaction data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including profiling for responsible gaming monitoring. 8bet will cease such processing unless compelling legitimate grounds override your interests.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact 8bet support via live chat or email at [email protected]. Requests will be acknowledged within 48 hours and substantively responded to within thirty (30) calendar days.

10. Children's Privacy

The 8bet Platform is strictly for individuals aged 18 years and over. 8bet does not knowingly collect or process personal data from individuals under the age of 18. Where 8bet becomes aware that personal data has been collected from a minor, such data will be deleted immediately and the associated Account permanently closed. Parents and guardians who believe their child has registered on the Platform are encouraged to contact our support team immediately.

11. Third-Party Links

The 8bet Platform does not contain links to external third-party websites. Where references to payment providers or game suppliers appear in informational content, no outbound hyperlinks are included. This Privacy Policy applies solely to data collected and processed by 8bet through the Platform at 8bet.lat.

12. Updates to This Privacy Policy

8bet reserves the right to update this Privacy Policy at any time to reflect changes in data processing practices, applicable law, or Platform functionality. Material changes will be communicated to registered Players via email or in-platform notification at least seven (7) days before taking effect. The "Last updated" date at the top of this page will be revised accordingly. Continued use of the Platform after the effective date of an updated Policy constitutes acceptance of the revised terms.

13. Contact & Data Enquiries

For all privacy-related enquiries, data subject rights requests, or concerns about how 8bet handles your personal data, please contact our support team through the following channels:

• Live Chat: Available 24/7 directly on the Platform
• Email: [email protected]
• Response Time: Under 2 minutes via live chat | 6–12 hours via email

Data subject rights requests will be acknowledged within 48 hours and fully addressed within 30 calendar days. For complex requests, this period may be extended by a further 30 days with written notice to you.