sbc8 Privacy Policy — How We Collect, Use, and Safeguard Your Personal Information

sbc8 is an online betting and casino platform that serves players primarily based in Bangladesh. This Policy applies to all personal data processed in connection with your use of the sbc8 website at sbc8.io, our mobile-compatible platform, and any related services, communications, or interactions you have with sbc8.

This Policy covers:

• Personal data collected during account registration, identity verification, and ongoing platform use.
• Financial data processed in connection with deposits, withdrawals, and bonus transactions conducted in Bangladeshi Taka (৳ BDT).
• Technical and behavioural data collected automatically when you browse or interact with the platform.
• Communication data generated when you contact sbc8 customer support or receive platform notifications from us.

This Policy does not apply to third-party websites, payment platforms, or services that may be linked to or integrated with sbc8 (such as bKash, Nagad, or Rocket). We encourage you to review the privacy policies of those third-party services independently.

sbc8 acts as the data controller for the personal data described in this Policy. We take our responsibilities seriously and are committed to processing your data lawfully, fairly, and transparently at all times.

sbc8 collects the following categories of personal data, depending on how you interact with the platform:

sbc8 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data (except for identity verification purposes), health data, or data concerning sexual orientation.

sbc8 collects personal data through the following channels and methods:

• Direct submission by you: When you register an account, complete your profile, undergo KYC verification, make a deposit or withdrawal, place a bet, claim a bonus, or contact our support team, you provide personal data directly to us.
• Automated technical collection: When you visit sbc8.io, our web servers and analytics tools automatically record technical data such as your IP address, browser type, device identifiers, and session duration. This data is collected using server logs, cookies, and similar tracking technologies.
• Payment processors: When you deposit or withdraw funds via bKash, Nagad, or Rocket, those providers transmit transaction confirmation data — including your mobile money account identifier and transaction reference — to sbc8 to reconcile your account balance.
• Identity verification providers: If sbc8 uses a third-party KYC service to verify your identity documents and age, that provider may share verification results (approved / rejected / flagged) and document metadata with sbc8.
• Game and betting activity: All in-platform actions — including bets placed, games launched, stakes, outcomes, and session timestamps — are logged automatically by sbc8's platform infrastructure.
• Responsible gaming tools: If you activate deposit limits, cooling-off periods, or self-exclusion, we record the settings and dates associated with those choices as part of your account record.

sbc8 processes your personal data on the following legal grounds, depending on the purpose of each processing activity:

• Contractual necessity: Processing required to fulfil the contract between you and sbc8 — for example, creating and managing your account, processing deposits and withdrawals, settling bets, and providing customer support.
• Legal obligation: Processing required to comply with applicable laws and regulations — for example, identity verification (Know Your Customer / Anti-Money Laundering obligations), record-keeping requirements, and fraud prevention reporting.
• Legitimate interests: Processing that serves sbc8's legitimate business interests where those interests are not overridden by your rights — for example, maintaining platform security, detecting and preventing fraud, improving the user experience, and analysing betting patterns for responsible gaming monitoring.
• Consent: Processing based on your freely given, specific, and informed consent — for example, sending you promotional emails and bonus offers. You may withdraw consent for consent-based processing at any time without affecting the lawfulness of processing carried out prior to withdrawal.

sbc8 uses the personal data we collect for the following specific purposes:

• Account management: Creating, maintaining, and securing your sbc8 account; verifying your identity and age (21+ requirement); recovering access to your account when needed.
• Payment processing: Facilitating deposits and withdrawals in ৳ BDT via bKash, Nagad, and Rocket; reconciling transaction records; investigating payment disputes.
• Platform operations: Delivering betting markets, casino games, live dealer tables, and slot products to your device; logging game outcomes and settling your bets accurately.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, multi-accounting, collusion, money laundering, and other prohibited conduct as described in our Terms & Conditions.
• Responsible gaming: Monitoring betting patterns for indicators of problem gambling; enforcing deposit limits, session reminders, and self-exclusion settings; identifying at-risk accounts for proactive outreach.
• Customer support: Responding to your enquiries, resolving disputes, processing complaints, and improving the quality of our support interactions.
• Personalisation: Tailoring promotional offers, game recommendations, and platform communications to your account history and stated preferences — only with your consent where required.
• Analytics and improvement: Analysing aggregated, anonymised usage data to understand platform performance, identify technical issues, and improve the overall user experience for players across Bangladesh.
• Legal compliance: Fulfilling sbc8's obligations under applicable laws, including responding to lawful requests from authorities and maintaining records for the required statutory periods.

sbc8 does not use automated decision-making or profiling that produces legal or similarly significant effects on you without human review. Where automated tools assist in fraud detection or responsible gaming monitoring, a member of our team reviews any outcome that may affect your account.

sbc8 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your personal data only in the following limited circumstances:

• Payment processors: We share the minimum required transaction data with bKash, Nagad, and Rocket to process your deposits and withdrawals. These providers operate under their own privacy policies and are contractually required to protect your data.
• Game and technology providers: Game providers such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, and Microgaming may receive session identifiers and stake data necessary to operate their games within the sbc8 platform. They do not receive your full identity or financial profile.
• Identity verification services: If a third-party KYC provider is used, we share your submitted identity documents and personal details with that provider solely for the purpose of age and identity verification. Results are returned to sbc8 and the documents are not retained by the provider beyond their stated processing period.
• IT and security service providers: Hosting providers, cybersecurity firms, and fraud prevention services that support the technical operation of sbc8 may process limited technical and account data under strict data-processing agreements.
• Legal and regulatory authorities: sbc8 may disclose personal data to law enforcement agencies, regulatory bodies, or other authorities when required to do so by law, court order, or where disclosure is necessary to protect the rights, property, or safety of sbc8, its users, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of sbc8's assets, personal data may be transferred to the acquiring entity as part of that transaction. Users will be notified of any such change via their registered email address before data is transferred to a new controller.

All third parties with whom sbc8 shares personal data are required to implement appropriate technical and organisational security measures and are prohibited from using your data for any purpose other than the specific service they provide to sbc8.

sbc8 uses cookies and similar tracking technologies to operate the platform, maintain your session, and understand how users interact with the site. The following types of cookies are in use:

• Essential / strictly necessary cookies: Required for the platform to function. These cookies maintain your login session, remember your account state, and enable core features such as placing bets and accessing your wallet. These cookies cannot be disabled without impairing platform functionality.
• Analytics cookies: Used to collect aggregated, anonymised data about how users navigate the platform — which pages are visited most frequently, where users encounter errors, and how long sessions last. This data is used to improve the sbc8 user experience. No personally identifiable information is included in analytics reports.
• Functionality cookies: Store your stated preferences — such as your preferred game category, notification settings, and responsible gaming tool configurations — so that the platform behaves consistently across sessions.
• Fraud prevention cookies: Short-lived session identifiers used by our security systems to detect unusual access patterns, multiple account attempts, and other indicators of fraudulent activity.

sbc8 does not use advertising cookies, retargeting pixels, or cross-site tracking cookies. We do not participate in third-party advertising networks that track your browsing behaviour across other websites.

You may adjust your cookie preferences through your browser settings. Please note that disabling essential cookies will prevent you from logging in to and using the sbc8 platform. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

sbc8 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. The following general retention periods apply:

• Active account data: Retained for the full duration of your active sbc8 account, plus a minimum of 5 years following account closure to meet financial record-keeping and anti-money laundering obligations.
• Identity verification documents: Retained for a minimum of 5 years from the date of verification, in accordance with applicable Know Your Customer (KYC) regulations.
• Financial transaction records: All deposit, withdrawal, and betting transaction records are retained for a minimum of 5 years from the date of each transaction.
• Customer support communications: Support chat transcripts and email correspondence are retained for 2 years from the date of the interaction, unless a longer period is required to resolve an ongoing dispute.
• Marketing consent records: Records of your consent to or opt-out from marketing communications are retained for as long as your account is active and for 2 years thereafter, to demonstrate compliance.
• Technical / log data: Server logs and session data are retained for up to 12 months, after which they are anonymised or deleted.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with your identity. Where anonymisation is used, the resulting aggregated data may be retained indefinitely for statistical analysis purposes.

sbc8 takes the security of your personal data seriously and implements industry-standard technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• 256-bit SSL/TLS encryption: All data transmitted between your browser or device and the sbc8 servers is encrypted using 256-bit SSL/TLS protocols. Look for the padlock icon in your browser's address bar when using sbc8.io.
• Encrypted data storage: Personal data at rest — including identity documents, financial records, and account credentials — is stored in encrypted form on secured servers with restricted physical and logical access controls.
• Access controls: Access to personal data within sbc8 is restricted to authorised employees and contractors on a strict need-to-know basis. All access is logged and reviewed regularly.
• Password security: Account passwords are stored using industry-standard one-way hashing algorithms. sbc8 staff cannot retrieve your plain-text password — only you know it. If you lose access to your account, a secure password-reset process is available.
• Penetration testing and audits: sbc8 conducts periodic security assessments of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a data security incident that affects your personal data, sbc8 will notify affected users via their registered email address within a reasonable timeframe, describing the nature of the incident and the steps we have taken in response.

While sbc8 takes every reasonable precaution to protect your data, no method of internet transmission or electronic storage is 100% secure. We encourage you to take your own precautions, including using a strong and unique password for your sbc8 account and logging out after each session, particularly on shared devices.

Subject to applicable law, you have the following rights in relation to the personal data sbc8 holds about you. To exercise any of these rights, please contact our support team at [email protected].

• Right of access: You have the right to request a copy of the personal data sbc8 holds about you, along with information about how it is used and with whom it is shared. We will respond to access requests within 30 calendar days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update many details directly in your account settings; for changes to identity or verification data, please contact support.
• Right to erasure ("right to be forgotten"): You may request that sbc8 delete your personal data. We will action this request where there is no legal obligation requiring us to retain the data. Note that financial, identity, and transaction records are subject to statutory retention periods and cannot be deleted on request during those periods.
• Right to restrict processing: In certain circumstances, you may request that sbc8 limit the processing of your personal data — for example, while a dispute about its accuracy is resolved.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to sbc8 in a structured, machine-readable format, and to request that this data be transmitted to another service provider where technically feasible.
• Right to withdraw consent: Where sbc8 processes your data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.
• Right to object: You have the right to object to sbc8 processing your personal data on the basis of legitimate interests, including for profiling or direct marketing purposes. We will honour your objection unless we can demonstrate compelling legitimate grounds that override your interests.

The sbc8 platform is strictly for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. Our registration process includes mandatory age declaration and identity verification steps specifically designed to prevent access by minors.

If sbc8 becomes aware that personal data has been collected from a person under the age of 21, we will take the following immediate steps:

• Suspend the account pending investigation.
• Delete or anonymise all personal data associated with that account.
• Refund any deposited funds to the originating payment account, less any amounts already paid out in error.
• Notify relevant parties as required by applicable law.

If you are a parent or guardian and believe that a minor may have accessed sbc8 or provided us with personal data, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

We also encourage parents and guardians to make use of parental control software and internet filtering tools to prevent minors from accessing gambling websites. sbc8 supports responsible parenting resources and age-restriction tools.

sbc8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform operations. When we make material changes to this Policy, we will:

• Update the "Effective Date" displayed at the top of this page.
• Send a notification to the email address registered to your sbc8 account, where practicable.
• Display an in-platform notice upon your next login session following the update.

We encourage you to review this Privacy Policy periodically to stay informed about how sbc8 protects your personal data. Your continued use of the sbc8 platform following the publication of any revised Policy constitutes your acknowledgement and acceptance of the updated terms.

If you disagree with any material change to this Policy, you have the right to close your account and request deletion of your personal data (subject to statutory retention obligations) by contacting support.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way sbc8 handles your personal data, please contact our Data Protection team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Subject line recommended: "Privacy Request — [Your Account Username]"
• Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)
• Platform: sbc8.io

We aim to acknowledge all privacy-related enquiries within 5 business days and to resolve them fully within 30 calendar days. For data access and erasure requests, please include your registered email address and account username to help us locate your records promptly.

If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint to the relevant data protection authority or seek independent legal advice.