Your Privacy Matters at dk888

01 Introduction

dk888 ("we", "us", "our") operates the online gaming and sports betting platform accessible at dk888.io, serving registered players across Bangladesh including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and beyond. We understand that privacy is not merely a legal obligation — it is a fundamental aspect of the trust you place in us as your gaming platform of choice.

This Privacy Policy describes in full detail how dk888 collects, processes, stores, shares, and protects the personal information of individuals who visit or register on our Platform. It applies to all users of the dk888 website, including visitors who browse without an account and registered players who actively wager on our casino and sportsbook products.

By accessing the dk888 Platform, creating an account, or making use of any Service offered through dk888.io, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue your use of the Platform immediately.

02 Data We Collect

dk888 collects personal data through several channels: directly from you when you register or use our Services, automatically through your interaction with the Platform, and in limited cases from trusted third-party sources such as identity verification providers. The categories of data we collect are detailed below.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond identity document photographs submitted for KYC), or health information, except where you voluntarily disclose such information in the context of a responsible gaming support request.

03 How We Use Your Data

dk888 uses the personal data we collect for the following specific and legitimate purposes. We process no more data than is necessary to fulfil each stated purpose, in accordance with the principle of data minimisation.

• Account Registration and Management: To create, verify, and maintain your dk888 Account, and to authenticate your identity on each login.
• Service Delivery: To enable your participation in casino games, live dealer tables, sports betting markets, and all other features available on the dk888 Platform.
• Payment Processing: To process deposits made via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to execute withdrawal requests to your registered payment instrument.
• KYC and Fraud Prevention: To verify your age (21+), identity, and residential details, and to detect and prevent fraud, money laundering, match-fixing collusion, and other prohibited activities.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance through our 24/7 live chat and email support channels.
• Responsible Gaming: To monitor wagering patterns for indicators of problem gambling behaviour, to administer self-exclusion requests, and to enforce deposit and session limits you have set in your account.
• Legal Compliance: To comply with applicable laws, anti-money laundering obligations, and any lawful requests from competent authorities.
• Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving the layout, features, game selection, and payment options available on the Platform.
• Marketing Communications: Where you have provided explicit consent, to send you promotional offers, bonus notifications, and seasonal campaigns relevant to your gaming interests. You may withdraw this consent at any time via your account notification settings.

04 Legal Basis for Processing

dk888 processes your personal data on the following legal bases, which we identify on a purpose-by-purpose basis to ensure that every processing activity is conducted lawfully:

• Contractual Necessity: Processing required to perform the contract between you and dk888 — namely, the provision of gaming, betting, and payment services under our Terms and Conditions. This basis covers account creation, service delivery, and payment processing.
• Legal Obligation: Processing necessary for dk888 to comply with its legal obligations, including identity verification (KYC), anti-money laundering checks, and responses to lawful requests from competent authorities.
• Legitimate Interests: Processing based on dk888's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and aggregated analytics for product improvement. We apply a balancing test to ensure that our legitimate interests do not override your fundamental rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, primarily for optional marketing communications. You retain the right to withdraw consent at any time without affecting the lawfulness of processing already carried out.

05 Data Sharing and Disclosure

dk888 does not sell, rent, or trade your personal data to third parties for their independent marketing purposes under any circumstances. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

• Payment Service Providers: We share transaction-relevant data with bKash, Nagad, Rocket, Upay, Visa, and Mastercard solely to process your deposits and withdrawals. These providers are contractually bound to process your data in accordance with applicable data protection standards.
• Game Content Providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised or pseudonymised session data necessary to deliver their game content to your device. These providers operate under their own data protection frameworks.
• Identity Verification Services: We share identity document data with approved KYC service providers to perform age and identity verification checks required under our anti-fraud and responsible gaming obligations.
• IT and Platform Infrastructure Providers: Trusted technology partners who provide hosting, content delivery, database management, and cybersecurity services may process data on our behalf under strict data processing agreements.
• Legal and Regulatory Authorities: We will disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to prevent or detect serious criminal activity including money laundering and fraud.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of the dk888 business, your personal data may be transferred to the successor entity, subject to equivalent privacy protections. You will be notified of any such transfer through a prominent notice on the Platform.

06 Cookies and Tracking Technologies

dk888 uses cookies and similar tracking technologies to operate the Platform effectively, improve the user experience, and understand how players interact with our Services. A cookie is a small text file placed on your device by your web browser when you visit dk888.io. The following categories of cookies are used on the Platform:

• Strictly Necessary Cookies: These cookies are essential to the operation of the Platform. They manage user authentication sessions, maintain your login state, and ensure that game state is preserved during a session. Without these cookies, core Platform functions cannot be delivered. These cookies cannot be disabled.
• Functional Cookies: These cookies remember your preferences, such as your preferred language, last-visited game categories, and notification settings. They improve your experience by personalising certain aspects of the Platform without collecting any personally identifiable information beyond a session identifier.
• Analytical Cookies: We use aggregated analytics to understand which pages and features of the Platform are most used, how players navigate between game categories, and where technical errors occur. This data is processed in anonymised form and helps us prioritise improvements to the Platform.
• Security Cookies: These cookies support our fraud detection and security systems. They help identify unusual login patterns, detect bot activity, and flag potentially compromised sessions for our security team to review.

You can control or delete cookies through your browser settings at any time. Please be aware that disabling cookies beyond strictly necessary ones may affect the functionality of certain Platform features. For full cookie management instructions, refer to the help section of your browser.

07 Data Retention

dk888 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The retention periods applicable to the principal categories of data we hold are summarised below:

• Account and Identity Data: Retained for the duration of your active Account relationship with dk888, and for a minimum of 5 years following permanent Account closure to meet our anti-money laundering record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction. Longer retention may apply where a transaction is under investigation or the subject of a legal dispute.
• Gaming Activity Data: Retained for 2 years from the date of the activity in question for operational analysis and dispute resolution purposes, then anonymised or deleted.
• Support Communications: Live chat transcripts and email correspondence are retained for 12 months from the date of the interaction, unless they relate to an open investigation or dispute, in which case they are retained until final resolution.
• Marketing Consent Records: Consent records and associated marketing communication logs are retained for 3 years from the date of the last interaction or the date consent was withdrawn, whichever is later.
• Technical and Log Data: Server logs, IP records, and session data are retained for a rolling 90-day period, except where retained as part of a specific security investigation.

Upon expiry of the relevant retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. Where data must be retained beyond these standard periods to comply with a specific legal or regulatory obligation, we will inform you through a notice on the Platform or via direct communication to your registered contact details.

08 Data Security

dk888 employs a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure is reviewed and updated on a continuous basis.

• 256-bit SSL/TLS Encryption: All data transmitted between your device and dk888.io is encrypted using industry-standard 256-bit Transport Layer Security (TLS) protocols. This ensures that your personal information, login credentials, and payment details cannot be intercepted in transit.
• Data Encryption at Rest: Sensitive personal data stored on our servers — including identity documents, financial records, and KYC files — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within dk888's systems is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Two-Factor Authentication: Our internal systems require multi-factor authentication for all staff access, reducing the risk of credential-based account compromise within our infrastructure.
• Penetration Testing and Vulnerability Scanning: The Platform undergoes regular independent security assessments, including penetration testing and automated vulnerability scanning, to identify and remediate potential weaknesses before they can be exploited.
• Incident Response: dk888 maintains a documented data breach response procedure. In the event of a security incident involving your personal data, we will notify affected players and, where required, relevant authorities, within the timeframes prescribed by applicable data protection standards.

09 Your Rights

As a player whose personal data is processed by dk888, you hold a number of rights in relation to that data. We are committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact our support team via live chat on dk888.io or by email at support at dk888.io.

We will respond to all verified rights requests within 30 calendar days. In complex cases, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it. We do not charge a fee for processing rights requests unless a request is manifestly unfounded, repetitive, or excessive.

10 Children and Minors

The dk888 Platform is strictly intended for adults aged 21 and above. We do not knowingly collect, process, or retain personal data from any individual under the age of 21. Our registration process includes mandatory date-of-birth verification, and accounts where the registered player is subsequently found to be under 21 will be immediately suspended and all associated data flagged for review and deletion in accordance with our KYC procedures.

Parents and guardians in Bangladesh are encouraged to use parental control tools available through internet service providers and device operating systems to restrict access to online gambling platforms. dk888 supports the use of these tools and actively promotes responsible gaming education.

11 Third-Party Services

The dk888 Platform integrates with a number of third-party service providers to deliver its full range of gaming, payment, and security features. Each of these providers operates under their own independently maintained privacy policies, and dk888 does not control the data practices of these external organisations beyond the scope of our contractual agreements with them.

• Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi provide the game engines and live studio streams that power dk888's casino and slot products. These providers may process limited technical session data to deliver their game content.
• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard process payment transaction data independently in accordance with their own regulatory obligations and privacy frameworks, including PCI-DSS compliance for card transactions.
• Analytics Providers: We use privacy-first analytics tools to understand aggregate Platform usage. These tools are configured to collect only anonymised, non-identifiable data and do not build individual user profiles for advertising purposes.
• Security and Fraud Detection: We engage specialist third-party security providers for IP reputation screening, bot detection, and real-time fraud scoring. These providers process technical data only and are prohibited from using that data for any purpose beyond the provision of services to dk888.

We recommend that you review the privacy policies of any third-party services you interact with through the dk888 Platform, as their data practices are beyond our direct control. dk888 is not responsible for the content or privacy practices of third-party websites or services.

12 Policy Updates

dk888 reviews this Privacy Policy on a regular basis to ensure it accurately reflects our current data practices and remains aligned with applicable data protection standards. We reserve the right to update or amend this Policy at any time. When material changes are made, we will update the "Last Updated" date displayed at the top of this page and, where the changes are significant, we will provide a prominent notice on the Platform or send a direct notification to your registered email address or mobile number.

Your continued use of the dk888 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised Policy, you should discontinue your use of the Platform and contact our support team to initiate Account closure. We will process any outstanding real-money balance in your Account to your registered payment method following standard KYC verification.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way dk888 handles your personal data, our dedicated support team is available around the clock to assist you. We take all privacy-related enquiries seriously and will respond promptly and professionally.

• Live Chat: Available 24 hours a day, 7 days a week, directly on the dk888.io Platform — the fastest way to reach our support team.
• Email: support at dk888.io — for formal written enquiries, data subject rights requests, and complaints. We aim to respond within 2 business days (Bangladesh Standard Time, UTC+6).
• WhatsApp: +880 1700-000000 — for quick queries during business hours (Bangladesh Standard Time, UTC+6).