iw8 Privacy Policy

iw8 is the data controller responsible for the personal information you provide when using our Platform. If you have any questions, concerns, or requests regarding this Privacy Policy or the way your personal data is handled, please contact our support team via the live chat feature available inside the iw8 app. You may also write to us by email at: [email protected] (plain text only — this address is not a clickable link).

We aim to respond to all privacy-related queries within five business days. For time-sensitive matters, live chat within the app is the fastest route to our support team, available 24 hours a day, seven days a week.

When you register for an iw8 account and use our services, we collect various categories of personal information. The specific data we collect includes but is not limited to:

• Identity data: Full name, date of birth, gender, and a copy of government-issued photo identification (such as a National ID card or passport) where required for age and identity verification.
• Contact data: Mobile phone number, email address, and residential address including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh).
• Financial data: Mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers), Visa and Mastercard card details (last four digits and billing name only — full card numbers are never stored on our servers), and transaction history.
• Account data: Username, hashed password, account settings, login timestamps, session history, and security question responses.
• Usage data: Pages visited, games played, bets placed, session duration, device type, operating system, browser type, IP address, and approximate geolocation derived from IP.
• Communications data: Records of conversations with our support team via live chat, and any feedback or complaints you submit.
• Responsible gaming data: Any deposit limits, session time limits, self-exclusion requests, or time-out settings you have applied to your account.

We do not knowingly collect personal data from individuals under the age of 21. If we become aware that a person under 21 has provided us with personal data, we will take immediate steps to delete that information and close the associated account.

iw8 collects personal data through the following channels:

• Direct interactions: Information you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting support, or updating your profile settings.
• Automated technologies: We automatically collect certain technical and behavioural data when you visit or use the iw8 Platform. This includes cookies, web beacons, pixel tags, and server log data. See Section 9 for our full Cookie Policy.
• Third-party sources: Where required for identity and fraud verification, we may receive data about you from payment processors, identity verification providers, and fraud-prevention databases. We may also receive data from our game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe) relating to your in-game activity.

iw8 processes your personal data only for specific, legitimate purposes. The table below sets out the key purposes and the legal basis on which we rely for each:

iw8 does not sell your personal data to third parties. We may share your information only in the following limited circumstances:

• Payment processors: We share the minimum necessary financial data with bKash, Nagad, Rocket, Upay, Visa, and Mastercard to facilitate your transactions.
• Identity verification providers: We may use reputable third-party services to verify your identity and age in accordance with our 21+ policy and anti-fraud obligations.
• Game providers: Your account identifier and relevant gameplay data are shared with our certified game studio partners (e.g., Pragmatic Play, Evolution Gaming, NetEnt) solely to enable game delivery and to record results.
• Technology and hosting providers: We use third-party infrastructure, cloud hosting, and security services to operate the iw8 Platform. These providers process data only on our instructions and are bound by data processing agreements.
• Legal and regulatory authorities: Where we are required by law, court order, or regulatory direction to disclose personal data, we will do so. We will notify you of such disclosure wherever legally permissible.
• Business transfers: In the event of a merger, acquisition, or sale of iw8's business assets, your personal data may be transferred as part of that transaction. You will be notified in advance if such a transfer materially affects how your data is processed.

iw8 retains your personal data only for as long as it is necessary to fulfil the purposes described in this Policy, or as required by applicable legal and regulatory obligations. In practice, this means:

• Account data is retained for the duration of your active account relationship with iw8, and for a minimum of five years after account closure to meet anti-money-laundering record-keeping requirements.
• Transaction records are retained for a minimum of five years from the date of each transaction.
• Support communications are retained for three years from the date of the last interaction.
• Usage and technical log data is typically retained for twelve months and then anonymised or deleted.

When your data is no longer required, iw8 will securely delete or anonymise it in accordance with our internal data retention schedule.

As a player on the iw8 Platform, you have the following rights in relation to your personal data:

• Right to access: You may request a copy of the personal data iw8 holds about you at any time.
• Right to rectification: You may ask us to correct any inaccurate or incomplete personal data we hold.
• Right to erasure: In certain circumstances, you may request that iw8 delete your personal data ("right to be forgotten"). Note that we may be legally required to retain certain data even after an erasure request.
• Right to restrict processing: You may ask us to limit how we use your data in certain situations.
• Right to data portability: You may request a structured, machine-readable copy of the personal data you have provided to iw8.
• Right to object: You may object to the processing of your data where we rely on legitimate interests as our legal basis, or where we use your data for direct marketing purposes.
• Right to withdraw consent: Where we process your data based on consent (such as for marketing communications), you may withdraw that consent at any time via your account settings or by contacting support.

To exercise any of these rights, please contact our support team via the live chat inside the iw8 app. We will respond to all valid data rights requests within 30 calendar days. We may need to verify your identity before processing your request.

iw8 takes the security of your personal data seriously. We implement a range of technical and organisational security measures to protect your information against unauthorised access, disclosure, alteration, or destruction. These include:

• 256-bit SSL (Secure Sockets Layer) encryption on all data transmitted between your device and our servers.
• Encrypted storage of sensitive data, including password hashing using industry-standard algorithms.
• Access controls that restrict internal access to personal data to authorised personnel only, on a strict need-to-know basis.
• Regular security audits, penetration testing, and vulnerability assessments of our Platform infrastructure.
• Two-factor authentication (2FA) available for player accounts to provide an additional layer of login security.
• Continuous monitoring of our systems for suspicious activity, fraud signals, and potential data breaches.

While iw8 applies robust security practices, no online platform can guarantee absolute security. In the unlikely event of a data breach that poses a risk to your rights, we will notify affected players promptly and take all necessary remedial steps.

The iw8 Platform uses cookies and similar tracking technologies to improve your experience, analyse site usage, and deliver relevant content. Cookies are small text files placed on your device when you visit our site.

We use the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function correctly, such as maintaining your login session and remembering your account preferences. These cannot be disabled.
• Performance and analytics cookies: Help us understand how players use the Platform, which pages are visited most, and where errors occur, so we can improve the service.
• Functional cookies: Remember your settings and preferences (such as language or display options) to personalise your experience.
• Marketing cookies: Used to deliver relevant promotional content and to measure the effectiveness of our marketing campaigns. These are only set where you have given explicit consent.

You can manage your cookie preferences at any time through your device browser settings. Note that disabling certain cookies may affect the functionality of the iw8 Platform.

With your consent, iw8 may contact you with promotional offers, bonus notifications, seasonal promotions (such as Eid specials, BPL match-day offers, or IPL season bonuses), and other marketing communications via SMS, push notification, or email.

You can opt out of marketing communications at any time by adjusting your notification preferences in your iw8 account settings, or by contacting our support team via live chat. Opting out of marketing messages will not affect transactional or account-related communications, which are necessary for us to provide the service.

The iw8 Platform is strictly for players aged 21 and above. We do not knowingly collect, process, or store personal data belonging to persons under the age of 21. If you are a parent or guardian and believe that a minor in your care has registered on iw8, please contact us immediately via live chat so we can close the account and delete all associated personal data without delay. iw8 supports the use of parental control and internet filtering software to help prevent underage access to gambling platforms.

iw8 reserves the right to update or revise this Privacy Policy at any time. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify registered players via email or an in-platform notification. We encourage you to review this Policy periodically to stay informed about how we protect your data. Your continued use of the iw8 Platform following the publication of any updated Policy constitutes your acceptance of the changes.