yb8 Privacy Policy

1. Information We Collect

yb8 collects personal information from you in several ways — directly when you register and use our services, automatically as you interact with yb8.club, and occasionally from third-party sources such as payment processors and identity verification providers. We collect only the information that is genuinely necessary to provide you with a secure, personalised, and legally compliant gaming experience.

Information You Provide Directly

When you register a yb8 account, make a deposit, contact our support team, or participate in a promotion, you may provide the following categories of personal data:

• Identity data: Full legal name, date of birth, national identity card (NID) number, passport number, or other government-issued identification details submitted during KYC verification.
• Contact data: Residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or elsewhere in Bangladesh), email address, and mobile phone number.
• Account credentials: Username and hashed password. yb8 never stores your password in plain text.
• Financial data: Mobile financial service account numbers (bKash, Nagad, Rocket, Upay), bank account references, and transaction histories. Full payment credentials are handled by the relevant payment service provider and are not stored by yb8.
• Communications data: Messages sent to yb8 via live chat, email support, or any other communication channel.

Information Collected Automatically

When you browse or use yb8.club, our systems automatically collect certain technical and behavioural data, including:

• Device and technical data: IP address, browser type and version, operating system, device identifiers, and screen resolution.
• Usage data: Pages visited, time spent on each page, game sessions played, bet amounts, deposit and withdrawal history, and navigation paths through the platform.
• Session data: Login timestamps, session duration, and logout events.
• Cookie and tracking data: As described in the Cookies section of this Policy.

Information From Third Parties

yb8 may receive supplementary personal data from trusted third-party sources in specific circumstances, including identity verification agencies used during KYC checks, payment processing partners who confirm transaction status, and fraud prevention services that flag suspicious activity patterns. Information received from third parties is handled under the same standards as data collected directly from you.

2. How We Use Your Data

yb8 uses your personal data only for clearly defined, legitimate purposes. We do not use your information for purposes incompatible with those stated in this Policy without first seeking your consent. The table below sets out the primary purposes for which yb8 processes your personal data and the lawful basis for each:

Marketing Communications

yb8 may send you promotional emails or SMS notifications about new games, bonuses, and seasonal offers — such as Eid specials, Pohela Boishakh promotions, or BPL season betting offers — if you have opted in to marketing communications during registration or subsequently through your account settings. You may withdraw your consent and unsubscribe from marketing communications at any time by updating your preferences in your account settings or by contacting our support team.

3. Data Sharing & Disclosure

yb8 does not sell, rent, or otherwise commercially transfer your personal data to third parties. We share data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

Service Providers and Data Processors

yb8 works with a number of carefully selected third-party service providers who process data on our behalf and under our instructions. These partners are contractually bound to handle your data securely and may not use it for their own independent purposes. Categories of service providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive the minimum transaction data required to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC services may receive identity document images and personal details for the purpose of verifying your identity and age.
• Fraud prevention and security providers: Technical data including IP addresses and device fingerprints may be shared with fraud detection services to protect the integrity of the yb8 platform.
• IT infrastructure and hosting providers: yb8's platform is hosted on secure cloud infrastructure whose operators may have access to data solely for the purpose of maintaining uptime and security.
• Game content providers: Third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data to facilitate fair-play auditing and RNG certification.

Legal and Regulatory Disclosure

yb8 may disclose your personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, a valid legal order, or where disclosure is necessary to protect the rights, property, or safety of yb8, its users, or the public. In such cases, yb8 will disclose only the minimum information necessary to comply with the legal obligation.

4. Cookies & Tracking Technologies

yb8.club uses cookies — small text files stored on your device — along with similar technologies such as web beacons and local storage to enhance your browsing experience, maintain your login session, and gather aggregated analytics about how the platform is used. This section explains what types of cookies we use and why.

Types of Cookies Used by yb8

Managing Your Cookie Preferences

Most modern web browsers allow you to control cookie settings through the browser's privacy or settings menu. You may choose to block or delete cookies at any time. However, please note that disabling strictly necessary or security cookies may prevent you from logging in or using certain features of yb8.club. Instructions for managing cookies vary by browser — consult your browser's help documentation for guidance.

5. Data Retention

yb8 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data (identity, contact, credentials): Retained for the duration of your active account plus a minimum of 5 years after account closure, to comply with anti-money laundering and financial record-keeping obligations.
• Transaction records (deposits, withdrawals, bet histories): Retained for a minimum of 7 years in accordance with financial regulatory requirements.
• KYC and identity verification documents: Retained for the period required by applicable regulations, typically 5 years after the conclusion of the customer relationship.
• Customer support communications: Retained for 3 years from the date of the last interaction, to support dispute resolution and service improvement.
• Marketing preferences and consent records: Retained for the period during which marketing consent is active, plus 2 years after withdrawal of consent as evidence of consent management.
• Analytics data: Anonymised and aggregated analytics data may be retained indefinitely, as it no longer constitutes personal data once anonymised.

When personal data is no longer required for any lawful purpose, yb8 will securely delete or anonymise it using industry-standard data disposal methods. Requests for early deletion are handled in accordance with the Your Privacy Rights section of this Policy.

6. Data Security

yb8 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS): All data in transit between your device and yb8.club is encrypted using TLS 1.2 or higher, ensuring that information cannot be intercepted in transit.
• Data encryption at rest: Sensitive personal data fields — including identity numbers and payment references — are encrypted when stored in yb8's databases.
• Access controls: yb8 operates a role-based access control (RBAC) system ensuring that team members can only access the personal data necessary for their specific job function. All access to personal data is logged.
• Two-factor authentication (2FA): All internal yb8 staff accounts with access to user data require two-factor authentication.
• Regular security assessments: yb8 conducts periodic vulnerability assessments and security audits of its platform and infrastructure.
• Incident response: yb8 maintains a documented data breach response procedure. In the event of a security incident that poses a risk to your personal data, yb8 will notify affected users without undue delay.

7. Your Privacy Rights

As a yb8 user, you have the following rights with respect to your personal data. These rights may be exercised at any time by contacting yb8 support at [email protected] with a clear description of your request. yb8 will respond to all valid privacy rights requests within 30 days.

• Right of access: You have the right to request a copy of the personal data yb8 holds about you, along with information about how it is being used. yb8 will provide this in a structured, readable format.
• Right to rectification: If any personal data yb8 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic contact and preference data directly through your account settings.
• Right to erasure ("right to be forgotten"): You may request that yb8 delete your personal data. This right is subject to certain limitations — for example, yb8 may be required to retain certain data to comply with legal obligations such as anti-money laundering regulations. yb8 will inform you of any data that cannot be deleted and the reason why.
• Right to restrict processing: You may request that yb8 temporarily restrict the processing of your personal data in certain circumstances, such as while the accuracy of the data is being contested.
• Right to data portability: Where processing is based on your consent or on the performance of a contract, you may request that yb8 provide your personal data to you in a commonly used, machine-readable format.
• Right to withdraw consent: Where yb8 processes your data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to yb8's processing of your personal data where that processing is based on legitimate interests. yb8 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.

8. Policy Updates & Contact

yb8 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, legal obligations, and the services we offer. When material changes are made to this Policy, we will notify registered users by posting a prominent notice on yb8.club and, where appropriate, by sending a notification to your registered email address. The "Last updated" date at the top of this page will always reflect the date of the most recent revision.

Your continued use of yb8.club following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the updated Policy, you should discontinue use of yb8.club and contact our support team to request account closure and data handling in accordance with the Your Privacy Rights section above.

Contact yb8 About Privacy

If you have any questions, concerns, or complaints about this Privacy Policy, or about the way yb8 handles your personal data, please contact our dedicated privacy support team using the details below. We are committed to addressing all privacy-related enquiries promptly and transparently.

• Email: [email protected] (plain text — not a clickable link)
• Subject line: "Privacy Enquiry — [Your Username]"
• Response time: We aim to acknowledge all privacy enquiries within 2 business days and to provide a full response within 30 days.
• Operating hours: Support is available 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6).