pd88 Privacy Policy — How We Protect Your Personal Data

1 Who We Are

1.1 pd88 is an online casino and sports betting platform operating at https://pd88.io, serving players across Bangladesh with casino games, live dealer tables, crash games, and live cricket betting. In the context of this Privacy Policy, pd88 is the data controller responsible for the personal information collected through the platform.

1.2 Our platform is designed for adult players aged 21 and above resident in Bangladesh. All data handling described in this Policy is oriented toward delivering a secure, fair, and responsible gaming environment to players in cities including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

1.3 For all privacy-related enquiries, please contact our dedicated support team at [email protected]. Our support team operates 24 hours a day, 7 days a week, in Bangladesh Standard Time (BST, UTC+6).

2 Personal Data We Collect

2.1 The categories of personal data we collect depend on how you interact with the pd88 platform. The table below summarises the main categories:

2.2 Where you choose not to provide personal data that pd88 is required to collect (for example, identity verification documents required before processing a withdrawal), pd88 may be unable to deliver the relevant service until the required data is provided.

2.3 pd88 does not collect or process special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information) unless you voluntarily disclose such information in a support communication, in which case it will be used solely to respond to your query and will not be stored in your core player profile.

3 How We Collect Your Data

3.1 pd88 collects personal data through the following methods:

• Direct provision by you: When you complete the registration form, submit a KYC document, make a deposit or withdrawal request, update your account settings, or contact our support team.
• Automated technical collection: When you visit or interact with the platform, our servers automatically record technical data including your IP address, device identifiers, browser information, pages visited, and session duration via server logs, cookies, and similar tracking technologies.
• Payment providers: When you transact via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, or other payment partners, these providers may share transaction confirmation data with pd88 to reconcile payments.
• Identity verification partners: When KYC verification is required, we may use a trusted third-party verification service that processes your submitted ID documents and returns a verification result to pd88.
• Game providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may share game session data (round IDs, bet amounts, outcomes) with pd88 for account management and dispute resolution purposes.

3.2 pd88 does not purchase personal data from data brokers or acquire personal data from social media platforms without your explicit consent.

4 Legal Basis for Processing

4.1 pd88 processes your personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to create and manage your account, process deposits and withdrawals, deliver games and betting services, and enforce the Terms & Conditions you accepted at registration.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, fraud prevention duties, and data retention obligations imposed by applicable law.
• Legitimate interests: Processing for the purpose of platform security, fraud detection, responsible gaming monitoring, internal analytics to improve platform features, and communications about service changes — provided these interests are not overridden by your rights and freedoms.
• Consent: Processing for optional activities such as sending marketing communications about promotions, bonuses, and new game launches. You may withdraw your consent to marketing communications at any time by contacting [email protected].

4.2 Where processing is based on consent, withdrawal of that consent will not affect the lawfulness of any processing carried out before the withdrawal took effect.

5 How We Use Your Personal Data

5.1 pd88 uses the personal data we collect for the following specific purposes:

• Account creation and management: Setting up your pd88 account, authenticating your login, managing your profile, and enabling account self-management tools including deposit limits and self-exclusion.
• Payment processing: Verifying and processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other accepted payment methods; reconciling transaction records; and preventing duplicate or fraudulent transactions.
• Identity verification (KYC/AML): Verifying that you are who you say you are, confirming that you meet the 21+ age requirement, and complying with anti-money laundering obligations by ensuring payment methods belong to the registered account holder.
• Service delivery: Delivering casino games, live dealer experiences sourced from studios including Evolution Gaming and Ezugi, crash games such as Aviator from Spribe, and live cricket betting markets covering the BPL, T20 World Cup, IPL, and international fixtures involving the Bangladesh Tigers.
• Responsible gaming: Monitoring gaming patterns to identify signs of problematic behaviour and proactively reaching out to players who may benefit from responsible gaming tools or support resources.
• Fraud prevention and security: Detecting and investigating suspicious account activity, preventing multi-accounting, identifying bonus abuse, and responding to potential money laundering attempts.
• Customer support: Responding to your queries, resolving disputes, and maintaining records of communications for quality and compliance purposes.
• Platform improvement: Analysing anonymised or aggregated usage data to understand player behaviour patterns, improve game selection, and enhance the overall pd88 user experience.
• Marketing communications (with consent): Sending you personalised offers, deposit bonus notifications, and information about new games or features — only where you have consented to receive such communications.

5.2 pd88 does not use automated decision-making processes (including profiling) that produce legal or similarly significant effects on individual players without human review. Where automated tools flag an account for investigation, a human member of the pd88 team reviews the case before any action is taken.

6 Cookies & Tracking Technologies

6.1 pd88 uses cookies and similar tracking technologies (such as web beacons and local storage) to ensure the platform functions correctly and to gather analytics data that helps us improve the service.

6.2 The main categories of cookies used on the pd88 platform are:

• Strictly necessary cookies: Essential for platform functionality — including maintaining your login session, storing your currency preference (BDT ৳), and enabling the cashier to process your transactions. These cannot be disabled without breaking core platform features.
• Analytics cookies: Used to understand how players navigate the platform, which game categories are most popular, and where technical issues occur. Data is collected in aggregated, anonymised form and is not linked to your individual identity.
• Functional cookies: Used to remember your preferences, such as your preferred game lobby layout, language setting (English), and responsible gaming tool configurations.
• Marketing cookies: Used only where you have provided consent, to deliver relevant promotional content and measure the effectiveness of bonus campaigns. You may opt out of marketing cookies by contacting [email protected].

6.3 Most web browsers allow you to control cookie settings through the browser's preferences panel. Disabling strictly necessary cookies may prevent certain parts of the pd88 platform from functioning correctly. For detailed guidance on managing cookies in your specific browser, please refer to your browser's official help documentation.

7 Sharing Your Data with Third Parties

7.1 pd88 shares personal data only with carefully selected third parties where doing so is necessary to deliver services, meet legal obligations, or protect the integrity of the platform. We never sell personal data to third parties. The categories of recipients are as follows:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank (DBBL), City Bank, BRAC Bank, and other payment partners receive only the transactional data necessary to process your deposit or withdrawal. These providers are bound by their own privacy policies and applicable financial regulations.
• Identity verification and KYC partners: Trusted third-party identity verification services receive copies of identity documents you submit during KYC checks. These partners process such data solely for the verification purpose and are contractually prohibited from using it for any other reason.
• Game content providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive your account identifier and session data to deliver games and maintain game-session integrity. They do not receive your full identity profile.
• IT infrastructure and hosting providers: Cloud hosting and infrastructure partners who store data on secure servers process personal data on pd88's behalf under strict data processing agreements that prohibit independent use of the data.
• Fraud prevention and security services: Specialist fraud detection providers may receive technical data (IP addresses, device fingerprints) to assess risk signals. No full identity data is shared with these providers unless a confirmed fraud case requires escalation.
• Legal and regulatory authorities: pd88 will disclose personal data to law enforcement agencies, regulators, or courts where required to do so by applicable law, valid legal process, or where disclosure is necessary to protect the rights, property, or safety of pd88 or third parties.

7.2 All third-party data processors engaged by pd88 are required to handle personal data in a manner consistent with this Privacy Policy and to implement appropriate technical and organisational security measures.

7.3 pd88 does not transfer personal data to recipients in countries that do not provide an adequate level of data protection without first putting in place appropriate contractual safeguards.

8 Data Security

8.1 pd88 takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction:

• Transport encryption: All data transmitted between your device and the pd88 platform is encrypted using 256-bit SSL/TLS technology, ensuring that your login credentials, financial details, and personal information cannot be intercepted in transit.
• Access controls: Access to personal data within pd88's systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories required to perform their specific job functions, and all access events are logged.
• Password security: Account passwords are stored using industry-standard one-way hashing algorithms. pd88 staff cannot view your password in plain text and will never ask you to share it.
• Infrastructure security: pd88's server infrastructure is hosted in secure data centres with physical access controls, 24/7 monitoring, and redundant system architecture to protect against both physical and cyber threats.
• Vulnerability management: The pd88 platform undergoes regular security assessments to identify and remediate vulnerabilities before they can be exploited.
• Staff training: All pd88 staff with access to personal data receive regular training on data protection best practices and are bound by confidentiality obligations in their employment or service agreements.

8.2 Despite these measures, no online platform can guarantee absolute security. If you become aware of any actual or suspected security incident affecting your pd88 account, please notify us immediately at [email protected] so we can investigate and take appropriate action without delay.

8.3 In the event of a personal data breach that poses a risk to your rights and freedoms, pd88 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

9 Data Retention

9.1 pd88 retains personal data for only as long as necessary to fulfil the purposes for which it was collected, to comply with our legal obligations, and to resolve any disputes or enforce our agreements. The general retention periods we apply are:

• Account data (identity, contact, preferences): Retained for the duration of your active account and for a period of five (5) years following permanent account closure, in order to comply with AML record-keeping obligations and to handle any post-closure disputes.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction in accordance with financial record-keeping requirements applicable to payment service providers.
• KYC and identity verification documents: Retained for five (5) years following the date of verification or account closure, whichever is later.
• Gaming and betting history: Retained for three (3) years from the date of each session for dispute resolution, responsible gaming monitoring, and internal analytics purposes.
• Support communications: Retained for two (2) years from the date of each communication for quality assurance and dispute resolution purposes.
• Technical and log data (IP addresses, device data): Retained for twelve (12) months from the date of collection for security monitoring purposes, after which it is deleted or fully anonymised.
• Marketing consent records: Retained for the duration of your consent plus two (2) years following withdrawal of consent to demonstrate compliance.

9.2 When a retention period expires, personal data is securely deleted from our active systems or, where deletion is not technically feasible (for example, in backup archives), it is isolated from further processing and scheduled for deletion at the next available cycle.

9.3 Anonymised or aggregated data that cannot be used to identify you personally may be retained indefinitely for statistical and analytical purposes.

10 Your Privacy Rights

10.1 As a pd88 player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with your request clearly described:

• Right of access: You have the right to request a copy of the personal data pd88 holds about you and to receive information about how that data is being used. We will respond to verified access requests within thirty (30) days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update many details directly through your account settings panel.
• Right to erasure ("right to be forgotten"): You may request that pd88 delete your personal data. This right is subject to exceptions — for example, we are unable to delete data that we are legally required to retain for AML or financial record-keeping purposes. Where erasure is possible, we will confirm completion within thirty (30) days.
• Right to restrict processing: You may request that pd88 temporarily stop processing your data (other than storing it) while a dispute about its accuracy or the lawfulness of its processing is being resolved.
• Right to data portability: You may request that the personal data you provided to pd88 on the basis of consent or contract be returned to you in a structured, commonly used, machine-readable format (such as CSV or JSON).
• Right to object: You have the right to object to processing of your personal data where that processing is based on legitimate interests. If you object, pd88 will cease the processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time by contacting [email protected]. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

10.2 pd88 will not charge a fee for handling reasonable privacy requests. If a request is manifestly unfounded, excessive, or repetitive, pd88 reserves the right to charge a reasonable administrative fee or to decline to act on the request, providing reasons for that decision in writing.

10.3 pd88 aims to respond to all privacy rights requests within thirty (30) calendar days. In complex cases, this period may be extended by a further sixty (60) days, in which case we will notify you of the extension and the reasons for it.

11 Children & Minors

11.1 The pd88 platform is strictly for adults aged 21 years and above. pd88 does not knowingly collect, store, or process personal data from individuals under the age of 21.

11.2 If pd88 discovers that a player under the age of 21 has registered an account or provided personal data, we will immediately suspend the account, void any transactions, and permanently delete all associated personal data without undue delay.

11.3 If you are a parent or guardian and believe that a minor in your care has submitted personal data to pd88, please contact us immediately at [email protected] so we can take the necessary action. pd88 takes underage access extremely seriously and cooperates fully with guardians and relevant authorities in investigating such cases.

12 Third-Party Links & Integrations

12.1 The pd88 platform may display content from or reference third-party game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) whose software is integrated directly into the pd88 platform under licensing agreements. When you launch a game from these providers within the pd88 interface, the session data generated is shared with the relevant provider as described in Section 7 of this Policy.

12.2 The pd88 platform does not contain outbound links to external third-party websites for general browsing purposes. In the event that any reference to an external resource appears (for example, in a support article), pd88 is not responsible for the privacy practices or content of those external sites. You are encouraged to review the privacy policy of any third-party site you visit independently of the pd88 platform.

12.3 Payment integrations with providers such as bKash, Nagad, and Rocket operate through secure API connections. When you are redirected to a payment provider's interface to complete a transaction, the provider's own privacy policy governs the data you submit directly to them during that interaction.

13 Updates to This Privacy Policy

13.1 pd88 reviews this Privacy Policy on a regular basis and will update it when our data practices change, when new services are introduced, or when changes in applicable law require us to do so.

13.2 When material changes are made — changes that significantly affect your rights or how your data is used — pd88 will notify registered players via email to the address on file, or via an in-platform notification, at least seven (7) days before the changes take effect. The effective date shown at the top of this page will be updated to reflect the date of the latest revision.

13.3 Your continued use of the pd88 platform after a revised Privacy Policy takes effect constitutes your acceptance of the updated terms. If you do not agree with any material change, you have the right to close your account before the change takes effect by contacting [email protected].

13.4 Previous versions of this Privacy Policy are available on request by contacting our support team. We maintain an internal archive of all superseded policy versions for a minimum of five (5) years.

14 Contact Us

14.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the way pd88 handles your personal data, please reach out to us through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Response time: Our support team is available 24 hours a day, 7 days a week, in Bangladesh Standard Time (BST, UTC+6) and aims to acknowledge all privacy-related enquiries within 24 hours of receipt.
• Language: You may contact us in English. All formal privacy rights requests must be submitted in English to ensure accurate processing.

14.2 When submitting a privacy rights request, please include your registered username or email address, a clear description of the right you wish to exercise, and any supporting information that will help us locate and verify your account. This will allow us to process your request as quickly as possible.

14.3 pd88 is committed to resolving all privacy-related concerns fairly and transparently. If you are not satisfied with our response to a privacy complaint, you may escalate the matter to the relevant data protection authority in your jurisdiction.