Privacy Policy — How adc8 Handles Your Personal Data

adc8 is an online casino and sports betting platform operating under the adc8 brand and accessible at adc8.io. For the purposes of this Privacy Policy, adc8 acts as the data controller in respect of the personal data collected from registered players and platform visitors.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data adc8 holds about you, please contact the adc8 privacy and support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Response Target: All privacy-related enquiries will receive an acknowledgement within 48 hours and a substantive response within 14 calendar days.

adc8 is committed to handling all privacy enquiries with care, transparency, and respect for the player's rights. Players are never penalised or disadvantaged for exercising their data rights.

adc8 collects personal data from players through several channels — directly during registration and account use, automatically through technical systems, and in certain cases from trusted third-party verification partners. The categories of personal data we collect are set out below.

adc8 processes personal data only where there is a lawful basis for doing so. The lawful bases on which adc8 relies are: (a) the performance of a contract with you (i.e., your registration and use of the platform); (b) compliance with applicable legal and regulatory obligations; (c) our legitimate interests in operating a safe, fair, and commercially sustainable gaming platform; and (d) your explicit consent where required (for example, for direct marketing communications).

The specific purposes for which adc8 uses your personal data are as follows:

• Account Creation and Management: To register your account, verify your identity, maintain your account profile, and enable you to access all adc8 gaming and betting products.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay; to maintain transaction records; and to reconcile financial data for accounting and audit purposes.
• Identity Verification (KYC): To verify that you are who you say you are, that you are at least 21 years of age, and that you are not using a false identity or a prohibited payment method. KYC verification is a mandatory compliance requirement.
• Anti-Money Laundering (AML) and Fraud Prevention: To monitor account and transaction activity for patterns indicative of money laundering, fraud, collusion, bonus abuse, or other prohibited activities described in the adc8 Terms & Conditions.
• Responsible Gaming Compliance: To enforce deposit limits, self-exclusion orders, cooling-off periods, and other responsible gaming protections requested by players; to monitor gameplay patterns that may indicate problem gambling behaviour; and to fulfil obligations relating to player protection.
• Customer Support: To respond to your enquiries, complaints, and requests; to maintain records of support interactions for quality assurance and dispute resolution purposes.
• Platform Security: To detect, prevent, and respond to security incidents, unauthorised account access, suspicious login attempts, and technical vulnerabilities.
• Product Improvement: To analyse aggregated and anonymised usage data to improve the adc8 platform, optimise game performance, personalise content recommendations, and develop new features that serve the needs of Bangladeshi players.
• Marketing Communications: Where you have given explicit consent, to send you promotional offers, bonus notifications, tournament announcements, and seasonal promotions (e.g., BPL cricket season promotions, Eid special offers, Pohela Boishakh campaigns). You may withdraw this consent at any time without affecting the lawfulness of processing that took place before withdrawal.
• Legal Compliance: To comply with applicable laws, respond to lawful requests from authorities, and enforce the adc8 Terms & Conditions.

The adc8 platform uses cookies and similar tracking technologies to enhance your user experience, maintain your login session, remember your preferences, and collect the technical and usage data described in Section 2 of this Policy.

The categories of cookies used on the adc8 platform are:

• Strictly Necessary Cookies: These cookies are essential for the adc8 platform to function. They maintain your login session, remember your account state between pages, and support core security features. These cookies cannot be disabled without breaking the platform.
• Performance and Analytics Cookies: These cookies collect aggregated information about how players use the adc8 platform — which games are visited most frequently, which pages result in high drop-off rates, and how performance metrics vary across devices. This data is used exclusively to improve the platform.
• Functionality Cookies: These cookies remember choices you make on the platform, such as your preferred language, display preferences, and responsible gaming settings, so that you do not have to re-enter them on each visit.
• Targeting and Marketing Cookies: Where you have given consent, these cookies are used to deliver promotional messages that are relevant to your interests and gameplay history. You may withdraw your consent to targeting cookies at any time via your account settings.

Most web browsers allow you to control cookies through the browser settings menu. Disabling strictly necessary cookies may prevent the adc8 platform from functioning correctly. For detailed guidance on managing cookies in your specific browser, please refer to your browser's help documentation.

adc8 does not sell, rent, or otherwise disclose your personal data to third parties for their own marketing or commercial purposes. Personal data may be shared with the following categories of trusted third parties only to the extent strictly necessary for the specified purpose:

• Payment Processing Partners: Mobile wallet operators (bKash, Nagad, Rocket, Upay) receive the transaction data necessary to process your deposits and withdrawals. Each operator is subject to their own privacy policy and data protection obligations.
• Identity Verification Providers: Third-party KYC and AML compliance partners receive identity documents and verification data submitted during the account verification process. These partners are bound by strict data processing agreements and are not permitted to use your data for any purpose other than the verification service they provide to adc8.
• Game Software Providers: Third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive pseudonymous player identifiers and gameplay session data necessary to deliver their games on the adc8 platform. These providers do not receive your full identity data.
• Technology and Infrastructure Partners: Cloud hosting providers, content delivery networks (CDNs), cybersecurity partners, and other technology vendors that support the operation of the adc8 platform may process personal data on our behalf under data processing agreements that impose strict confidentiality and security obligations.
• Legal and Regulatory Authorities: adc8 will disclose personal data to competent authorities — including law enforcement and anti-money-laundering bodies — where required to do so by applicable law, court order, or regulatory direction. adc8 will notify affected players of any such disclosure where legally permitted to do so.

adc8 retains personal data for as long as necessary to fulfil the purposes for which it was collected, and in any case for as long as required by applicable legal, regulatory, and anti-money-laundering obligations. The following general retention periods apply:

• Active Account Data: All personal data associated with an active adc8 account is retained for the full duration of the account's active status plus a minimum period of five (5) years following permanent account closure, to satisfy AML record-keeping requirements.
• Transaction Records: Financial transaction records, including deposit and withdrawal histories, are retained for a minimum of seven (7) years following the date of the transaction, in accordance with financial record-keeping best practices.
• Identity Verification Documents: KYC documents (national ID scans, passport copies, proof of address) are retained for a minimum of five (5) years following account closure or the completion of the last verification event, whichever is later.
• Support and Communications Records: Records of customer support interactions are retained for a minimum of three (3) years following the closure of the relevant support case.
• Marketing Consent Records: Records of your marketing consent (or withdrawal thereof) are retained for the duration of your account and for three (3) years thereafter, to demonstrate compliance with consent obligations.
• Technical and Usage Data: Aggregated and anonymised technical data is retained indefinitely for platform analytics purposes. Identifiable technical data (e.g., raw IP address logs) is deleted or anonymised within twelve (12) months of collection.

At the end of the applicable retention period, personal data is securely deleted from adc8's systems or anonymised such that it can no longer be attributed to any identified or identifiable individual.

adc8 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• Transport Layer Security (TLS/SSL): All data transmitted between your browser or app and the adc8 platform is encrypted using TLS 1.2 or higher (256-bit encryption). This protects your credentials, payment details, and personal information in transit.
• Password Security: Account passwords are stored using industry-standard one-way cryptographic hashing algorithms. adc8 staff cannot view your password in plain text at any point. You are strongly encouraged to choose a strong, unique password and to enable two-factor authentication (2FA) on your account.
• Access Controls: Access to personal data within adc8's internal systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of data access required to perform their designated role. All internal data access is logged and audited.
• Fraud and Intrusion Detection: adc8 employs automated systems to monitor for unusual login activity, suspicious transaction patterns, and potential security breaches in real time. Alerts are reviewed by the adc8 security team promptly.
• Vendor Security Standards: All third-party partners who process personal data on behalf of adc8 are contractually required to maintain security standards commensurate with those of adc8 and to notify adc8 promptly in the event of any data security incident involving adc8 player data.
• Regular Security Reviews: adc8 conducts periodic internal security reviews and assessments to identify and address vulnerabilities in its systems, processes, and third-party integrations.

While adc8 takes all reasonable steps to protect your personal data, no internet-based system is entirely immune to security risks. Players are encouraged to take their own precautions — including using strong passwords, enabling 2FA, keeping their registered email account secure, and logging out after each session, particularly on shared devices.

The adc8 platform is strictly intended for adults aged 21 years and above. adc8 does not knowingly collect, process, or retain personal data belonging to any person under the age of 21.

During the registration process, all new players are required to declare their date of birth and confirm that they are 21 years of age or older. adc8 may require documentary proof of age — such as a national identity card or passport — before permitting a player to deposit funds or place real-money bets. Where adc8 becomes aware that a player is under 21 years of age, the account will be closed immediately, any deposits will be returned in accordance with responsible gaming obligations, and all associated personal data will be deleted except where retention is required for legal or regulatory compliance purposes.

As a player registered on the adc8 platform, you hold the following rights in respect of the personal data we hold about you. To exercise any of these rights, please contact [email protected] with a clear description of your request.

• Right of Access: You have the right to request a copy of the personal data adc8 holds about you, along with information about how it is used and with whom it is shared. adc8 will provide this information within 30 calendar days of receiving a valid request.
• Right to Rectification: If any personal data held by adc8 about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account details directly through your adc8 account settings.
• Right to Erasure: In certain circumstances, you may request that adc8 delete the personal data it holds about you. This right is not absolute — adc8 may be required to retain certain data to comply with AML, financial record-keeping, and responsible gaming legal obligations even after account closure. adc8 will inform you of any such retention obligations when responding to an erasure request.
• Right to Restriction of Processing: You may request that adc8 restrict the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contractual basis, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where adc8 processes your personal data on the basis of your consent (such as for direct marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal. Marketing opt-outs can be managed directly through your account settings or by emailing [email protected].
• Right to Object: You have the right to object to the processing of your personal data where adc8 relies on legitimate interests as its lawful basis, unless adc8 can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

adc8 will never penalise a player for exercising any of the data rights described in this section. All rights requests are handled with care and in good faith. If you are dissatisfied with how adc8 has handled a rights request, you have the right to escalate your complaint directly to the adc8 management team by writing to [email protected] and marking your message as a formal data rights complaint.

adc8 may send you promotional communications about bonuses, new games, sports betting markets (including BPL cricket season offers, T20 World Cup promotions, and IPL-related markets), seasonal campaigns (Eid, Pohela Boishakh, Ramadan), and other platform updates. Marketing communications are sent only where you have given explicit consent to receive them during registration or subsequently through your account settings.

You may opt out of all marketing communications at any time by:

• Logging into your adc8 account, navigating to Communication Preferences, and toggling marketing communications to Off.
• Clicking the unsubscribe link included in any adc8 marketing email you receive.
• Emailing [email protected] with the subject line "Marketing Opt-Out" and your registered email address.

Opting out of marketing communications does not affect the delivery of transactional messages, which adc8 is required to send as part of the operation of your account. Transactional messages include deposit and withdrawal confirmations, account security alerts, verification requests, responsible gaming notifications, and updates to the adc8 Terms & Conditions or Privacy Policy.

The adc8 platform may reference or display content from third-party game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. While adc8 works only with reputable, certified game studios, each third-party provider operates under its own privacy policy. adc8 accepts no responsibility for the data practices of third-party game providers beyond the contractual obligations imposed under adc8's data processing agreements with those providers.

The adc8 platform does not contain outbound links to external websites for commercial or advertising purposes. Any third-party service visible within the adc8 platform — such as a game lobby or live dealer stream — is operated within the adc8 gaming environment and is governed by the contractual framework between adc8 and the relevant provider.

adc8 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or the services we offer. The effective date at the top of this page will be updated whenever a revision is made.

Where revisions are material — meaning they significantly affect the rights of registered players or alter how we use personal data — adc8 will notify affected players via the registered email address on their account in advance of the changes taking effect. For minor revisions such as typographical corrections or clarifications that do not alter the substance of the Policy, notification may not be provided, but the revised Policy will always be accessible at adc8.io/privacy-policy.

Your continued use of the adc8 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, please contact [email protected] to discuss your options, including account closure in accordance with Section 9 of the adc8 Terms & Conditions.

All privacy-related correspondence should be directed to the adc8 support and privacy team. We are available around the clock and aim to handle all privacy enquiries with the seriousness and discretion they deserve.

• Email: [email protected]
• Subject Line (for privacy requests): "Privacy Request — [Your Registered Email]"
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)
• Initial Response Target: Within 48 hours of receiving your message
• Full Resolution Target: Within 14 calendar days for standard requests; within 30 calendar days for complex access requests requiring data compilation

adc8 is dedicated to protecting the privacy of every player across all eight divisions of Bangladesh — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh. Your trust in the adc8 platform is something we take seriously, and we remain committed to transparent, responsible, and secure handling of your personal data at every stage of your journey with us.