xkx8 Privacy Policy

1. Introduction

xkx8 (the "Platform") is operated as an online casino and sports betting service targeting registered adult players in Bangladesh. We are committed to protecting the privacy of every person who interacts with xkx8 — whether as a registered player, a visitor to our website, or a recipient of our promotional communications. This Privacy Policy sets out the categories of personal data we collect, the purposes for which that data is processed, the parties with whom it may be shared, how long it is retained, and the rights you can exercise in relation to it.

This Privacy Policy applies to all personal data processed by xkx8 in connection with the operation of the xkx8 platform, including through the website at xkx8.vip and any associated mobile interfaces. It should be read alongside our Terms and Conditions, which govern your use of the platform more broadly. xkx8 takes its data protection obligations seriously and implements technical and organisational measures appropriate to the nature and volume of the data it processes.

2. Information We Collect

xkx8 collects personal data in several ways: directly from you when you register, make a deposit or withdrawal, contact our support team, or interact with the platform; automatically through cookies and device data when you use our website; and, in limited cases, from third-party payment providers and identity verification services. The table below summarises the main categories of personal data we collect:

3. How We Use Your Information

xkx8 processes personal data only for specific, legitimate purposes that are necessary for the operation of the platform or required by applicable law. We do not use your personal data for purposes that are incompatible with those stated below. The primary purposes for which xkx8 processes your personal data are:

• Account management: To register and maintain your xkx8 player account, verify your identity in accordance with our KYC obligations, and administer your profile, preferences, and responsible gaming settings.
• Service delivery: To provide access to casino games, sports betting markets, live casino, and all other platform features you use, including processing your deposits, settling bets, and processing withdrawal requests.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, collusion, and other prohibited conduct on the platform, and to protect the security of the platform and all players using it.
• Responsible gaming: To monitor gaming activity patterns and identify signs of problem gambling, apply responsible gaming limits and restrictions at your request, and provide access to support resources where required.
• Communications: To send you transactional messages (deposit confirmations, withdrawal notifications, security alerts) and, where you have opted in, promotional communications about bonuses, new games, and platform updates. You may opt out of marketing communications at any time.
• Legal compliance: To comply with applicable laws, regulations, and the lawful requests of competent authorities, including anti-money laundering obligations, age verification requirements, and responses to valid legal process.

4. Legal Basis for Processing

xkx8 processes your personal data on one or more of the following legal bases, depending on the specific purpose for which your data is being processed:

• Contractual necessity: Processing is necessary to perform our contract with you — i.e. to operate your xkx8 account, process your transactions, and provide access to the games and markets you use.
• Legal obligation: Processing is necessary for compliance with legal obligations to which xkx8 is subject, including anti-money laundering regulations, age verification requirements, and responses to lawful requests from authorities.
• Legitimate interests: Processing is necessary for the legitimate interests of xkx8 or third parties, including fraud prevention, platform security, responsible gaming monitoring, and improving the platform, provided those interests are not overridden by your rights and interests.
• Consent: Where you have given explicit consent for a specific processing activity — for example, opting in to receive marketing communications — we process your data on the basis of that consent. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

5. Sharing Your Information

xkx8 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only where it is necessary to operate the platform, comply with our legal obligations, or protect the rights and safety of our players and the platform. The third parties with whom we may share your data are:

• Payment processors: We share financial data with payment service providers (including bKash, Nagad, Rocket, Upay, and banking partners) to process deposits and withdrawals. These providers operate under their own privacy policies and are contractually bound to handle your data securely.
• Identity verification partners: Where required for KYC compliance, we may share identity data with third-party identity verification service providers for the purpose of verifying your age, identity, and source of funds.
• Game providers: Game software and live dealer studios (such as Pragmatic Play, Evolution Gaming, and Spribe) may receive limited technical and usage data as part of the delivery of their games on the xkx8 platform. No financial or identity data is shared with game providers beyond what is technically necessary.
• Legal and regulatory authorities: We may disclose personal data to law enforcement, regulatory bodies, or other competent authorities where we are legally required to do so, where disclosure is necessary to protect the rights and safety of xkx8 or its players, or where required to investigate fraud or other criminal activity.

6. Payment Data and Financial Security

Financial data processed in connection with xkx8 transactions — including bKash mobile wallet numbers, Nagad account references, bank account details, and transaction history — is treated with the highest level of security. xkx8 does not store full payment credentials on its own servers. Payment authentication and processing is handled by the respective payment service providers, each of which maintains their own security infrastructure and regulatory compliance framework.

All transaction records processed through xkx8 are retained for a minimum period as required by applicable anti-money laundering and financial record-keeping obligations. These records are stored in encrypted form and are accessible only to authorised xkx8 personnel and, where legally required, to competent regulatory or law enforcement authorities.

7. Cookies and Tracking Technologies

xkx8 uses cookies and similar tracking technologies to operate the platform, remember your session and preferences, and analyse how the platform is used so we can improve it. We do not use cookies to serve third-party advertising. The categories of cookies used on xkx8 are:

• Essential cookies: Required for the platform to function. These include session authentication cookies, security tokens, and cookies that maintain your login state and responsible gaming preferences. Essential cookies cannot be disabled without breaking core platform functionality.
• Analytics cookies: Help us understand how players navigate and use the xkx8 platform so we can identify technical issues, improve user experience, and optimise game and market offerings. Analytics data is aggregated and does not identify individual players.
• Preference cookies: Remember your platform settings and preferences — such as language selection, notification preferences, and display settings — so you do not need to reconfigure them each time you visit xkx8.

You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of some parts of the xkx8 platform. Disabling essential cookies may prevent you from logging in or using core platform features.

8. Data Retention

xkx8 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Account data is retained for the duration of your active account and for a period of five years following account closure, unless a longer retention period is required by law — for example, in connection with anti-money laundering record-keeping obligations. Transaction records are retained for a minimum of six years. Server logs and technical data are retained for up to 12 months.

When personal data is no longer required for any of the purposes set out in this Privacy Policy and no legal retention obligation applies, xkx8 will securely delete or anonymise that data so that it can no longer be linked to an individual player. Anonymised and aggregated data may be retained indefinitely for statistical and platform improvement purposes.

9. Your Rights

As a registered xkx8 player and a data subject, you have a number of rights in relation to the personal data xkx8 holds about you. To exercise any of the rights listed below, please contact our support team at [email protected]. xkx8 will respond to all valid data subject requests within 30 days of receipt.

• Right of access: You have the right to request a copy of the personal data xkx8 holds about you, together with information about how it is being processed and the purposes for which it is used.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data xkx8 holds about you. You can update many of your account details directly through your xkx8 account settings; for other changes, contact our support team.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to overriding legal retention obligations — for example, xkx8 is required to retain transaction records for a minimum period regardless of any erasure request.
• Right to restrict processing: In certain circumstances, you have the right to request that xkx8 restrict the processing of your personal data — for example, while the accuracy of data is being verified, or while a legitimate interests objection is being assessed.
• Right to object: Where xkx8 processes your personal data on the basis of legitimate interests, you have the right to object to that processing. xkx8 will assess your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your rights and interests.

To exercise any of the above rights, email [email protected] with the subject line "Data Rights Request" and a brief description of your request. We may ask you to verify your identity before processing the request. All valid requests will be acknowledged within 5 business days and resolved within 30 days.

10. Security Measures

xkx8 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data in transit between your device and the xkx8 platform, encryption of sensitive personal data fields at rest, access controls that restrict access to personal data to authorised personnel only on a need-to-know basis, and regular security assessments of our systems and infrastructure.

While xkx8 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security against all possible threats. You are also responsible for maintaining the security of your xkx8 account by keeping your login credentials confidential and using a strong, unique password. If you believe your account has been compromised, contact [email protected] immediately.

11. Children and Minors

The xkx8 platform is strictly intended for adults aged 21 and above. xkx8 does not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that a minor has registered an account on xkx8, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

12. Changes to This Privacy Policy

xkx8 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or platform features. When we make material changes, we will update the effective date shown at the top of this page and, where appropriate, notify registered players via their registered contact details. Your continued use of the xkx8 platform following publication of a revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically.

13. Contact and Data Queries

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how xkx8 handles your personal data, please contact our support team. We aim to respond to all privacy-related enquiries within 5 business days. For urgent account security matters, our team is available 24/7.