dc88 Privacy Policy

1 Introduction

dc88 ("we", "our", "us") is committed to protecting the personal information of every player who uses the dc88 platform at dc88.io. This Privacy Policy describes in plain, formal English how we collect, use, store, share, and safeguard your personal data when you register an account, browse the platform, place bets, participate in promotions, or interact with our customer support team.

This Policy applies to all personal data processed in connection with your use of the dc88 platform, regardless of the device or channel through which you access our services. It applies to all players located in Bangladesh and any other jurisdiction in which dc88 operates. This Policy should be read alongside the dc88 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference into this Privacy Policy.

dc88 is an online betting and casino platform serving the Bangladesh market. We understand that our players trust us with sensitive personal and financial information, and we take that responsibility seriously. Our data practices are designed to be transparent, proportionate, and respectful of your right to privacy at every stage of your relationship with dc88.

2 Data Controller

For the purposes of this Privacy Policy, dc88 acts as the data controller in respect of all personal data collected from players through the dc88 platform. As data controller, dc88 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in a lawful, fair, and transparent manner.

All data-related enquiries, requests to exercise your data rights, and formal complaints regarding dc88's data practices should be directed to our support team at [email protected]. We will acknowledge all data-related communications within 48 hours and provide a substantive response within 30 calendar days of receipt.

3 Data We Collect

dc88 collects the following categories of personal data from players. We collect only data that is necessary and proportionate to the purpose for which it is processed.

dc88 does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is inherent in government-issued identity documents submitted during KYC verification.

4 How We Collect Data

4.1 Directly from You

The majority of the personal data dc88 holds about you is provided directly by you during the course of your relationship with us. This includes data you provide at account registration, during KYC verification, when making a deposit or withdrawal request, when contacting our support team, when participating in a promotion, or when completing any on-platform form or preference setting.

4.2 Automatically

dc88 automatically collects certain technical and usage data when you interact with the platform. This data is collected using server logs, cookies, and similar tracking technologies embedded in the dc88 platform. Technical data such as your IP address, device type, and browser version are captured automatically with each platform request. Usage data such as page views, game sessions, and click events are recorded to help us understand how players use the platform and to identify and address any technical issues.

4.3 From Third Parties

dc88 may receive personal data about you from third-party sources in the following circumstances: (a) from payment service providers such as bKash, Nagad, Rocket, and Upay in connection with the processing and verification of deposits and withdrawals; (b) from KYC identity verification partners engaged to assist with age and identity checks; (c) from fraud prevention and security analytics providers who assist dc88 in identifying suspicious account activity; (d) from game providers such as Evolution Gaming, Pragmatic Play, and Ezugi in connection with the resolution of game disputes or technical issues. In all cases, dc88 ensures that third-party data sources are contractually bound to process and share data lawfully.

5 Legal Basis for Processing

dc88 processes your personal data on the following legal bases, depending on the nature and purpose of the processing activity:

• Contractual necessity: Processing that is necessary to perform the contract between dc88 and you as a registered player — including account management, payment processing, bet settlement, and customer support.
• Legal obligation: Processing that dc88 is required to carry out to comply with applicable legal obligations, including KYC identity verification, age verification, transaction record-keeping, and cooperation with lawful requests from authorities.
• Legitimate interests: Processing carried out on the basis of dc88's legitimate interests, where those interests are not overridden by your fundamental rights. This includes fraud prevention, platform security, duplicate account detection, responsible gaming monitoring, and platform analytics to improve the player experience.
• Consent: Processing for which dc88 has obtained your freely given, specific, and informed consent — for example, sending you promotional communications about bonuses and offers. You may withdraw consent for consent-based processing at any time by contacting [email protected] or updating your account communication preferences.

6 How We Use Your Data

dc88 uses the personal data it collects for the following specific purposes:

• To create and manage your dc88 player account, including verifying your identity and age as part of the KYC process.
• To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and to maintain accurate financial records of all transactions on your account.
• To provide access to betting markets, casino games, and slot titles on the dc88 platform, and to settle bets and game outcomes correctly.
• To communicate with you regarding your account status, transaction confirmations, security alerts, and responses to support enquiries — all communications in English.
• To send you information about promotions, bonuses, and seasonal offers relevant to Bangladesh players, where you have consented to receive such communications.
• To detect, investigate, and prevent fraud, money laundering, duplicate accounts, and other prohibited conduct as defined in the dc88 Terms & Conditions.
• To monitor your betting and gaming activity for responsible gaming purposes, including identifying patterns consistent with problem gambling behaviour and activating protective measures where appropriate.
• To analyse aggregated, anonymised platform usage data to improve the performance, features, and user experience of the dc88 platform.
• To comply with applicable legal and regulatory obligations, including responding to lawful requests from competent authorities.

dc88 will not use your personal data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required, obtaining your consent.

7 Data Sharing & Disclosure

7.1 Service Providers

dc88 shares personal data with carefully selected third-party service providers who assist us in delivering our platform and services. All such providers are engaged under written data processing agreements that require them to process your data only on dc88's instructions, to maintain appropriate security measures, and to return or delete your data upon termination of their engagement. Current categories of service provider with whom dc88 may share your data include: payment processors (bKash, Nagad, Rocket, Upay), KYC and identity verification partners, cloud infrastructure and hosting providers, fraud prevention and security analytics providers, and game content suppliers (Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, Spribe).

7.2 Legal Disclosures

dc88 may disclose your personal data to competent law enforcement authorities, regulatory bodies, courts, or other public authorities where we are required to do so by applicable law, court order, or lawful governmental request. dc88 will only make such disclosures to the extent necessary to comply with the specific legal requirement and will notify you of any such disclosure where we are legally permitted to do so.

7.3 Business Transfers

In the event that dc88 undergoes a merger, acquisition, reorganisation, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. dc88 will notify you of any such transfer and the identity of the new data controller prior to your personal data being transferred, and will ensure that appropriate data protection obligations continue to apply to your data following the transfer.

7.4 No Sale of Personal Data

dc88 does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing, advertising, or commercial purposes. Any sharing of personal data is strictly limited to the purposes described in this Privacy Policy.

8 Cookies & Tracking Technologies

dc88 uses cookies and similar tracking technologies on the dc88 platform. A cookie is a small text file placed on your device when you visit a website. The following categories of cookies are used on the dc88 platform:

• Essential cookies: These cookies are strictly necessary for the dc88 platform to function. They maintain your login session, store your language and currency preferences, and ensure the security of your account during a session. Essential cookies cannot be disabled without impairing your ability to use the platform.
• Analytics cookies: dc88 uses first-party analytics cookies to collect aggregated data about how players navigate and interact with the platform. This data is used to identify technical issues, measure the effectiveness of platform features, and make improvements to the player experience. Analytics data is processed in anonymised or pseudonymised form.
• Security cookies: dc88 uses security cookies to support fraud prevention, duplicate account detection, and suspicious activity monitoring. These cookies store device fingerprint data and session identifiers that help dc88 identify and investigate potentially fraudulent or prohibited behaviour.

dc88 does not use third-party advertising or retargeting cookies that track your activity across other websites. You may manage and delete cookies through your browser settings at any time. Please note that disabling essential cookies may prevent you from logging into your dc88 account or using core platform features.

9 Data Security

dc88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include the following:

• All data transmitted between your device and dc88's servers is encrypted using industry-standard SSL/TLS protocols (minimum TLS 1.2).
• Account passwords are stored using one-way cryptographic hashing algorithms. dc88 does not store passwords in plain text and cannot retrieve your password — only a password reset is possible if access is lost.
• Access to personal data within dc88's systems is restricted to authorised personnel on a strict need-to-know basis. All personnel with access to personal data are subject to confidentiality obligations.
• dc88 conducts regular internal security reviews of its platform infrastructure and data handling practices to identify and address potential vulnerabilities.
• KYC documents and identity verification files are stored in secure, access-controlled environments separate from general platform data.

Despite these measures, no online platform can guarantee absolute security against all possible threats. In the event of a data security breach that poses a risk to your personal data, dc88 will notify you as promptly as reasonably practicable by email to the address registered to your account, and will take all reasonable steps to contain and remediate the breach.

10 Data Retention

dc88 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, and reporting obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your active account and for a minimum of five years following account closure, to meet legal record-keeping requirements.
• Financial transaction records: Retained for a minimum of five years from the date of the transaction, in accordance with standard financial record-keeping practice.
• KYC documents: Retained for the duration of your active account and for a minimum of five years following account closure.
• Support and communications data: Retained for a minimum of three years from the date of the communication, or longer if the communication relates to an unresolved dispute or legal matter.
• Cookies and analytics data: Session cookies are deleted when you close your browser. Persistent analytics cookies expire within 13 months of their last activity date.

When your personal data is no longer required for any active purpose and its retention period has elapsed, dc88 will securely delete or anonymise it in a manner that prevents reconstruction of the original personal data. You may request early deletion of non-essential personal data by contacting [email protected], subject to dc88's legal obligations to retain certain categories of data.

11 Your Data Rights

As a player on the dc88 platform, you hold the following rights in respect of the personal data dc88 processes about you. To exercise any of these rights, please submit a written request to [email protected]. dc88 will acknowledge your request within 48 hours and provide a substantive response within 30 calendar days. dc88 will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive.

• Right of access: You have the right to obtain confirmation of whether dc88 holds personal data about you and, if so, to receive a copy of that data together with information about how it is processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data dc88 holds about you. You may update certain data directly through your account settings; for other corrections, please contact our support team.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to dc88's overriding legal obligations to retain certain data.
• Right to restrict processing: You have the right to request that dc88 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested or while an objection to processing is being assessed.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive the personal data you have provided to dc88 in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to processing of your personal data carried out on the basis of dc88's legitimate interests. dc88 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where dc88 processes your data on the basis of your consent — for example, for promotional communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

12 Children's Privacy

The dc88 platform is strictly intended for adults aged 21 years and above. dc88 does not knowingly collect personal data from any person under the age of 21. Account registration requires confirmation that the applicant meets the minimum age requirement, and KYC identity verification is used to enforce this requirement.

If dc88 discovers or is notified that personal data has been collected from a person under the age of 21, dc88 will immediately suspend the relevant account, delete all associated personal data, and reverse any financial transactions associated with that account to the extent reasonably practicable. If you believe that dc88 may have inadvertently collected data from a person under 21, please notify us immediately at [email protected].

13 Third-Party Links

The dc88 platform may contain links to third-party websites or services, including payment service provider portals (such as the bKash or Nagad web interfaces) to which you may be redirected during the deposit or withdrawal process. This Privacy Policy applies only to the dc88 platform and does not govern the data practices of any third-party website or service.

dc88 is not responsible for the privacy practices, security measures, or content of any third-party website. We recommend that you read the privacy policy of any third-party service you access in connection with your use of the dc88 platform. dc88's inclusion of a link to a third-party site does not constitute an endorsement of that site's privacy or data practices.

14 Policy Updates

dc88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. The effective date at the top of this Policy indicates when it was last revised. Where changes to this Policy are material — for example, changes to the categories of data we collect, the legal basis for processing, or your data rights — dc88 will notify registered players by email to the address associated with their account prior to the changes taking effect, and will display a prominent notice on the dc88 platform.

Non-material changes, such as corrections to typographical errors or clarifications that do not alter the substance of the Policy, may take effect immediately without prior notice. Your continued use of the dc88 platform following the effective date of an updated Privacy Policy constitutes your acknowledgement of the revised Policy. If you do not agree with any update to this Policy, you should cease using the dc88 platform and may request account closure by contacting [email protected].

15 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or dc88's data practices, please contact our support team using the details below. All data-related communications should be submitted in English for the fastest possible response.

• Email: [email protected] (plain text — not a clickable link)
• Response Time: Acknowledgement within 48 hours; substantive response within 30 calendar days
• Support Language: English
• Support Hours: 24 hours per day, 7 days per week
• Time Zone: Bangladesh Standard Time (BST, UTC+6)

For responsible gaming support, deposit limit requests, self-exclusion, or account security concerns, our 24/7 English-language support team is always available. dc88 is committed to resolving all data-related enquiries promptly and transparently.