d882 Privacy Policy

1. Introduction

d882 ("we", "us", "our", "the Company") operates the online betting and casino platform accessible at d882.io, serving adult players located in Bangladesh. In the course of providing our services — which include sports betting, live casino games, slot games, crash games, and related promotions — d882 collects and processes certain personal data about the individuals who register and use our platform.

This Privacy Policy sets out in clear terms what personal data we collect, the lawful purposes for which we process it, with whom we share it, how long we keep it, and the rights you hold as a data subject. We are committed to handling all personal data in a responsible, transparent, and secure manner consistent with recognised data protection principles.

This Policy should be read alongside the d882 Terms & Conditions and the d882 Responsible Gaming Policy, both of which are available on d882.io. Where this Policy uses terms defined in the Terms & Conditions, those definitions apply here unless the context requires otherwise.

2. Data Controller

For the purposes of this Privacy Policy, d882 acts as the data controller in respect of the personal data of its registered players. As data controller, d882 determines the purposes and means of processing your personal data. All data protection enquiries, access requests, and complaints should be directed to the d882 data protection contact:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: Data Protection Enquiry
• Response time: Within 30 calendar days of receipt

3. Personal Data We Collect

d882 collects the following categories of personal data from players:

3.1 Identity Data

• Full legal name as it appears on your National ID Card or passport
• Date of birth
• Gender (where provided during registration)
• Photograph or scanned copy of government-issued identity document (for KYC verification)
• National ID Card number or passport number

3.2 Contact Data

• Registered mobile phone number (including bKash or Nagad registered number where applicable)
• Email address
• Residential address (district, city, and postcode within Bangladesh)

3.3 Financial Data

• Payment method details (bKash account number, Nagad account number, Rocket number, Upay number, Visa/Mastercard last four digits)
• Transaction history including deposits, withdrawals, and bonus transactions
• Account balance records
• Source of funds documentation where requested for AML compliance

3.4 Technical Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session timestamps and duration
• Unique device identifiers
• Cookies and similar tracking data (see Section 10)

3.5 Behavioural & Usage Data

• Betting and gaming activity records including markets wagered, stakes placed, and outcomes
• Pages and features accessed within d882.io
• Responsible gaming settings and self-exclusion status
• Customer support interaction records including live chat transcripts and email correspondence

3.6 Verification Data

• KYC document images submitted during identity verification
• Selfie or liveness check images where requested as part of enhanced verification
• Results of third-party identity verification checks

4. How We Collect Your Data

d882 collects personal data through the following means:

• Directly from you when you complete the registration form on d882.io, submit KYC documents, make a deposit or withdrawal, contact our support team, or participate in a promotion.
• Automatically when you browse or use d882.io, through cookies, server logs, and similar technologies that record your device information, IP address, and on-site behaviour.
• From third-party service providers including identity verification agencies, payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), and fraud prevention services that may supply supplementary data about you as part of their verification or compliance outputs.
• From game providers such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe, which may share session-level game play data with d882 for the purposes of account settlement and responsible gaming monitoring.

5. Purpose and Legal Basis for Processing

The table below sets out the primary purposes for which d882 processes your personal data and the corresponding legal basis for each processing activity:

6. Sharing Your Personal Data

d882 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We share personal data only in the following limited circumstances and only to the extent strictly necessary:

6.1 Payment Processors

To process your deposits and withdrawals, d882 shares necessary transactional and identity data with your chosen payment provider — which may include bKash, Nagad, Rocket, Upay, Visa, or Mastercard. Each payment partner operates under its own privacy policy and data protection obligations. d882 shares only the minimum data required to complete and verify each transaction.

6.2 Identity Verification Providers

d882 uses accredited third-party KYC and identity verification service providers to validate the identity documents submitted during registration and prior to withdrawals. These providers receive only the document images and personal details required to perform the verification check. They are contractually bound to process this data solely for verification purposes and to maintain appropriate security standards.

6.3 Game Providers

Casino and sports betting content on d882 is supplied by licensed third-party game studios including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe. These providers receive a session token and a player account reference (not your full identity data) to load game sessions. Game result data is returned to d882 for account settlement. Game providers do not receive your financial payment details.

6.4 Fraud Prevention and AML Services

d882 may share personal and transactional data with specialist fraud detection and AML compliance services to identify and prevent financial crime on the platform. Data shared for this purpose is processed strictly for compliance purposes and is not used by these providers for their own marketing or commercial activities.

6.5 Legal and Regulatory Disclosure

d882 may disclose your personal data to competent regulatory authorities, law enforcement agencies, or courts where it is legally required to do so, or where such disclosure is necessary to protect the safety of our players or to investigate suspected criminal activity connected with the use of our platform.

7. International Data Transfers

Some of d882's service providers — particularly KYC verification partners and game providers — may operate servers located outside Bangladesh. Where personal data is transferred internationally in connection with these services, d882 takes reasonable steps to ensure that appropriate contractual safeguards are in place, and that the receiving party maintains data security standards consistent with those applied by d882. d882 does not transfer personal data to countries where no adequate data protection framework exists without first implementing appropriate protective measures.

8. Data Retention

d882 retains personal data for the following periods unless a longer retention period is required by applicable law:

• Active account holders: Personal data is retained for the full duration of the account relationship and for a minimum of five years following account closure, to meet AML and regulatory record-keeping obligations.
• KYC documents: Identity documents submitted for verification are retained for a minimum of five years from the date of submission.
• Transaction records: All deposit, withdrawal, and betting transaction records are retained for a minimum of five years.
• Customer support records: Live chat transcripts and email correspondence are retained for a minimum of two years.
• Marketing consent records: Records of your marketing opt-in or opt-out status are retained for as long as your account remains active and for two years thereafter.
• Technical and cookie data: Anonymised aggregated analytics data may be retained indefinitely. Identifiable session logs are deleted after 12 months.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of identifiable information.

9. Security Measures

d882 implements a multi-layered approach to data security designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and d882's servers
• Encrypted storage of sensitive data fields including payment account references and identity document images
• Role-based access controls limiting staff access to personal data to those with a legitimate operational need
• Regular penetration testing and vulnerability assessments of the d882 platform
• Multi-factor authentication for d882 internal systems that hold player data
• Documented incident response procedures for managing any data security events

While d882 takes all reasonable and industry-standard steps to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your d882 account credentials confidential and for ensuring that your own device is adequately secured.

10. Cookies

d882 uses cookies and similar technologies (such as local storage and session storage) on d882.io. Cookies are small text files placed on your device that help d882 deliver a functional and consistent platform experience. The following types of cookies are used by d882:

d882 does not use third-party advertising cookies, retargeting cookies, or social media tracking pixels. You may configure your browser to block or delete cookies at any time; however, disabling strictly necessary cookies may prevent certain features of d882.io from functioning correctly. By continuing to use d882.io, you consent to the placement of the cookies described in this section.

11. Your Data Rights

As a d882 player whose personal data is processed under this Privacy Policy, you hold the following rights in respect of your data:

• Right of Access: You may request a copy of the personal data d882 holds about you. We will provide this within 30 calendar days of a verified request.
• Right to Rectification: If any personal data d882 holds about you is inaccurate or incomplete, you may request that we correct it. Corrections to registered identity details may require re-submission of supporting KYC documents.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, and where no legal retention obligation requires us to keep it. Note that AML regulations require d882 to retain certain records for a minimum of five years even after account closure.
• Right to Restriction: You may request that d882 restrict the processing of your data while a dispute about accuracy or legal basis is being resolved.
• Right to Data Portability: You may request that d882 provide your personal data in a structured, machine-readable format for transfer to another service provider where technically feasible.
• Right to Withdraw Consent: Where d882 processes your data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time by contacting [email protected] or updating your account notification preferences. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.
• Right to Object: You may object to processing carried out on the basis of legitimate interest. d882 will review the objection and cease processing unless it can demonstrate compelling legitimate grounds that override your interests.

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Rights Request". We will acknowledge your request within five business days and provide a substantive response within 30 calendar days.

12. Children and Minors

d882 is strictly an adult platform. Access is limited to individuals who are 21 years of age or older. d882 does not knowingly collect personal data from individuals under the age of 21. If d882 becomes aware that it has inadvertently collected personal data from a minor, that data will be deleted immediately and the associated account will be closed. Parents or guardians who believe a minor may have registered an account on d882 should contact [email protected] immediately.

13. Marketing Communications

d882 may send you promotional offers, bonus alerts, and platform news by SMS or email only where you have explicitly opted in to receive such communications at the time of registration or subsequently through your account settings. Marketing communications from d882 will always contain a clear and easy mechanism to opt out — typically an unsubscribe link in email communications or an SMS reply instruction. You may also opt out at any time by contacting [email protected]. d882 does not share your contact details with third-party marketing organisations. Transactional communications — such as deposit confirmations, withdrawal notifications, and account security alerts — are not subject to marketing opt-out and will be sent regardless of your marketing preference settings.

14. Third-Party Links

d882.io does not contain links to third-party external websites. In the event that any game provider's interface displayed within the d882 platform contains links or references to the provider's own privacy documentation, those third-party privacy practices are outside the scope of this Privacy Policy. d882 is not responsible for the data practices of its game providers beyond the contractual obligations described in Section 6.3 of this Policy.

15. Changes to This Privacy Policy

d882 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. Material changes — for example, a new category of data collection or a new sharing arrangement — will be communicated to registered players via the email address on record at least 14 days before the change takes effect. The "Effective Date" at the top of this Policy will be updated with each revision. Continued use of d882 following the effective date of any revision constitutes acceptance of the updated Policy. We encourage you to review this Policy periodically.

16. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way d882 handles your personal data, please contact our support team using the details below. All privacy-related communications should be sent in English or Bengali.

• Email: [email protected] (plain text — not a clickable link)
• Subject line for privacy matters: Privacy Policy Enquiry
• Live Chat: Available 24/7 within your logged-in d882 Account
• Response time: Within 30 calendar days for formal data rights requests; within 2 hours for general enquiries via email