bm8 Privacy Policy
This policy explains how bm8 collects, uses and protects players' personal data on the platform using SSL technology.
Last updated: 30 October 2026
1. Introduction and General Principles
bm8 is a platform that puts the protection of players' personal and financial data first. This Privacy Policy applies to all players using the bm8.mom website and explains what data we collect, how we use it, who we share it with, and what rights players have over their data.
By continuing to use bm8's services, you are considered to have read and accepted the terms of this policy. If you disagree with any part of the policy, please contact [email protected] before continuing to use the services.
This policy applies to the bm8 website, mobile website and all related digital services. Any changes to the policy will be updated on this page in a timely manner, and the last updated date shown above reflects the most recent revision.
2. Types of Data We Collect
bm8 collects only the data needed to provide players with a good service and to maintain the security of the platform. The data can be broken down into the following categories —
Information You Provide Directly
When you open an account, make a deposit or withdrawal, or carry out any action, the information you provide directly includes the following —
- Full name and date of birth (to verify you are 21+)
- Email address and contact phone number
- KBZPay, Wave Money, AYA Pay or CB Pay account number
- Deposit and withdrawal history and transaction details
- Messages sent when contacting player support
Technical Data Collected Automatically
When a player visits the website, the technical system automatically records the following data —
- IP address and network connection details
- Browser type, language and version
- Device type and OS version
- On-site activity logs (log data)
- Session cookie and authentication token
- Access timestamps (MMT UTC+6:30)
Game-related data
Game history data is also stored to maintain fairness and financial transparency on the platform—
- Game type played and time of play
- Bet amounts and result records
- Bonus and promotion activity records
- VIP level progression records
3. How is your data used
bm8 uses the personal data collected only for the following purposes—
Account management and service delivery
Data is used for creating and verifying player accounts (including 21+ age verification), processing deposits and withdrawals, awarding bonuses and VIP rewards, and providing player support.
Security protection
Data will be reviewed and analysed to prevent fraud, stop money laundering, and detect unauthorised access to player accounts. This is a necessary security measure to protect both the individual player's funds and those of other players.
Service improvement
Aggregated analysis will be used to understand which games players enjoy and which services cause issues. This research is solely to improve the platform UX and to better develop future services in Burmese.
Legal compliance
Data may be disclosed when required by law, court order, or a request from a regulatory authority. Where disclosure is required, the player will be notified unless prohibited by law.
4. Data sharing with third parties
bm8 will never sell or share players' personal data with advertising or marketing companies, third-party data brokers, or any party for commercial purposes without the player's consent.
However, limited data sharing with partners who are essential to delivering our services may occur—
Payment services
Only the information needed to process transactions is sent to KBZPay, Wave Money, AYA Pay, and CB Pay. These partners also have their own privacy policies in place and are responsible for protecting player data.
IT and technology services
Technology companies providing server hosting, database management, and cybersecurity services may access our data in the course of providing those services. Data processing agreements are in place with them, and they must handle data strictly in accordance with bm8's instructions.
Legal requests
Where required by legal process, court order, or a lawful request, the necessary data will be provided to the relevant authorities. Please understand that this is a legal requirement, not a decision made by bm8.
5. Cookie and tracking technologies
The bm8.mom website uses cookies and related technologies to improve the player experience—
Essential cookies
These cookies are required to maintain login sessions, keep payment processes running smoothly, and store security tokens. If these cookies are blocked, the website will not function properly.
Analytics cookies
These cookies are used to analyse, in aggregate form, which pages players visit, in order to improve website design and services. This data is not stored in a way that identifies any individual player.
Cookie controls
Players can block non-essential cookies through their browser settings. Please note, however, that blocking essential cookies may prevent login and payment processes from completing correctly.
6. Data security measures
bm8 applies multi-layer security to protect players' personal data from theft and unauthorised access—
SSL / TLS Encryption
All data sent between the player and the server is protected by SSL / TLS encryption, so any third party attempting to intercept the connection cannot read the data.
Hashing and Encryption
Player passwords are not stored in plain text — they are stored using cryptographic hashing, so even if a database breach occurs, players' passwords will not be compromised.
Background Monitoring
Our technical team monitors servers and network traffic 24/7, and will respond immediately to any suspicious access alerts.
Access Controls
Staff who can access player data are restricted through role-based access control (RBAC), and all their access activity is logged.
7. Data Retention
bm8 will not delete player data immediately after its purpose has been fulfilled — it will be kept for as long as necessary—
While the account is active
Player data and activity records will be retained for the entire period that a player's account remains active. This is essential for verifying financial transactions and confirming the validity of bonus rewards.
After account closure
After a player's account is closed or deleted by the player, financial records (deposit and withdrawal history) will be retained for five years as required by law, and remaining data will be deleted within a reasonable period.
Data deletion method
When player data is deleted, it will be handled using secure data erasure (unrecoverable) or anonymisation (so the player can no longer be identified), meaning deleted data cannot be recovered.
8. Your Data Rights
Every player with an account on bm8 has the following rights regarding their personal information—
Right of Access
Players can request to see what data bm8 holds about them. Submit this request by contacting [email protected], and it will be fulfilled within a reasonable timeframe.
Right to Rectification
If there is an error in your personal information, you can request a correction. You can update it yourself through your profile settings, or contact the support team for information that cannot be changed directly.
Right to Erasure
Players can request that their data be deleted. However, data that must be retained by law (such as financial records) cannot be deleted immediately until the required period has passed. This will be explained in full when such a request is made.
Right to Opt Out of Marketing Communications
If bm8 sends promotional or bonus news, players can request to opt out. This opt-out does not affect essential account-related communications (such as payment confirmations).
If you have questions about these rights, you can contact [email protected] at any time, or use bm8's 24/7 Live Chat in Burmese.
9. Age 21+ Verification and Child Protection
bm8 is a platform open only to players aged 21 and above, and operates a strict policy of not providing services to anyone under the age of 21.
Age 21+ verification is carried out during registration and proof may be requested. If data belonging to a person under 21 reaches us through improper means, that data will be deleted immediately and the account will be closed.
If you believe someone under 21 is playing on bm8, please notify us immediately at [email protected].
10. Policy Changes and Notices
bm8 may amend this Privacy Policy when necessary, and any changes will be shown at the top of this page along with the "Last Updated" date.
If there are any major changes to the policy, you will be notified through the contact channel registered on your player account. Continued use of the services after a policy change will be considered as acceptance of the updated policy.
If you have any questions about the policy, you can contact us at [email protected] or reach us in Myanmar language through bm8's 24/7 Live Chat.