cd88 Privacy Policy – How We Protect Your Personal Information

1. Introduction

This Privacy Policy ("Policy") describes how cd88 ("cd88", "we", "us", "our") collects, uses, stores, discloses and protects the personal information of users ("you", "your", "User") who access or use the cd88 website and associated services (collectively, the "Platform"). This Policy forms part of the overall Terms & Conditions governing your use of cd88 and should be read in conjunction with them.

By registering an account on cd88 or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal information as described herein. If you do not agree with this Policy, you must not use the Platform. cd88 is committed to handling personal data responsibly, with appropriate technical and organisational safeguards in place at all times.

2. Information We Collect

cd88 collects personal information that is necessary to provide, operate and improve the Platform and to comply with applicable legal obligations. The categories of personal information we collect include the following.

• 1Identity and contact information: Your full name, date of birth, mobile phone number and email address as provided during account registration. This information is used for account management, identity verification and communications related to your account.
• 2KYC verification documents: Government-issued identification (such as a National ID card or passport), proof of address documents, and mobile wallet confirmation screenshots as required under our Know Your Customer obligations. These documents are collected and stored solely for the purpose of age and identity verification and anti-money-laundering compliance.
• 3Financial transaction data: Records of deposits made to your cd88 account and withdrawals processed from it, including the payment method used (bKash, Nagad, Rocket or Upay), the transaction amount in BDT, the date and time of each transaction, and the transaction reference number. This data is retained for financial record-keeping, fraud prevention and regulatory compliance.
• 4Gaming activity data: Records of your gameplay on the Platform, including games played, wagers placed, game outcomes, bonus claims and wagering activity. This data is used to administer your account, calculate bonuses correctly, detect unusual patterns that may indicate fraud or problem gambling, and improve the Platform's game offering.
• 5Technical and usage data: Your device type and operating system, browser type and version, IP address, approximate geographic location derived from your IP address, session duration, pages visited, and error logs. This data is collected automatically when you access the Platform and is used for security monitoring, technical troubleshooting and Platform optimisation.

3. How We Use Your Information

cd88 uses the personal information it collects only for the purposes set out below. We do not process your data for any purpose that is incompatible with the purposes described in this Policy.

• 1Account administration: To create and manage your cd88 account, authenticate your identity at login, process your deposits and withdrawals, credit bonuses to your balance, and send account-related notifications such as password reset requests, deposit confirmations and withdrawal status updates.
• 2KYC and regulatory compliance: To verify your age and identity as required under our responsible gaming obligations, to comply with anti-money-laundering requirements, and to respond to lawful requests from competent authorities. cd88 is obligated to retain KYC records for a minimum period as required by applicable law and will not delete them upon request where retention is legally mandated.
• 3Platform improvement and personalisation: To analyse how users interact with the Platform, identify areas for improvement, personalise the games and promotions displayed to you based on your demonstrated preferences and activity patterns, and to conduct internal research and analytics. All analytics processing is performed on aggregated or pseudonymised data wherever practicable.
• 4Security and fraud prevention: To monitor the Platform for suspicious activity, investigate potential breaches of our Terms & Conditions, detect and prevent fraudulent transactions, identify accounts suspected of involvement in money laundering, and protect the integrity of our gaming operations. Where fraud or financial crime is identified or reasonably suspected, cd88 may share relevant data with law enforcement authorities without notice to the account holder.
• 5Customer support communications: To respond to queries, complaints and support requests submitted via live chat or email. Support communications may be recorded and retained for quality assurance purposes and to maintain an accurate record of interactions in the event of a subsequent dispute.

Our Privacy Principles

Six core principles guide how cd88 handles your personal data at every stage of the data lifecycle.

4. Sharing of Your Information

cd88 does not share your personal information with third parties except in the limited circumstances described below. In all cases, sharing is limited to the minimum information necessary for the stated purpose.

• 1Payment processors: cd88 shares necessary transaction data with mobile wallet providers (bKash, Nagad, Rocket, Upay) solely to process your deposit and withdrawal requests. These providers operate under their own privacy policies and are independently responsible for the data they hold. cd88 does not share your gaming history or account balance with payment providers.
• 2Game providers: cd88 works with licensed game providers including Evolution Gaming, Pragmatic Play, Spribe, Ezugi and others. These providers may receive pseudonymised session data necessary to deliver the game experience (such as a session token and stake amount) but do not receive your full personal profile, contact details or payment information.
• 3Legal and regulatory authorities: cd88 may disclose your personal information to police, financial intelligence units, tax authorities or other competent governmental bodies where it is legally required or compelled to do so by a valid court order, regulatory directive or applicable law. Where legally permissible, cd88 will seek to notify you of such disclosure before making it.
• 4Service providers acting on our behalf: cd88 may engage third-party service providers to perform specific technical functions on its behalf, such as platform hosting, data analytics, customer support tooling, or IT security monitoring. These service providers are contractually prohibited from using your data for any purpose other than performing the specific service for cd88, and are required to maintain confidentiality and implement appropriate security measures.

5. Cookies and Tracking Technologies

cd88 uses cookies and similar tracking technologies to operate the Platform and improve user experience. Cookies are small text files stored on your device when you visit a website. cd88 uses the following types of cookies: (a) Essential cookies, which are strictly necessary for the Platform to function and cannot be disabled; (b) Functional cookies, which remember your preferences such as language settings and last login state; and (c) Analytics cookies, which collect anonymised usage data that helps cd88 understand how the Platform is used and where improvements can be made.

You can control cookie behaviour through your browser settings. Most modern browsers allow you to block or delete cookies; however, disabling essential cookies will prevent the Platform from functioning correctly. cd88 does not use advertising cookies or cross-site tracking cookies, and does not participate in ad networks or retargeting schemes.

6. Data Retention

cd88 retains personal information for as long as is necessary to fulfil the purposes set out in this Policy and to comply with applicable legal, regulatory and operational requirements. The following general retention periods apply: account data and KYC documents are retained for a minimum of five years following account closure or the last transaction, whichever is later, in order to meet anti-money-laundering record-keeping obligations; financial transaction records are retained for a minimum of five years from the date of each transaction; gaming activity logs are retained for up to two years; and customer support communications are retained for up to three years from the date of the last interaction.

When personal data is no longer required and no legal obligation requires its retention, cd88 will securely delete or anonymise it in a manner that prevents reconstruction of the original data. Anonymised data that can no longer be linked to any identifiable individual may be retained indefinitely for statistical and analytical purposes.

7. Security of Your Information

cd88 implements a range of technical and organisational security measures to protect your personal information against unauthorised access, accidental loss, destruction or disclosure. These measures include 256-bit SSL encryption for all data transmissions, encrypted storage of sensitive personal data and financial records at rest, role-based access controls limiting data access to authorised personnel only, regular security audits and vulnerability assessments of the Platform infrastructure, and incident response procedures in place to detect, contain and report any data security breach.

While cd88 takes its data security obligations seriously, no online platform can guarantee absolute security. You are responsible for keeping your own login credentials secure and for notifying cd88 immediately if you suspect that your account has been accessed without your authorisation. In the event of a data security breach that is likely to result in a high risk to your rights and freedoms, cd88 will notify affected users as required by applicable law.

8. Your Rights Over Your Personal Data

As a user of cd88, you have the following rights in relation to the personal information we hold about you. To exercise any of these rights, please contact our support team at [email protected].

• 1Right of access: You have the right to request a copy of the personal information cd88 holds about you. We will respond to verified access requests within 30 days of receipt. We may ask you to verify your identity before processing your request.
• 2Right of rectification: If you believe that personal information cd88 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. For account registration details such as your name or mobile number, you may be able to update these directly within your account settings.
• 3Right of erasure: You may request the deletion of personal information cd88 holds about you where it is no longer necessary for the purpose for which it was collected and where no legal obligation requires its continued retention. Please note that cd88 is legally required to retain certain categories of data (particularly KYC and financial records) for minimum statutory periods and cannot fulfil erasure requests for those data categories during the mandatory retention period.
• 4Right to withdraw consent: Where cd88's processing of your personal data is based on your consent (for example, consent to receive promotional communications), you have the right to withdraw that consent at any time by contacting customer support. Withdrawal of consent does not affect the lawfulness of any processing already carried out on the basis of consent prior to its withdrawal.

9. Children's Privacy

cd88 is strictly for adults aged 21 and above. We do not knowingly collect personal information from individuals under the age of 21. If you are under 21, you must not use the Platform or submit any personal information to cd88. If cd88 becomes aware that personal information has been collected from a person under the age of 21 without appropriate parental or guardian consent, it will delete that information as soon as reasonably practicable and close the associated account. If you believe that a minor has created a cd88 account or submitted personal information to the Platform, please notify us immediately at [email protected].

10. Changes to This Privacy Policy

cd88 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations or the services we offer. When we make a material change to this Policy, we will update the effective date shown at the top of the page and, where reasonably practicable, provide notice to registered users via the contact details associated with their account.

Your continued use of the Platform following notification of a change to this Policy constitutes your acceptance of the revised Policy. If you do not agree with the changes, you should stop using the Platform and may request account closure by contacting our customer support team. We encourage you to review this page periodically to stay informed about how cd88 protects your privacy.

11. Contact Us About Privacy

If you have any questions, concerns or requests relating to this Privacy Policy or the way cd88 handles your personal data, please contact our support team by email at [email protected]. We aim to respond to all privacy-related enquiries within 10 business days. When contacting us about a privacy matter, please include your registered mobile number or username so we can locate your account and handle your request efficiently.