pd888 Privacy Policy

Data Controller & Contact

For the purposes of this Privacy Policy, the data controller responsible for the personal information collected through the pd888 platform is the operator of pd888.club. As the data controller, pd888 determines the purposes and means by which your personal data is processed, and is responsible for ensuring that such processing is carried out in accordance with applicable data protection principles.

If you have any questions, concerns, or requests relating to your personal data and how pd888 handles it, you may contact us at any time using the details below. Our privacy and data support team is available in English, seven days a week, during Bangladesh Standard Time (BST, UTC+6) business hours.

Personal Data We Collect

pd888 collects personal data from you through several channels: directly when you register an account or complete KYC verification; automatically when you use the platform (through cookies, log files, and session tracking); and from third-party sources such as payment processors and identity verification services where necessary to comply with our legal obligations.

The categories of personal data pd888 may collect and process are set out in the table below:

How We Use Your Data

pd888 uses the personal data it collects exclusively for the following defined purposes. We do not use your data for any purpose that is incompatible with those stated below without first obtaining your explicit consent or as otherwise permitted by applicable law.

• Account creation and management: To register your pd888 account, authenticate your identity at each login, manage your account settings, and maintain accurate records of your account status and balance.
• Age and identity verification: To verify that you meet the minimum age requirement of 18 years and that the identity information you have provided is accurate, using both self-submitted documents and, where necessary, third-party identity verification services.
• Payment processing: To facilitate BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer, and to maintain an accurate and auditable record of all financial transactions associated with your account.
• Fraud prevention and AML compliance: To detect, investigate, and prevent fraudulent activity, money laundering, and any other prohibited conduct as defined in the pd888 Terms & Conditions, and to fulfil our obligations under applicable anti-money laundering regulations.
• Platform personalisation: To tailor the pd888 experience to your preferences — including game recommendations, personalised promotions, and localised content relevant to players based in Bangladesh — based on your gaming activity and usage patterns.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance through our English-language support team.
• Responsible gaming management: To monitor gaming behaviour patterns that may indicate problem gambling and to enforce any deposit limits, session reminders, cooling-off periods, or self-exclusion measures that you have activated on your account.
• Marketing communications: To send you promotional offers, bonus notifications, and news about pd888 services where you have provided consent to receive such communications. You may withdraw this consent at any time via your account notification settings or by emailing [email protected].
• Platform improvement and analytics: To analyse usage patterns, measure feature performance, and improve the overall quality, security, and reliability of the pd888 platform through aggregated and anonymised analytics data.
• Legal and regulatory compliance: To meet any legal obligations imposed on pd888 by applicable laws, including record-keeping requirements, responses to lawful authority requests, and enforcement of our Terms & Conditions.

Legal Basis for Processing

Every instance of personal data processing carried out by pd888 is supported by at least one of the following recognised legal bases:

• Contractual necessity: Processing is necessary to perform the contract between pd888 and the Player — specifically, to operate your account, process wagers, facilitate BDT payments, and deliver the services you have registered to use.
• Legal obligation: Processing is required to comply with applicable legal and regulatory requirements, including anti-money laundering obligations, age verification mandates, and lawful requests from competent authorities.
• Legitimate interests: Processing is necessary for pd888's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and internal analytics — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: For processing activities that are not strictly necessary for contract performance or legal compliance — such as sending marketing communications or placing non-essential cookies — pd888 relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Where pd888 processes special category data — for example, identity document images used for KYC purposes — this processing is conducted under the explicit consent you provide during the verification process and under legal obligations applicable to online financial service operators.

Data Sharing & Third Parties

pd888 does not sell your personal data to third parties. We share personal data only with carefully selected categories of recipients and only to the extent strictly necessary for the defined purpose of that sharing. The recipient categories and the basis for sharing are described below:

• Payment processors: bKash, Nagad, Rocket, Upay, and banking partners receive the minimum financial data necessary to process your BDT deposit or withdrawal transaction. Payment processors operate under their own privacy policies and data security standards.
• Identity verification providers: Third-party KYC and identity verification services may receive copies of your government-issued ID and selfie photographs solely for the purpose of confirming your identity and age. These providers are contractually bound to use your data only for verification purposes and to delete it upon completion of the process.
• Game providers: Licensed game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player identifier and relevant session data necessary to operate their games through the pd888 platform. Full identity data is not shared with game providers.
• Fraud prevention and security services: Third-party fraud detection tools may receive technical data (IP address, device fingerprint, behavioural patterns) to assist pd888 in identifying and preventing fraudulent activity on the platform.
• Legal and regulatory authorities: pd888 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by a valid legal order, warrant, or regulatory direction. pd888 will notify you of such disclosure where legally permitted to do so.
• Professional advisers: Lawyers, auditors, and accountants engaged by pd888 may access personal data where necessary in the context of professional advisory services, subject to strict confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of pd888's business assets, personal data held by pd888 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any material change to data processing arrangements that results from it.

Cookies & Tracking Technologies

pd888 uses cookies and similar tracking technologies — including web beacons, pixel tags, and local storage objects — to operate and improve the platform. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.

You can manage browser-level cookie settings through your browser's privacy or security preferences menu. Please note that disabling strictly necessary cookies will prevent you from logging in to or using the pd888 platform. For all other cookie categories, your preferences can be updated at any time in your pd888 account settings or by contacting [email protected].

Data Retention

pd888 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active account data: Identity, contact, and financial data is retained for the full duration of your pd888 account remaining open and active.
• Transaction and gaming records: All records of BDT deposits, withdrawals, and wager history are retained for a minimum of five years from the date of the transaction, in accordance with standard financial record-keeping practice.
• KYC and verification documents: Copies of identity documents submitted for KYC verification are retained for a minimum of five years from the date of account closure, in accordance with anti-money laundering obligations.
• Support communications: Records of customer support interactions, including email correspondence and chat transcripts, are retained for three years from the date of the interaction.
• Marketing consent records: Records of marketing opt-in and opt-out decisions are retained for three years from the date of the last recorded consent action.
• Closed account data: Where an account is closed — whether by the player or by pd888 — the data associated with that account is retained for a minimum of five years post-closure before being securely deleted or anonymised, except where a longer period is required by law or ongoing investigation.
• Anonymised analytics data: Aggregated, fully anonymised usage analytics that cannot be linked back to any individual player are retained indefinitely for internal platform improvement purposes.

When personal data is no longer required, pd888 securely deletes or irreversibly anonymises it using industry-standard methods. Secure deletion procedures are applied to both digital records and any physical copies of documentation.

Your Data Rights

As a player on the pd888 platform, you have the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request — [Right Type]". pd888 will respond within 30 calendar days and will not charge a fee for handling requests that are reasonable and non-repetitive.

• Right of Access: You have the right to request a copy of all personal data pd888 holds about you, together with information about how that data is processed. We will provide this in a clear, structured format within 30 days of your verified request.
• Right to Rectification: If any personal data pd888 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay. Some corrections may require supporting documentation to verify the amended details.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent (for consent-based processing), or where you object to processing based on legitimate interests. This right is subject to overriding legal retention obligations — for example, pd888 cannot delete transaction records required by AML regulations.
• Right to Restriction of Processing: You have the right to request that pd888 restrict processing of your data — meaning we may store it but not actively use it — while a dispute about accuracy or a legitimate-interests objection is being resolved.
• Right to Data Portability: Where your data has been processed on the basis of consent or contract, you may request that pd888 provide it to you in a commonly used, machine-readable format (such as CSV or JSON) so that it can be transferred to another service provider.
• Right to Object: You have the right to object to processing of your personal data that is carried out on the basis of pd888's legitimate interests, including profiling for marketing personalisation. pd888 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent — for example, receipt of marketing communications — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.

Data Security Measures

pd888 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures are reviewed and updated on a regular basis to reflect developments in information security best practice.

• Transport encryption: All data transmitted between your device and pd888 servers is encrypted using TLS 1.2 or higher. Our platform enforces HTTPS on all pages and endpoints; unencrypted HTTP connections are automatically redirected.
• Password security: Player passwords are stored using industry-standard one-way cryptographic hashing with salting. pd888 staff do not have access to your plain-text password and will never ask you to provide it.
• Two-factor authentication (2FA): pd888 offers 2FA as an additional account security layer. We strongly recommend that all players enable 2FA via their account security settings to protect against unauthorised account access.
• Access controls: Access to personal data within pd888's internal systems is restricted on a strict need-to-know basis. Role-based access controls ensure that staff members can only access the categories of data required to perform their specific job functions.
• Intrusion detection and monitoring: pd888's infrastructure is monitored continuously for anomalous activity, unauthorised access attempts, and potential security breaches. Automated alerting systems notify the security team of suspicious patterns in real time.
• Vulnerability management: pd888 conducts regular vulnerability assessments and penetration testing of its platform infrastructure. Critical vulnerabilities are remediated within defined service-level timelines.
• Data breach response: In the event of a personal data breach that poses a risk to your rights and freedoms, pd888 will notify affected players without undue delay and will take all reasonable steps to contain the breach and mitigate its impact.

While pd888 applies rigorous security controls, no online platform can guarantee absolute security against all possible threats. You also play an important role in keeping your account secure — please refer to the account security recommendations in the pd888 Terms & Conditions for guidance on protecting your login credentials.

Updates to This Policy

pd888 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the services we offer. The effective date shown at the top of this document will be updated whenever a revision is published.

Where a proposed revision materially affects your rights as a data subject — for example, introducing a new category of data sharing, changing the retention period for a significant data category, or altering the legal basis on which we process your data — pd888 will provide not less than 14 days' advance notice by email to the address registered on your pd888 account before the revised Policy takes effect.

Your continued use of the pd888 platform after the effective date of a revised Privacy Policy constitutes your acknowledgement that you have reviewed the revised Policy. If you do not agree with the revised terms, you should discontinue use of the platform and request account closure as described in the pd888 Terms & Conditions.

We encourage you to review this Privacy Policy periodically at https://pd888.club/privacy-policy to stay informed about how pd888 is protecting your personal information. If you have any questions about a specific change, contact our support team at [email protected] before the revised Policy takes effect.