Privacy Policy

01Introduction

ddt88 ("we", "us", "the Platform") is committed to protecting the privacy and personal data of all users who register and play on ddt88.app. This Privacy Policy describes in plain terms how we handle your personal information, in compliance with applicable data protection principles and in accordance with our commitment to operating a safe, transparent, and trustworthy gaming platform for players across Bangladesh.

By creating an account on ddt88, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, please do not register an account or use the platform.

02Information We Collect

ddt88 collects personal data in three broad categories: information you provide directly when registering or using the platform, information generated automatically through your use of the platform, and information received from third-party payment and verification providers. The specific data collected under each category is set out below.

Information You Provide Directly

• Full name and date of birth — collected at registration and used for identity verification and age compliance (21+ requirement).
• Mobile phone number — used for account verification, withdrawal confirmation via bKash or Nagad, and critical security communications.
• Email address (where provided) — used for account-related notices, bonus communications, and support correspondence.
• Identity documents submitted for KYC verification — National Identity Card (NID), passport, utility bills, or bank statements. These are stored securely and not shared with marketing partners.

Information Generated Automatically

• Device and browser information — including device type, operating system, browser version, screen resolution, and device fingerprint. Used for fraud detection, duplicate account identification, and platform optimisation.
• IP address and approximate geolocation — logged at every login session and used to flag access from unexpected locations, supporting account security and anti-fraud measures.
• Gaming activity logs — game types played, bet amounts placed, session duration, win and loss records, and bonus usage. Used for responsible gaming monitoring, dispute resolution, and platform analytics.

Information from Third-Party Providers

• Payment confirmation data from bKash, Nagad, Rocket, Upay, and bank partners — transaction reference numbers, payment timestamps, and confirmation statuses. ddt88 does not receive or store full payment account credentials (e.g., full bKash PIN or bank card numbers).
• Identity verification outcomes from KYC processing partners — pass or fail status, document type verified, and verification date. The underlying document images are handled by the KYC provider under their own security protocols.
• Anti-fraud screening data — where permitted, ddt88 may receive risk signals from shared fraud-intelligence networks to prevent the misuse of the platform for financial crimes.
• Support interaction records — transcripts of email communications with the ddt88 support team, stored to maintain a complete account history and improve service quality.

03How We Use Your Information

ddt88 uses personal data only for specific, legitimate purposes directly related to operating a safe and compliant gaming platform. The table below summarises the primary purposes for which your data is used and the corresponding lawful basis for each use.

04Legal Basis for Processing

ddt88 relies on the following lawful bases for processing personal data. We do not process personal data for purposes that are incompatible with the basis on which it was originally collected.

• Contract performance — processing necessary to deliver the service you requested when registering your account and placing bets on the platform.
• Legal obligation — processing required to comply with applicable laws governing age verification, anti-money-laundering, and responsible gaming obligations.
• Legitimate interests — processing that is necessary for the prevention of fraud, protection of platform security, and improvement of the gaming experience, where those interests are not overridden by your fundamental rights.
• Consent — where ddt88 sends you promotional offers, bonus notifications, or marketing communications by SMS or email, we do so only where you have opted in or where we have a pre-existing relationship with you as an active registered player.

05Cookies and Tracking Technologies

ddt88 uses cookies and similar tracking technologies to operate the platform, maintain session security, detect fraudulent activity, and improve user experience. This section explains what types of cookies we use and how you can manage your preferences.

Strictly Necessary Cookies

These cookies are essential to the operation of the ddt88 platform. They enable core functions such as keeping you logged in during a gaming session, maintaining your cart or bet slip, and processing payment flows. You cannot opt out of strictly necessary cookies without also opting out of using the platform itself, as they are required for the service to function.

Analytical and Performance Cookies

ddt88 uses first-party analytical cookies to understand aggregate patterns of platform usage — such as which game categories are most popular, average session durations, and page load performance. These cookies do not identify you personally; they collect anonymised or pseudonymised data. The insights gained help us optimise the platform experience for all players.

Security and Fraud-Detection Cookies

ddt88 uses session-bound security tokens and device-fingerprint cookies to detect automated bots, identify suspicious login patterns, and prevent duplicate account creation. These cookies are a core component of our anti-fraud infrastructure and cannot be disabled without impairing the security of your account.

ddt88 does not use third-party advertising or retargeting cookies. We do not place tracking pixels from social media networks or advertising platforms on the ddt88 site. Your browsing activity on ddt88 is not shared with ad networks for the purpose of targeting you with advertising on other websites.

06Sharing Your Personal Data

ddt88 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Personal data is shared with third parties only in the following limited circumstances:

• Payment processing partners — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive only the transaction data necessary to process your deposit or withdrawal. These partners operate under their own privacy policies and security standards.
• KYC and identity verification providers — third-party services engaged specifically to verify player identity documents as part of our age-verification and anti-fraud obligations. These providers are contractually bound to use your data solely for verification purposes.
• Law enforcement and regulatory bodies — where ddt88 is legally required to disclose personal data in response to a lawful request from a government authority, court order, or regulatory investigation. ddt88 will, where legally permitted, notify you of any such disclosure request prior to complying.
• Business continuity purposes — in the event of a merger, acquisition, or sale of ddt88's business, personal data held may be transferred to the acquiring entity as part of that transaction. Any such transfer will be subject to the same privacy protections described in this policy, and you will be notified in advance.

07Data Retention

ddt88 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Active account data — retained for the full duration of your account's active status and for a period of 5 years following account closure, to satisfy anti-money-laundering record-keeping obligations.
• KYC documents — retained for 5 years from the date of submission or from the date of account closure, whichever is later, in accordance with financial record-keeping requirements.
• Support communications — retained for 3 years from the date of the last interaction, to allow resolution of any delayed disputes or account queries.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any identifiable individual. Anonymised or aggregated data (which cannot identify you) may be retained indefinitely for statistical and platform-improvement purposes.

08Data Security Measures

ddt88 implements a layered security architecture to protect personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security measures include, but are not limited to, the following:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and ddt88 servers, including during login, deposit, withdrawal, and support communications.
• Encryption at rest for sensitive stored data — personal identifiers, payment references, and KYC record metadata are stored in encrypted form on ddt88 servers.
• Role-based access controls — only ddt88 staff members with a documented operational need are permitted to access personal data. All access events are logged and reviewed periodically.
• Intrusion detection and anomaly monitoring — automated systems scan for unusual access patterns, brute-force login attempts, and data exfiltration signals on a continuous basis.

Despite these measures, no internet-based transmission or electronic storage system is completely impenetrable. ddt88 cannot guarantee absolute security of data transmitted over the internet. You are also responsible for keeping your account credentials confidential and for using a secure, private device when accessing your ddt88 account.

09Your Data Rights

As a registered user of ddt88, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and your registered mobile number for identity verification.

• Right of access — you may request a copy of all personal data ddt88 holds about you, along with information about the purposes for which it is processed and the categories of third parties with whom it has been shared.
• Right to rectification — if any personal data ddt88 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent (and no other lawful basis applies), or where you object to processing and your interests override our legitimate interests.
• Right to restriction — you may request that ddt88 restrict the processing of your personal data in certain circumstances, such as while a rectification request is being assessed or while an objection is being considered.
• Right to data portability — where processing is based on consent or contract and is carried out by automated means, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format.
• Right to object — you have the right to object at any time to the processing of your personal data where that processing is based on legitimate interests. If you object, ddt88 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.

To submit any data rights request, email us at [email protected]

10Protection of Minors

ddt88 strictly prohibits the registration and use of its platform by persons under the age of 21. ddt88 does not knowingly collect personal data from individuals under 21 years of age. If we become aware that personal data has been collected from a person under the age of 21, we will delete that data immediately and permanently close the associated account.

If you are a parent or guardian and believe that your child (under 21) has registered an account on ddt88, please contact us immediately at [email protected]. We will investigate the matter and take all necessary steps to close the account and delete associated personal data without delay.

11Payment Data and Financial Privacy

ddt88 processes payment transactions through established Bangladeshi mobile financial services and banking partners. When you make a deposit via bKash, Nagad, Rocket, or Upay, the transaction is initiated on the respective provider's platform using their own secure interface. ddt88 receives only the confirmation reference and transaction amount — not your full mobile banking PIN, OTP, or account credentials.

All financial transaction records are retained in accordance with the data retention schedule described in Section 07 of this policy. Transaction data is used solely for the purposes of dispute resolution, fraud prevention, regulatory compliance, and account balance management. ddt88 does not use your payment history to make automated decisions that produce legal or similarly significant effects on you without your involvement.

12Changes to This Privacy Policy

ddt88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal requirements. When material changes are made, we will notify registered users via their registered mobile number or email address at least 7 days before the changes take effect, or post a prominent notice on the platform.

The "Last updated" date at the top of this policy will always reflect the most recent revision. We encourage you to review this Privacy Policy periodically. Your continued use of the ddt88 platform after any update constitutes your acceptance of the revised policy.

13Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ddt88 handles your personal data, please contact our dedicated data privacy team. We aim to respond to all privacy-related queries within 2 business hours during normal operating periods.

Privacy Support Email: [email protected]

Our Privacy Commitments