x8k Privacy Policy & Data Protection

When you register for an x8k account or interact with the platform, we collect and process a number of categories of personal data. The specific data collected depends on the nature of your interaction with the platform and the stage of the account lifecycle you are at. The principal categories of data collected by x8k are described below.

x8k does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information as part of standard account operations. Where any such data is incidentally shared by a player through support communications, it will be handled with heightened care and will not be processed for any purpose beyond resolving the specific support matter.

Data relating to minors is not collected or processed by x8k under any circumstances. The x8k platform is strictly for adults aged 18 and above. If x8k discovers that personal data has been collected from a person under the age of 18, that data will be deleted immediately and the associated account will be permanently closed.

x8k processes personal data only where there is a lawful basis for doing so. The lawful bases on which x8k relies include: performance of a contract with you (operating your account and delivering the platform service), compliance with legal obligations (including anti-money-laundering and age verification requirements), legitimate interests pursued by x8k (including fraud prevention and platform improvement), and — where applicable — your consent (for example, marketing communications).

The following table summarises the primary purposes for which x8k uses your personal data and the lawful basis for each processing activity:

x8k will not use your personal data for any purpose that is incompatible with the purposes set out above without first notifying you and, where required, obtaining your consent. Automated decision-making — including profiling that produces legal or significant effects — will only be carried out where x8k has a lawful basis to do so and where appropriate safeguards are in place. You have the right to request human review of any automated decision that affects you materially.

In the course of operating the x8k platform, your personal data may be shared with a limited number of carefully selected third-party service providers and partners. All third parties who receive data from x8k are contractually required to process that data only for the specific purpose for which it was shared and to maintain security standards consistent with those applied by x8k itself.

The categories of third parties with whom x8k may share your data include:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard — to process deposits and withdrawals made through your x8k account. Each provider operates under its own privacy policy and is independently regulated.
• Identity verification services: Third-party KYC providers who assist with the verification of identity documents and age confirmation as required for account opening and withdrawal processing.
• Game content providers: Internationally accredited game studios (such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming) who supply the games available on the x8k platform. These providers may receive limited technical data (such as session identifiers) necessary to deliver the game experience.
• IT infrastructure and security providers: Cloud hosting, content delivery, and cybersecurity service providers who support the technical operation and security of the x8k platform.
• Analytics providers: Platform performance and usage analytics tools that help x8k understand how the platform is being used and where improvements can be made. These tools process aggregated or pseudonymised data where possible.
• Legal and regulatory authorities: Where required by applicable law, regulation, or a lawful order from a competent authority, x8k may disclose personal data to regulatory bodies, law enforcement agencies, or courts.

x8k does not transfer personal data to international recipients outside of the arrangements described above. Where any data transfer takes place, x8k ensures that appropriate safeguards are in place to protect the data in transit and at its destination, consistent with the data protection standards applied on the platform.

x8k uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to gather anonymised analytics data about platform usage. Cookies are small text files placed on your device when you visit the x8k website. They do not contain your personal login credentials or payment details.

The following categories of cookies are used on the x8k platform:

You can manage cookie preferences through your browser settings. Most modern browsers allow you to view, block, or delete cookies on a per-site basis. Note that disabling strictly necessary or security cookies may prevent you from accessing your x8k account or using certain platform features. x8k does not use third-party advertising cookies or behavioural tracking cookies for the purpose of serving targeted advertisements on external websites.

x8k retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or accounting obligations. The retention period for different categories of data varies depending on the nature of the data and the purpose for which it was processed.

As a general guide, the following retention periods apply on the x8k platform:

• Account and identity data: Retained for the duration of the account and for a minimum period of five years following account closure, in compliance with standard anti-money-laundering record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five years from the date of the transaction, as required by applicable financial regulations.
• Support communications: Retained for up to three years from the date of the last interaction, to enable resolution of any follow-up queries or disputes.
• Usage and gameplay data: Retained for up to two years from the date of the activity, for platform analytics, responsible gaming monitoring, and dispute resolution purposes.
• Technical and device data: Retained for up to twelve months from collection, except where retained for longer as part of fraud investigation records.

At the end of the applicable retention period, personal data is securely deleted or anonymised in accordance with x8k's internal data management procedures. Where data has been anonymised such that it can no longer be linked to an identifiable individual, it may be retained indefinitely for aggregate analytics purposes without being subject to this Privacy Policy.

All personal data held by x8k is stored on secure servers protected by industry-standard access controls, encryption at rest, and regular security auditing. x8k takes all reasonable technical and organisational measures to prevent unauthorised access, loss, alteration, or disclosure of stored personal data.

The security of your personal data is a core operational priority for x8k. The platform employs a layered security architecture that combines technical controls, procedural safeguards, and staff training to minimise the risk of a personal data breach. Key security measures include:

• SSL/TLS encryption in transit: All data exchanged between your browser or app and the x8k platform is encrypted using SSL/TLS protocols, preventing interception by third parties during transmission.
• Encryption at rest: Sensitive personal data stored in x8k's databases — including identity data and financial references — is encrypted at rest using strong encryption standards.
• Access controls: Access to systems that hold personal data is restricted to authorised personnel only, on a strict need-to-know basis. Access rights are reviewed regularly and revoked promptly when no longer required.
• Two-factor authentication (2FA): Administrative access to systems holding personal data requires multi-factor authentication. Players are also encouraged to use strong, unique passwords for their x8k accounts.
• Intrusion detection and monitoring: x8k's infrastructure is monitored continuously for unusual activity, potential intrusion attempts, and anomalous data access patterns. Security alerts are reviewed by the platform's technical team.
• Vulnerability management: Regular security assessments and penetration testing are conducted to identify and remediate vulnerabilities in the x8k platform before they can be exploited.

Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed to be completely secure. x8k will notify affected players and, where applicable, the relevant authorities in the event of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, in accordance with applicable data protection obligations. Players are encouraged to report any suspected security vulnerabilities or account compromises to the x8k support team without delay.

As an x8k player, you hold a number of rights in relation to the personal data we hold about you. These rights can be exercised at any time by contacting the x8k support team via live chat on the platform or by email at [email protected]. x8k will respond to all valid data rights requests within a reasonable timeframe and, in any event, within 30 days of receipt.

x8k reserves the right to update this Privacy Policy at any time to reflect changes in platform operations, applicable legal requirements, or data processing practices. When material changes are made to this policy, registered players will be notified via an in-platform announcement or by email to the address on record. The "Effective" date shown at the top of this page will be updated to reflect the date the revised policy takes effect.

Your continued use of the x8k platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. We encourage you to review this page periodically to stay informed about how your data is being handled.

If you have any questions, concerns, or requests relating to this Privacy Policy or to x8k's data processing practices, please contact the support team through any of the following channels:

• Live chat: Available directly on the x8k platform, 8:00 AM – 11:59 PM BST (UTC+6), with an average response time of 2–5 minutes.
• Email: [email protected] — plain text, not a clickable link. Please include "Privacy Enquiry" in your subject line for faster routing.

x8k is committed to resolving all privacy-related enquiries promptly, professionally, and in accordance with the rights and standards described in this policy. We take every privacy concern seriously and will always provide a substantive, written response to legitimate data rights requests.

Privacy Policy effective: January 2026    18+ Only — Play Responsibly