kbx8 Privacy Policy
At kbx8, your privacy is taken seriously. This Privacy Policy explains exactly what personal information we collect from players in Bangladesh, how it is used, who it may be shared with, and the rights you hold over your own data. We are committed to handling your information with full transparency and technical security at every step.
Scope of This Policy: This Privacy Policy applies to all personal data collected through the kbx8 website at https://kbx8.app, including account registration, deposits, withdrawals, game participation, customer support interactions, and any communications between you and kbx8. By creating an account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy. If you disagree with any part of this Policy, please discontinue use of the Platform and contact support at [email protected] to arrange account closure.
SSL Encryption
All data transmitted between your device and the kbx8 Platform is protected by industry-standard TLS/SSL encryption. Your personal and financial information is never sent in plain text.
No Data Selling
kbx8 does not sell, rent, or trade your personal information to any third-party marketers or data brokers. Your data is used solely to operate and improve the Platform and fulfil legal obligations.
Your Data Rights
You have the right to access, correct, and request deletion of your personal data at any time. kbx8 responds to all verified data requests within 30 days of receipt.
Secure Data Storage
Player data is stored on access-controlled servers with regular security audits. Sensitive fields such as passwords are hashed using modern cryptographic algorithms and are never stored in recoverable form.
Payment Data Protected
kbx8 does not store full payment card numbers or mobile banking PINs. Payment processing is handled via secure, tokenised integrations with bKash, Nagad, Rocket, Upay, and banking partners.
Marketing Opt-Out
Promotional communications from kbx8 are always opt-in. You may withdraw consent for marketing messages at any time by adjusting your account notification settings or contacting support.
Section 1
Data Controller and Scope
kbx8 is the data controller responsible for all personal information collected through the Platform at https://kbx8.app. As data controller, kbx8 determines the purposes and means by which your personal data is processed. This Privacy Policy applies to all individuals who interact with the Platform, including registered Players, visitors who browse without registering, and individuals who contact kbx8 through its support channels.
This Policy covers data collected directly from you (for example, during account registration), data generated by your activity on the Platform (for example, betting history and session logs), and data received from third parties in connection with payment processing, identity verification, or fraud prevention.
This Policy does not cover third-party websites that may be linked to or from the Platform. kbx8 is not responsible for the privacy practices of third-party sites, and we encourage you to review the privacy policies of any external service you use.
If you are aged under 18, you must not register an account or provide any personal data to kbx8. If kbx8 discovers that a person under 18 has submitted personal data, that data will be deleted promptly and the associated account will be closed without recourse.
Data Controller Contact Details
- Platform: https://kbx8.app
- Privacy enquiries: [email protected]
- Market: Bangladesh (BD)
- Policy language: English (en-BD)
- Last reviewed: 1 January 2026
Section 2
Information We Collect
kbx8 collects personal information across several categories depending on how you interact with the Platform. We limit data collection to what is strictly necessary for the purposes described in this Policy. The table below summarises the main categories of personal data we process.
| Data Category | Examples and Detail |
|---|---|
| Identity Data | Full legal name, date of birth, National ID (NID) number or passport number, selfie photograph submitted during KYC verification. |
| Contact Data | Email address, mobile phone number (including bKash / Nagad / Rocket account number where used for payments), residential address in Bangladesh. |
| Financial Data | Deposit and withdrawal transaction records, preferred payment method, transaction reference numbers, wallet balance history. Full card numbers and mobile PINs are never stored. |
| Gaming Activity Data | Game sessions played, bets placed, wagering amounts in ৳ BDT, wins and losses, bonus activations, tournament participation, and sports betting selections. |
| Technical Data | IP address, device type and model, operating system, browser type and version, screen resolution, time zone (Bangladesh Standard Time, UTC+6), and referring URL. |
| Usage Data | Pages visited on the Platform, session duration, click paths, search queries within the Platform, and feature interactions. |
| Communications Data | Records of live chat, email, and support ticket interactions between you and kbx8's customer support team. |
| Marketing Preferences | Your consent status for promotional emails, SMS offers, and push notifications, and the history of any opt-in or opt-out actions you have taken. |
Data You Provide Directly: Registration form inputs, KYC document uploads, support messages, and any information you voluntarily enter into Platform fields. kbx8 relies on you to ensure this information is accurate and up to date.
Data Collected Automatically: Technical and usage data is collected automatically via server logs, analytics tools, and session cookies whenever you access the Platform — including as an unregistered visitor. See the Cookies section for full details.
Section 3
Legal Basis for Processing
kbx8 processes personal data only where a valid legal basis exists for doing so. The following legal bases apply to the processing activities described in this Policy.
Contractual Necessity
Processing required to register your account, process deposits and withdrawals, and provide the games and services you request under our Terms & Conditions.
Legal Obligation
Processing required for age verification, KYC compliance, anti-money laundering (AML) checks, and fraud prevention obligations imposed by applicable law.
Consent
Processing based on your explicit opt-in, such as receiving promotional emails, SMS bonuses, or push notifications. You may withdraw consent at any time without affecting other processing.
Legitimate Interests
Processing necessary for fraud detection, Platform security, responsible gaming monitoring, product improvement, and analytics — balanced against your privacy interests.
Section 4
How We Use Your Information
kbx8 uses collected personal data for the following purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent or notifying you via an updated version of this Privacy Policy.
- Creating and managing your kbx8 Player account and verifying your identity through KYC.
- Processing deposits and withdrawals in ৳ BDT via bKash, Nagad, Rocket, Upay, and banking partners.
- Delivering the games, sportsbook markets, live casino, and jackpot services you have chosen to use.
- Conducting mandatory age verification and anti-money laundering checks before processing withdrawals.
- Detecting, preventing, and investigating fraud, bonus abuse, and other prohibited activity.
- Monitoring gaming patterns to identify players who may be experiencing gambling-related harm and providing responsible gaming interventions.
- Sending transactional communications (account confirmations, withdrawal notifications, security alerts).
- Sending promotional offers, bonus notifications, and marketing messages — only where you have opted in.
- Improving Platform functionality, game selection, and user experience through aggregated analytics.
- Responding to support requests, complaints, and data subject access requests.
Responsible Gaming Data Use
kbx8 uses gaming activity data — including session frequency, deposit velocity, and wagering volume — to power automated responsible gaming tools. Where our systems detect patterns associated with problem gambling, we may proactively contact you, apply temporary deposit limits, or prompt you to review your account. This processing is carried out in your interest and is a core part of kbx8's commitment to safe play for all users aged 18 and above across Bangladesh.
Automated Decision-Making: kbx8 uses automated systems for fraud scoring and responsible gaming monitoring. Where an automated decision materially affects your account (for example, triggering a temporary hold), you have the right to request human review of that decision by contacting [email protected].
Section 5
Data Sharing and Disclosure
kbx8 does not sell or rent your personal data to any third party. We share personal data only in the limited circumstances set out below, and only to the minimum extent necessary for each specific purpose. All third-party recipients of kbx8 player data are bound by confidentiality obligations and data processing agreements.
Service Providers
kbx8 engages trusted third-party service providers to support Platform operations. These include:
- Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard partner networks — for transaction processing only.
- Identity verification providers — to conduct KYC checks and validate NID or passport data.
- Game content providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, and Play'n GO — for game delivery and RTP reporting.
- Cloud infrastructure and hosting providers — for secure data storage and Platform uptime.
- Customer support software providers — for managing live chat and support ticket workflows.
Legal and Regulatory Disclosures
kbx8 may disclose personal data without your consent where required by law or in the following circumstances:
- In response to a lawful request from law enforcement or a regulatory authority with jurisdiction over the matter.
- To comply with financial crime reporting obligations, including suspicious transaction reports.
- To enforce kbx8's Terms & Conditions or to defend against legal claims.
- To protect the safety of any person, or to prevent fraud or financial crime affecting kbx8 or its players.
- In the event of a merger, acquisition, or asset sale — in which case affected players will be notified prior to data transfer.
No Cross-Border Transfers Without Safeguards: Where personal data must be transferred to a service provider located outside Bangladesh, kbx8 ensures that appropriate contractual safeguards are in place to protect your data to a standard equivalent to the protections afforded under this Policy. kbx8 will not transfer player data internationally in a manner that materially reduces your privacy protections.
Section 7
Data Retention and Deletion
kbx8 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and for as long as required by applicable legal, regulatory, and financial record-keeping obligations. The table below sets out the general retention periods applied to each major category of data.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any individual. Anonymised aggregate data (such as statistical reporting on game popularity or regional deposit volumes) may be retained indefinitely as it no longer constitutes personal data.
Where you request deletion of your personal data before the end of a retention period, kbx8 will assess the request and delete or anonymise all data that is not subject to a mandatory legal retention obligation. Any data that must be retained for legal reasons will be isolated from active processing systems and used only for the purpose of fulfilling those legal obligations.
Players who self-exclude are subject to a minimum retention period covering the full duration of their self-exclusion plus five years thereafter, to prevent re-registration and ensure the integrity of the self-exclusion programme.
Retention Schedule
| Data Category | Retention Period |
|---|---|
| Account & Identity | Duration of account + 5 years |
| Financial Records | 7 years from transaction date |
| KYC Documents | 5 years from account closure |
| Gaming Activity | 3 years from account closure |
| Support Communications | 3 years from last interaction |
| Marketing Preferences | Until consent withdrawn + 1 year |
| Technical / Log Data | 12 months from collection |
| Self-Exclusion Records | Exclusion period + 5 years |
Section 8
Your Privacy Rights
As a kbx8 player, you hold meaningful rights over your personal data. kbx8 is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, contact kbx8's privacy team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and provide a substantive response within 30 days of receipt.
Right of Access
You may request a copy of all personal data kbx8 holds about you, along with information about how it is being used, who it has been shared with, and how long it will be retained.
Right of Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic contact details directly within your account settings.
Right of Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where processing was unlawful. Mandatory legal retention periods take precedence.
Right to Restrict Processing
In certain circumstances — for example, while a rectification request is being assessed — you may request that kbx8 temporarily restrict how your personal data is used without deleting it.
Right to Data Portability
Where processing is based on consent or contractual necessity, you may request your personal data in a structured, machine-readable format (such as CSV or JSON) for transfer to another service provider.
Right to Object
You may object at any time to processing based on legitimate interests — including profiling for responsible gaming purposes — or to direct marketing. kbx8 will cease such processing unless compelling legitimate grounds override your interests.
How to Submit a Request: Email [email protected] with the subject line "Data Rights Request". Include your registered email address and a clear description of the right you wish to exercise. kbx8 may need to verify your identity before processing the request. There is no fee for exercising your rights; however, manifestly unfounded or excessive requests may be subject to a reasonable administrative charge or refusal, with written reasons provided.
Section 9
Data Security Measures
kbx8 implements a layered security programme to protect your personal data from unauthorised access, disclosure, alteration, and destruction. Our security measures are reviewed and updated regularly to reflect the evolving threat landscape. The following controls are in place across the Platform.
Technical Controls
- TLS 1.2 / 1.3 encryption for all data in transit between your browser and kbx8 servers.
- AES-256 encryption for sensitive data fields stored at rest.
- Bcrypt hashing for all account passwords — plain-text passwords are never stored or recoverable.
- Multi-factor authentication (MFA) available for all Player accounts.
- Automated intrusion detection and rate-limiting to block brute-force login attempts.
- Regular vulnerability scanning and penetration testing by independent security assessors.
- Tokenised payment processing — full card numbers and mobile wallet PINs are never stored on kbx8 servers.
Organisational Controls
- Access to player data is restricted to staff members who require it to perform their job functions (principle of least privilege).
- All staff with access to personal data undergo data protection training and are bound by confidentiality obligations.
- Third-party service providers are assessed for data security standards before onboarding and are bound by data processing agreements.
- A documented data breach response procedure is in place. In the event of a breach affecting player data, kbx8 will notify affected players within 72 hours of becoming aware.
- Regular internal audits of data access logs and system activity are conducted to detect anomalous behaviour.
Your Role in Account Security: While kbx8 takes every reasonable measure to protect your data, account security also depends on your own practices. You are responsible for keeping your password confidential, not sharing your login credentials with any other person, and logging out after each session on shared devices. If you suspect unauthorised access to your account, contact [email protected] immediately and enable MFA from your account security settings.
Section 10
Policy Updates and Contact
kbx8 reviews this Privacy Policy periodically and will update it to reflect changes in our data practices, the services we offer, or applicable legal requirements. When material changes are made, kbx8 will notify active Players by email to the address registered on their account and will display a prominent notice on the Platform for a minimum of 30 days following the update.
The "Last Updated" date at the top of this page indicates when the current version came into effect. Continued use of the Platform after that date constitutes acceptance of the updated Policy. If you do not agree with the updated terms, you should stop using the Platform and contact support to arrange account closure and withdrawal of your remaining balance.
Minor changes that do not materially affect your privacy rights (such as typographical corrections, formatting changes, or clarifications that do not alter the substance of processing activities) may be made without specific notification. The updated date will still be revised to reflect any such change.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the kbx8 privacy team. We are committed to responding to all privacy-related enquiries in a timely and transparent manner.
Privacy Contact Information
- Email: [email protected]
- Subject line: "Privacy Policy Enquiry"
- Response time: Within 5 business days
- Platform: https://kbx8.app
Continue Exploring kbx8
Your Privacy Matters to Us
Now that you understand how kbx8 protects your data, explore our games, review our responsible gaming tools, or browse the FAQ for quick answers to common questions.
18+ only. Play responsibly. Gambling involves financial risk.