Privacy Policy

1. Information We Collect

When you register an account, use the yx8 platform, or contact our support team, we collect personal information that is necessary to provide you with a safe, fair, and fully functional gaming experience. The categories of data we collect are described below.

1.1 Registration and Identity Data

When you create a yx8 account, we collect your full legal name, date of birth, email address, country of residence, and your chosen username. This information is required to open and administer your account, verify your age in compliance with the 18+ requirement, and communicate with you about your account.

1.2 Identity Verification (KYC) Data

To comply with our obligations regarding responsible gaming and financial crime prevention, yx8 may request copies of government-issued identity documents such as a National Identity Card (NID), passport, or birth certificate. Where a payment method is used that requires ownership verification, we may also request a photograph or screenshot of the payment instrument. KYC documents are stored securely and are never shared with third parties outside of our regulated verification partners.

1.3 Financial Transaction Data

We record details of all deposits, withdrawals, bonus credits, wagers, and winnings associated with your yx8 account. For local payment methods (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank), we record the transaction reference number and the partial account identifier provided by the payment gateway. For USDT transactions, we record the wallet address and transaction hash. We do not record or store full payment credentials, PINs, or private keys.

1.4 Technical and Device Data

When you access yx8, our servers automatically log certain technical information including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, session duration, and timestamps of activity. This data is collected to ensure platform security, detect fraudulent access patterns, and improve platform performance.

1.5 Communications Data

If you contact yx8 via our support channels (email, live chat, or any other communication method), we retain records of those communications including the content of your messages, your contact details, and the date and time of each interaction. This is necessary to resolve your queries accurately and to maintain a service history.

2. How We Use Your Data

yx8 processes your personal data only for lawful purposes that are directly related to the operation of the platform and the fulfilment of our obligations to you as a player. The following table summarises the primary purposes for which we use your data and the legal basis for each processing activity.

yx8 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a separate lawful basis for that new processing activity.

3. Data Sharing and Disclosure

yx8 does not sell your personal data. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the relevant purpose.

3.1 Game Technology Partners

To deliver our full portfolio of casino games and sports betting markets, yx8 works with licensed game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive limited technical data (such as a pseudonymous player ID and session token) that is necessary to render games within the yx8 platform environment. They do not receive your full name, financial data, or contact details.

3.2 Payment Processing Partners

When you make a deposit or submit a withdrawal request, the transaction is routed through the relevant payment gateway for your chosen method (bKash, Nagad, Rocket, Upay, bank transfer, or USDT network). We share only the data that is strictly necessary for the gateway to process the transaction, such as the transaction amount and your account reference. Each payment partner operates under its own privacy policy and data processing agreements.

3.3 Identity Verification Services

Where yx8 uses a third-party identity verification provider to conduct KYC checks, your submitted identity documents and associated data will be securely transmitted to that provider for the purpose of verification only. Such providers are contractually bound to process your data in accordance with applicable data protection standards and are prohibited from using your data for any other purpose.

3.4 Legal and Regulatory Disclosure

yx8 may be required to disclose personal data to law enforcement agencies, regulatory bodies, or other authorised public authorities where we are legally obligated to do so, or where disclosure is necessary to protect the rights, property, or safety of yx8, our players, or the public. We will disclose only the minimum data required to satisfy the applicable legal obligation.

4. Cookies and Tracking Technologies

yx8 uses cookies and similar technologies (such as local storage tokens and session identifiers) to operate the platform effectively and provide you with a personalised experience. A cookie is a small text file placed on your device by the yx8 web server when you visit the platform.

4.1 Types of Cookies We Use

• Essential cookies: These are strictly necessary for the platform to function. They manage your login session, maintain your game state, and ensure secure navigation between pages. These cookies cannot be disabled without impairing your ability to use the platform.
• Analytics cookies: We use anonymised analytics data to understand how players interact with the yx8 platform — which pages are most visited, where players spend the most time, and where errors occur. This data is used exclusively to improve platform performance and user experience.
• Preference cookies: These remember your platform settings such as language preference and display settings so that you do not need to reconfigure them on each visit.
• Security cookies: These help detect and prevent fraudulent activity, bot traffic, and brute-force login attempts by tracking suspicious patterns of access.

4.2 Managing Cookies

You can control cookie behaviour through your browser settings. Most modern browsers allow you to view, block, or delete cookies. Please note that disabling essential cookies will prevent you from logging in and using core platform features. Disabling analytics or preference cookies will not affect your ability to play games or make transactions, but may result in a less personalised experience.

5. Data Retention

yx8 retains your personal data for as long as your account is active and for a defined period after account closure, in line with our legal obligations and operational requirements. The following retention periods apply:

• Account registration data: Retained for the lifetime of your active account and for a minimum of five years following account closure, in compliance with applicable anti-money-laundering and financial record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five years from the date of submission or from the date of account closure, whichever is later, as required by financial crime prevention regulations.
• Transaction records: Retained for a minimum of seven years from the date of each transaction, consistent with standard financial record-keeping obligations.
• Support communications: Retained for three years from the date of the last interaction, unless the communication relates to an ongoing dispute or legal matter, in which case retention continues until the matter is fully resolved.
• Technical and device logs: Retained for up to 12 months in identifiable form, after which they are anonymised or deleted.
• Marketing preferences: Retained until you withdraw consent or close your account, whichever is earlier.

Upon expiry of the applicable retention period, your data will be securely deleted or anonymised so that it can no longer be associated with you as an identifiable individual.

6. Data Security Measures

yx8 implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following controls:

• Transport Layer Security (TLS): All data in transit between your browser and the yx8 servers is encrypted using TLS 1.2 or higher, providing 256-bit AES encryption of all communications.
• Access controls: Access to player personal data within the yx8 organisation is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories required to perform their specific role.
• Data at rest encryption: Sensitive personal data and financial records stored in the yx8 database are encrypted at rest using industry-standard encryption protocols.
• Intrusion detection: Our platform is monitored continuously for suspicious access patterns, attempted breaches, and anomalous transaction behaviour. Security alerts are escalated and investigated in real time.
• Regular security audits: yx8 conducts periodic security assessments of its platform infrastructure, including penetration testing and vulnerability scanning, to identify and remediate potential weaknesses before they can be exploited.
• Staff training: All yx8 staff with access to personal data receive regular training on data protection obligations, secure data handling procedures, and incident response protocols.

7. Your Privacy Rights

As a registered player on the yx8 platform, you hold a number of rights with respect to your personal data. yx8 is committed to honouring these rights in a timely and transparent manner. Your rights include the following:

• Right of access: You have the right to request a copy of all personal data that yx8 holds about you. We will provide this in a structured, commonly used, and machine-readable format within 30 days of receiving your verified request.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Please contact our support team to update your registered details.
• Right to erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where the data has been processed unlawfully. Note that this right is subject to our mandatory legal retention obligations — we cannot delete financial records that we are legally required to retain.
• Right to restriction of processing: In certain circumstances, you may request that yx8 restricts the processing of your personal data — for example, while the accuracy of data is being contested.
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a portable format and to request that it be transmitted directly to another service provider where technically feasible.
• Right to object: You have the right to object to processing based on legitimate interests, including profiling for the purposes of fraud detection. yx8 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (such as for promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to the withdrawal.

To exercise any of the above rights, please submit a written request to our support team at [email protected]. We will acknowledge receipt within two business days and provide a substantive response within 30 days. We may ask you to verify your identity before processing your request to ensure that personal data is not disclosed to unauthorised persons.

8. Contact and Data Enquiries

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which yx8 handles your personal data, please contact us using the details below. All privacy-related enquiries will be handled with strict confidentiality and in accordance with the commitments set out in this document.

Email: [email protected]

Response time: We aim to acknowledge all privacy enquiries within two business days and provide a full response within 30 days of receiving a complete request.

Operating hours: Our support team is available daily between 06:00 and 02:00 BST (UTC+6), including weekends and public holidays in Bangladesh.