Privacy Policy – How m8bets Handles Your Personal Data

Introduction & Who We Are

This Privacy Policy ("Policy") describes how m8bets ("we", "us", "the Platform") collects, processes, stores, shares, and protects the personal information of users ("you", "the User", "the Player") who access and use the services available at m8bets.onl. This Policy applies to all data collected via the Platform, including through account registration, deposits, wagering activity, customer support interactions, and any other engagement with our services.

m8bets is committed to handling your personal data with care, transparency, and in accordance with applicable data protection principles. We do not sell your personal information to third parties. We do not use your data for unsolicited marketing without your explicit consent. Every data processing activity at m8bets is carried out with a defined, legitimate purpose that we describe openly in this Policy.

By creating an account with m8bets or by continuing to use the Platform after this Policy takes effect, you acknowledge that you have read and understood the data practices described herein. If you have questions about any aspect of this Policy, you may contact our support team at [email protected] (plain text — not a link).

1. Data We Collect

1.1 Registration Data

When you create an m8bets account, we collect the personal information you provide during the registration process. This includes your full name, date of birth, residential address, email address, and mobile phone number. This information is required to establish your account, verify your identity, and comply with our age verification obligations. Without this data, we are unable to open or maintain an account on your behalf.

1.2 Identity Verification (KYC) Data

In order to comply with Know Your Customer (KYC) and anti-money laundering (AML) requirements, m8bets may request documentary evidence to verify your identity and payment method ownership. This may include a copy of a government-issued photo identification document (such as a National Identity Card or passport), proof of address, and evidence of ownership of the payment method used for deposits (for example, a screenshot of your bKash or Nagad account confirming the registered mobile number). KYC documents are stored securely and accessed only by authorised compliance personnel.

1.3 Financial Transaction Data

We record details of all financial transactions carried out through your m8bets account, including deposit amounts, withdrawal requests, payment method identifiers (such as your bKash or Nagad mobile number), transaction timestamps, and transaction reference numbers. This data is retained for the purposes of account management, fraud prevention, dispute resolution, and compliance with financial record-keeping obligations. Full payment card or bank account numbers are never stored by m8bets directly; these are handled exclusively by our certified payment processing partners.

1.4 Gameplay and Betting Activity

m8bets maintains a complete record of your wagering and gameplay activity on the Platform. This includes bet placement records, game session logs, sports betting history (covering cricket, football, kabaddi, and other markets), live casino session data, crash game and slots play history, and responsible gaming tool usage. This data is used for account management, bonus administration, responsible gaming monitoring, fraud detection, and to resolve any disputes that may arise regarding the outcome of a game or settlement of a wager.

1.5 Technical and Device Data

When you access the m8bets Platform, our servers automatically record certain technical information. This includes your IP address, device type and model, operating system and version, browser type and version, referring URLs, pages viewed, session duration, and approximate geographic location derived from your IP address. This data is used for platform security, fraud prevention, service optimisation, and to ensure the Platform functions correctly on your device. We do not use device data to build advertising profiles or to share information with ad networks.

1.6 Communications Data

When you contact m8bets customer support — whether by email or through any in-platform messaging feature — we retain a record of the communication, including its content, timestamps, and any account actions taken in response. This data allows us to maintain continuity of service, review the quality of support interactions, and use communications as evidence in the event of a dispute.

2. How We Use Your Data

2.1 Providing and Operating Our Services

The primary purpose for which m8bets processes your personal data is to provide the services you have requested — namely, operating your account, processing your deposits and withdrawals through bKash, Nagad, Rocket, Upay, and other supported payment providers, delivering access to our games and betting markets, and administering bonuses and promotions you have opted into. Without processing this data, we cannot deliver the Platform's core functions.

2.2 Identity Verification and Fraud Prevention

m8bets is obligated to verify the identity of its players and to take reasonable steps to prevent fraud, money laundering, and other financial crimes. We use your personal and KYC data to confirm that you are who you say you are, that you meet the minimum age requirement of 21 years, that your payment methods are legitimately yours, and that your account activity does not exhibit patterns associated with fraudulent behaviour or financial crime.

2.3 Responsible Gaming Monitoring

We analyse your gambling activity data to identify patterns that may indicate problem gambling behaviour. This is a safeguarding measure. Where our monitoring system or our support team identifies indicators of concern — such as rapidly increasing bet sizes, frequent late-night sessions, or exhaustion of deposit limits — we may proactively reach out to offer support resources or to implement protective measures on your account. This processing is carried out in your interest and in compliance with our responsible gaming obligations.

2.4 Platform Security and Integrity

Technical and device data is used to detect and respond to security threats, including unauthorised account access attempts, credential stuffing, bot activity, and other forms of platform abuse. We may use IP address and device fingerprint data to block access from known threat actors and to flag suspicious login events for manual review by our security team.

2.5 Communications and Customer Support

We use your contact data to communicate with you about matters relating to your account, including transaction confirmations, security alerts, promotional communications where you have opted in, and updates to this Privacy Policy or our Terms & Conditions. We do not use your contact data to send unsolicited third-party marketing. All promotional communications from m8bets include a clear opt-out mechanism.

3. Data Sharing & Third Parties

m8bets does not sell your personal data. We may share your information with carefully selected third-party service providers who assist us in delivering the Platform's services, but only to the extent necessary and only under contractual obligations of confidentiality. The categories of third parties with whom we may share data include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other payment partners receive the minimum data necessary to process your deposit and withdrawal transactions.
• Identity verification providers: Third-party KYC and AML screening services may process your identity documents to assist us in meeting our verification obligations.
• Game studio providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other studio partners may receive session identifiers to facilitate game delivery and dispute resolution.
• IT infrastructure providers: Cloud hosting and server infrastructure partners process technical data as part of delivering and securing the Platform.
• Legal and regulatory authorities: We may be required to disclose personal data to law enforcement agencies, courts, or regulatory bodies where compelled by applicable law.
• Fraud prevention networks: In cases of suspected fraud or financial crime, we may share relevant account data with industry fraud prevention bodies.

4. Cookies & Tracking Technologies

4.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the website to remember your preferences, maintain your session, and gather analytical data about how visitors use the Platform. m8bets uses first-party cookies only — we do not deploy third-party advertising cookies or tracking pixels that share your data with ad networks.

4.2 Types of Cookies We Use

• Essential cookies: Required for the Platform to function. These maintain your login session, remember your language and currency preferences, and enable secure page navigation. They cannot be disabled without breaking core Platform functionality.
• Analytics cookies: Used to understand how players interact with the Platform — which pages are visited most, where sessions end, and how navigation flows. This data is aggregated and anonymised and is used only to improve the Platform.
• Security cookies: Used to detect and prevent fraudulent activity, including CSRF protection tokens and bot-detection signals.
• Preference cookies: Remember your chosen display settings, such as game category filters or notification preferences, so you do not need to reselect them on each visit.

4.3 Managing Cookies

You may manage or delete cookies through your browser's settings at any time. Note that disabling essential cookies will impair your ability to use the Platform, as session management and security functions depend on them. Disabling analytics or preference cookies will not prevent you from using the Platform but may affect your experience.

5. Data Retention

m8bets retains your personal data for as long as your account remains active and for a defined period thereafter, as required by our legal and operational obligations. Specifically:

• Account registration data is retained for the lifetime of the account and for a minimum of 5 years following account closure, to satisfy financial record-keeping and AML obligations.
• KYC documents are retained for a minimum of 5 years from the date of verification, in line with standard financial compliance practice.
• Transaction records are retained for a minimum of 5 years from the date of each transaction.
• Customer support communications are retained for 3 years from the date of the interaction.
• Technical and device logs are retained for 12 months on a rolling basis and then purged.
• Marketing preference records are retained until you withdraw consent or request erasure, whichever comes first.

Where data is no longer required for any active purpose and no legal obligation mandates its continued retention, m8bets will securely delete or anonymise it in a manner that prevents reconstruction.

6. Your Data Rights

As a user of m8bets, you hold the following rights with respect to the personal data we hold about you. To exercise any of these rights, please contact our support team. We will acknowledge your request within 48 hours and aim to fulfil it within 10 business days, subject to any legal constraints.

7. Data Security

m8bets employs a range of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include 256-bit SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, access controls limiting data access to authorised personnel on a need-to-know basis, regular security assessments of our systems and infrastructure, and multi-factor authentication requirements for internal administrative access.

Despite our best efforts, no internet-based system can guarantee absolute security. In the event that m8bets becomes aware of a data breach that is likely to result in a risk to your rights or freedoms, we will notify affected users without undue delay and will take immediate remedial action to contain and mitigate the breach.

8. Policy Updates & Contact

8.1 Changes to This Policy

m8bets reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable law. When material changes are made, we will update the effective date at the top of this page and, where appropriate, notify registered users via the contact details held on their account. Your continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the revised terms. We recommend reviewing this page periodically to stay informed.

8.2 Contact for Privacy Matters

For any questions, concerns, or requests relating to this Privacy Policy or the way m8bets handles your personal data, please contact our support team. All privacy-related enquiries are handled with strict confidentiality. Contact: [email protected] (plain text — not a clickable link). Our team is available 24 hours a day, 7 days a week, and will acknowledge all privacy-related correspondence within 48 hours.