dh888 Privacy Policy — Protecting Your Personal Data

Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, including names, email addresses, phone numbers, financial account details, IP addresses, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" refers to dh888, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" refers to any third-party entity that processes Personal Data on behalf of dh888, under dh888's instruction, for specific and limited purposes.
• "Consent" means freely given, specific, informed, and unambiguous agreement to the processing of Personal Data for a stated purpose.
• "KYC" (Know Your Customer) refers to the identity and age verification process applied to registered dh888 accounts as required by the Platform's compliance obligations.
• "Cookies" refers to small text files placed on your device by the Platform's web server to facilitate session management, preference storage, and usage analytics.
• "Authorised Payment Methods" refers to bKash, Nagad, Rocket, and Upay — the mobile financial service providers through which dh888 processes deposits and withdrawals in Bangladeshi Taka (৳).

Information We Collect

dh888 collects Personal Data through several channels during your use of the Platform. The categories of data collected and their respective collection triggers are described below.

Registration Data: When you create a dh888 account, we collect your full legal name, date of birth, email address, mobile phone number, and a self-selected username and password. This information is required to establish your account, verify your eligibility (including the 21+ age requirement), and provide you with access to the Platform's services.

Identity Verification (KYC) Data: To comply with our anti-money laundering (AML) obligations and to confirm player eligibility, dh888 may request copies of government-issued identification documents (such as a National ID card or passport), proof of address, and proof of payment method ownership. This data is processed securely and retained in accordance with Section 7.

Financial Transaction Data: Every deposit and withdrawal processed through the Platform generates a transaction record, including the payment method used (bKash, Nagad, Rocket, or Upay), transaction amount in BDT (৳), timestamps, and transaction reference numbers. We do not store full mobile banking credentials or PIN codes.

Gameplay and Betting Data: dh888 records your betting history, game sessions, wager amounts, outcomes, and bonus usage across all product verticals (cricket betting, live casino, slots, and lottery). This data is used for account management, dispute resolution, responsible gaming monitoring, and platform analytics.

Device and Technical Data: When you access the Platform, our servers automatically collect technical information including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session timestamps. This data is used for security monitoring, fraud detection, and platform optimisation.

Communications Data: If you contact dh888 support via live chat or email, we retain a record of those communications, including message content and timestamps, for quality assurance, dispute resolution, and training purposes.

How We Use Your Data

dh888 uses the Personal Data collected from Players for the following specific purposes. We do not use your data for any purpose that is incompatible with those listed below without first obtaining your explicit consent.

• Account Management: To create, maintain, and administer your dh888 account, including processing login authentication, managing account settings, and enabling account recovery procedures.
• Service Delivery: To enable you to place bets, play casino games, participate in lottery draws, and use all other features of the Platform in accordance with the applicable game and betting rules.
• Identity Verification: To verify that you meet the 21+ age eligibility requirement and to confirm your identity as part of the KYC process, ensuring compliance with our AML obligations.
• Financial Processing: To process your deposits and withdrawals via the Authorised Payment Methods (bKash, Nagad, Rocket, Upay), reconcile transaction records, and detect fraudulent or suspicious financial activity.
• Responsible Gaming: To monitor gameplay patterns that may indicate problem gambling behaviour, to administer self-exclusion and deposit limit requests, and to contact Players where there is a reasonable concern about their gambling habits.
• Customer Support: To respond to your inquiries, resolve disputes, and improve the quality of our support services by reviewing communication records.
• Marketing Communications: To send you promotional offers, bonus notifications, and seasonal campaign updates (such as BPL, IPL, Eid, and Pohela Boishakh promotions) where you have provided consent to receive such communications. You may opt out at any time.
• Security & Fraud Prevention: To detect, investigate, and prevent unauthorised access, account takeovers, bot activity, money laundering, and other forms of prohibited conduct as defined in the Terms & Conditions.
• Platform Analytics & Improvement: To analyse aggregated usage data, identify technical issues, optimise the user experience, and develop new product features based on Player behaviour trends.
• Legal Compliance: To fulfil any obligation imposed by applicable law, including responding to lawful requests from regulatory or law enforcement authorities and maintaining records required by our AML policy.

Legal Basis for Processing

dh888 processes your Personal Data on one or more of the following legal bases, depending on the nature of the data and the purpose for which it is processed:

• Contractual Necessity: Processing required to perform our contractual obligations to you as a registered Player — including account creation, service delivery, and financial transaction processing — is carried out on the basis that it is necessary for the performance of the agreement between you and dh888.
• Legitimate Interests: Certain processing activities — including security monitoring, fraud detection, and platform analytics — are carried out on the basis of dh888's legitimate interests in maintaining a safe, fair, and functional platform. We ensure that these interests are not overridden by your fundamental privacy rights.
• Legal Obligation: Processing related to KYC verification, AML record-keeping, and responses to lawful authority requests is carried out on the basis that it is required by applicable legal obligations.
• Consent: Processing for marketing communications and non-essential cookies is carried out on the basis of your explicit consent, which you may withdraw at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Data Sharing & Third Parties

dh888 does not sell, rent, or trade your Personal Data. We may share your data with carefully selected third parties only in the following specific circumstances and for the limited purposes described:

Payment Processors: To process your financial transactions, dh888 shares the minimum necessary data with our Authorised Payment Methods — bKash, Nagad, Rocket, and Upay. This data is limited to transaction reference information required to confirm payment status. dh888 does not share your full account credentials with payment processors.

Game Providers: To deliver live casino, slot, and other game products, dh888 works with licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session data required to operate their game systems on the Platform. They do not receive your full registration or financial data.

KYC & Identity Verification Services: dh888 may engage third-party identity verification service providers to assist with KYC checks. These processors handle document verification data strictly under dh888's instruction and are bound by data processing agreements that prohibit any independent use of your data.

Analytics Providers: dh888 uses analytics tools to understand Platform usage patterns. Aggregated and anonymised technical data may be shared with analytics processors. No individually identifiable Personal Data is included in analytics reports.

Legal and Regulatory Authorities: dh888 will disclose Personal Data to government or regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, a valid legal process, or a court order. dh888 will, where legally permitted, notify the affected Player of such a disclosure.

Cookies & Tracking Technologies

dh888 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to remember your preferences, and to analyse how Players interact with the site. Below is a description of the types of cookies used:

You may manage or disable non-essential cookies through your browser settings. Please note that disabling Essential cookies will prevent you from logging in to or using the Platform. dh888 does not use third-party advertising cookies or cross-site tracking pixels.

Data Retention

dh888 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The general retention schedule applied by dh888 is as follows:

Upon expiry of the applicable retention period, Personal Data is either securely deleted or irreversibly anonymised so that it can no longer be associated with any individual Player. Players who request account closure will have their data retained for the minimum period required by the applicable retention schedule and then deleted.

Data Security

dh888 implements a multi-layered approach to data security, designed to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. The key security measures in place include:

• SSL/TLS Encryption: All data transmitted between your device and the dh888 servers is protected by SSL/TLS encryption. The Platform uses HTTPS exclusively; connections over unencrypted HTTP are automatically redirected.
• Password Hashing: Account passwords are never stored in plain text. dh888 applies industry-standard cryptographic hashing algorithms with salting to all stored password credentials.
• Access Controls: Access to systems and databases containing Personal Data is restricted on a strict need-to-know basis. Internal access is governed by role-based permissions, multi-factor authentication, and audit logging.
• Network Security: The Platform's infrastructure is protected by firewalls, intrusion detection systems, and DDoS mitigation services to prevent unauthorised network-level access.
• Regular Security Audits: dh888 conducts periodic internal and third-party security assessments to identify and remediate vulnerabilities in the Platform's infrastructure and application layer.
• Incident Response: In the event of a confirmed data breach that poses a risk to Players' rights, dh888 will notify affected Players and take all reasonable steps to contain the breach and prevent further unauthorised access.

Your Privacy Rights

As a registered Player on the dh888 Platform, you have the following rights with respect to your Personal Data. Requests to exercise any of these rights should be submitted to dh888 support via live chat or email and will be responded to within 30 days of receipt.

• Right of Access: You have the right to request a copy of the Personal Data dh888 holds about you, along with information about how it is used and with whom it has been shared.
• Right to Rectification: If any Personal Data held by dh888 is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected. This right is subject to override by dh888's legal retention obligations — for example, financial transaction records must be retained for regulatory purposes even after account closure.
• Right to Restrict Processing: You have the right to request that dh888 restricts the processing of your Personal Data in certain circumstances, such as while a rectification request is being reviewed.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you have the right to receive a copy of your Personal Data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes. dh888 will honour objections to marketing communications immediately upon receipt.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing already carried out.

Children & Minors

The dh888 Platform is strictly intended for adults aged 21 years and above. dh888 does not knowingly collect, store, or process Personal Data from individuals under the age of 21. The Platform implements age-verification checks during the registration process and as part of the KYC procedure precisely to prevent underage use.

If dh888 becomes aware that an account has been registered by or on behalf of an individual under the age of 21, the account will be immediately closed, all associated Personal Data will be deleted from our systems as promptly as practicable (subject to any legal retention obligations), and any deposits made by the underage individual will be returned to the originating payment source where technically feasible.

Changes to This Policy

dh888 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. When we make material changes to this Policy — meaning changes that significantly affect how we collect, use, or share your Personal Data — we will provide advance notice via a Platform notification or by email to your registered account address, at least 7 days before the changes take effect.

Minor or non-material updates (such as clarifications to existing language, grammatical corrections, or restructuring that does not change the substance of the Policy) may be made without advance notice. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Continued use of the dh888 Platform after a revised Privacy Policy has taken effect constitutes your acceptance of the updated terms. If you do not agree with a revised Policy, you should discontinue use of the Platform and may request account closure by contacting dh888 support.

Contact & Data Requests

For all privacy-related inquiries, data access requests, rectification requests, erasure requests, or general questions about how dh888 handles your Personal Data, please use the following contact channels:

• Live Chat: Available 24/7 directly through the dh888 Platform. This is the fastest channel for privacy requests and support queries.
• Email: [email protected] — plain text, not a clickable link. Use subject line "Privacy Rights Request" for data-related queries.
• Response Time: Privacy requests submitted via live chat receive an initial acknowledgement within 3 minutes. Email requests are acknowledged within 24 hours (BST). Full resolution is provided within 30 days of receipt.
• Verification Requirement: To protect your data, dh888 will verify your identity before processing any privacy request. You will be asked to confirm your registered account username and may be asked to provide a piece of identity documentation for sensitive requests such as erasure or data portability.
• Support Hours: 24 hours a day, 7 days a week, including all Bangladesh public holidays.
• Support Languages: English and Bengali.