Privacy Policy — How dah888 Protects Your Data

Data We Collect

dah888 collects personal data through several channels: directly from you when you register and use the platform, automatically through your interaction with our website, and from third-party identity verification and payment service providers as part of our KYC and anti-money laundering obligations.

Registration & Account Data

When you create a dah888 account, we collect the following information that you provide directly:

• Full legal name
• Date of birth (to verify you are 18 or older)
• Residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, or other)
• Email address
• Mobile phone number (used for account verification and transaction alerts)
• Username and hashed password (we never store your password in plaintext)
• Preferred language and communication preferences

KYC Identity Verification Data

Before processing your first withdrawal, dah888 applies mandatory Know Your Customer (KYC) verification. This requires you to upload:

• A copy of a valid government-issued photo identification document (National Identity Card / NID, passport, or birth certificate)
• Proof of residential address (utility bill, bank statement, or other official document dated within 90 days)
• Where enhanced due diligence is required: source-of-funds documentation, such as a recent bank statement or salary slip

KYC documents are processed securely and retained in accordance with our data retention obligations described in Section 5 of this Policy.

Transaction & Payment Data

Every financial transaction on the dah888 platform generates a transaction record. This includes:

• Deposit and withdrawal amounts (in BDT)
• Payment method used (bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard)
• Mobile wallet account number or last four digits of card (never full card numbers — these are handled by the payment provider)
• Transaction timestamps in Bangladesh Standard Time (BST, UTC+6)
• Transaction reference numbers

dah888 does not store full card numbers or mobile banking PINs. Payment credentials are transmitted directly to the payment service provider via encrypted channels.

Gaming & Betting Activity Data

To operate the platform, resolve disputes, prevent fraud, and meet our responsible gaming obligations, dah888 records:

• Games played, bet amounts, win/loss outcomes, and session durations
• Sports bets placed, markets selected, odds at time of placement, and settlement results
• Bonus and promotion usage
• Responsible gaming limit settings (deposit limits, session timers, cooling-off activations, self-exclusion requests)

Technical & Device Data

When you access dah888.app, our servers and analytics systems automatically record:

• IP address and approximate geographic location (country/region)
• Device type, operating system, and browser version
• Referring URL and pages visited within dah888.app
• Session start and end times
• Cookie identifiers (see Section 4 for full cookie details)

How We Use Your Data

dah888 uses your personal data only for the purposes described below, and only where we have a valid lawful basis to do so. The primary lawful bases we rely on are: (a) performance of the contract between you and dah888; (b) compliance with legal obligations; (c) our legitimate interests in operating a safe and commercially viable platform; and (d) your consent, where specifically obtained (e.g., for marketing communications).

Marketing Communications

Where you have opted in to receive marketing communications, dah888 may send you emails or SMS notifications about new games, promotions, seasonal offers (BPL cricket season, Eid, Pohela Boishakh, Victory Day on December 16), and account-specific bonus opportunities. You may withdraw your consent at any time by clicking the unsubscribe link in any marketing email or by updating your notification preferences inside your dah888 account settings. Withdrawal of consent for marketing does not affect any other aspect of your account or our ability to send you transactional and security-related communications.

Automated Decision-Making

dah888 employs automated systems for fraud detection, bonus abuse detection, and responsible gaming monitoring. These systems may automatically flag or restrict an account where patterns consistent with prohibited activity are detected. Where an automated decision has a significant effect on your account (such as a withdrawal restriction or account suspension), you have the right to request human review by contacting support at [email protected].

Data Sharing & Disclosure

dah888 does not sell, rent, or otherwise commercially transfer your personal data to third parties. We share data only with the categories of recipient described below, and only to the extent necessary for the stated purpose.

Payment Service Providers

To process your deposits and withdrawals, dah888 shares the minimum necessary transaction data with your selected payment service provider: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, or Mastercard. Each provider handles your payment data under their own privacy policy and applicable financial regulations. dah888 does not receive or store your full payment credentials — the payment provider handles authentication on their own secure infrastructure.

Identity Verification Partners

For KYC verification, dah888 may engage third-party identity verification service providers to authenticate your government-issued identity documents and confirm your date of birth. These providers process your identity data solely for verification purposes under contractual data processing agreements with dah888.

Game Content Providers

dah888 operates as a platform host for games provided by third parties including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game, the game provider's software processes your gameplay data (bets, outcomes, session duration) to deliver the game. Game providers do not receive your full personal profile; they receive a pseudonymous player identifier and game-session data only.

Legal and Regulatory Disclosure

dah888 may be required by law, court order, or regulatory authority to disclose personal data. Where such a disclosure request is received, dah888 will assess its validity, share only the data specifically required, and notify the affected player to the extent permitted by applicable law.

Business Transfers

In the event that dah888 undergoes a merger, acquisition, restructuring, or sale of assets, player data may be transferred to the successor entity as part of that transaction. Players will be notified via email and/or a prominent notice on the platform before any such transfer results in a material change to how their data is handled, and they will be provided an opportunity to close their account if they do not wish their data to be transferred.

Cookies & Tracking Technologies

dah888.app uses cookies and similar technologies to operate essential platform functionality, maintain session security, and gather anonymised analytics data that helps us improve the platform experience. We do not use cross-site tracking cookies or embed third-party advertising pixels.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits, maintain your session state, and remember preferences. Cookies set by dah888.app remain on your device until they expire or you delete them from your browser settings.

Categories of Cookies Used by dah888

Managing Your Cookie Preferences

You can manage or delete cookies at any time through your browser settings. Most modern browsers (Chrome, Firefox, Edge, Safari) allow you to view, block, or delete specific cookies. Please be aware that disabling strictly necessary or fraud prevention cookies will prevent you from logging in to your dah888 account. Instructions for managing cookies in common browsers are available via the browser's built-in help function.

Data Retention

dah888 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, and financial record-keeping obligations. The table below sets out our standard retention periods by data category.

After the applicable retention period expires, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. Anonymised aggregated data may be retained indefinitely for statistical and platform improvement purposes.

Your Privacy Rights

dah888 recognises and respects the privacy rights of all players. The following rights apply to personal data that dah888 holds about you. To exercise any of these rights, contact our Data Protection Officer at [email protected] with the subject line "Privacy Rights Request" and include your registered account email address for verification purposes.

Response Timeframes

dah888 aims to acknowledge all privacy rights requests within 5 business days and to fulfil them within 30 calendar days of receiving a verified request. Where a request is complex or involves a large volume of data, we may extend this period by up to an additional 30 days, in which case we will notify you of the extension and the reason for it within the initial 30-day period.

Children's Privacy

dah888 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under 18 years of age. If dah888 discovers that personal data has been collected from an individual who is under 18, that data will be immediately deleted and the associated account will be permanently closed. If you are a parent or guardian and believe your child has registered on dah888, please contact [email protected] immediately.

Data Security

dah888 applies a layered approach to data security, combining technical controls, operational procedures, and staff training to protect personal data against unauthorised access, accidental loss, destruction, or disclosure.

Technical Safeguards

• Transport encryption: All data transmitted between your device and dah888 servers is encrypted using TLS 1.2 or TLS 1.3 (256-bit). HTTPS is enforced site-wide with HTTP Strict Transport Security (HSTS) headers.
• Data-at-rest encryption: Personal data stored in dah888 databases is encrypted at rest using AES-256.
• Password hashing: Account passwords are stored as salted bcrypt hashes — dah888 staff cannot retrieve your password.
• Access controls: Access to personal data within dah888's systems is restricted on a strict need-to-know basis using role-based access controls. All access is logged and audited.
• Intrusion detection: dah888's infrastructure is monitored continuously for anomalous access patterns, brute-force attempts, and other indicators of compromise.
• Vulnerability management: The dah888 platform undergoes periodic security assessments and penetration testing. Critical vulnerabilities are remediated on a priority basis.

Data Breach Procedure

In the event of a personal data breach that poses a risk to affected individuals, dah888 will notify affected players as promptly as practicable, providing a description of the nature of the breach, the categories of data involved, the likely consequences, and the measures taken or proposed to address it. Players will be advised on any steps they should take to protect themselves, such as changing their password.

Your Role in Account Security

While dah888 takes extensive measures to protect data on our side, the security of your account also depends on the steps you take to protect your login credentials. dah888 strongly recommends using a unique, strong password for your dah888 account that is not shared with any other service, enabling two-factor authentication (2FA) if offered, and logging out of your account on shared or public devices. dah888 will never contact you by email, SMS, or chat to request your account password.

Contact & Data Protection

If you have any questions about this Privacy Policy, wish to exercise a privacy right, or want to raise a concern about how dah888 handles your personal data, please reach out using the contact details below.

Data Protection Officer

dah888 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data protection obligations. The DPO can be contacted at:

• Email: [email protected] (subject line: "Privacy / DPO Request")
• WhatsApp: +880 1700-DAH888
• Live Chat: Available 24/7 inside your dah888 account dashboard
• Response time: Within 5 business days for all privacy-related enquiries

Complaints

If you believe dah888 has not handled your personal data in accordance with this Privacy Policy, we encourage you to contact us directly in the first instance so that we have the opportunity to address your concern. We take all privacy complaints seriously and will investigate and respond to every complaint received.

Policy Updates

dah888 may update this Privacy Policy from time to time to reflect changes in our data processing practices, operational requirements, or applicable regulations. When we make a material change to this Policy, we will notify registered players via email and/or a prominent notice on the platform at least 14 days before the change takes effect. The "Last updated" date at the top of this page will always reflect the date of the most recent revision. Continued use of the dah888 platform after a notified policy update constitutes your acknowledgement of the revised Policy.