apk8x Privacy Policy

Data We Collect

When you register with apk8x, interact with the platform, or contact our support team, we collect certain categories of personal data. The specific data we collect depends on how you interact with our services. Below is a detailed account of each data category and the context in which it is gathered.

apk8x does not intentionally collect sensitive personal data beyond what is strictly required for identity verification and payment compliance. We do not collect data relating to racial or ethnic origin, political opinions, religious beliefs, trade union membership, health data, or sexual orientation.

How We Use Your Data

apk8x uses the personal data we collect for specific, clearly defined purposes. We do not use your data for purposes that are incompatible with the ones stated below without first providing you with notice and, where required, obtaining your consent.

• Account creation and management: Your identity and contact data are used to create and maintain your apk8x player account, to authenticate your login sessions, and to communicate account-related notifications such as password resets, security alerts, and important platform announcements.
• Payment processing: Financial data is used to facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and partner banks. Transaction data is recorded for audit and dispute resolution purposes.
• Identity verification (KYC): We are obligated to verify the identity of players who make withdrawal requests. KYC document data is used solely for this verification purpose and is handled with the highest level of confidentiality.
• Regulatory and legal compliance: apk8x processes and retains certain categories of personal data to comply with anti-money-laundering (AML) obligations, responsible gaming requirements, and any lawful requests from relevant authorities.
• Fraud prevention and platform security: Technical and behavioural data is analysed to detect and prevent fraudulent activity, bonus abuse, account takeovers, and other forms of platform misuse.
• Service improvement and personalisation: Aggregated behavioural data is used to improve the apk8x platform, optimise game recommendations, and tailor promotional offers to your gaming profile. This personalisation is based on your activity history and does not involve selling your data to third parties.
• Responsible gaming monitoring: Behavioural and financial data is monitored to identify patterns that may indicate problem gambling, enabling apk8x to proactively reach out with responsible gaming resources or to apply account protections where warranted.
• Customer support: Communications data is used to resolve your support queries, to maintain a record of interactions, and to improve the quality of our support service over time.

Data Sharing & Disclosure

apk8x does not sell, rent, or trade your personal information to any third party for commercial gain. We share your data only in the limited circumstances described below, and only to the extent necessary for each stated purpose.

• Payment service providers: When you make a deposit or withdrawal, the necessary financial data is shared with the relevant payment processor — such as bKash, Nagad, Rocket, Upay, or your bank — to complete the transaction. These providers operate under their own privacy policies and data handling obligations.
• Game providers: apk8x uses games supplied by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. Your account identifier and relevant session data may be shared with these providers to enable game functionality, resolve disputes, and support RNG certification. These providers do not receive your full identity or financial data.
• Identity verification services: Where automated KYC tools are used to verify NID documents or conduct liveness checks, your identity data may be processed by a third-party verification service provider operating under strict data processing agreements with apk8x.
• Legal and regulatory authorities: apk8x will disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where we are legally required to do so — for example, in response to a lawful court order, a regulatory investigation, or an AML disclosure obligation. We will notify you of such disclosures where legally permissible to do so.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of assets involving apk8x, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any material change to this Privacy Policy that results from it.

apk8x does not transfer your personal data to jurisdictions outside of the operational scope described in this Policy without implementing appropriate safeguards. Where cross-border data transfers are necessary — for example, where a game provider's servers are located outside Bangladesh — apk8x ensures that such transfers are governed by contractual data protection clauses that provide a level of protection equivalent to that described in this Policy.

Cookies & Tracking

apk8x uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse traffic patterns, and support fraud detection. A cookie is a small text file placed on your device by a website you visit. Cookies cannot execute code or transmit viruses; they serve only to identify your browser session to the platform.

The following categories of cookies are used on the apk8x platform:

You may control cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies, or to notify you when a cookie is set. Please note that disabling strictly necessary cookies will prevent certain core features of the apk8x platform from functioning correctly, including the ability to log in and access the cashier.

Data Retention

apk8x retains your personal data for as long as your account remains active and for a defined period after account closure, as required by our legal and regulatory obligations. We do not retain personal data beyond the periods described below unless we are required to do so by law or where retention is necessary for an ongoing legal dispute or investigation.

• Active account data: All personal, financial, and behavioural data associated with an active apk8x account is retained for the full duration of the account's active status. This data is necessary for the ongoing provision of services, dispute resolution, and responsible gaming monitoring.
• Post-closure retention: Following voluntary account closure or apk8x-initiated account termination, personal data is retained for a minimum period of five (5) years. This retention period is required to satisfy AML record-keeping obligations, to address any retrospective regulatory queries, and to support the resolution of disputes that may arise after account closure.
• KYC document data: Identity verification documents (NID copies, passport scans, selfie images) are retained for the post-closure period stated above and are stored in encrypted form with access restricted to authorised compliance personnel only.
• Transaction records: Financial transaction records — including deposit amounts, withdrawal amounts, payment method details, and timestamps — are retained for a minimum of five (5) years post-transaction in line with financial record-keeping requirements.
• Support communications: Live chat transcripts and email correspondence are retained for up to three (3) years from the date of the interaction, to support quality assurance and dispute resolution.
• Dormant account data: Where an account has been inactive for 12 consecutive months and no withdrawal request is pending, apk8x will notify the account holder by email. If no response is received within 30 days of notification, the account may be marked as dormant and subject to a review. Dormant account data is retained in accordance with the post-closure schedule above.

When the applicable retention period expires, personal data is securely deleted or irreversibly anonymised. Anonymised data (which can no longer be used to identify you) may be retained beyond the stated periods for statistical and platform performance analysis purposes.

Data Security

apk8x takes the security of your personal data seriously. We have implemented a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, or disclosure.

• Encryption in transit: All data transmitted between your device and the apk8x platform is encrypted using 256-bit SSL/TLS protocols. This applies to login sessions, cashier transactions, and all API communications between the platform and third-party game providers.
• Encryption at rest: Sensitive data stored on apk8x servers — including KYC documents, financial records, and password hashes — is encrypted at rest using industry-standard encryption algorithms. Plaintext passwords are never stored.
• Access controls: Access to personal data within apk8x's internal systems is restricted on a strict need-to-know basis. Employees and contractors who require access to player data for legitimate operational purposes must authenticate using multi-factor authentication and are subject to regular access audits.
• Infrastructure security: apk8x's server infrastructure is hosted in data centres with physical security controls, network firewalls, intrusion detection systems, and regular vulnerability scanning. Critical systems are monitored 24/7 by our security operations team.
• Incident response: apk8x maintains a documented data breach response plan. In the event of a confirmed data breach that affects your personal information, we will notify affected players by email within a reasonable timeframe and take all appropriate remediation steps.

Your Privacy Rights

As a registered player on the apk8x platform, you hold a number of rights in relation to the personal data we hold about you. These rights are exercisable by contacting our support team via live chat or by submitting a written request to support at apk8x.net. We will respond to all valid requests within 30 days.

• Right of access: You have the right to request a copy of all personal data that apk8x holds about you. This is sometimes called a Subject Access Request (SAR). We will provide this information in a structured, readable format free of charge, subject to identity verification.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Minor corrections (such as updating a contact number) can be made directly in your account settings. Corrections to identity data (such as name or date of birth) require submission of supporting documentation.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where: (a) the data is no longer necessary for the purpose for which it was collected; (b) you withdraw consent and no other legal basis for processing applies; or (c) the data has been unlawfully processed. Note that erasure requests cannot override our legal obligation to retain certain data for AML and regulatory compliance purposes during the mandatory retention period.
• Right to restrict processing: In certain circumstances, you may request that we limit how we use your data — for example, while the accuracy of data is being contested, or where you have objected to processing and we are assessing the grounds for that objection.
• Right to data portability: Where processing is based on your consent or on a contract with you, you have the right to receive your personal data in a structured, machine-readable format and to have it transmitted to another data controller where technically feasible.
• Right to object to marketing: You have an absolute right to object to the use of your personal data for direct marketing purposes at any time. Upon receipt of such an objection, apk8x will cease all marketing communications to you immediately and permanently.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place prior to the withdrawal.

Changes to This Policy

apk8x reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform functionality, legal obligations, or regulatory requirements. All updates will be published on this page with a revised effective date.

Where a change to this Policy is material — meaning it significantly affects how we collect, use, or share your personal data — apk8x will notify registered players by email to the address registered on their account. The notification will summarise the key changes and provide a link to the full updated Policy. Your continued use of the apk8x platform following the effective date of an updated Policy constitutes your acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically to stay informed about how apk8x protects your data. The "Effective" date at the top of this page indicates when the Policy was last revised. Historical versions of this Policy are available on request by contacting our support team.