dni88 Privacy Policy

This Privacy Policy ("Policy") sets out how dni88 ("the Platform", "we", "us", "our") collects, uses, stores, shares, and protects personal information provided by users ("you", "your", "the Player") when you access or use the dni88 website and all associated services available at dni88.io.

dni88 operates as an online betting and casino platform serving players across Bangladesh. We take our responsibilities regarding the privacy and security of your personal data seriously, and this Policy reflects our commitment to handling that data transparently, lawfully, and fairly.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of the overall agreement governing your use of dni88.

When you interact with the dni88 platform, we may collect the following categories of personal data:

We do not knowingly collect sensitive special-category data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric identifiers beyond what is strictly necessary for identity document verification.

dni88 collects personal data through the following channels and mechanisms:

• Direct Submission: Information you provide voluntarily when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or submitting a complaint.
• Automated Technologies: When you access the platform, our servers automatically record technical and usage data including your IP address, browser fingerprint, device identifiers, and session activity. This occurs regardless of whether you are logged into an account.
• Payment Processors: When you initiate a transaction via bKash, Nagad, Rocket, Upay, or a bank transfer, the relevant payment service provider confirms transaction details to us. We do not store full mobile wallet PINs or bank passwords.
• Third-Party Game Studios: Game providers such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe may transmit game session data — including bet amounts, game outcomes, and session duration — to our platform systems for the purpose of account crediting and responsible gaming monitoring.
• Identity Verification Services: We may use third-party KYC and identity verification providers to cross-check the documents you submit. These providers return a verification result and confidence score to dni88 without retaining your documents on their own systems beyond the minimum required for the verification process.
• Cookies and Tracking Technologies: As described in Section 07, we use cookies and similar technologies to recognise your browser, maintain your session, and analyse platform usage.

dni88 uses your personal data only for legitimate purposes directly connected to the operation of the platform and the delivery of our services. The specific purposes for which we process your data are:

• Account Registration and Management: To create and maintain your player account, authenticate your identity at login, and update your account details when requested.
• Identity and Age Verification: To confirm that you meet the minimum age requirement of 21 years and that the information you have provided is accurate and genuine, in accordance with responsible gaming obligations.
• Payment Processing: To execute deposits, process withdrawal requests, detect duplicate or fraudulent transactions, and maintain accurate financial records for your account.
• Customer Support: To respond to your enquiries, resolve disputes, investigate complaints, and improve the quality of our support service by reviewing chat and email records.
• Responsible Gaming: To monitor betting and gaming behaviour patterns that may indicate problem gambling, to apply deposit limits or session restrictions when requested, and to enforce self-exclusion where applicable.
• Fraud and Security: To identify and prevent unauthorised account access, detect multi-accounting, investigate suspicious betting patterns, and protect the platform against abuse.
• Anti-Money Laundering (AML) Compliance: To screen transactions against internal risk thresholds and, where required, to report suspicious financial activity.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform news by email or on-platform notification — but only where you have provided explicit consent to receive such communications.
• Platform Improvement: To analyse aggregate usage patterns, identify technical issues, conduct A/B testing, and make informed decisions about new features and content.
• Legal Obligations: To comply with applicable legal requirements including record-keeping obligations, responding to lawful requests from regulatory or law enforcement authorities, and enforcing our Terms and Conditions.

dni88 processes your personal data on the following legal grounds:

• Contractual Necessity: Much of our data processing is necessary for the performance of the contract between you and dni88 — specifically, to register and manage your account, process payments, deliver games, and provide support. Without this processing, we could not provide the service.
• Legal Obligation: Certain processing activities — including KYC verification, AML transaction monitoring, and record retention — are required by law. We must perform this processing to remain compliant with our obligations regardless of your preferences.
• Legitimate Interests: We process some data on the basis of our legitimate interests as a platform operator, including fraud prevention, platform security, responsible gaming monitoring, and analytics. We have assessed that these interests do not override your privacy rights.
• Consent: Where we rely on consent — primarily for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. Withdrawing marketing consent does not affect your ability to use the platform.

dni88 does not sell, rent, or trade your personal data to third parties for commercial purposes. We share data only in the following strictly controlled circumstances:

• Payment Service Providers: We share the minimum necessary transactional data with bKash, Nagad, Rocket, Upay, and partnered banks to facilitate deposits and withdrawals. These providers are contractually bound to process your data solely for the purpose of executing the relevant transaction.
• Game Studios and Content Providers: Your account identifier and relevant session data are shared with third-party game studios (including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe) to load and operate games within the platform. These studios operate under data processing agreements that restrict their use of your data to game delivery only.
• Identity Verification Providers: Where we use third-party KYC services, your identity documents and personal details are shared with those providers for the sole purpose of completing the verification process. These providers are subject to confidentiality obligations and are prohibited from using your data for any other purpose.
• Analytics and Technical Service Providers: Anonymised or pseudonymised technical and usage data may be shared with analytics platforms to help us understand how the platform is used and to diagnose technical issues. These providers process data on our behalf under data processing agreements.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of dni88, our players, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of the dni88 business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy terms that will apply.

dni88 uses cookies and similar tracking technologies (including local storage and session tokens) to operate the platform, maintain your login session, and improve your experience. The following categories of cookies are used:

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies, though doing so may affect the functionality of the platform, particularly features that require an authenticated session such as placing bets or making deposits.

dni88 does not use cookies for third-party advertising profiling and does not permit third-party advertising networks to place tracking cookies on the platform.

dni88 retains your personal data for as long as your account remains active and for a defined period after account closure. Retention periods are determined by the purpose for which the data was collected and by applicable legal obligations:

• Account and Identity Data: Retained for the lifetime of your account and for a minimum of five (5) years following account closure, in order to comply with anti-money laundering record-keeping obligations and to support any dispute resolution that may arise after closure.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, consistent with financial record-keeping requirements.
• KYC Documents: Retained for the duration of the account relationship and for at least five (5) years after closure. Documents are stored in encrypted form with restricted access.
• Customer Support Communications: Retained for three (3) years from the date of the most recent communication in a thread, unless the communication relates to a formal complaint or legal matter, in which case it is retained for five (5) years.
• Technical and Usage Data: Anonymised aggregate usage data may be retained indefinitely for analytical purposes. Identifiable technical logs (e.g., IP address records) are retained for up to twelve (12) months.
• Marketing Consent Records: Records of your marketing consent and any subsequent withdrawal are retained for five (5) years to demonstrate compliance with our consent obligations.

When retention periods expire, personal data is securely deleted or permanently anonymised so that it can no longer be linked to any individual. Where deletion is not immediately practicable due to technical constraints, the data is isolated and protected from further active processing until deletion can be completed.

dni88 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• Encryption in Transit: All data transmitted between your device and the dni88 platform is encrypted using 256-bit SSL/TLS protocols. This applies to all platform pages, including the login flow, payment pages, and account settings.
• Encryption at Rest: Sensitive data stored in our systems — including KYC documents, financial records, and account credentials — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to systems containing personal data is restricted to authorised personnel on a need-to-know basis. All internal access to sensitive data is logged, monitored, and periodically audited.
• Password Security: Account passwords are stored exclusively as salted cryptographic hashes. dni88 staff cannot retrieve your plaintext password under any circumstances. If you forget your password, a reset flow generates a new one rather than recovering the original.
• Two-Factor Authentication: Players are encouraged to enable two-factor authentication (2FA) on their accounts for an additional layer of login security. 2FA options are available via your account security settings.
• Vulnerability Management: We conduct regular security reviews of the platform and engage third-party security professionals to perform periodic penetration testing. Critical vulnerabilities are remediated on a priority basis.
• Incident Response: In the event of a data security incident that is likely to result in a risk to your rights or interests, we will notify affected players without undue delay and take immediate steps to contain and remediate the incident.

As a registered player on the dni88 platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team via live chat or by email at [email protected]:

• Right of Access: You may request a copy of the personal data we hold about you. We will provide this in a structured, commonly used format within 30 days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account details such as your name, address, or contact information, you can update many fields directly within your account settings.
• Right to Erasure: You may request deletion of your personal data. We will comply where there is no legal, regulatory, or contractual obligation requiring us to retain it. Note that AML and KYC retention requirements (see Section 08) mean that identity and financial records are typically retained for five years post-closure regardless of an erasure request.
• Right to Restrict Processing: You may ask us to restrict the processing of your data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing based on legitimate interests.
• Right to Data Portability: Where we process your data on the basis of consent or contract performance, you may request that we provide your data in a machine-readable format so that it can be transferred to another service provider.
• Right to Object: You have the right to object at any time to processing of your personal data carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where we rely on your consent to process data (primarily for marketing), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

We will respond to all verified rights requests within 30 calendar days. In complex cases we may extend this by a further 30 days, in which case we will notify you of the extension and the reason for it. There is no charge for submitting a rights request unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

The dni88 platform is strictly intended for adults aged 21 years and over. We do not knowingly collect personal data from anyone under the age of 21. Our registration process includes age verification steps designed to prevent minors from creating accounts.

If you are a parent or guardian and believe that a minor in your care may have registered an account on the dni88 platform, please contact our support team immediately at [email protected]. We will investigate and take appropriate action within one business day of receiving your report.

We strongly encourage parents and guardians to use parental control software to restrict access to gambling websites. A number of free tools are available for this purpose. Our Responsible Gaming page provides further guidance on protecting vulnerable individuals.

The dni88 platform may contain references or links to third-party websites or services, including the websites of payment providers, game studios, and sports data suppliers. This Privacy Policy applies solely to the dni88 platform and does not extend to any third-party websites that may be accessible from links within the platform.

We have no control over the content, privacy practices, or data collection activities of third-party websites. We encourage you to review the privacy policies of any third-party service before providing them with personal information. dni88 is not responsible for the privacy practices of third-party websites or services, even where those third parties are our partners or suppliers.

dni88 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will provide notice to registered players via email or an on-platform notification at least seven (7) days before the changes take effect, where it is reasonably practicable to do so.

The "Last Updated" date at the top of this document reflects the most recent revision. We encourage you to review this page periodically. Your continued use of the dns88 platform after the effective date of any revision constitutes your acceptance of the updated Policy.

If a proposed change would materially reduce your privacy rights or significantly expand how we use your personal data, we will seek your explicit consent before the change takes effect where required by applicable law.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which dni88 processes your personal data, please contact our team using any of the methods below:

• Live Chat: Available 24/7 directly through the platform. Our support team can handle general privacy enquiries, data access requests, and marketing opt-out requests in real time.
• Email: [email protected]. For formal data subject rights requests, please use the subject line "Privacy Request — [Your Account Username]" to ensure your request is routed to our data compliance team promptly. We aim to acknowledge all privacy-related emails within one business day.

Our support team is based on Bangladesh Standard Time (BST, UTC+6) and operates every day of the year. For written privacy requests, we will respond within 30 calendar days in accordance with the timelines described in Section 10.