adc8 Privacy Policy — Your Data, Your Rights

When you register an account with adc8, interact with our platform, or contact our customer support team, we collect certain categories of personal data. This section describes each category in detail and explains the lawful basis on which it is collected.

Registration & Identity Data

At the point of account registration, adc8 collects your full legal name, date of birth, residential address, email address, and a valid mobile phone number registered in Bangladesh. This information is necessary to create and administer your account, verify your identity, and comply with Know Your Customer (KYC) obligations. The legal basis for processing this data is the performance of a contract (your account agreement with adc8) and compliance with legal obligations.

Know Your Customer (KYC) Documents

Before processing your first withdrawal request, adc8 requires you to submit identity verification documents. These typically include a copy of a government-issued photo ID (National ID card, passport, or birth registration certificate issued by a Bangladeshi authority), a proof-of-address document (such as a utility bill or bank statement dated within the last three months), and where applicable, evidence of ownership of your nominated payment method (for example, a screenshot of your bKash or Nagad account). These documents are processed solely for identity and fraud prevention purposes.

Financial & Transaction Data

adc8 records all financial transactions on your account including deposits, withdrawals, wagers placed, bonuses credited, and any adjustments made by our payments or compliance teams. This data includes payment method identifiers (such as your bKash mobile number or the last four digits of your Nagad account reference) but never stores complete card numbers or full mobile wallet credentials. Transaction data is retained for fraud prevention, AML compliance, and dispute resolution.

Usage & Behavioural Data

We automatically collect certain technical and behavioural data when you use the adc8 platform. This includes your IP address, device type and operating system, browser type and version, session timestamps, pages visited, games played (including stake amounts, win/loss outcomes, and session duration), and any errors or technical issues encountered. This data is used to personalise your experience, improve platform performance, detect suspicious activity, and support responsible gambling monitoring.

Communications Data

If you contact adc8 customer support by email, live chat, or any other channel, we retain a record of your communications including the content of messages, timestamps, and the method of contact. This data is used to resolve your query, improve our support quality, and maintain a record of interactions for compliance purposes.

Voluntary Data

Certain data — such as your preferred language, marketing communication preferences, and self-imposed responsible gaming limits — is provided voluntarily by you through account settings. This data is used solely in accordance with the preferences you have set and can be updated at any time through your account dashboard or by contacting support@adc8.im.

adc8 processes your personal data only for purposes that are lawful, legitimate, and proportionate. The following sets out the primary purposes for which your data is used and the corresponding legal basis for each:

Marketing Communications

adc8 will only send you promotional emails, SMS messages, or push notifications if you have explicitly opted in to receive marketing communications at the time of registration or through your account settings. You may withdraw your consent at any time by updating your notification preferences in your account dashboard or by emailing support@adc8.im. Withdrawing consent for marketing communications will not affect the lawfulness of processing carried out prior to withdrawal and will not affect your ability to use the adc8 platform.

Automated Decision-Making

adc8 uses automated systems to detect unusual account activity, flag potential fraud, and identify players who may be showing signs of problem gambling. Where an automated process results in a decision that materially affects you — such as the suspension of your account — you have the right to request human review of that decision. To exercise this right, contact support@adc8.im with the subject line "Human Review Request".

Responsible Gaming Monitoring

As part of our commitment to player welfare, adc8 may analyse your gaming behaviour — including session frequency, stake escalation patterns, and deposit velocity — to identify indicators of potential gambling harm. Where our systems flag a concern, a member of our responsible gaming team may contact you proactively. This monitoring is conducted in your interest and does not constitute marketing or profiling for commercial gain.

adc8 does not sell, rent, or trade your personal data to third parties for their own marketing purposes under any circumstances. However, to operate the adc8 platform effectively and fulfil our legal obligations, we work with a limited number of trusted third-party service providers who may process your data on our behalf. All such providers are contractually bound to handle your data in accordance with applicable data protection standards and are only permitted to use it for the specific purposes for which it was shared.

Payment Processors

To facilitate deposits and withdrawals, adc8 shares the minimum necessary transaction data with our payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These providers operate under their own privacy policies and data protection frameworks. adc8 is not responsible for data handling practices carried out solely within the payment provider's own systems.

Game Technology Providers

The casino games and sports betting products available on adc8 are powered by licensed third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive limited gameplay data — such as session identifiers and stake information — for the purpose of delivering the game experience and detecting fraud. They do not receive your full identity data or financial records.

Identity Verification Services

adc8 may use third-party KYC and identity verification services to assist with document verification and fraud screening. These services process your submitted identity documents solely for verification purposes and are prohibited from retaining, sharing, or using your documents for any other purpose.

Legal & Regulatory Disclosure

adc8 may be required by law, court order, or regulatory direction to disclose personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or other authorities. adc8 will comply with any such legal obligation. Where permitted by law, adc8 will notify you of such a disclosure request before complying, unless such notification is itself prohibited.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving adc8, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and the privacy policy applicable to your data following the transfer will be communicated to you in advance.

adc8 uses cookies and similar tracking technologies to operate core platform functionality, analyse usage patterns, remember your preferences, and maintain your session security. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.

What Are Cookies?

Cookies are small text files placed on your device by a website you visit. They are widely used to make websites work more efficiently, to remember user preferences, and to provide basic analytics information to the site operator. Cookies do not contain executable code and cannot directly access files on your device.

Types of Cookies Used by adc8

Managing Your Cookie Preferences

You can control and delete cookies through your browser settings at any time. Most modern browsers allow you to refuse all cookies, accept only certain types, or delete cookies that have already been placed on your device. Please note that disabling strictly necessary cookies will prevent you from logging in to adc8 and using core platform features. Instructions for managing cookies vary by browser — consult your browser's help documentation for specific guidance.

Third-Party Analytics

adc8 may use privacy-respecting analytics tools to understand how players interact with the platform in aggregate. Any analytics data collected is anonymised or pseudonymised before processing and is not used to identify individual players for commercial profiling purposes.

adc8 takes the security of your personal data seriously. We have implemented a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure. The following describes the key security controls in place across the adc8 platform.

Encryption in Transit and at Rest

All data transmitted between your device and the adc8 platform is encrypted using TLS 1.2 or higher. Our servers enforce HTTPS across all platform pages and API endpoints, and HTTP connections are automatically redirected to HTTPS. Personal data stored in our databases — including KYC documents and payment records — is encrypted at rest using AES-256 encryption.

Access Controls

Access to systems containing personal data is restricted to authorised adc8 personnel who require that access to perform their job functions. Access is granted on a least-privilege basis and is subject to role-based access control (RBAC) policies. Multi-factor authentication (MFA) is required for all internal staff accessing sensitive data systems. Access logs are maintained and reviewed regularly for anomalous activity.

Intrusion Detection and Monitoring

adc8 operates continuous security monitoring across its infrastructure. Automated intrusion detection systems scan for unusual access patterns, brute-force attempts, and known attack signatures. Security events are logged, reviewed, and escalated to our security team according to defined incident response procedures.

Data Breach Response

In the event of a confirmed personal data breach that is likely to result in a risk to your rights and freedoms, adc8 will take immediate steps to contain the breach, assess its scope, and notify affected players without undue delay. We will provide you with a clear description of the nature of the breach, the categories of data affected, the likely consequences, and the measures we have taken or propose to take to address it.

Your Role in Security

While adc8 maintains robust platform-level security, the security of your account also depends on your own practices. We strongly recommend using a unique, strong password for your adc8 account, enabling two-factor authentication (2FA) where available, never sharing your login credentials with any third party, and logging out of your account when using shared or public devices. If you suspect unauthorised access to your account, contact support@adc8.im immediately.

adc8 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, and in any event for no longer than is required by applicable law or regulation. The following table summarises the primary retention periods applied to different categories of data held by adc8.

Post-Retention Deletion

Once a retention period expires, data is either securely deleted from adc8 systems or anonymised so that it can no longer be linked to any individual. Anonymised and aggregated data may be retained indefinitely for statistical and platform development purposes, but this data cannot be used to identify you personally.

Early Deletion Requests

You may request the deletion of your personal data before the end of the applicable retention period. However, adc8 may decline such a request where the data is required to comply with a legal obligation, to establish, exercise, or defend a legal claim, or where a regulatory authority has directed that the data be retained for a specific period. In all such cases, adc8 will inform you of the reason for declining your deletion request and the anticipated date on which the data will be deleted.

adc8 respects and upholds your rights in relation to your personal data. The following rights are available to you as a player and data subject. To exercise any of these rights, contact our data team at support@adc8.im with the subject line "Data Rights Request" and a description of the right you wish to exercise. adc8 will respond to your request within a reasonable timeframe and in any event within 30 days of receipt.

Right of Access

You have the right to request a copy of the personal data that adc8 holds about you, together with information about how it is being used and with whom it has been shared. This is commonly referred to as a Subject Access Request (SAR). adc8 will provide this information in a structured, commonly used format at no charge, subject to verification of your identity.

Right to Rectification

If any personal data held by adc8 is inaccurate or incomplete, you have the right to request that it be corrected or supplemented. Identity corrections that affect your KYC status may require re-submission of supporting documents.

Right to Erasure

You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, where you withdraw consent and there is no other legal basis for processing, or where the data has been unlawfully processed. As noted in Section 6, this right may be limited by legal retention obligations applicable to adc8 as an online gaming operator.

Right to Restriction of Processing

You may request that adc8 restrict the processing of your personal data in certain circumstances, such as while a challenge to the accuracy of your data is being resolved, or where you have objected to processing and we are considering your objection.

Right to Data Portability

Where adc8 processes your data on the basis of your consent or to perform a contract with you, and that processing is carried out by automated means, you have the right to receive the data you have provided to adc8 in a structured, machine-readable format, and to request that it be transferred directly to another controller where technically feasible.

Right to Object

You have the right to object at any time to the processing of your personal data where that processing is based on adc8's legitimate interests. If you object, adc8 will cease processing unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or where the processing is necessary for the establishment, exercise, or defence of legal claims.

Rights Related to Automated Decision-Making

Where adc8 makes decisions about you solely by automated means that produce legal or similarly significant effects, you have the right to request human review of that decision, to express your point of view, and to contest the outcome. To invoke this right, email support@adc8.im with the subject line "Human Review Request" and a description of the automated decision you are contesting.

Right to Withdraw Consent

Where adc8 processes your data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of any processing carried out prior to the withdrawal. You can withdraw consent via your account settings or by contacting support@adc8.im.

Contacting adc8 About This Policy

If you have any questions, concerns, or complaints regarding the way adc8 collects, uses, or protects your personal data, or if you wish to exercise any of the data rights described in Section 7, please contact our data team using the details below. All data-related enquiries are handled by a dedicated team member and are treated with strict confidentiality.

Email: support@adc8.im — please use the subject line "Privacy Enquiry" or "Data Rights Request" as appropriate.

adc8 aims to acknowledge all privacy-related enquiries within two business days and to resolve them fully within 30 calendar days. Where a matter is complex or requires additional verification, we will keep you informed of progress and provide an expected resolution date.

Changes to This Privacy Policy

adc8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable law. When we make material changes to this Policy, we will notify registered players by email (to the address associated with your account) and by displaying a prominent notice on the adc8 platform for a minimum of 14 days prior to the changes taking effect.

Non-material changes — such as clarifications of existing language, corrections of typographical errors, or updates to formatting — may be made without prior notice, though the "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically to remain informed of how adc8 protects your data.

Your continued use of the adc8 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the revised Policy, you should cease using the platform and contact support@adc8.im to discuss the closure of your account.

Children and Minors

The adc8 platform is strictly intended for adults aged 18 years and over. adc8 does not knowingly collect or process personal data relating to individuals under the age of 18. If you believe that a minor has registered an account or provided personal data to adc8, please contact support@adc8.im immediately and we will take prompt action to investigate and, where confirmed, delete the relevant data and close the account.