dadu88 Privacy Policy

1. Who We Are

dadu88 operates the online casino and sports betting platform accessible at https://dadu88.biz (the "Platform"). For the purposes of this Privacy Policy, dadu88 acts as the data controller in respect of all personal data collected from players and visitors through the Platform. References to "dadu88", "we", "us", or "our" throughout this document refer to the Platform operator.

The Platform is primarily intended to serve players located in Bangladesh. We are committed to handling all personal data in accordance with internationally recognised data protection principles, including purpose limitation, data minimisation, storage limitation, accuracy, integrity, and confidentiality.

2. Data We Collect

dadu88 collects personal data in the following categories:

Category	Examples	Purpose
Identity Data	Full legal name, date of birth, national ID number, passport number	Account registration, age verification, KYC compliance
Contact Data	Email address, mobile phone number, residential address	Account communication, notifications, support
Financial Data	bKash/Nagad/Rocket mobile number, bank account details, transaction history	Processing deposits and withdrawals, AML compliance
Technical Data	IP address, device type, browser type, operating system, session tokens	Platform security, fraud prevention, technical support
Usage Data	Pages visited, games played, bet history, session duration, click patterns	Platform improvement, responsible gaming monitoring
Communications Data	Support chat logs, email correspondence, complaint records	Customer service quality, dispute resolution
Verification Documents	Copies of NID, passport, utility bills, payment method screenshots	KYC verification, withdrawal processing, fraud prevention

We do not collect special category data (such as health, racial, or political data) and we do not use facial recognition or biometric identification technologies.

3. How We Collect Data

3.1 Directly From You

The majority of personal data we hold is provided directly by you when you: register an Account on the Platform; complete identity or payment verification; make a deposit or request a withdrawal; contact our customer support team; participate in promotions or surveys; or set responsible gaming preferences in your Account settings.

3.2 Automatically During Platform Use

When you access and use the Platform, we automatically collect technical and usage data through server logs, cookies, and similar tracking technologies. This includes your IP address, device identifiers, browser information, pages visited, games launched, bet amounts placed, and session timestamps. This automated collection is necessary for the technical operation and security of the Platform.

3.3 From Third-Party Payment Processors

When you make a deposit or withdrawal, our payment processing partners (such as bKash, Nagad, Rocket, Upay, and banking institutions) may share transaction confirmation data with dadu88 to facilitate the processing of your payment and to support our anti-money-laundering obligations. dadu88 does not receive full payment card numbers or full mobile banking PINs from these partners.

3.4 From Identity Verification Services

dadu88 may use third-party identity verification providers to assist with KYC checks. These providers may cross-reference data you supply against authoritative identity databases. Data shared with such providers is processed solely for verification purposes and is governed by those providers' respective data protection obligations.

4. Legal Basis for Processing

dadu88 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you — including registering your Account, processing transactions, and providing gaming services.
• Legal Obligation: Processing required for compliance with anti-money-laundering laws, age verification requirements, tax reporting obligations, and court orders.
• Legitimate Interests: Processing necessary for dadu88's legitimate business interests, including platform security, fraud prevention, responsible gaming monitoring, and service improvement — provided such interests are not overridden by your privacy rights.
• Consent: Where we rely on your consent (e.g., sending promotional emails or push notifications), you may withdraw that consent at any time through your Account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

5. How We Use Your Data

dadu88 uses the personal data we collect for the following purposes:

• Creating and maintaining your player Account and verifying your identity.
• Processing deposits and withdrawals and maintaining accurate transaction records.
• Providing access to casino games, sports betting markets, and all other Platform features.
• Detecting and preventing fraud, money laundering, cheating, and other prohibited conduct.
• Complying with applicable legal and regulatory requirements, including know-your-customer and anti-money-laundering obligations.
• Monitoring gameplay patterns to support responsible gaming tools such as deposit limits and self-exclusion.
• Sending transactional communications such as Account confirmations, password resets, deposit receipts, and withdrawal notifications.
• Sending promotional communications and personalised offers, where you have provided consent.
• Analysing aggregated, anonymised usage data to improve Platform performance, user experience, and game selection.
• Resolving player disputes and responding to support enquiries.

6. Data Sharing & Third Parties

6.1 Categories of Recipients

dadu88 does not sell your personal data. We may share your data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, and Mastercard — for processing financial transactions.
• Identity Verification Providers: Third-party KYC and AML compliance service providers for age and identity verification.
• Game Providers: Licensed game studios including Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi — who may receive session data necessary to deliver game content.
• IT Infrastructure Providers: Cloud hosting, server management, and cybersecurity service providers who process data under strict contractual data processing agreements with dadu88.
• Legal and Regulatory Authorities: Law enforcement agencies, courts, and regulatory bodies where dadu88 is legally required to disclose information.
• Professional Advisors: Lawyers, auditors, and accountants who are bound by professional confidentiality obligations.

6.2 No Unauthorised Third-Party Marketing

dadu88 does not share your contact details with third-party marketing agencies, data brokers, or affiliate networks for the purpose of unsolicited outreach. Any promotional communication from dadu88 will originate from our own platform or our directly contracted communications providers.

7. Cookies & Tracking Technologies

The dadu88 Platform uses cookies and similar tracking technologies to ensure correct platform functionality, maintain session security, and analyse usage patterns. The following cookie categories are in use:

• Strictly Necessary Cookies: Essential for the Platform to function. These cannot be disabled without breaking core features such as login sessions, game loading, and payment processing.
• Functional Cookies: Remember your preferences such as language settings, display options, and responsible gaming limits you have set.
• Analytics Cookies: Collect anonymised data on page visits, session lengths, and feature usage to help us improve the Platform. No personally identifiable information is included in analytics reports.
• Security Cookies: Detect and prevent fraudulent activity, including bot access and account takeover attempts.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the Platform. dadu88 does not use third-party advertising or cross-site tracking cookies.

8. Data Security

dadu88 takes the security of your personal data seriously and has implemented a range of technical and organisational measures proportionate to the risks involved:

• 256-bit SSL/TLS Encryption: All data in transit between your device and dadu88 servers is encrypted using industry-standard Transport Layer Security.
• Encrypted Data Storage: Sensitive personal data, including identity documents and financial records, is stored in encrypted form on access-controlled servers.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff with access to player data are subject to background checks and ongoing security training.
• Intrusion Detection: Our infrastructure is monitored continuously for unauthorised access attempts, unusual access patterns, and security incidents.
• Regular Security Audits: dadu88 undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data breach affecting your personal data, dadu88 will notify affected players and relevant authorities within the timeframes required by applicable law.

9. Data Retention

dadu88 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your Account and for a minimum of five (5) years following Account closure, in compliance with anti-money-laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of seven (7) years from the date of each transaction, in accordance with applicable financial record-keeping obligations.
• Support and Communications Records: Retained for three (3) years from the date of the last communication, unless subject to an ongoing dispute or legal proceeding.
• Technical and Usage Logs: Typically retained for twelve (12) months in active storage and up to thirty-six (36) months in archived form for security audit purposes.
• Marketing Consent Records: Retained for as long as you remain an active subscriber plus two (2) years following opt-out, as evidence of consent management.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with dadu88's data destruction procedures. Anonymised, aggregated data (which cannot identify any individual) may be retained indefinitely for statistical and analytical purposes.

10. Your Rights

You have the following rights in relation to the personal data dadu88 holds about you. To exercise any of these rights, please submit a written request to [email protected]. We will acknowledge your request within 48 hours and provide a substantive response within 30 days:

• Access: Obtain confirmation of whether we hold personal data about you and receive a copy of that data.
• Rectification: Request correction of inaccurate or incomplete personal data.
• Erasure: Request deletion of your personal data where no longer necessary, subject to our legal retention obligations.
• Restriction: Request that we limit processing of your data during the resolution of a correction or objection request.
• Portability: Receive your personal data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests, including direct marketing.
• Withdraw Consent: Where processing is based on consent, withdraw that consent at any time without affecting prior lawful processing.

Please note that certain rights are subject to exceptions. For example, we cannot erase data we are legally required to retain for AML compliance purposes. We will always explain any applicable limitations when responding to your request.

11. Children & Minors

The dadu88 Platform is strictly intended for adults aged 18 years and above. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a player has provided personal data and is under 18 years of age, we will immediately close their Account, return any deposited funds to the original payment source, and delete their personal data from our systems.

If you are a parent or guardian and believe that a minor has registered on the dadu88 Platform, please contact us immediately at [email protected] so that we can take prompt action.

12. International Data Transfers

dadu88 operates infrastructure in multiple geographic locations. As a result, your personal data may be transferred to and processed in countries outside Bangladesh. Where such international transfers occur, dadu88 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy. These safeguards may include standard contractual clauses, data processing agreements, and other legally recognised transfer mechanisms.

Game providers such as Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi may process session data on servers located outside Bangladesh. These providers operate under their own data protection policies and are contractually bound to handle data securely and in accordance with their licensing obligations.

13. Changes to This Policy

dadu88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or Platform features. When material changes are made, we will notify registered players via email to their registered address and by posting a prominent notice on the Platform at least 14 days before the changes take effect.

Your continued use of the Platform following the effective date of any updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree with the changes, you must cease using the Platform and request Account closure before the effective date. We recommend reviewing this Policy periodically to stay informed of how dadu88 protects your data.

14. Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the personal data dadu88 holds about you, please contact our data protection team:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please include "Privacy Request" in the subject line of your email for prioritised handling.
• Response Time: We acknowledge all privacy-related enquiries within 48 hours and aim to resolve them within 30 calendar days.
• Language: All privacy correspondence is handled in English.

If you are not satisfied with our response to your privacy concern, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. dadu88 will cooperate fully with any such investigation.