Privacy Policy — How df88 Protects and Handles Your Personal Data
At df88 we take your privacy seriously. This Privacy Policy explains exactly what data we collect from players in Bangladesh, why we collect it, how we use it, and the rights you have over your own information.
Six Core Privacy Commitments
These are the principles that guide every decision df88 makes about your personal data.
Minimal Data Collection
df88 collects only the personal data that is strictly necessary to provide our betting and casino services, verify your identity, process payments, and comply with legal obligations. We do not collect data beyond what is required for these purposes.
End-to-End Encryption
All data transmitted between your device and the df88 platform is protected using 256-bit SSL/TLS encryption. Sensitive information including payment details and account credentials is stored in encrypted form and is never transmitted in plain text.
No Third-Party Marketing Sales
df88 will never sell, rent, or trade your personal information to third parties for their own marketing or commercial purposes. Your data is shared only with carefully vetted service providers acting on our behalf under strict confidentiality agreements.
Your Rights, Your Control
You have the right to access, correct, delete, or restrict the processing of your personal data held by df88 at any time. Submit a request to our support team at [email protected] and we will respond promptly in accordance with applicable data protection principles.
Regulated Third-Party Sharing
Where necessary, df88 shares your data with regulated payment processors such as bKash, Nagad, and Rocket, as well as identity verification and fraud prevention providers. All third parties are contractually bound to handle your data securely and only for the stated purpose.
Defined Retention Periods
df88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Account data is retained for a minimum of five years following account closure to meet legal and regulatory record-keeping obligations.
Your Data Rights Under This Policy
df88 respects your right to control your personal data. Here is a summary of the rights available to every registered player.
Right of Access
Request a copy of the personal data df88 holds about you at any time. We will provide this within a reasonable timeframe upon identity verification.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
Right to Restriction
You may request that df88 restricts the processing of your data in certain circumstances, for example while the accuracy of data is being contested.
Right to Portability
Where processing is based on your consent or a contract, you may request a structured, machine-readable copy of the data you have provided to df88.
Right to Object
You may object to processing of your personal data for direct marketing purposes at any time. Contact [email protected] to submit an objection request.
This Privacy Policy ("Policy") describes how df88 ("we", "us", "the Platform") collects, uses, stores, and protects the personal data of users ("you", "Player") who access or use the df88 platform at https://df88.io. By registering an account or using any part of our platform, you confirm that you have read and understood this Policy and consent to the processing of your personal data as described herein.
1 Introduction
df88 is committed to protecting the privacy and security of every player who uses our online betting and casino platform. This Policy sets out in clear, transparent terms how we handle personal data in connection with our services, which include sports betting, live casino games, slots, and related entertainment products.
This Policy applies to all personal data collected through the df88 website at https://df88.io, including data collected during account registration, gameplay, financial transactions, customer support interactions, and any marketing communications you receive from us. It applies to all players accessing df88 from Bangladesh and any other jurisdiction where the platform is accessible.
We encourage you to read this Policy carefully in full. If you have any questions about how we process your personal data, please contact our data support team at [email protected].
2 Personal Data We Collect
df88 collects the following categories of personal data from players. We collect only what is necessary to provide our services, comply with legal obligations, and maintain a safe and fair platform.
2.1 Identity and Registration Data
- Full legal name
- Date of birth (to verify the 21+ age requirement)
- Gender (optional)
- Username and password (stored in encrypted form)
- Government-issued identification document details (national ID, passport, or driving licence number) — collected during KYC (Know Your Customer) verification
2.2 Contact Information
- Email address
- Mobile phone number
- Residential address, city, and postcode (e.g., Dhaka, Chittagong, Sylhet, Khulna, or other locations in Bangladesh)
2.3 Financial Data
- Payment method details (bKash mobile number, Nagad account, Rocket account, Upay account, bank account or card number — partially masked)
- Deposit and withdrawal transaction history
- Account balance history
- Source-of-funds documentation where required for compliance purposes
2.4 Gameplay and Betting Data
- Bet history, game history, win/loss records
- Session durations and frequency of play
- Bonus usage and promotional participation records
- Responsible gaming tool settings (deposit limits, session time-outs, self-exclusion records)
2.5 Technical and Device Data
- IP address and approximate geolocation derived from IP
- Device type, operating system, and browser type and version
- Unique device identifiers
- Platform access timestamps and session logs
2.6 Communications Data
- Records of correspondence with our customer support team, including live chat transcripts and email exchanges
- Survey responses and feedback submissions
- Records of marketing email engagement (opens, clicks) where applicable
3 How We Collect Your Data
df88 collects personal data through the following channels:
- Directly from you: When you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, or respond to a survey or promotional offer.
- Automatically: When you access and use the df88 platform, we automatically collect technical data about your device and usage patterns via cookies, server logs, and similar tracking technologies (see Section 7 — Cookies & Tracking).
- From third parties: We may receive data about you from identity verification agencies, fraud prevention services, payment processors (such as bKash, Nagad, Rocket), and credit reference agencies, where necessary to verify your identity or protect the platform from fraud.
4 Legal Basis for Processing
df88 processes your personal data only where we have a lawful basis for doing so. The legal bases we rely upon are as follows:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and platform access | Performance of a contract with you |
| Processing deposits and withdrawals | Performance of a contract with you |
| Identity verification (KYC/AML compliance) | Legal obligation |
| Fraud detection and prevention | Legitimate interests of df88 |
| Responsible gaming monitoring | Legal obligation / Legitimate interests |
| Sending promotional communications | Your consent (withdrawable at any time) |
| Platform analytics and improvement | Legitimate interests of df88 |
| Legal record-keeping and compliance | Legal obligation |
Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
5 How We Use Your Personal Data
df88 uses the personal data we collect for the following purposes:
- Account Management: To create, maintain, and administer your df88 player account, including processing deposits and withdrawals, managing bonuses, and providing access to our full range of betting and gaming products.
- Identity Verification: To verify that you meet the 21+ age requirement and to confirm your identity as part of our Know Your Customer (KYC) and Anti-Money Laundering (AML) compliance obligations.
- Transaction Processing: To process financial transactions via supported payment methods including bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Bangladeshi bank transfers.
- Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance when you contact our support team.
- Platform Security: To detect, prevent, and investigate fraud, money laundering, cheating, account takeovers, and other prohibited conduct, and to protect the integrity of our platform and all its users.
- Responsible Gaming: To monitor gameplay patterns that may indicate problem gambling behaviour, and to administer responsible gaming tools such as deposit limits, time-outs, and self-exclusion where you have requested them or where we are legally obliged to apply them.
- Personalisation and Marketing: Where you have provided consent, to send you promotional communications about bonuses, new games, cricket betting markets, seasonal promotions (such as BPL, IPL, T20 World Cup, and Eid offers), and other relevant df88 offerings. You may opt out of marketing communications at any time.
- Legal and Regulatory Compliance: To fulfil record-keeping, reporting, and other obligations imposed by applicable law and regulatory frameworks.
- Platform Improvement: To analyse aggregated usage data and improve the functionality, performance, and user experience of the df88 platform.
6 Sharing Your Personal Data
df88 does not sell, rent, or disclose your personal data to third parties for their own commercial or marketing purposes. We share your data only in the following limited and controlled circumstances:
- Payment Processors: We share the minimum necessary data with payment service providers (including bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks such as Dutch-Bangla Bank and BRAC Bank) to process your deposits and withdrawals securely.
- Identity Verification Providers: We work with regulated identity verification and KYC/AML compliance service providers who process your identity documents on our behalf under strict confidentiality and data processing agreements.
- Fraud Prevention and Security Services: We share data with fraud detection agencies and security service providers to protect against financial crime, unauthorised account access, and platform abuse.
- Technology and Infrastructure Providers: Our platform relies on cloud hosting, database management, and analytics services provided by vetted technology partners. These providers act strictly as data processors under our instructions and have no independent right to use your data.
- Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or government authorities where required to do so by applicable law, a valid court order, or to protect the rights and safety of df88, its staff, and its players.
- Business Transfers: In the event that df88 undergoes a merger, acquisition, or sale of assets, player data may be transferred to the acquiring entity, subject to the same or equivalent privacy protections as set out in this Policy.
All third parties with whom df88 shares personal data are required to implement appropriate security measures and to process that data only in accordance with our instructions and applicable law.
7 Cookies and Tracking Technologies
df88 uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse usage, and support our security and fraud prevention measures. A cookie is a small text file placed on your device when you access a website.
Types of Cookies We Use
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Essential for platform operation — session authentication, security tokens, load balancing | Session / short-term |
| Functional | Remember your preferences, language settings, and display choices | Up to 12 months |
| Analytics | Collect anonymised data on page visits, navigation paths, and feature usage to improve the platform | Up to 24 months |
| Security / Fraud Prevention | Detect suspicious behaviour, identify unusual login patterns, and protect your account | Session / up to 12 months |
You can control cookie settings through your browser. Disabling strictly necessary cookies may impair platform functionality. Disabling analytics or functional cookies will not prevent you from using the core betting and gaming services.
8 Data Security
df88 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or destruction. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
- Encryption of sensitive data at rest, including payment details and identity document information.
- Role-based access controls ensuring that only authorised staff with a legitimate business need can access personal data.
- Regular security audits, penetration testing, and vulnerability assessments of our platform infrastructure.
- Multi-factor authentication requirements for staff accessing systems containing personal data.
- Incident response procedures to detect, investigate, and respond to data security incidents in a timely manner.
While df88 takes all reasonable steps to protect your data, no digital transmission system or data storage environment is entirely immune to risk. In the event of a data breach that is likely to result in a risk to your rights and freedoms, df88 will notify affected players promptly and take all necessary remedial action.
9 Data Retention
df88 retains personal data for only as long as is necessary to fulfil the purposes for which it was collected, or as required or permitted by applicable law. Our standard retention periods are as follows:
| Data Category | Retention Period |
|---|---|
| Account registration and identity data | Duration of account plus 5 years after closure |
| Financial transaction records | Minimum 5 years from date of transaction |
| KYC / AML verification documents | Minimum 5 years from date of verification |
| Gameplay and betting history | Duration of account plus 3 years after closure |
| Customer support correspondence | 3 years from date of interaction |
| Marketing consent records | Until consent is withdrawn plus 1 year |
| Technical / server logs | Up to 12 months on a rolling basis |
After the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data lifecycle procedures. Anonymised and aggregated data that can no longer identify any individual may be retained indefinitely for statistical and analytical purposes.
10 Your Data Rights
As a player on the df88 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected]. We will respond to all valid requests within a reasonable timeframe, and in any event within 30 days of receipt. Where we need additional time or information to process your request, we will inform you accordingly.
- Right of Access: You may request a copy of the personal data we hold about you. This is also known as a Subject Access Request (SAR).
- Right to Rectification: You may request correction of inaccurate or incomplete personal data. You can also update basic account information (such as your email address) directly within your account settings.
- Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing was unlawful. Note that we may be required to retain certain data for legal compliance purposes even where you have requested erasure.
- Right to Restriction: You may request that we restrict processing of your data in specific circumstances, for example where you contest the accuracy of the data or where you have objected to processing pending verification of our legitimate grounds.
- Right to Data Portability: Where processing is based on consent or contract performance, you may request a portable copy of the data you have directly provided to us in a structured, commonly used, machine-readable format.
- Right to Object: You may object to processing of your personal data based on our legitimate interests, or to direct marketing at any time. Where you object to direct marketing, we will cease processing for that purpose immediately.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time by contacting us. Withdrawal of consent does not affect the lawfulness of processing that took place before withdrawal.
If you are unsatisfied with how df88 has handled your personal data or responded to a rights request, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.
11 Children's Privacy and Age Restriction
The df88 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. During account registration, all players are required to confirm that they are aged 21 or older, and to provide date-of-birth information that is verified as part of our KYC process.
If df88 becomes aware that a player under the age of 21 has registered an account or provided personal data to us, we will take immediate steps to suspend the account, delete the personal data, and reverse any financial transactions associated with that account. If you have reason to believe that a minor has registered an account on our platform, please notify us immediately at [email protected].
Parents and guardians are encouraged to make use of parental control tools and internet filtering software to prevent underage access to online gambling platforms. df88 supports responsible gaming initiatives and takes its obligations in relation to the protection of minors extremely seriously.
12 Changes to This Privacy Policy
df88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When we make material changes to this Policy, we will notify registered players via email and display a prominent notice on the df88 platform for a reasonable period prior to the changes taking effect.
The effective date at the top of this Policy will be updated each time a revision is published. We encourage you to review this Policy periodically to stay informed about how df88 protects your personal data. Your continued use of the platform following the publication of any revised Policy constitutes your acknowledgement of the changes and your agreement to be bound by the updated terms.
If you do not agree with any changes to this Policy, you should discontinue your use of the df88 platform and may request closure of your account by contacting our support team.
13 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which df88 processes your personal data, please contact our data support team using the details below. We are committed to addressing all enquiries promptly and transparently.
- Platform: df88 — https://df88.io
- Email: [email protected]
- Response Time: We aim to respond to all data-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6).
- Postal correspondence: Dhaka, Bangladesh
When contacting us about a data rights request, please include your registered email address and a description of your request so that we can verify your identity and process your request efficiently. We may ask for additional information to confirm your identity before fulfilling a Subject Access Request or Right to Erasure request.
Explore df88 — Bangladesh's Trusted Betting Platform
Now that you understand how we protect your data, explore everything df88 has to offer — from live cricket betting and BPL markets to premium slots, Dragon Tiger, and live casino games. 21+ only. Play responsibly.