yx8 Privacy Policy

This Privacy Policy is issued by yx8, the operator of the online entertainment platform accessible at yx8.onl. For the purposes of this Policy, "yx8", "we", "us", and "our" refer to the platform and its authorised operators. "You", "player", or "user" refers to any individual who accesses or interacts with the yx8 platform in any capacity.

yx8 is an online entertainment platform offering cricket betting, live casino games, slots, and table games to players in Bangladesh. We are committed to handling your personal data responsibly, transparently, and in accordance with good data governance practices. If you have any questions about this Privacy Policy or how your data is handled, you may contact our support team. The contact email address is provided in the footer of this page.

yx8 collects personal data in three principal ways: information you provide directly, information generated automatically through your use of the platform, and information received from third-party service providers such as payment processors.

Information you provide directly:

• Full name and date of birth (required for account registration and age verification)
• Email address and mobile phone number
• Residential address, including city and district (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh)
• Account username and password (password is stored in encrypted form and is never visible to yx8 staff)
• Government-issued identification documents submitted during KYC (Know Your Customer) verification
• Payment method details — specifically, the mobile financial service account numbers registered to your name for bKash, Nagad, Rocket, or Upay transactions
• Any communications you send to our support team, including the content of chat messages and emails

Information collected automatically:

• IP address and approximate geographic location derived from it
• Device type, operating system version, and browser type
• Session start and end times, pages visited, and features accessed
• Betting and gaming history, including stakes placed, games played, outcomes, and transaction amounts in BDT
• Cookies and similar session-tracking technologies (see Section 7 for full cookie details)

Information from third parties:

• Transaction confirmation data from bKash, Nagad, Rocket, and Upay regarding deposits and withdrawals
• Identity and age verification confirmation from KYC service providers where applicable
• Fraud risk signals from payment processing partners

yx8 processes your personal data only for legitimate, specified purposes. The following table sets out the primary purposes for which your data is used and the legal basis for each.

yx8 does not sell, rent, or share your personal data with third parties for their own marketing or commercial purposes. We share your data only in the following limited and controlled circumstances:

• Payment service providers: We share the minimum necessary transaction information with bKash, Nagad, Rocket, and Upay to process deposits and withdrawals. These providers are contractually required to handle your data securely and may not use it for any purpose other than transaction processing.
• Identity and KYC verification services: Where we use a third-party provider to verify your identity or age, the relevant identification documents and personal details are shared with that provider solely for the purpose of completing verification.
• Game technology providers: When you play games powered by providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, limited session and account reference data is shared with those providers to enable game operation. These providers operate under strict data processing agreements.
• Legal and regulatory authorities: yx8 may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by law, court order, or in connection with an investigation into fraud, money laundering, or other criminal activity.
• Business transfers: In the event of a merger, acquisition, or transfer of substantially all of yx8's operational assets, player account data may be transferred to the acquiring entity. You will be notified of any such transfer in advance.

In all cases where data is shared with third parties, yx8 requires those parties to maintain appropriate technical and organisational security measures and to process your data only in accordance with our instructions.

yx8 retains your personal data for as long as is necessary to fulfil the purposes set out in this Privacy Policy, subject to any longer retention periods required by applicable legal or regulatory obligations. The following retention guidelines apply:

• Active account data: Retained for the full duration your account remains open and active on the platform.
• Closed account data: Following account closure, core account records (name, contact details, KYC documents, and transaction history) are retained for a minimum of five years to satisfy anti-money laundering record-keeping obligations.
• Transaction records: All deposit and withdrawal records in BDT are retained for a minimum of five years from the date of the transaction.
• Support communications: Records of support interactions are retained for up to three years following the resolution of the relevant enquiry.
• Marketing consent records: Where you have given consent to receive promotional communications, a record of that consent is retained for as long as you remain subscribed and for a further two years after unsubscription.
• Session and device logs: Technical access logs used for security monitoring are retained for up to 12 months and then deleted or anonymised.

When personal data is no longer required, yx8 takes reasonable steps to securely delete or irreversibly anonymise it so that it can no longer be linked to an identifiable individual.

As a player on the yx8 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact the yx8 support team using the email address shown in the footer of this page.

yx8 will respond to all data rights requests within 30 days of receipt. In complex or high-volume cases this period may be extended, in which case we will notify you of the extended timeframe. There is no fee for exercising your rights under normal circumstances.

yx8 uses cookies and similar technologies to operate the platform securely and to understand how players use our services. A cookie is a small text file placed on your device when you visit the platform. The following categories of cookies are used:

• Strictly necessary cookies: These are essential for the platform to function. They enable login session management, security token validation, and core navigation. These cookies cannot be disabled without preventing you from using the platform.
• Functional cookies: These remember your preferences, such as language settings and display options, so you do not need to re-enter them on each visit.
• Analytics cookies: These collect anonymised data about how players navigate the platform — which pages are visited most, where users encounter errors, and how long sessions last. This data helps us improve the platform experience. No personally identifiable information is contained in analytics cookies.
• Session security cookies: Short-lived cookies used to protect your session from cross-site request forgery (CSRF) and other session hijacking attacks. These expire when you close your browser.

yx8 does not use third-party advertising cookies or behavioural tracking cookies that profile you across other websites. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair or prevent your ability to use the platform.

yx8 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, and disclosure. These measures include:

• TLS/SSL encryption on all data transmitted between your device and the yx8 platform
• Encrypted storage of account passwords using industry-standard hashing algorithms — yx8 staff cannot view your password in plain text
• Access controls limiting internal access to personal data on a strict need-to-know basis
• Automated monitoring systems that flag unusual login activity, repeated failed authentication attempts, and anomalous transaction patterns
• Regular security assessments of the platform infrastructure

While yx8 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights or interests, yx8 will notify affected players as soon as reasonably practicable.

Players are also responsible for maintaining the security of their own accounts. You should use a strong, unique password for your yx8 account, never share your login credentials, and contact support immediately at [email protected] if you suspect your account has been accessed without your authorisation.

yx8 is strictly an adult-only platform. Access to the platform and its services is permitted only for individuals who are 21 years of age or older. We do not knowingly collect personal data from any person under the age of 21.

If we become aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to close the relevant account, delete the associated personal data, and — where applicable — reverse any transactions linked to that account. If you believe that a minor has registered an account on the yx8 platform, please report this to our support team immediately.

yx8 may revise this Privacy Policy from time to time to reflect changes in our data practices, applicable legal requirements, or platform features. When we make material changes, we will update the "Last updated" date at the top of this page. Where a change significantly affects how your personal data is processed, we will endeavour to notify registered players directly — for example, by sending a notification to your registered email address.

Your continued use of the yx8 platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms. We encourage you to review this page periodically to stay informed about how we protect your data.

For any questions, concerns, or data rights requests relating to this Privacy Policy, please contact the yx8 support team. Our contact email address is displayed in the footer of this page. We are available 24 hours a day, 7 days a week at Bangladesh Standard Time (UTC+6).