a8pay Privacy Policy
This policy explains what personal data a8pay collects from players in Bangladesh, why we need it, and how you can control it.
Last updated: 10 November 2026Who Operates a8pay
a8pay is an online casino and gaming platform serving players in Bangladesh. When you create an account, make a deposit via bKash, Nagad or Rocket, or contact our support team, you share personal data with us. This policy tells you exactly what happens to that data.
"We", "us" and "a8pay" all refer to the operator of a8pay.win. Any data processing described below is carried out by us or by carefully selected third-party partners working under our instruction.
Data We Collect
We collect only the data we genuinely need. The table below sets out each category, the source, and the reason we ask for it.
| Category | Examples | Source | Why we need it |
|---|---|---|---|
| Identity | Full name, date of birth, NID / Passport / Driving Licence number | You, during registration or KYC | Verify age (18+) and identity before your first withdrawal |
| Contact | Mobile number | You, at sign-up | Account security, OTP, support |
| Financial | bKash / Nagad / Rocket / Upay account reference, Bank Transfer details, transaction amounts | You, when depositing or withdrawing | Process payments, detect fraud, comply with AML rules |
| Gaming activity | Bets placed, games played, session duration, win/loss history | Our platform, automatically | Run the service, calculate bonuses, detect problem gambling |
| Device & technical | IP address, browser type, operating system, device ID | Automatically, when you visit a8pay.win or use the app | Security, fraud prevention, service optimisation |
| Communications | Live chat transcripts, support tickets | You, when you contact our 24/7 Live Chat | Resolve your issue, train support staff, audit trail |
Data You Do Not Need to Provide
You are never required to share your social-media credentials, email passwords, or any document not listed under our KYC requirements. If a request feels unusual, contact our 24/7 Live Chat before sharing anything.
Why We Use Your Data
We rely on three lawful bases for processing:
- Contract performance: To run your account, process bKash/Nagad deposits (minimum ৳300), pay out withdrawals, and credit bonuses like the 185% welcome bonus up to ৳19,500.
- Legal obligation: To verify your identity (KYC) before your first withdrawal, retain transaction records as required by applicable regulations, and report suspicious activity.
- Legitimate interest: To detect fraud, prevent underage gambling, improve platform performance, and send you relevant account notifications. We balance this interest against your right to privacy before we act on it.
We do not use your data to send unsolicited promotional messages from third parties. Any marketing from a8pay itself will relate directly to our games and bonuses, and you can opt out at any time from your account settings.
Who Sees Your Data
a8pay does not sell your personal data. We share it only in these situations:
- Payment processors: bKash, Nagad, Rocket, Upay, and partner banks receive the minimum data needed to complete a transaction.
- Game providers: Evolution, Habanero, KA Gaming, Spribe, Sexy Gaming, and FA Chai receive a pseudonymous player ID and bet data to operate their games inside the a8pay lobby. They do not receive your name or financial details.
- KYC and fraud-prevention services: Third-party identity-verification tools process your NID, passport, or driving licence image to confirm authenticity. These partners are contractually bound to confidentiality.
- Regulators and law enforcement: We disclose data when required by a valid legal process or authority request.
- Business transfers: If a8pay is ever acquired or merged, your data may transfer to the new operator under the same privacy protections described here. We will notify you in advance.
Cookies and Tracking
a8pay.win uses cookies and similar tracking technologies. Here is a plain-English breakdown:
| Type | Purpose | Can you disable? |
|---|---|---|
| Essential | Keep your session active, store login state, protect against CSRF attacks | No — the site will not function without them |
| Analytics | Measure page load times, identify broken flows, understand which games are popular | Yes — opt out in account settings |
| Preference | Remember your language and display choices | Yes — clearing browser cookies resets these |
We do not use third-party advertising cookies that track you across other websites. The a8pay app (Android, version 2.0.20) uses local storage for session data only; it does not access your contacts, SMS, or call logs.
How Long We Keep It
We keep your account data for as long as your account is active. After you close your account, we retain transaction and identity records for the period required by applicable anti-money-laundering rules — typically five years from the date of the last transaction.
Gaming logs (bets, wins, losses, session times) are kept for three years. Live-chat transcripts are stored for 12 months. Anonymous, aggregated analytics data has no fixed deletion date because it cannot be linked back to any individual.
Your Rights
Depending on your jurisdiction, you have some or all of the following rights regarding the data a8pay holds about you:
- Access: Request a copy of all personal data we hold on you.
- Correction: Ask us to fix inaccurate or incomplete data.
- Deletion: Ask us to delete your data, subject to legal retention obligations (see above).
- Restriction: Ask us to pause processing while a dispute is being resolved.
- Objection: Object to processing based on legitimate interest, including direct marketing.
- Portability: Receive your data in a structured, machine-readable format.
To exercise any of these rights, start a conversation with our 24/7 Live Chat and ask for the Data Rights Request form. We will respond within 30 days. Identity verification is required before we act on any request, to make sure your data is not released to someone else.
Security Measures
All data in transit between your device and a8pay.win is encrypted with TLS. Data at rest is encrypted in our database. Access to production systems is restricted by role-based controls and multi-factor authentication — only the staff who need data to do their job can see it.
We run regular internal security reviews and work with external partners for penetration testing. If a breach occurs that is likely to affect your rights, we will notify you within 72 hours of becoming aware of it and tell you clearly what data was involved and what steps to take.
Players Under 18
a8pay is strictly for adults aged 18 and over. We do not knowingly collect data from anyone under 18. During registration we ask for your date of birth and, before your first withdrawal, we verify your identity using a government-issued document. Any account found to belong to a minor will be suspended immediately and any balance returned to the payment source after deducting any bonus amounts credited.
If you believe a person under 18 has accessed our platform, contact our 24/7 Live Chat straight away.
When This Policy Changes
We review this Privacy Policy periodically. When we make a material change — one that affects how we process your data or reduces your rights — we will post a notice on the a8pay.win homepage and update the "Last updated" date at the top of this page at least 14 days before the change takes effect.
Continuing to use your a8pay account after the effective date means you have read and accepted the updated policy. If you disagree with a change, you can close your account before it takes effect and request deletion of your data.
Contact Us
For any question about this Privacy Policy or the data a8pay holds about you, reach our team through the 24/7 Live Chat on a8pay.win. Live Chat is the fastest route — a human agent will respond within a few minutes at any hour. For formal data-rights requests, ask the agent for the Data Rights Request form; we will confirm receipt and respond within 30 days.
We do not publish an email address for data requests in order to prevent phishing abuse. All verified requests are handled through our secure in-platform channel.