88db Privacy Policy — Your Data, Your Rights

This Privacy Policy (hereinafter referred to as "the Policy", "this Policy", or "our Privacy Policy") describes the practices of 88db (hereinafter referred to as "88db", "we", "us", or "our") in relation to the collection, storage, use, processing, disclosure, and protection of personal data belonging to users (hereinafter referred to as "you", "the User", or "the Player") of the 88db online casino and sports betting platform accessible at https://88db.io and any associated subdomains, mobile interfaces, or applications (collectively, "the Platform").

This Policy applies to all individuals who interact with the Platform in any capacity, including registered account holders, visitors who have not yet registered, and individuals who contact our customer support team. It covers all personal data collected through the Platform, via email correspondence, through our live chat support system, and through any other channel by which you communicate with 88db.

The Platform is operated for and targeted at adult players located in Bangladesh. All references to data protection obligations in this Policy reflect our commitment to maintaining the highest reasonable standards of data stewardship appropriate for a platform serving the Bangladeshi market.

For the purposes of this Privacy Policy, 88db acts as the data controller in respect of the personal data of its users. As data controller, 88db determines the purposes and means by which your personal data is processed. All data protection enquiries, subject access requests, correction requests, and deletion requests should be directed to our dedicated privacy contact point:

88db collects the following categories of personal data from users of the Platform. We collect only what is necessary and proportionate for the specific purposes described in Section 5 of this Policy.

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used for mandatory age verification — all players must be 21 or older).
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi) and postal code.
• Email address registered to your 88db account.
• Mobile phone number registered to your 88db account.
• Copies of identity documents submitted for KYC verification (National ID, passport, driving licence).

• Mobile financial service account identifiers (bKash, Nagad, Rocket, Upay account numbers — stored in masked format).
• Bank account details where bank transfer payment methods are used (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank).
• Records of all deposit and withdrawal transactions, including timestamps, amounts in Bangladeshi Taka (৳), and transaction reference numbers.
• Bonus claims, wagering activity, and promotional offer history.

• Game session records, including game titles, bet amounts, outcomes, session duration, and timestamps.
• Sports betting activity, including markets wagered on, stake amounts, and settlement records.
• Responsible gaming tool usage, including any deposit limits, loss limits, cooling-off periods, or self-exclusion requests you activate.
• Customer support interaction history, including the content of live chat sessions and email correspondence.

• IP address and approximate geolocation derived from it.
• Device type, operating system, and browser version.
• Unique device identifiers and session tokens.
• Pages visited, time spent on each page, and navigation paths within the Platform.
• Cookie identifiers and similar tracking data (see Section 8 for full cookie details).

88db does not collect biometric data, health or medical information, political opinions, religious beliefs, or racial or ethnic origin data. We do not collect payment card numbers (Visa, Mastercard) in full — if card-based payment integration is introduced in future, card data will be handled exclusively by PCI-DSS compliant payment processors and will never be stored on 88db's own servers.

88db collects personal data through the following channels and mechanisms:

• Account registration: Data you provide directly when creating your 88db account, including your name, date of birth, email address, and mobile number.
• Identity verification (KYC): Documents you submit when completing the mandatory identity verification process, including government-issued photo identification and proof of address.
• Deposits and withdrawals: Payment method details and transaction data captured when you initiate financial transactions on the Platform via bKash, Nagad, Rocket, Upay, or bank transfer.
• Gameplay activity: Data generated automatically by the Platform as you play games, place bets, or interact with any feature of the Service.
• Customer support: Information you provide when you contact our support team via live chat or email, including the content of your messages and any documents you attach.
• Cookies and tracking technologies: Technical and behavioural data collected automatically via cookies, web beacons, and similar technologies when you access the Platform (see Section 8).
• Third-party verification providers: Where you consent to identity verification via a third-party KYC provider, that provider may share verification results and relevant identity data with 88db for the purpose of fulfilling our age and identity verification obligations.

88db uses the personal data it collects for the following specific and lawful purposes. We do not use your data for any purpose that is incompatible with the purposes listed below without first obtaining your explicit consent.

Where 88db relies on your consent as the legal basis for processing — specifically, for the delivery of marketing communications — you may withdraw that consent at any time by contacting [email protected] or by using the unsubscribe mechanism included in any marketing email you receive from us. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

88db processes your personal data only where a valid legal basis exists. The legal bases on which we rely are as follows:

• Contract performance: Processing necessary to enter into and perform our contractual obligations to you as a registered 88db player, including account management, transaction processing, and the delivery of the gaming service.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including age verification, identity verification, anti-money-laundering (AML) checks, and fraud prevention obligations.
• Legitimate interests: Processing carried out in pursuit of 88db's legitimate business interests, including platform security, abuse prevention, responsible gaming monitoring, and service analytics, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing activities for which we have obtained your explicit, freely given, and informed consent — specifically, the sending of marketing communications and the use of non-essential cookies. You may withdraw consent at any time without detriment.

88db does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

When you initiate a deposit or withdrawal, the personal and financial data necessary to complete that transaction is shared with the relevant payment service provider — bKash, Nagad, Rocket, Upay, or the applicable bank (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank). Each of these providers operates under its own privacy policy and is subject to applicable financial services regulation.

Game providers such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe may receive a pseudonymous player identifier and session token for the purposes of game delivery and fair-play certification. These providers do not receive your full name, contact details, or payment information.

Where third-party identity verification services are used to fulfil our KYC obligations, we share the necessary identity data (name, date of birth, document images) with those providers solely for the purpose of completing the verification process. These providers are contractually bound to use your data only for verification purposes.

We may share technical and behavioural data with specialist fraud prevention and cybersecurity partners for the purpose of detecting and preventing fraudulent account activity, bonus abuse, and money-laundering patterns. Data shared with these providers is subject to strict confidentiality obligations.

88db may be legally required to disclose personal data to law enforcement agencies, courts, regulatory authorities, or other government bodies where such disclosure is compelled by applicable law, court order, or regulatory direction. In such cases, we will disclose only the minimum data necessary to satisfy the legal requirement and, where lawfully permitted, will notify you of such disclosure.

88db uses cookies and similar tracking technologies (including web beacons and local storage objects) to ensure the proper functioning of the Platform, remember your preferences, analyse usage patterns, and — where you have provided consent — deliver relevant promotional content. The following categories of cookies are used on the 88db Platform:

• Strictly necessary cookies: These cookies are essential for you to navigate the Platform and use its core features, including maintaining your authenticated session after login, remembering items in your activity queue, and ensuring secure transaction processing. These cookies cannot be disabled without significantly impairing the functionality of the Platform.
• Functional cookies: These cookies allow the Platform to remember choices you have made — such as your preferred language or display settings — and provide enhanced, more personalised features. Disabling these cookies may affect your user experience but will not prevent access to core Platform features.
• Analytics cookies: These cookies collect information about how you use the Platform — which pages you visit most often, how you navigate between sections, and where errors occur — in a form that does not directly identify you. This data helps us improve the performance and usability of the Platform over time.
• Marketing cookies (consent-based): Where you have explicitly opted in to receiving marketing communications, these cookies help us understand which promotional content is most relevant to your interests and measure the effectiveness of our campaigns. These cookies are only activated with your prior consent and can be withdrawn at any time.

You can control the use of non-essential cookies through your browser settings. Please note that restricting cookies may affect the functionality of certain Platform features. For full details of the cookies in use on 88db, their duration, and how to opt out of non-essential cookies, please contact [email protected].

The security of your personal data is a top priority at 88db. We have implemented a comprehensive set of technical and organisational security measures designed to protect your data against unauthorised access, accidental loss, destruction, or alteration. Our security measures include:

• TLS/SSL encryption: All data transmitted between your device and the 88db Platform is encrypted in transit using Transport Layer Security (TLS) protocols, ensuring that your personal and financial information cannot be intercepted by third parties.
• At-rest encryption: Sensitive personal data stored in our databases is protected using AES-256 encryption, the same standard used by financial institutions and government security agencies worldwide.
• Access controls: Access to personal data held by 88db is restricted to authorised personnel who require it to perform their job functions. All staff with access to personal data are subject to strict confidentiality obligations and receive regular data protection training.
• Intrusion detection and monitoring: Our infrastructure is monitored continuously for signs of unauthorised access, unusual activity, and potential security incidents. Automated alerts enable our security team to respond rapidly to any anomaly.
• Penetration testing: 88db's platform undergoes periodic security assessments and penetration testing by qualified security professionals to identify and remediate vulnerabilities before they can be exploited.
• Two-factor authentication (2FA): Where available, we encourage all registered players to enable two-factor authentication on their 88db accounts to add an additional layer of security beyond the standard password.

88db retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including the satisfaction of any legal, regulatory, tax, accounting, or reporting obligations. Our specific data retention periods are as follows:

• Active account data: All personal, financial, and gameplay data associated with your account is retained for the full duration of your account's active status on the Platform.
• Post-closure retention: Following account closure, 88db retains your personal data for a minimum period of five (5) years to fulfil our anti-money-laundering record-keeping requirements and to defend against any legal claims that may arise in connection with your account.
• KYC documentation: Copies of identity documents submitted for KYC verification are retained for a minimum of five (5) years following the date of submission or account closure, whichever is later.
• Customer support records: Records of customer support interactions are retained for three (3) years from the date of the interaction.
• Transaction records: Financial transaction records are retained for a minimum of seven (7) years in accordance with standard financial record-keeping practices.
• Anonymised analytics data: Aggregated, anonymised data derived from gameplay and platform usage may be retained indefinitely for internal research and service improvement purposes.

Once the applicable retention period has expired and there is no longer a legitimate legal basis for continued retention, your personal data will be securely deleted or irreversibly anonymised.

As an 88db user, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Request". We will respond to all valid requests within thirty (30) calendar days.

Please note that certain rights are subject to limitations and exceptions. For example, we may be unable to erase data that we are legally required to retain under our anti-money-laundering or regulatory obligations. Where we are unable to fulfil a request in full, we will explain the reason clearly in our response.

The 88db Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration process, and we employ additional verification checks to identify and prevent underage access to the Platform.

If we discover or are notified that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data from our systems and close the associated account. If you believe that a minor may have registered on the 88db Platform or that we may have inadvertently collected data from an individual under 21, please contact us immediately at [email protected].

88db reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law or regulatory requirements, or improvements to the Platform. When we make material changes to this Policy, we will notify registered users by email to the address associated with their account and by posting a prominent notice on the Platform at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this Privacy Policy will always reflect the date on which the most recent version came into effect. We encourage you to review this Policy periodically to stay informed about how 88db protects your personal data. Your continued use of the Platform following the effective date of any updated version of this Policy constitutes your acceptance of the revised terms.

Where changes to this Policy require your affirmative consent under applicable law — for example, changes that introduce a materially new purpose for processing your data — we will seek that consent explicitly before applying the new processing activities to your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 88db processes your personal data, please do not hesitate to get in touch with our privacy team. We are committed to resolving all privacy-related queries promptly, transparently, and in good faith.

88db is committed to working with you directly to resolve any privacy concern. If, however, you feel that your concern has not been addressed satisfactorily after contacting us, you may have the right to escalate your complaint to an appropriate supervisory authority in your jurisdiction.