Privacy Policy for dhaka8

01 Introduction

This Privacy Policy ("Policy") explains how dhaka8 ("dhaka8", "we", "us", "our") collects, uses, stores, shares, and protects personal data relating to individuals ("you", "your", "the Player") who access or use the dhaka8 website and associated services available at dhaka8.biz (the "Platform").

dhaka8 is committed to handling personal data responsibly and transparently. This Policy has been drafted to give you a clear understanding of our data practices so that you can make informed decisions about your use of the Platform.

By registering an account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should not use the Platform.

02 Data Controller

For the purposes of applicable data protection legislation, dhaka8 is the data controller in respect of all personal data collected through the Platform. As data controller, dhaka8 determines the purposes and means of processing personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

All data protection enquiries, subject access requests, and complaints may be directed to our support team using the contact details provided in Section 14 of this Policy. We aim to acknowledge all data-related correspondence within five business days and to provide a full response within 30 calendar days.

03 Data We Collect

dhaka8 collects personal data through several channels during the account lifecycle. The categories of data we collect are described below:

3.1 Registration Data

When you create a dhaka8 account, we collect the information you provide during the registration process, which may include:

• Full legal name
• Date of birth (to verify you are 18 years of age or older)
• Email address
• Mobile telephone number (used for OTP verification and account security)
• Residential address (city, district, and postcode)
• Preferred username and hashed password

3.2 Verification (KYC) Data

To comply with our Know Your Customer obligations and to process withdrawals, we may request the following identity documents:

• National Identity Card (NID) or passport scan
• Proof of address (utility bill, bank statement dated within 90 days)
• Selfie or live photograph for biometric comparison
• Screenshot or statement from your bKash, Nagad, or Rocket account confirming mobile wallet ownership

3.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and payment method references
• Mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers)
• Bank account or card details where applicable (partial card numbers only; full card data is processed by our payment partners and is not stored by dhaka8)
• Account balance history

3.4 Gameplay & Betting Data

• Game session logs, including game titles, bet amounts, outcomes, and session durations
• Sports betting market selections and stake history
• Bonus and promotional participation records
• Responsible gaming tool settings (deposit limits, self-exclusion status)

3.5 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session timestamps, page views, and navigation path within the Platform
• Cookie identifiers and similar tracking technologies (see Section 7)

3.6 Communications Data

• Records of support chat conversations, emails, and complaint correspondence
• Feedback or survey responses submitted voluntarily
• Records of promotional opt-in and opt-out preferences

04 How We Use Your Data

dhaka8 uses personal data for the following purposes:

• Account Management: To create, maintain, and administer your dhaka8 account, including processing login requests, resetting passwords, and updating account details.
• Identity Verification: To verify that you are who you say you are, that you meet the minimum age requirement of 18 years, and that you are not subject to any self-exclusion or legal restriction.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and partner banks, and to reconcile your account balance accurately.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, money laundering, bonus abuse, and any other activity that is in breach of our Terms & Conditions.
• Legal Compliance: To fulfil our obligations under applicable anti-money laundering regulations, responsible gaming requirements, and any lawful order from a competent authority.
• Customer Support: To respond to your enquiries, process complaints, and provide assistance with your account or transactions.
• Personalisation: To tailor your gaming experience, including displaying relevant game recommendations and promotions based on your activity history — subject to your marketing preferences.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling and to enforce deposit limits, loss limits, and self-exclusion requests that you or our risk team have applied.
• Platform Improvement: To analyse aggregate usage data, diagnose technical issues, and improve the performance, design, and functionality of the Platform.
• Marketing Communications: To send you promotional emails, SMS notifications, and in-platform messages about bonuses, tournaments, and seasonal offers — only where you have given consent or where permitted by applicable law.

05 Legal Basis for Processing

dhaka8 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Performance of a Contract: Processing your registration data, payment data, and gameplay records is necessary to provide the services set out in our Terms & Conditions and to fulfil our contractual obligations to you as a registered player.
• Legal Obligation: Certain processing activities — including identity verification, transaction record-keeping, and suspicious activity reporting — are required by applicable law and regulations.
• Legitimate Interests: We process technical and device data, fraud prevention signals, and support communications on the basis of our legitimate interests in operating a secure, fair, and commercially viable platform, provided those interests are not overridden by your fundamental rights.
• Consent: Where we send you marketing communications or place non-essential cookies on your device, we do so on the basis of your explicit consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

06 Sharing Your Data

dhaka8 does not sell, rent, or trade your personal data to third parties. We may share personal data with the following categories of recipient, strictly on a need-to-know basis and subject to appropriate contractual safeguards:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — for the purpose of processing deposits and withdrawals. These providers receive only the transaction data necessary to complete the payment.
• Identity Verification Partners: Third-party KYC service providers who assist with document authentication and biometric verification. These providers process verification data under strict data processing agreements and may not use the data for their own commercial purposes.
• Game Content Providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session data necessary to deliver their games and to verify bet outcomes. These providers operate under their own privacy and data security frameworks.
• Fraud Prevention & Security Services: Providers of risk scoring, device fingerprinting, and IP intelligence services used to protect the Platform from fraudulent activity.
• Legal & Regulatory Authorities: We may disclose personal data to law enforcement agencies, courts, or regulatory bodies when required to do so by applicable law, court order, or lawful request.
• Professional Advisers: Lawyers, auditors, and accountants who provide professional services to dhaka8 and who are bound by confidentiality obligations.

All third-party recipients of personal data are required to handle that data in accordance with applicable data protection standards. dhaka8 does not transfer personal data outside of its approved processing infrastructure without appropriate safeguards in place.

07 Cookies & Tracking Technologies

dhaka8 uses cookies and similar tracking technologies on the Platform to provide essential functionality, improve performance, and — where consent has been given — to deliver personalised content and measure the effectiveness of our marketing campaigns.

The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable core features such as session management, login authentication, and fraud prevention signals. They cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: These cookies remember your preferences (such as language settings and responsible gaming limit configurations) to provide a more personalised experience across sessions.
• Analytics Cookies: These cookies collect anonymised data about how players interact with the Platform — such as which pages are visited most frequently and where errors occur. This data is used to improve Platform performance. Analytics cookies are placed only with your consent.
• Marketing Cookies: Where you have given consent, marketing cookies allow us to deliver relevant promotional content and to measure the effectiveness of our advertising campaigns. You may withdraw this consent at any time.

You may manage your cookie preferences at any time via your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the Platform. Full details of the specific cookies we use, including their names, providers, and retention periods, are available on request from our support team.

08 Data Retention

dhaka8 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The principal retention periods applicable to each category of data are summarised in the table provided in Section 3 of this Policy.

In determining the appropriate retention period for any category of data, we consider the following factors:

• The nature of the data and the sensitivity of the information involved
• The purpose for which the data was collected and whether that purpose has been fulfilled
• Our legal and regulatory obligations, including anti-money laundering record-keeping requirements
• Any limitation periods applicable to legal claims that may arise in connection with the data
• Guidance issued by relevant data protection authorities

When personal data is no longer required, it is securely deleted or anonymised so that it can no longer be attributed to a specific individual. Anonymised aggregate data may be retained indefinitely for statistical and analytical purposes.

Upon account closure, your personal data will be retained for the minimum period required by applicable law — currently a minimum of five years for financial and identity records — after which it will be scheduled for secure deletion unless a legitimate reason for extended retention exists (such as ongoing legal proceedings).

09 Your Rights

As a data subject, you have the following rights in respect of personal data that dhaka8 holds about you. To exercise any of these rights, please contact us using the details in Section 14:

• Right of Access: You have the right to request a copy of the personal data that dhaka8 holds about you, together with information about how and why it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may also update certain account details directly through your account settings.
• Right to Erasure: In certain circumstances, you have the right to request deletion of your personal data. This right is subject to exceptions where retention is required by law (such as AML record-keeping obligations) or where the data is necessary for the establishment, exercise, or defence of legal claims.
• Right to Restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive a structured, commonly used, machine-readable copy of the personal data you have provided to us.
• Right to Object: You have the right to object to processing of your personal data where that processing is based on our legitimate interests. You also have an absolute right to object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

We will respond to all valid requests within 30 calendar days. In cases of complexity or volume, we may extend this period by a further two months, in which case we will notify you and explain the reason for the extension.

10 Data Security

dhaka8 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS/SSL encryption for all data in transit between your device and the Platform
• Encryption-at-rest for sensitive stored data, including identity documents and financial records
• Password hashing using industry-standard algorithms (bcrypt or equivalent) — dhaka8 never stores passwords in plain text
• Multi-factor authentication options for account login
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Regular internal security reviews and vulnerability assessments
• Incident response procedures to manage and report any data breach in accordance with applicable obligations

While dhaka8 takes data security seriously and maintains appropriate safeguards, no digital platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay and provide clear guidance on the steps you should take to protect yourself.

11 Third-Party Links

The Platform may contain references to or descriptions of third-party services (such as payment providers and game studios). Where links to external websites are present, please be aware that dhaka8 has no control over the content or privacy practices of those websites.

This Privacy Policy applies solely to data collected and processed by dhaka8 through the Platform. We strongly recommend that you review the privacy policies of any third-party services you access in connection with your use of dhaka8, including your mobile payment provider (bKash, Nagad, Rocket, etc.) and any bank through which you transact.

12 Children's Privacy

The dhaka8 Platform is strictly intended for adults aged 18 years and above. We do not knowingly collect personal data from individuals under the age of 18. If you are under 18 years of age, you must not use the Platform or provide any personal data to dhaka8.

If dhaka8 becomes aware that personal data has been collected from a person under 18, we will take immediate steps to delete that data and close the associated account. If you believe that a minor may have accessed the Platform and provided personal data, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

Parents and guardians are encouraged to use parental control tools to prevent minors from accessing online gambling platforms.

13 Updates to This Policy

dhaka8 reserves the right to update, revise, or replace this Privacy Policy at any time. Changes may be made to reflect updates in our data practices, changes in applicable law, or improvements to our platform services.

Where changes to this Policy are material, we will notify registered players via email or through a prominent notice on the Platform prior to the changes taking effect. The effective date at the top of this document will be updated to reflect the date of the most recent revision.

Your continued use of the Platform following any update to this Privacy Policy constitutes your acknowledgement of the revised Policy. If you do not agree with the updated terms, you should cease using the Platform and contact support to close your account.

We recommend that you review this Privacy Policy periodically to stay informed about how dhaka8 is protecting your personal data. The current version will always be accessible at dhaka8.biz/privacy-policy.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data that dhaka8 holds about you, please contact our support team using the following details:

• Email: [email protected]
• Subject Line for Data Requests: "Privacy Enquiry" or "Data Subject Request"
• Support Hours: 24 hours a day, 7 days a week
• Response Time: We aim to acknowledge all privacy-related correspondence within 5 business days and to provide a substantive response within 30 calendar days.

When submitting a data subject request, please include your registered username and a brief description of your request so that we can process it as efficiently as possible. We may need to verify your identity before actioning the request to ensure we do not disclose personal data to unauthorised individuals.