88ddb Privacy Policy

This Privacy Policy ("Policy") describes how 88ddb ("the Platform", "we", "us", "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you", "your", "the Player") who access, register with, or use the services available at https://88ddb.io, including all associated sub-pages, mobile-optimised views, and communication channels.

88ddb operates as an internationally licensed offshore gaming platform serving players across Bangladesh and other permitted jurisdictions. We are committed to handling your personal data with the highest standards of transparency, security, and respect for your privacy rights. This Policy applies to all data collected through the website, through interactions with our support team, and through the payment processing services we facilitate with bKash, Nagad, Rocket, Upay, Visa, and Mastercard.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. The effective date of this Policy is 1 January 2026. Where we make material changes, we will notify registered players as described in Section 12.

We collect personal data through several channels — directly from you during registration and account management, automatically during your use of the platform, and from third-party partners where permitted. The categories of data we collect include:

We do not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric identifiers, except where expressly required for identity verification under applicable anti-money laundering regulations and only with your explicit prior consent.

88ddb processes your personal data on one or more of the following lawful bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil the Terms & Conditions you have agreed to, including account management, transaction processing, and game delivery.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML), know-your-customer (KYC), and fraud prevention regulations imposed on internationally licensed gaming operators.
• Legitimate interests: Processing carried out to operate and improve the platform, prevent fraudulent activity, ensure network security, and communicate service updates — where these interests are not overridden by your fundamental rights.
• Consent: Processing for marketing communications and certain analytics activities, where you have given your explicit, freely revocable consent during or after registration. You may withdraw marketing consent at any time by contacting [email protected].

88ddb uses the personal data we collect for the following specific purposes:

• Account creation and management: To register your account, verify your identity, manage your profile settings, and maintain accurate account records throughout your relationship with 88ddb.
• Payment processing: To facilitate deposits and withdrawals through bKash, Nagad, Rocket, Upay, Visa, and Mastercard, to reconcile transaction records, and to investigate any disputed payments.
• Game delivery and personalisation: To provide access to casino games, sports betting markets, and live dealer tables; to remember your in-game preferences; and to surface game recommendations based on your activity history.
• Responsible gaming enforcement: To apply deposit limits, loss limits, session time reminders, and self-exclusion measures you have requested, and to identify accounts that may be displaying patterns indicative of problem gambling.
• Fraud and security: To detect and prevent unauthorised access, bonus abuse, money laundering, account takeover attempts, and other prohibited conduct described in the Terms & Conditions.
• Customer support: To handle enquiries, complaints, and dispute resolution via live chat and email, and to maintain records of support interactions for quality assurance purposes.
• Marketing communications: To send you promotional emails, bonus notifications, and event-based offers (such as BPL season promotions and Eid special bonuses) where you have consented to receive such communications. You may unsubscribe at any time.
• Platform improvement: To analyse aggregate usage data, identify technical issues, optimise page performance, and develop new features — all processed in anonymised or pseudonymised form where practicable.
• Legal compliance: To retain records required by applicable AML, KYC, and tax reporting obligations, and to respond to lawful requests from regulatory or judicial authorities.

88ddb does not sell, rent, or trade your personal data to any third party for commercial purposes. We share data only where necessary to deliver our services or meet our legal obligations. The categories of third parties who may receive your data are:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and any intermediary payment gateway — solely for the purpose of executing your deposit and withdrawal instructions.
• Game studio providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified game studios — limited to the technical data required to authenticate your session and record game outcomes.
• Identity verification services: Third-party KYC providers used to authenticate government-issued identity documents during the account verification process.
• Fraud prevention and security services: Providers of IP analysis, device fingerprinting, and transaction risk-scoring services — all bound by strict data processing agreements.
• IT infrastructure and hosting providers: Cloud hosting and content delivery network providers used to operate the platform securely and reliably.
• Regulatory and legal authorities: Where required by a court order, regulatory instruction, or applicable law, we may disclose data to the relevant authority without prior notice to you.

All third-party service providers who receive your personal data are bound by contractual data processing agreements that restrict their use of your data to the specific purpose for which it was shared and require them to apply security standards consistent with those of 88ddb.

88ddb uses cookies and similar tracking technologies to operate the platform efficiently, maintain your session security, and understand how players interact with the site. We use the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens, CSRF protection cookies, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Performance cookies: Used to measure page load times, identify error pages, and optimise server response. All data collected via performance cookies is aggregated and anonymised.
• Functionality cookies: Used to remember your preferences such as display language, preferred currency display, and game lobby filter settings across sessions.
• Analytics cookies: Used to understand aggregate player behaviour, including which games are most popular, which pages experience the highest exit rates, and how long players spend in different areas of the platform. Data is pseudonymised before analysis.

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling cookies may affect the performance of certain platform features. We do not use third-party advertising or retargeting cookies. We do not track your browsing activity on websites other than https://88ddb.io.

88ddb retains your personal data for as long as your account remains active and for a defined period thereafter, in accordance with our legal and regulatory obligations. The key retention periods we apply are:

• Account and identity data: Retained for the duration of your account plus a minimum of 5 years following account closure, in compliance with AML record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction, consistent with financial record-keeping obligations applicable to international gaming operators.
• KYC verification documents: Retained for 5 years following your last transaction or account closure, whichever is later.
• Support communications: Retained for 2 years from the date of the interaction for quality assurance and dispute resolution purposes.
• Technical and usage logs: Retained for up to 12 months in pseudonymised form for security monitoring and platform analytics.
• Marketing consent records: Retained for as long as your consent remains active, and for 2 years following withdrawal of consent as evidence of the consent lifecycle.

When data reaches the end of its retention period, it is securely deleted or anonymised in a manner that prevents re-identification. You may request early deletion of certain data types — subject to our legal retention obligations — as described in Section 9.

88ddb applies industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security framework includes:

• 256-bit SSL/TLS encryption on all data transmitted between your browser and our servers, ensuring that your account credentials and financial data are protected in transit.
• Salted password hashing using modern cryptographic algorithms — your password is never stored in plaintext and is never accessible to 88ddb support staff.
• Role-based access controls that restrict internal access to personal data strictly to staff members who require it to perform their designated functions.
• Intrusion detection and monitoring systems that continuously scan for anomalous login patterns, suspicious IP activity, and potential data breach indicators.
• Regular third-party security audits and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Data minimisation principles — we collect and store only the data that is strictly necessary for the purposes described in this Policy.

Despite our rigorous security measures, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, 88ddb will notify affected players without undue delay and will take immediate remediation steps.

You are responsible for maintaining the confidentiality of your own account credentials. Do not share your password with anyone, including 88ddb support staff. If you suspect that your account has been accessed without your authorisation, contact our support team immediately via live chat.

As a player on the 88ddb platform, you hold the following rights in relation to your personal data. These rights may be exercised at any time by contacting our privacy team at [email protected] with the subject line "Privacy Rights Request":

• Right of Access: You may request a copy of all personal data that 88ddb holds about you. We will provide this in a structured, commonly used format within 30 days of receiving your verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations described in Section 7. We cannot erase data that we are legally required to retain.
• Right to Restriction of Processing: In certain circumstances, you may request that we restrict the processing of your data — for example, while a rectification request is being reviewed — without deleting it.
• Right to Data Portability: You may request a machine-readable export of the personal data you have provided to 88ddb directly, in a format that allows you to transfer it to another service provider.
• Right to Object: You may object to the processing of your personal data where we rely on legitimate interests as the legal basis, and where your specific situation provides grounds for objection.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time with immediate effect. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

All privacy rights requests are acknowledged within 5 business days and resolved within 30 days. Where a request is complex or voluminous, we may extend this period by a further 30 days with notice to you. We may need to verify your identity before processing a rights request to protect against unauthorised access to another player's data.

The 88ddb platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from any individual under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and permanently close the associated account.

If you are a parent or guardian and believe that a minor in your care has registered an account or provided personal data to 88ddb, please contact us immediately at [email protected]. We will investigate and take appropriate action within 48 hours of receiving a verified report. 88ddb supports responsible gaming and takes the protection of minors from gambling-related harm seriously as a core platform obligation.

As an internationally licensed offshore gaming platform serving players in Bangladesh, 88ddb may process and store your personal data on servers located outside of Bangladesh. Where data is transferred to a jurisdiction that does not provide a level of data protection equivalent to applicable international standards, 88ddb ensures that appropriate safeguards are in place, including:

• Standard contractual clauses in agreements with all third-party data processors located in lower-protection jurisdictions.
• Binding corporate rules or equivalent instruments where data is transferred within the 88ddb corporate group.
• Technical measures including end-to-end encryption for data in transit between jurisdictions.

By using the 88ddb platform from Bangladesh, you acknowledge that your data may be processed in international locations as described in this section, and that 88ddb takes all reasonable steps to ensure the security and integrity of that data regardless of where it is physically processed.

88ddb may update this Privacy Policy from time to time to reflect changes in our data practices, service offerings, or applicable legal requirements. When a material change is made to this Policy, we will notify registered players via email and by posting a prominent notice on the platform at least 7 days before the changes take effect.

The effective date at the top of this Policy will be updated each time a new version is published. The current version of this Policy is always available at https://88ddb.io/privacy-policy. Your continued use of the platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you must stop using the platform and request account closure before the updated Policy takes effect.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact the 88ddb privacy team through the following channels:

• Live Chat: Available 24/7 directly within the 88ddb platform — the fastest channel for urgent privacy or account security matters.
• Email: [email protected] — include "Privacy Rights Request" in the subject line for all formal data rights enquiries. Response within 4–12 hours during Bangladesh Standard Time (BST, UTC+6) business hours.

When submitting a privacy enquiry by email, please include your registered account username and a clear description of your request. Do not include your password, full payment card number, or complete government ID number in any email communication — our support team will never ask for these details via email.