Privacy Policy — How dd88 Collects, Uses, and Protects Your Data

01 Introduction

This Privacy Policy ("Policy") applies to all personal data collected and processed by dd88 ("dd88", "we", "us", "our") in connection with the online betting and casino services available at dd88.one. It covers data collected through the website, any associated mobile interfaces, customer support communications, and payment processing channels.

dd88 operates as an online entertainment platform serving players located in Bangladesh. We understand that privacy is a fundamental concern for our players, and we are committed to handling all personal information with transparency, integrity, and care. This Policy is written in plain English so that every player can clearly understand how their data is used.

This Policy is effective as of 1 January 2026. Where material changes are made, registered players will be notified through appropriate channels and the effective date above will be updated accordingly.

02 Data We Collect

dd88 collects personal data through several channels during the course of your use of the platform. The categories of data we may collect include the following:

dd88 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric data, or health data unless specifically required by a legal obligation. Where such collection becomes necessary, explicit consent will be sought in advance.

03 How We Use Your Data

Personal data collected by dd88 is used exclusively for the following purposes:

• Account Creation and Management: To register your dd88 account, verify your identity, maintain your player profile, and administer your account settings and preferences.
• Service Delivery: To provide access to sports betting markets, live casino games, slot games, and all other features of the dd88 platform.
• Payment Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, Visa, and Mastercard, and to maintain accurate transaction records.
• Identity Verification (KYC): To verify your age (21+), identity, and payment method ownership in accordance with responsible gaming obligations and fraud prevention requirements.
• Customer Support: To respond to queries, resolve disputes, investigate complaints, and maintain records of support interactions for quality assurance purposes.
• Responsible Gaming: To monitor betting patterns and account activity for signs of problem gambling, enforce self-exclusion and deposit limits, and provide timely interventions where appropriate.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct as defined in the dd88 Terms & Conditions.
• Platform Improvement: To analyse usage data in aggregated, anonymised form to improve platform performance, game selection, and user experience.
• Legal Compliance: To meet obligations under applicable laws and to respond to lawful requests from regulatory and law enforcement authorities.
• Communications: To send service-critical notifications such as transaction confirmations, security alerts, and updates to this Policy or the Terms & Conditions. Promotional communications are sent only where you have opted in.

dd88 does not use personal data for automated decision-making that produces legal or similarly significant effects on players, except where such processing is required for fraud detection or compliance purposes, in which case a human review mechanism is available upon request.

04 Legal Basis for Processing

dd88 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing is required to perform the contract between you and dd88 — specifically, to operate your account and provide the betting and casino services you have requested.
• Legal Obligation: Processing is necessary to comply with applicable legal and regulatory requirements, including identity verification, anti-money laundering obligations, and responsible gaming rules.
• Legitimate Interests: Processing is carried out for dd88's legitimate business interests, including fraud prevention, platform security, and internal analytics, provided those interests are not overridden by your fundamental rights.
• Consent: Where processing is not covered by the above bases — for example, sending promotional emails or SMS notifications about bonuses and offers — dd88 relies on your explicit, freely given consent. You may withdraw consent at any time by contacting support or adjusting your account communication preferences.

05 Data Sharing and Disclosure

dd88 does not sell, rent, or trade your personal data. We may share your data with the following categories of third parties, strictly on a need-to-know basis and only to the extent necessary to fulfil the purposes described in this Policy:

• Game Providers: Certified third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical data (such as session tokens and player identifiers) necessary to deliver their games. These providers are contractually prohibited from using this data for any purpose beyond service delivery.
• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the financial data necessary to process your transactions. Each payment partner operates under its own data protection obligations.
• Identity Verification Services: Third-party KYC and fraud prevention providers may process identity documents and verification data on behalf of dd88 under strict data processing agreements.
• Analytics Providers: Aggregated, anonymised usage data may be shared with analytics platforms to help dd88 understand platform performance. No personally identifiable information is included in these disclosures.
• Legal and Regulatory Authorities: dd88 may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required by a lawful order or where disclosure is necessary to prevent or detect a serious crime.
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets involving dd88, player data may be transferred to the acquiring entity, subject to equivalent data protection commitments being maintained.

In all cases where personal data is shared with third parties, dd88 maintains appropriate contractual safeguards to ensure that the data is handled in a manner consistent with this Policy.

06 Payment Data and Financial Information

dd88 treats all financial data with a heightened level of care given its sensitivity. The following specific provisions apply to the collection and handling of payment information:

• Full payment account credentials — such as bKash PINs, Nagad PINs, or bank account passwords — are never collected or stored by dd88 at any point in the transaction process.
• Mobile wallet numbers (bKash, Nagad, Rocket) and bank account reference numbers are stored in encrypted form within dd88's secure database and are used solely for the purpose of processing your deposits and withdrawals.
• Card payment data (Visa/Mastercard) is processed through PCI-DSS compliant payment gateways. dd88 does not store full card numbers on its own servers.
• Transaction history — including deposit amounts, withdrawal requests, dates, and payment methods — is maintained as part of your account record for a minimum of five years to satisfy financial record-keeping obligations.
• All financial data transmissions between your device and the dd88 platform are protected by 256-bit SSL/TLS encryption.

If you suspect any unauthorised use of your payment method in connection with your dd88 account, you must contact [email protected] immediately so that the matter can be investigated and your account secured without delay.

07 Cookies and Tracking Technologies

dd88 uses cookies and similar tracking technologies to operate the platform effectively and to understand how players use the site. The following categories of cookies may be set when you visit dd88.one:

Essential cookies are strictly necessary for the platform to function and cannot be disabled. Functional and analytics cookies may be declined through your browser settings, although doing so may affect certain features of the platform. dd88 does not use third-party advertising or retargeting cookies.

08 Data Security

dd88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:

• Encryption in Transit: All data exchanged between your device and dd88 servers is encrypted using TLS 1.2 or higher, enforced across every page and API endpoint of the platform.
• Encryption at Rest: Sensitive data fields — including identity document references, payment details, and account credentials — are stored using strong encryption algorithms within our database infrastructure.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All internal dd88 staff with data access privileges undergo security training and operate under confidentiality obligations.
• Intrusion Detection: Real-time monitoring systems are in place to detect and alert on suspicious access patterns, brute-force attempts, and anomalous activity on player accounts.
• Credential Storage: Account passwords are stored as salted cryptographic hashes. dd88 cannot retrieve your plain-text password — if you forget your password, a reset process is required rather than a recovery of the original.
• Penetration Testing: dd88 conducts periodic security assessments to identify and remediate vulnerabilities before they can be exploited.

While dd88 employs industry-standard security practices, no online platform can guarantee absolute security. You are strongly encouraged to use a unique, strong password for your dd88 account and to avoid accessing your account over unsecured public Wi-Fi networks.

09 Data Retention

dd88 retains personal data only for as long as is necessary for the purposes for which it was collected, plus any additional period required by applicable legal obligations. The following retention periods apply as a general guide:

• Active Account Data: Retained for the full duration of your account and for a minimum of five years following account closure, to satisfy anti-money laundering and financial record-keeping requirements.
• Identity and KYC Documents: Retained for a minimum of five years from the date of submission or from the date of account closure, whichever is later.
• Transaction Records: Deposit, withdrawal, and betting history is retained for a minimum of five years from the date of each transaction.
• Customer Support Records: Communications related to complaints or disputes are retained for three years from the date of final resolution.
• Technical and Usage Logs: Server logs and session data are retained for up to 12 months for security analysis and platform performance purposes.
• Marketing Consent Records: Records of your consent to receive promotional communications are retained for the duration of your account and for two years after consent is withdrawn.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised such that it can no longer be linked to an identifiable individual.

10 Your Rights

As a dd88 player, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request — [your username]".

• Right of Access: You may request a copy of the personal data that dd88 holds about you. dd88 will provide this within 30 days of a verified request.
• Right to Rectification: If any personal data held by dd88 is inaccurate or incomplete, you have the right to request that it be corrected or updated promptly.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no overriding legal retention obligation applies.
• Right to Restriction: You may request that dd88 restrict the processing of your data in certain circumstances — for example, while a dispute about its accuracy is being resolved.
• Right to Data Portability: You may request that dd88 provide your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to Object: You may object to processing carried out on the basis of legitimate interests. dd88 will cease processing unless compelling legitimate grounds exist that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

dd88 will respond to all data rights requests within 30 calendar days. In complex cases, this period may be extended by up to a further 60 days, in which case you will be informed of the extension and the reasons for it within the initial 30-day window.

11 Children's Privacy

The dd88 platform is strictly intended for adults aged 21 years and above. dd88 does not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you must not register an account or use the dd88 platform in any capacity.

If dd88 becomes aware that personal data has been inadvertently collected from an individual under the age of 21, that data will be deleted from our systems immediately and any associated account will be closed without notice. If you have reason to believe that a minor has registered on the dd88 platform, please notify us immediately at [email protected].

Parents and guardians who are concerned about minors accessing online gambling platforms are encouraged to make use of freely available parental control tools and internet filtering software to restrict access to gambling-related websites.

12 Updates to This Policy

dd88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform services, applicable laws, or regulatory requirements. When material changes are made, dd88 will take reasonable steps to notify registered players, which may include:

• A prominent notice on the dd88.one homepage at the time of the update.
• An email notification to the address registered to your account.
• An in-platform notification the next time you log in following the change.

The effective date at the top of this Policy will always reflect the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the dd88 platform following the posting of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you should discontinue use of the platform and request account closure.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way dd88 handles your personal data, please reach out to our dedicated support team:

• Email: [email protected]
• Subject Line for Data Requests: Data Rights Request — [your username]
• Live Chat: Available 24 hours a day, 7 days a week via the dd88 platform interface
• Response Time: Privacy-related enquiries are acknowledged within 24 hours and fully responded to within 30 calendar days
• Support Hours: Bangladesh Standard Time (BST, UTC+6) — available around the clock

This Privacy Policy is written in English and the English version is the authoritative version. Any translation provided for the convenience of non-English-speaking users is informational only and does not override the English text in the event of any inconsistency.

For details on how dd88 handles betting rules, account management, and platform usage obligations, please refer to the dd88 Terms & Conditions. For information on responsible gaming tools and self-exclusion, please visit the Responsible Gaming page.