Privacy Policy — xv8 Online Casino

2 Information We Collect

xv8 collects personal information from you in a number of ways — directly when you provide it to us, automatically when you use our platform, and occasionally from third-party sources for verification and fraud-prevention purposes. The categories of information we collect include:

2.1 Information You Provide Directly

• Registration Data: When you create an xv8 account, we collect your full legal name, date of birth, gender, residential address, email address, and mobile phone number.
• Identity Verification Documents: As part of our Know Your Customer (KYC) obligations, we may collect copies of government-issued identification (such as a National ID card, passport, or driving licence), proof of address documents (such as a utility bill or bank statement), and proof of payment method ownership.
• Financial Information: We collect details about the payment methods you use to deposit and withdraw funds, including your bKash, Nagad, Rocket, or Upay mobile wallet number, and card details (where applicable). We do not store full card numbers on our servers — card data is handled by our certified payment processing partners.
• Support Communications: If you contact xv8 via our support email at [email protected] or through live chat, we retain records of the correspondence, including any personal information you voluntarily share during those interactions.
• Responsible Gaming Preferences: If you set deposit limits, cooling-off periods, or request self-exclusion, we record those preferences and restrictions as part of your player profile.

2.2 Information Collected Automatically

• Device & Technical Data: We automatically collect information about the device and browser you use to access xv8, including IP address, operating system, browser type and version, device identifiers, and screen resolution.
• Usage & Behavioural Data: We collect data about how you interact with the xv8 platform — including pages visited, games played, betting activity, session duration, click patterns, and navigation paths. This information helps us understand player behaviour and improve our Services.
• Transaction Logs: All deposits, withdrawals, wagers, wins, and bonus transactions are recorded in our server-side logs. These records are maintained for compliance, audit, and dispute-resolution purposes.
• Geolocation Data: We may collect approximate geolocation information based on your IP address to enforce jurisdictional access restrictions and to comply with our responsible gaming obligations.
• Cookies & Tracking Technologies: We use cookies, web beacons, and similar technologies to collect information about your browsing activity on xv8. Please see Section 5 of this Policy for full details.

2.3 Information from Third Parties

• Identity Verification Providers: We may receive data from third-party KYC and identity verification services to confirm the accuracy of the information you have provided during registration.
• Payment Processors: Our payment partners (including bKash, Nagad, Rocket, and Upay) may share transaction confirmation data with us to facilitate deposit and withdrawal processing.
• Fraud Prevention Services: We may receive risk-scoring and fraud-flag data from specialist fraud prevention and anti-money laundering (AML) service providers to help protect the platform and its players.

3 How We Use Your Information

xv8 uses the personal data we collect for the following specific purposes. We only process your data where we have a lawful basis to do so — either because it is necessary for the performance of your player account contract, because we have a legal obligation to process it, because we have a legitimate business interest, or because you have given your explicit consent.

• Account Creation and Management: We use your registration data to create, verify, and maintain your xv8 player account, to authenticate your identity when you log in, and to communicate important account-related notifications.
• Payment Processing: We use your financial data to process deposits, execute withdrawal requests, and reconcile transaction records. All payment processing is conducted in Bangladeshi Taka (BDT).
• KYC and Age Verification: We use identity and document data to verify that you are at least 18 years of age and that your registration details are accurate. This is a legal obligation we take seriously.
• Fraud Prevention and Security: We use technical data, transaction logs, and third-party risk data to detect and prevent fraudulent activity, money laundering, multiple-account violations, bonus abuse, and other platform security threats.
• Regulatory Compliance: We are required to retain certain player data under applicable anti-money laundering regulations. We process your data to fulfil these obligations and to respond to lawful requests from regulatory authorities or law enforcement agencies.
• Responsible Gaming: We use behavioural and transaction data to monitor for signs of problem gambling and to enforce responsible gaming tools (deposit limits, cooling-off periods, self-exclusion) that you or our team have activated on your account.
• Platform Improvement: We analyse aggregated, anonymised usage and behavioural data to understand how players use xv8, to identify areas for improvement, and to develop new features and Services.
• Marketing Communications: Where you have opted in to receive promotional communications, we use your contact information to send you relevant bonus offers, tournament announcements, and platform news. You may withdraw this consent at any time by contacting [email protected].
• Customer Support: We use your account information and support communication records to respond to enquiries, resolve disputes, and provide technical assistance.

4 Sharing Your Information

xv8 does not sell, rent, or trade your personal information to any third party for their own marketing purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment Service Providers: We share relevant financial and identity information with our payment processing partners — including bKash, Nagad, Rocket, Upay, Visa, and Mastercard — solely to facilitate deposit and withdrawal transactions on your account.
• Game Software Providers: Our casino games are supplied by certified third-party providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive session-level data (such as player ID, stake amounts, and game outcomes) to enable game functionality and to settle game results accurately.
• Identity Verification and KYC Providers: We share your registration data and document uploads with specialist KYC verification partners to confirm your identity and age. These partners process your data solely on our behalf under strict data processing agreements.
• Fraud Prevention and AML Service Providers: We share technical and transaction data with fraud prevention and anti-money laundering specialists to protect the platform and its players from financial crime.
• Legal and Regulatory Authorities: We may disclose your personal information to law enforcement agencies, regulatory bodies, or courts if we are legally compelled to do so by a valid legal process — such as a court order, subpoena, or official regulatory request.
• Business Transfers: In the event that xv8 undergoes a merger, acquisition, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected players of any such transfer via their registered email address.
• Professional Advisers: We may share limited information with our legal advisers, accountants, or auditors where necessary for the provision of professional services, under binding confidentiality obligations.

5 Cookies & Tracking Technologies

xv8 uses cookies and similar tracking technologies to operate the platform effectively, to personalise your experience, and to analyse how the site is used. A cookie is a small text file that is placed on your device by a website when you visit it. Cookies allow the website to recognise your device on subsequent visits and to remember certain preferences or settings.

The following categories of cookies are used on xv8:

• Strictly Necessary Cookies: These cookies are essential for the xv8 platform to function. They enable core features such as account login sessions, security token validation, and page load performance. These cookies cannot be disabled without fundamentally impairing your ability to use the platform.
• Functional Cookies: These cookies allow xv8 to remember your preferences — such as your preferred language, display settings, and responsible gaming tool configurations — so that you do not need to re-enter them on each visit.
• Analytical Cookies: We use analytical cookies to collect aggregated, anonymised data about how visitors interact with xv8 — including which pages are most visited, average session duration, and navigation paths. This data helps us improve the platform experience for all users.
• Security Cookies: These cookies support our fraud detection systems by identifying patterns of unusual activity across sessions and helping to verify that interactions are being made by a genuine human user rather than an automated bot.

Most web browsers automatically accept cookies by default, but you can modify your browser settings to decline cookies or to receive a notification when a cookie is being placed on your device. Please note that disabling certain categories of cookies — particularly strictly necessary cookies — may affect the functionality of the xv8 platform and prevent you from accessing certain features including account login.

6 Data Security

xv8 takes the security of your personal data extremely seriously and has implemented a comprehensive set of technical and organisational measures to protect your information from unauthorised access, disclosure, alteration, or destruction.

• SSL Encryption: All data transmitted between your device and the xv8 servers is protected by 256-bit Secure Sockets Layer (SSL) encryption. The padlock icon visible in your browser's address bar confirms that your connection to xv8.club is encrypted.
• Secure Data Storage: Your personal data and financial records are stored on secure servers with access controls, intrusion detection systems, and regular security audits. We restrict access to personal data to authorised personnel only, on a strict need-to-know basis.
• Password Security: Player account passwords are stored using industry-standard cryptographic hashing algorithms. We never store plaintext passwords. We strongly encourage players to use unique, strong passwords and to enable two-factor authentication (2FA) for additional account protection.
• Payment Data Handling: Full card numbers and sensitive payment credentials are never stored on xv8 servers. Payment processing is delegated to certified payment service providers who maintain their own rigorous security standards.
• Ongoing Monitoring: Our security team monitors the xv8 platform continuously for signs of data breaches, unusual access patterns, and other security incidents. In the event of a confirmed data breach that poses a risk to player data, we will notify affected players via their registered email address without undue delay.

While we take all reasonable and proportionate steps to protect your data, no method of data transmission over the internet or method of electronic storage is entirely immune to risk. Players are advised to take responsibility for their own account security — particularly by keeping their login credentials confidential and not accessing xv8 over unsecured public Wi-Fi networks.

7 Data Retention

xv8 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulatory obligation. Our general retention principles are as follows:

• Active Accounts: Personal data associated with an active xv8 player account is retained for the duration of the account's existence and for a period of at least five years following account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC and Identity Documents: Copies of identity documents submitted for KYC verification are retained for a minimum of five years from the date of submission or from the date of account closure, whichever is later.
• Transaction Records: All deposit, withdrawal, wager, and bonus transaction records are retained for a minimum of seven years for financial audit and AML compliance purposes.
• Support Communications: Records of support interactions — including emails and live chat transcripts — are retained for a minimum of three years to enable dispute resolution and quality assurance.
• Marketing Data: If you have opted in to receive marketing communications from xv8, we retain your marketing preference data until you withdraw consent or request deletion, subject to any legal retention obligations.
• Self-Excluded Players: Where a player has requested self-exclusion, we retain sufficient data to enforce that exclusion for its full duration — even if the player requests account deletion. This is a responsible gaming obligation that supersedes the right to deletion in this specific context.

Upon expiry of the applicable retention period, personal data is securely and irreversibly deleted or anonymised so that it can no longer be associated with any individual.

8 Your Rights

As a user of the xv8 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and we will respond within 30 calendar days.

• Right of Access: You have the right to request a copy of all personal data that xv8 holds about you. We will provide this information in a clear, structured format free of charge for the first request in any 12-month period.
• Right to Rectification: If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may also update certain information directly through the Account Settings section of your xv8 profile.
• Right to Erasure: You have the right to request that we delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected. Please note that this right is subject to exceptions, including our legal obligation to retain certain records for AML and regulatory compliance purposes.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data in specific circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: Where we process your data on the basis of your consent or on the basis of a contract, you have the right to receive your data in a structured, commonly used, machine-readable format and to request that we transmit it to another data controller where technically feasible.
• Right to Withdraw Consent: Where we process your data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes. Upon receiving such an objection, we will immediately cease processing your data for marketing.

9 Third-Party Services

The xv8 platform integrates with a number of third-party services to provide the full range of gaming, payment, and security features available to players. These third-party services have their own independent privacy policies and data handling practices. xv8 is not responsible for the privacy practices of third-party services, and we recommend that you review the privacy policies of any third-party service you interact with.

Key third-party service categories integrated into the xv8 platform include:

• Game Software Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified providers deliver game content through the xv8 platform. Game session data is processed by these providers to determine game outcomes and settle results.
• Payment Processors: bKash, Nagad, Rocket, Upay, and card payment networks process financial transactions initiated on xv8. These providers operate their own data environments governed by their respective terms and privacy policies.
• KYC and Verification Services: Specialist identity verification providers process document uploads and verification checks on behalf of xv8 to fulfil our KYC obligations.
• Analytics Services: We use privacy-respecting analytics tools to collect aggregated, anonymised platform usage data. No personally identifiable information is shared with analytics providers without your consent.

The xv8 website does not contain links to external third-party websites beyond those necessary for the delivery of our Services. We do not maintain affiliate links or sponsored content links that would direct you to third-party websites whose privacy practices we do not control.

10 Changes to This Policy

xv8 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable privacy laws and regulations, changes in the technology we use, or other operational developments. When we make material changes to this Policy, we will:

• Update the "Effective Date" displayed at the top of this page to reflect the date on which the revised Policy enters into force.
• Notify registered players via the email address associated with their xv8 account at least 14 days before material changes take effect, where reasonably practicable.
• Display a prominent notice on the xv8 platform for a reasonable period following the update, directing players to review the revised Policy.

Minor changes — such as corrections of typographical errors, clarifications that do not materially alter the scope or effect of the Policy, or updates to contact information — may be made without prior notice, though the Effective Date will always be updated to reflect any revision.

Your continued use of the xv8 platform following the effective date of any revised Privacy Policy constitutes your acceptance of that revised Policy. If you do not agree with any change to this Policy, you should close your account and cease using the platform before the revised Policy takes effect.

11 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way xv8 handles your personal data, please do not hesitate to contact our Data Protection team. We are committed to addressing all privacy-related enquiries promptly, professionally, and in confidence.

You can reach the xv8 Data Protection team at the following contact point:

• Email: [email protected] (please use the subject line "Privacy Policy Enquiry" or "Data Rights Request" as appropriate)
• Response Time: We aim to acknowledge all privacy-related enquiries within 2 business days and to provide a substantive response within 30 calendar days.
• Support Hours: Our support team is available 24 hours a day, 7 days a week, including Bangladesh public holidays.

When submitting a data rights request or a privacy enquiry, please include your registered username or account email address and a clear description of your request so that we can handle your query as efficiently as possible. We may need to verify your identity before processing certain requests to ensure the security of your data.