x8k Privacy Policy

Introduction & Scope

This Privacy Policy ("Policy") describes how x8k ("x8k", "we", "us", "our") collects, uses, stores, discloses, and protects personal information relating to individuals ("you", "your", "Player", "User") who visit or use the x8k website at https://x8k.pro and all associated services, games, betting markets, and account features (collectively, the "Platform").

By creating an x8k account, depositing funds, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the x8k Platform.

This Policy applies to all x8k users, including residents of Bangladesh using BDT and players accessing the Platform using INR. Where applicable, references to payment methods include bKash, Nagad, Rocket, Upay, and all supported Bangladesh bank transfer channels.

x8k reserves the right to update this Policy at any time. A revised "Last updated" date will be posted at the top of this page whenever changes are made. Continued use of the Platform following notification of changes constitutes acceptance of the revised Policy.

How x8k Handles Your Data

The following cards summarise x8k's core data protection commitments. Full details are provided in the sections below.

Information We Collect

x8k collects personal information from you in the following ways: directly when you register an account or interact with the Platform, automatically as you use the Platform, and occasionally from third-party sources such as payment providers and identity verification services.

Information you provide directly:

• Registration data: Full name, date of birth, gender, nationality, residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or other), mobile phone number, and email address.
• Identity verification documents: Government-issued photo identification (National ID card, passport, or driver's licence), proof of address, and any additional documents requested during Know Your Customer (KYC) checks.
• Financial information: Payment method details including bKash mobile wallet number, Nagad account number, Rocket account number, Upay ID, and bank account details where bank transfer is selected. Note: x8k does not store full card numbers or payment authentication credentials on its own servers.
• Communications: The content of any messages you send to x8k support via email, live chat, or other channels, including support tickets and feedback submissions.
• Responsible gaming declarations: Self-exclusion requests, deposit limit preferences, cooling-off period requests, and any information you voluntarily provide in connection with responsible gaming tools.

Information collected automatically:

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, game sessions played (including game title, provider, stake, and outcome), time spent on Platform, navigation paths, and feature interactions.
• Transaction logs: Records of all deposits, withdrawals, bonus claims, bet placements, and settlements associated with your account.
• Cookies and similar technologies: Session cookies, persistent cookies, and local storage tokens used to maintain login state, remember preferences, and support analytics. See Section 7 for full cookie details.
• Location data: Approximate country and region inferred from your IP address. x8k does not use GPS or precise device location.

Information received from third parties:

• Payment providers: Transaction status, reference numbers, and fraud signals from bKash, Nagad, Rocket, Upay, and bank partners.
• Identity verification services: Document authenticity checks and age verification outcomes from third-party KYC service providers.
• Game providers: Game outcome data and session logs from Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe necessary for accurate bet settlement and dispute resolution.
• Fraud prevention databases: Signals from third-party fraud screening and anti-money laundering (AML) tools used to protect the Platform and its users.

How We Use Your Data

x8k uses the personal data it collects only for the purposes described below. We will not use your data for any purpose that is incompatible with the reason for which it was originally collected without first obtaining your explicit consent.

• Account creation and management: To register your account, verify your identity and age (21+ requirement), maintain account records, and enable you to log in and use Platform features.
• Service delivery: To process deposits and withdrawals, settle bets and game outcomes, administer bonuses and promotions, and provide customer support.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, match fixing, bonus abuse, and other prohibited conduct. This includes automated risk scoring and, where necessary, manual review of account activity.
• Regulatory compliance: To meet applicable legal and regulatory obligations, including Know Your Customer (KYC), Anti-Money Laundering (AML), and age verification requirements.
• Platform improvement: To analyse usage patterns, identify bugs, test new features, and improve the overall quality of the x8k experience for all users.
• Responsible gaming: To monitor for signs of problem gambling behaviour, apply self-exclusion and deposit limits you have set, and contact you proactively if your gaming activity triggers responsible gaming safeguards.
• Marketing communications: To send you promotional offers, bonus notifications, and news about x8k — but only where you have given explicit consent to receive marketing communications. You may opt out at any time.
• Legal claims: To establish, exercise, or defend legal claims in the event of a dispute between you and x8k.

Data Retention

x8k retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

• Active accounts: Personal data associated with an active x8k account is retained for the duration of the account relationship.
• Closed accounts: Following account closure, x8k retains transaction records, KYC documentation, and account history for a minimum of five years to meet applicable AML and financial record-keeping obligations.
• Support communications: Records of customer support interactions are retained for two years from the date of the final communication in each case.
• Responsible gaming records: Self-exclusion records and responsible gaming declarations are retained for the full duration of any exclusion period plus an additional five years to prevent circumvention.
• Marketing data: If you have opted in to marketing communications, your marketing consent record and preferences are retained until you withdraw consent plus six months thereafter for record-keeping purposes.
• Anonymised analytics data: Usage and session data that has been fully anonymised (and cannot be re-linked to an individual) may be retained indefinitely for aggregate analytical purposes.

When personal data is no longer required for any of the above purposes, x8k will securely delete or irreversibly anonymise it in accordance with our internal data lifecycle management procedures.

Cookies & Tracking Technologies

x8k uses cookies and similar technologies on the Platform. Cookies are small text files placed on your device that allow the Platform to recognise your browser, maintain your session, and remember your preferences across visits. The following table summarises the categories of cookies used by x8k.

Strictly necessary cookies cannot be disabled as they are essential for the Platform to function. You may manage functional and analytics cookies via your browser settings. Note that disabling functional cookies may affect your experience on the Platform, including the loss of saved preferences.

Data Security

x8k takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure.

• Encryption in transit: All data exchanged between your device and x8k servers is encrypted using TLS 1.2 or higher. This applies to login, payment processing, and all other data transmissions.
• Encryption at rest: Sensitive personal data stored in x8k's databases is encrypted at rest using AES-256 or equivalent encryption standards.
• Access controls: Access to personal data within x8k's systems is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data receive data protection training.
• Password security: Account passwords are stored using one-way cryptographic hashing. x8k staff cannot view your password in plain text under any circumstances.
• Penetration testing: x8k's technical infrastructure undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a confirmed personal data breach that is likely to result in a risk to affected users, x8k will notify affected users without undue delay and take all reasonable steps to contain and remediate the breach.

Your Privacy Rights

As an x8k account holder, you have the following rights in relation to your personal data. To exercise any of these rights, please contact x8k at support@x8k.pro with the subject line "Privacy Request". We will acknowledge your request within 5 business days and respond in full within 30 calendar days.

• Right of access: You may request a copy of the personal data x8k holds about you. We will provide this information in a clear, structured format.
• Right to rectification: If any personal data x8k holds about you is inaccurate or incomplete, you may ask us to correct or update it. You may also update many details directly via your account settings panel.
• Right to erasure: You may request that x8k delete your personal data. We will honour this request where no legal or regulatory obligation requires us to retain it. Note that AML and KYC regulations require us to retain certain records for a minimum period even after account closure.
• Right to restrict processing: You may request that x8k restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to data portability: You may request a machine-readable copy of the personal data you have provided to x8k, which you may then transfer to another service provider of your choosing.
• Right to object to marketing: You may object to the processing of your personal data for direct marketing purposes at any time. Withdrawal of marketing consent will be processed immediately and you will receive no further promotional communications from x8k.
• Right to withdraw consent: Where x8k processes your data on the basis of consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Children's Privacy

The x8k Platform is strictly intended for persons aged 21 years and above. x8k does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an account or use the Platform in any way.

If x8k becomes aware that personal data has been collected from a person under the age of 21, that account will be closed immediately, any balance will be handled in accordance with x8k's Terms and Conditions, and all associated personal data will be deleted as promptly as legally permissible.

If you believe that a person under 21 has registered an x8k account, please contact us immediately at support@x8k.pro. We take underage access extremely seriously and will act on all such reports without delay.

Third-Party Services

The x8k Platform integrates with third-party game providers and payment processors whose services are delivered within or alongside the x8k interface. These third parties operate under their own privacy policies and data practices, which are independent of this Policy.

x8k selects third-party partners that demonstrate appropriate data protection standards and contractually requires all data processors to handle personal data solely as instructed by x8k and in accordance with applicable data protection laws. However, x8k accepts no responsibility or liability for the independent data practices of third-party providers.

Game providers whose software is available on x8k include Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe. Payment providers include bKash, Nagad, Rocket, and Upay. We encourage you to review the privacy policies of these providers if you have concerns about how they handle data processed through their systems.

Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have a concern about how x8k has handled your personal data, please contact our support team:

• Email: support@x8k.pro — use the subject line "Privacy Request" or "Privacy Complaint" to ensure your message is routed to the appropriate team.
• Response time: x8k will acknowledge all privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6) and provide a substantive response within 30 calendar days.
• Escalation: If you are not satisfied with x8k's response to a privacy complaint, you may escalate the matter through the formal dispute resolution process described in the x8k Terms & Conditions.