Natural8 Privacy Policy Data Collection and User Information Use

Natural8 collects personal data to operate user accounts, process payments, and meet regulatory requirements. The Privacy Policy covers not only what data is gathered, but also how it is used, when it can be shared with third parties, how long it is stored, and what rights users hold over their information. Data processing on the platform follows principles of lawful, fair and transparent handling, and the policy connects directly to the platform’s Terms & Conditions. Security measures, international data transfers, and breach response procedures are each addressed within the full policy.

Review the Natural8 Privacy Policy in full to understand how your data is handled and what controls are available to you.

What Privacy Principles Apply to User Data?

Natural8 bases its data processing on a set of core principles that govern how personal information is handled at every stage. These principles apply across all data activities on the platform:

• Lawful, fair and transparent processing – data is only collected and used where there is a legitimate basis, and users are informed about how it is handled;
• Purpose limitation – data is collected for specified, explicit, and legitimate purposes and not used beyond those purposes;
• Data minimisation – only data that is adequate, relevant, and limited to what is necessary for the stated purpose is collected;
• Accuracy – personal data is kept up to date where reasonably practicable;
• Storage limitation – data is not retained longer than needed for the purpose for which it was collected;
• Confidentiality and security – personal data must remain confidential and be protected against unauthorised access, loss, or misuse.

These principles inform how every category of data is handled, from registration through to account closure. Learn more through the platform’s mobile experience in the Natural8 Android App, where the same privacy and security standards are applied in-app.

Learn More

What Personal Data Can Be Collected?

Natural8 may collect several categories of personal data during registration and ongoing use of the platform. These fall into four broad groups:

Identification data:

• Full name, date of birth, nationality;
• Government ID information, passport or driver’s licence details.

Contact data:

• Email address, home address, telephone number, mobile number.

Technical data:

• IP address, MAC address, device type, location and device information, session data.

Transaction data:

• Payment card information, transaction history, game history and underlying gaming transactions.

Data collection is linked to specific purposes – registration, KYC verification, payment processing, and regulatory compliance. Information is not collected beyond what those purposes require.

Why Is Personal Information Used?

Personal data collected on Natural8 is processed for defined operational, legal, and service-related purposes:

• Account management – setting up, administering, and managing user accounts;
• Payment processing – handling deposits and withdrawals;
• Service personalisation – adapting content and features based on account activity;
• Communication – receiving and responding to user enquiries, notifying users about updates and changes;
• Regulatory compliance – verifying user information to meet applicable legal and licensing obligations;
• Anti-fraud and security – investigating suspected unlawful or fraudulent activity;
• Analytics – preparing aggregated usage statistics and conducting market research;
• Marketing – informing users about offers and promotions only where they have opted in and have not subsequently opted out.

Each purpose is independent. Data used for fraud investigation is not repurposed for marketing, and vice versa. In addition, platform economics such as Natural8 poker rakeback are tied to gameplay activity and promotional structures rather than personal data usage purposes.

When Can Natural8 Share Personal Data with Third Parties?

As a general rule, personal data is not intentionally disclosed to third parties without prior explicit consent. Disclosure outside of that rule applies only in specific circumstances defined within the policy:

• Service providers – when third parties need access to data in order to perform agreed services on behalf of Natural8;
• Regulatory obligations – where applicable law or a competent authority requires disclosure;
• Fraud and unlawful activity investigations – data may be shared with authorised entities or authorities in connection with suspected fraud or criminal activity;
• Legal proceedings – where disclosure is necessary in connection with legal claims or enforcement.

Third parties who receive data for service delivery purposes are bound by contractual obligations regarding confidentiality. Data is not sold to external parties for commercial use.

Data Policy

How Are Cookies and Online Tracking Used?

Natural8 uses cookies and related tracking tools to support platform functionality and analyse usage patterns.

Session cookies are used to establish and maintain a user session. Without them, login and registration functions may be limited or unavailable.

Preference cookies store user settings to make the website more convenient across visits.

Web beacons and spotlight tags are used for aggregated page analysis. These tools assess how pages are used in general terms rather than targeting individual users or accessing personal data directly.

Most browsers accept cookies by default. Users can disable cookies or set their browser to notify them when cookies are placed, though doing so may limit some platform functions. Cookie settings can be managed through the browser’s privacy or security options. In parallel with platform functionality, users should also review available withdrawal options, which are handled through the secure cashier system rather than cookie-based tracking.

What Rights Does a User Have Under the Privacy Policy?

Natural8’s Privacy Policy grants users a defined set of rights over their personal data. These rights can be exercised by contacting support@natural8.com:

• Right to information – users can request details about how their data is processed;
• Right of access – users can request a copy of the personal data held on their account;
• Right to rectification – incorrect or incomplete data can be corrected upon request;
• Right to erasure – users may request deletion of their data in certain circumstances; some information may be retained for fraud prevention, legal obligations, or dispute resolution;
• Right to restriction of processing – users can request that specific processing activities be limited;
• Right to object – users may object to certain types of processing, including direct marketing;
• Right to data portability – users can request their data in a portable format;
• Right to withdraw consent – where processing is based on consent, it can be withdrawn at any time;
• Right to complain – users can submit a complaint to a relevant supervisory authority.

Requests sent to support@natural8.com are acknowledged within 72 hours. The standard response period is one month, with possible extension for complex or multiple requests.

How Is Data Protected and What Happens in Case of a Breach?

Natural8 applies security measures designed to protect personal data against loss, misuse, unauthorised access, alteration, disclosure, and destruction. Data in transit is protected using HTTPS with TLS 1.2, ECDHE_RSA with P-256, and AES_256_GCM encryption. Winnings and cash-out information are treated as strictly confidential and stored in secure operating environments. Access to personal data is restricted to staff with a defined operational need.

In the event of a suspected data breach, the platform initiates an internal investigation and applies remedial measures without undue delay. Where the breach presents a risk to the rights and freedoms of users, the relevant supervisory authorities are notified within 72 hours where possible. In high-risk cases, affected users are also informed directly without undue delay.

How Long Does Natural8 Keep Data and Can It Be Transferred Internationally?

Retention periods on Natural8 are purpose-based rather than fixed across all data types:

Data is not kept longer than necessary for the purpose for which it was collected. Where law requires extended retention, that obligation takes precedence over standard deletion timelines.

International transfers: personal data may be transferred to and stored in countries outside the EU/EEA. This can occur through suppliers, data processors, servers, and staff operating in non-EU/EEA locations. Where such transfers take place, they are carried out in accordance with applicable data protection requirements.