ddk88 Privacy Policy

This Privacy Policy ("Policy") describes how ddk88 ("we", "us", "our") collects, uses, stores, shares, and protects personal information provided by or collected about you ("Player", "User", "Member") when you access or use the ddk88 website at https://ddk88.org and all associated services, including cricket betting markets, live casino games, slot games, Plinko, Wheel, and our VIP loyalty programme. By registering an account or using the platform, you confirm that you have read and understood this Policy in full.

ddk88 is committed to processing personal data responsibly and in accordance with applicable data protection principles. We collect only the data we genuinely need, we store it securely, and we never sell your personal information to third parties. If you have questions about this Policy or wish to exercise any of your data rights, please contact us at [email protected].

ddk88 processes your personal data only for purposes that are clearly defined and necessary for the operation of the platform. The primary purposes are:

• Account creation, verification, and ongoing management — including KYC checks required before any withdrawal is processed
• Processing deposits and withdrawals via bKash, Nagad, Rocket, and other accepted Bangladesh payment channels
• Delivering our sports betting, live casino, slot, Plinko, and Wheel game services and ensuring their fair and secure operation
• Complying with anti-money-laundering (AML), know-your-customer (KYC), and responsible gaming obligations
• Detecting and preventing fraud, identity theft, multi-accounting, and other prohibited conduct
• Sending account-related communications such as deposit confirmations, withdrawal updates, bonus notifications, and security alerts

ddk88 does not use your personal data for automated profiling that produces legal or similarly significant effects without human review. We do not use your data for targeted third-party advertising. Where we send promotional communications, these relate only to ddk88's own products and services, and you may opt out at any time by contacting [email protected].

ddk88 does not sell your personal data. We share personal data only in the following limited circumstances:

• Payment processors: We share transaction data with bKash, Nagad, Rocket, Upay, and other accepted payment providers solely to complete the deposit or withdrawal you have requested. These providers are bound by their own privacy obligations.
• Game and technology providers: Third-party game studios and software providers (such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi) may receive session-level data required to operate their game products within the ddk88 platform.
• Fraud prevention and compliance services: We may use specialist third-party services for identity verification, AML screening, and fraud detection. These providers act as data processors on our behalf and are bound by strict data processing agreements.
• Legal and regulatory authorities: ddk88 will disclose personal data to law enforcement agencies, financial regulators, or other competent authorities when required to do so by applicable law, court order, or regulatory directive.

Beyond the categories above, ddk88 will not disclose your personal data to any third party without your explicit prior consent. We do not share data with advertisers, social media platforms, or data analytics companies for marketing profiling.

ddk88 treats all financial data with heightened security. When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, the transaction is processed directly through the respective payment provider's secure API. ddk88 does not store your full mobile banking PIN, one-time passwords (OTPs), or full card numbers. We retain only the information necessary to record the transaction, verify it against your account, and satisfy AML reporting requirements — specifically your registered payment account reference, transaction amount in BDT, timestamp, and transaction status.

All financial records are encrypted at rest and in transit. Access to financial data within our systems is restricted to authorised personnel on a strict need-to-know basis. Internal access logs are reviewed regularly. In the event of any suspected unauthorised access to financial records, ddk88 will notify affected members without undue delay and will take immediate steps to contain and remediate the incident.

ddk88 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply: account registration and identity data is retained for the duration of your membership and for a minimum of 5 years following account closure to satisfy AML and KYC legal obligations; financial transaction records are retained for a minimum of 5 years from the date of the transaction; customer support communications are retained for up to 3 years; technical and device log data is retained for up to 12 months.

When the applicable retention period expires, ddk88 will securely delete or anonymise the relevant data so that it can no longer be associated with you as an individual. Where you have requested account closure or erasure of your data, ddk88 will process that request within 30 days, subject to any outstanding legal hold requirements. You will receive written confirmation once the deletion or anonymisation has been completed.

As a ddk88 member, you have the following rights in relation to your personal data. You may exercise any of these rights by contacting us at [email protected]. We will acknowledge your request within 5 business days and aim to fulfil it within 30 days:

• Right of access — request a copy of all personal data ddk88 holds about you, including account data, transaction history, and communications records
• Right to rectification — request correction of any inaccurate or incomplete personal data we hold about you
• Right to erasure — request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention requirements
• Right to restrict processing — request that ddk88 restricts processing of your data in certain circumstances, for example where you contest the accuracy of the data
• Right to data portability — request that ddk88 provides your personal data in a structured, commonly used, machine-readable format so you can transfer it to another service provider

Please note that some of these rights are subject to limitations where ddk88 has overriding legal obligations — for example, we cannot delete financial transaction records that we are legally required to retain for AML compliance. Where we are unable to fulfil a request in full, we will explain the reason clearly in our response.

ddk88 implements a multi-layered approach to data security. All data transmitted between your device and our servers is protected using SSL/TLS encryption. Personal data at rest is stored in encrypted form in access-controlled environments. Our production systems are protected by firewalls, intrusion detection systems, and regular vulnerability assessments. Access to personal data within our organisation is restricted to employees and contractors who need it to perform their specific role, and all such personnel are bound by confidentiality obligations.

ddk88 conducts periodic security reviews and promptly addresses any vulnerabilities identified. Despite our best efforts, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that affects your personal data, ddk88 will notify you as soon as practicable and will provide clear guidance on the steps you can take to protect yourself. You can further protect your own account by using a strong, unique password and by immediately reporting any suspicious account activity to [email protected].

ddk88 is strictly an adults-only platform. Our services are not directed at, and are not intended for use by, any person under the age of 21. We do not knowingly collect or process personal data relating to individuals under 21 years of age. If we become aware that personal data has been submitted by or in connection with a person under 21, we will delete that data immediately and close the associated account. Parents and guardians are strongly encouraged to use parental control tools available on mobile devices to prevent minors from accessing online gambling platforms.

ddk88 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform features. When we make a material change, we will publish the updated Policy at https://ddk88.org/privacy-policy and, where practicable, notify registered members via platform notification or email at least 7 days before the change takes effect. The date at the top of the Policy will always reflect the most recent revision. Your continued use of the platform after the effective date of any revision constitutes your acceptance of the updated Policy. If you do not agree with the revised Policy, you should stop using the platform and may request account closure by contacting [email protected].

For all privacy-related enquiries, data subject access requests, erasure requests, or complaints regarding ddk88's data handling practices, please contact our privacy team directly. We are committed to responding to all privacy requests within 5 business days of receipt and to resolving them within 30 days. Where a request is complex or involves a large volume of data, we will notify you if additional time is required and keep you informed of progress throughout.