c8gpt Privacy Policy

c8gpt ("we", "us", "our", "the Company") is committed to protecting the privacy and personal data of all players and visitors who use the c8gpt platform, accessible at https://c8gpt.io ("the Platform"). This Privacy Policy ("Policy") describes our data processing practices in relation to the personal information we hold about you ("you", "your", "the Player").

This Policy applies to all data processing activities carried out by c8gpt in connection with the Platform, including registration, account management, deposits and withdrawals, sports betting, casino gaming, promotional communications, and customer support interactions.

We encourage you to read this Policy in full before using the Platform. If you have any questions about how we handle your data, please contact our Data Support team at [email protected] at any time.

For the purposes of this Privacy Policy, c8gpt acts as the data controller in respect of all personal data collected through the Platform. As data controller, c8gpt determines the purposes and means by which your personal data is processed.

All data rights requests, privacy complaints, and enquiries regarding this Policy should be directed to our support team:

c8gpt collects personal data in the following categories. The specific data points collected from you will depend on the nature of your interaction with the Platform.

c8gpt collects personal data through a combination of direct collection, automated technical means, and trusted third-party sources:

• Directly from you: When you complete the registration form, submit KYC verification documents, make a deposit or withdrawal, contact customer support, or update your account preferences.
• Automatically: When you access or use the Platform, our servers and analytics systems automatically record technical data including your IP address, device identifiers, browser details, session timestamps, and pages visited. This data is collected through server logs and first-party analytics tools.
• From payment providers: When you initiate a transaction via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, or BRAC Bank, our payment processing partners share transaction confirmation data (transaction reference, amount, status, and the last four digits of the payment instrument) with c8gpt.
• From KYC verification partners: During identity verification, a third-party KYC service provider may return verified identity status, document authenticity scores, and risk flags to c8gpt. We do not receive raw document images from KYC partners in real time; those are processed and stored by the KYC provider under separate data processing agreements.
• From cookies and similar technologies: Please refer to Section 8 (Cookies and Tracking) for a full explanation of how we use cookies and similar technologies on the Platform.

c8gpt processes your personal data for the following clearly defined purposes:

• Account Creation and Management: To register your account, verify your identity, maintain your account profile, and provide access to all Platform features.
• Payment Processing: To process your deposits and withdrawals in Bangladeshi Taka (BDT) via your chosen payment method, and to maintain accurate transaction records for your account.
• Identity Verification (KYC): To verify that you are aged 21 or above, that you are who you claim to be, and that you are not subject to any legal restrictions that would prevent you from using the Platform.
• Gaming and Betting Services: To deliver the full range of casino games, live dealer tables, slots, crash games, and sports betting markets — including cricket (BPL, IPL, T20 World Cup), volleyball, and handball — available on the Platform.
• Fraud Prevention and Security: To detect and prevent fraudulent activity, money laundering, bonus abuse, account takeover attempts, and other prohibited conduct as described in our Terms & Conditions.
• Responsible Gaming Compliance: To enforce responsible gaming controls including deposit limits, session time reminders, self-exclusion, and reality check notifications.
• Customer Support: To respond to your enquiries, resolve complaints, process account closure or self-exclusion requests, and maintain records of support interactions.
• Marketing and Promotions: To send you information about c8gpt promotions, bonus offers (such as welcome bonuses, BPL season promotions, Eid specials, and Pohela Boishakh offers), and platform updates — but only where you have given your consent or where we have a legitimate interest in communicating with existing players.
• Platform Improvement: To analyse usage patterns, diagnose technical issues, improve Platform performance, and develop new features based on aggregated, anonymised player behaviour data.
• Legal Compliance: To comply with any legal or regulatory obligations applicable to c8gpt's operations, including record-keeping requirements and responses to lawful information requests from competent authorities.

c8gpt relies on one or more of the following legal bases when processing your personal data:

• Contractual Necessity: Processing is necessary to perform the contract between you and c8gpt — that is, to provide the gaming and betting services you have registered to use, to process payments, and to manage your account.
• Legal Obligation: Processing is necessary for c8gpt to comply with applicable legal requirements, including age verification (21+), identity verification, anti-money-laundering checks, and responses to lawful authority requests.
• Legitimate Interests: Processing is necessary for the legitimate interests pursued by c8gpt, including fraud prevention, platform security, responsible gaming enforcement, and improvement of Platform services — provided those interests are not overridden by your rights and freedoms.
• Consent: Where processing is based on your consent — for example, sending you marketing communications or placing non-essential cookies — you may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent, contact [email protected] or update your account settings.

c8gpt does not sell, rent, or trade your personal data. We share personal data only with the categories of recipient listed below, and only to the extent necessary for the stated purpose:

• Payment Service Providers: bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, Visa, Mastercard, BRAC Bank, and Dutch-Bangla Bank direct transfer — to process your deposits and withdrawals.
• KYC and Identity Verification Providers: Third-party identity verification specialists who confirm the authenticity of your documents and verify your age and identity in accordance with our KYC requirements.
• Game Providers: Software studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — who receive session tokens and anonymised player identifiers to deliver their game content on our Platform. These providers do not receive your full name, contact details, or financial information.
• Fraud Prevention and Security Services: Third-party fraud detection and cybersecurity providers who help us identify and prevent account takeovers, bot activity, and financial fraud.
• Customer Support Platform Providers: Cloud-based helpdesk and live chat service providers used to manage and record your support interactions with the c8gpt team.
• Analytics Providers: First-party and third-party analytics services that process aggregated and anonymised usage data to help us improve the Platform. No personally identifiable information is shared with analytics providers without appropriate safeguards.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or lawful request from a competent authority, c8gpt may disclose personal data to law enforcement, regulatory bodies, or other government agencies.

c8gpt uses cookies and similar tracking technologies on the Platform to ensure its proper operation, remember your preferences, maintain your login session, and analyse usage patterns. A "cookie" is a small text file placed on your device by the Platform when you visit.

We use the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They enable core features such as maintaining your login session, remembering items in your account, and applying your security settings. These cookies cannot be disabled without significantly affecting Platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised information about how players use the Platform — which pages are visited most frequently, where players come from, and how they navigate between sections. This data helps us improve the Platform experience.
• Functionality Cookies: These cookies remember choices you make on the Platform, such as your preferred language, notification settings, and display preferences, so you do not need to re-enter them on each visit.
• Targeting and Marketing Cookies: Where you have consented, these cookies track your browsing activity across the Platform to build a profile of your interests and preferences, which helps us deliver more relevant promotional communications. You may withdraw consent for these cookies at any time through your account settings.

You can control cookie settings through your web browser. Disabling certain cookies may affect the functionality of the Platform. For detailed instructions on managing cookies in your browser, please refer to your browser provider's help documentation.

c8gpt retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Our general data retention principles are as follows:

• Active Account Data: Personal data associated with an active c8gpt account is retained for the full duration of the account's existence and for a period of five (5) years following permanent account closure.
• Financial and Transaction Records: All deposit and withdrawal records, transaction confirmations, and payment method details are retained for a minimum of seven (7) years from the date of the transaction, in accordance with financial record-keeping requirements.
• KYC and Verification Documents: Identity and address verification documents are retained for a period of five (5) years following account closure or the last regulatory requirement that necessitated their collection.
• Customer Support Communications: Live chat transcripts, email correspondence, and complaint records are retained for three (3) years from the date of the most recent interaction.
• Marketing Consent Records: Records of your marketing opt-in and opt-out preferences are retained for the duration of your account and for two (2) years following account closure, to demonstrate compliance with consent requirements.
• Technical and Log Data: Server logs and IP address records are retained for up to twelve (12) months from collection, unless a specific security or fraud investigation requires extended retention.

After the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to any individual player.

c8gpt implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction:

• SSL/TLS Encryption: All data transmitted between your device and the c8gpt Platform is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser's address bar when using the Platform.
• Password Hashing: Your account password is never stored in plain text. c8gpt uses strong cryptographic hashing algorithms to store password credentials securely.
• Access Controls: Access to personal data within c8gpt's internal systems is restricted to staff members who require it to perform their authorised duties. Access is governed by role-based permissions and activity logging.
• Secure Data Centres: c8gpt's infrastructure is hosted in data centres that implement physical security controls, environmental protections, and redundant systems to ensure data availability and integrity.
• Fraud Monitoring: Real-time fraud detection systems monitor account activity for unusual patterns indicative of unauthorised access, bot activity, or financial fraud, and trigger alerts or automatic protective actions where necessary.
• Regular Security Reviews: c8gpt conducts periodic reviews of its data security practices and infrastructure to identify and remediate vulnerabilities in a timely manner.

As a c8gpt player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request":

• Right of Access: You have the right to request a copy of the personal data c8gpt holds about you and information about how it is being used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by c8gpt. You may update many of your account details directly through your account profile page.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other legal basis for processing. Please note that we may be required to retain certain data for legal compliance or fraud prevention purposes even after an erasure request.
• Right to Restrict Processing: You have the right to request that c8gpt restricts the processing of your data in certain circumstances — for example, where you contest the accuracy of the data while we verify it.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based solely on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

c8gpt will respond to all data rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further sixty (60) days, in which case we will notify you of the extension and the reason for it.

c8gpt operates a strict minimum age policy of 21 years. During the registration process, all applicants are required to declare that they are aged 21 or above and to provide identity documents confirming their date of birth as part of our KYC verification process.

If c8gpt discovers or reasonably suspects that personal data has been submitted by or on behalf of a person under the age of 21, we will immediately suspend the relevant account, delete all personal data associated with that account, reverse any transactions, and void any bets or game activity. Any person found to have submitted false age information will have their account permanently closed and may be reported to relevant authorities.

If you are a parent or guardian and believe that a minor in your care has registered an account on c8gpt, please contact us immediately at [email protected]. We will investigate and take appropriate action without delay.

The c8gpt Platform may contain references to or integrations with third-party services — such as game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) and payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) — that operate under their own privacy policies and data protection frameworks.

c8gpt is not responsible for the privacy practices, data collection methods, or security measures of any third-party service provider. We strongly recommend that you review the privacy policy of any third-party service you interact with in connection with the Platform. The inclusion of a third-party service on the Platform does not constitute an endorsement of that party's privacy practices.

Where third-party game content is delivered via an embedded interface within the Platform, session data (such as your anonymised player token and bet amounts) is shared with the relevant game provider solely for the purpose of delivering the game session. Please refer to the individual game provider's privacy documentation for further information on how they handle session data.

c8gpt reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform services. When material changes are made, we will notify registered players by one or more of the following methods:

• Displaying a prominent notice on the Platform homepage or account dashboard at least fourteen (14) days before the changes take effect.
• Sending a notification to the email address registered on your c8gpt account.
• Updating the "Last Updated" date displayed at the top of this page and in the document version indicator.

Your continued use of the Platform after the effective date of any amended Policy constitutes your acknowledgement of, and agreement to, the updated terms. If you do not agree with a material change to this Policy, you should cease using the Platform and contact [email protected] to request account closure.

We recommend that you review this Privacy Policy periodically — particularly before making deposits, using new Platform features, or participating in promotional campaigns — to stay informed about how c8gpt handles your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or c8gpt's data processing practices, please do not hesitate to reach out to our support team. We are available around the clock, every day of the year, and will respond to all privacy-related enquiries in English within a reasonable timeframe.

When contacting us regarding a data rights request, please include your registered account username or email address and a brief description of your request. We may ask you to verify your identity before proceeding.

This Privacy Policy was last reviewed and approved on 1 January 2026. It supersedes all previous versions of the c8gpt Privacy Policy.