hd888 Privacy Policy

1. Introduction

hd888 ("we", "us", "our", "the Platform", "the Company") is committed to protecting the privacy and personal data of every player who accesses the hd888 website and services. This Privacy Policy describes how hd888 collects, uses, stores, discloses, and protects personal information in connection with the use of our online casino, sports betting, and gaming services.

This Policy applies to all users of the hd888 platform accessing services from the territory of Bangladesh and any other jurisdiction in which hd888 operates. It applies to data collected through the hd888 website, mobile-optimised site, any downloadable application, live chat support interactions, email correspondence, and any other channel through which you communicate with us.

By creating a player account, depositing funds, placing wagers, or otherwise using any part of the hd888 platform, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent, you must not create an account or use the platform.

2. Data Controller

hd888 is the data controller responsible for the personal information collected through the platform. For all data protection enquiries, requests, or complaints relating to the processing of your personal data, you may contact the hd888 Data Protection team directly:

• Email: [email protected] (subject line: "Data Protection Enquiry")
• Response Time: hd888 commits to acknowledging all data-related requests within 72 hours and providing a substantive response within 30 calendar days of receipt.

3. Personal Data We Collect

hd888 collects the following categories of personal data, depending on the nature of your interaction with the platform:

3.1 Registration Data

When you create a hd888 account, we collect: full legal name, date of birth, gender, residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or other), email address, and mobile phone number.

3.2 Identity Verification (KYC) Data

To comply with our anti-money laundering obligations and to verify your age, we may collect copies of: government-issued national identity card (NID), passport, or driving licence; proof of residential address (utility bill, bank statement); and proof of ownership of the payment method used to fund your account.

3.3 Financial and Transaction Data

hd888 collects records of all deposits, withdrawals, and wagers placed on the platform. This includes: payment method details (mobile wallet numbers for bKash, Nagad, Rocket, and Upay; bank account references for Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank; masked card numbers for Visa and Mastercard); transaction amounts in Bangladeshi Taka (BDT); timestamps; and transaction reference numbers.

3.4 Technical and Device Data

When you access hd888, our systems automatically record: your IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, referring URL, pages visited, session duration, and click-path data. This information is collected to maintain platform security, detect fraud, and optimise the user experience.

3.5 Communications Data

Any message you send to hd888 via live chat, email, or any other support channel is stored as part of your account record. This includes the content of your message, the date and time of communication, and any resolution actions taken by the support team.

3.6 Responsible Gaming Data

Where you use hd888's responsible gaming tools — including deposit limits, session time reminders, cooling-off periods, or self-exclusion — we record these elections as part of your account history. This data is used solely to enforce your chosen restrictions and to fulfil our duty of care obligations.

4. How We Collect Your Data

hd888 collects personal data through the following methods:

• Directly from you — at registration, during KYC verification, when making deposits or withdrawals, when contacting support, and when completing responsible gaming self-assessments.
• Automatically — through server logs, cookies, pixel tags, and similar tracking technologies when you navigate the hd888 website or mobile platform.
• From third parties — from identity verification service providers, payment processors, fraud detection agencies, and game studio platforms, where necessary to operate the hd888 service securely and in compliance with applicable obligations.

5. Purpose and Legal Basis for Processing

hd888 processes your personal data only where we have a legitimate legal basis to do so. The table below sets out the primary purposes for which your data is processed and the corresponding legal basis:

6. Data Sharing and Disclosure

hd888 does not sell, rent, or trade your personal data to any third party for marketing or advertising purposes. We share data only in the following strictly limited circumstances:

6.1 Service Providers and Processors

hd888 engages third-party service providers to assist in the operation of the platform. These include: KYC and identity verification providers; payment processors and mobile wallet operators (including bKash, Nagad, Rocket, Upay, and card-scheme processors for Visa and Mastercard); game studio platforms (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe, Play'n GO, Red Tiger); fraud detection and cybersecurity vendors; and cloud hosting and infrastructure providers. All such providers are bound by data processing agreements that restrict their use of your data to the specific services they provide to hd888.

6.2 Legal and Regulatory Disclosure

hd888 may be required to disclose personal data to competent authorities, law enforcement bodies, courts, or regulatory agencies where required by applicable law or where such disclosure is necessary to protect the legal rights, property, or safety of hd888, its players, or the general public. hd888 will not disclose data beyond what is strictly required by any such legal obligation.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of hd888's business assets, player personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, hd888 will provide reasonable advance notice to affected players and ensure that the acquiring entity is bound by data protection obligations at least equivalent to those set out in this Policy.

7. Data Retention

hd888 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods:

• Account and registration data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, to satisfy anti-money laundering record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction.
• KYC and identity documents: Retained for a minimum of five (5) years following account closure or the completion of the KYC process, whichever is later.
• Support communications: Retained for a minimum of three (3) years from the date of the communication.
• Responsible gaming records: Retained for the duration of the restriction plus five (5) years to prevent circumvention via a new account.
• Technical and device logs: Retained for a maximum of twelve (12) months from the date of recording, unless required for an ongoing fraud investigation or legal proceeding.

Upon expiry of the applicable retention period, hd888 will securely delete or anonymise your personal data so that it can no longer be linked to your identity.

8. Cookies and Tracking Technologies

hd888 uses cookies and similar technologies (pixel tags, local storage objects, session identifiers) to operate the platform effectively and to improve your experience. The following categories of cookies are used:

• Essential cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. These cannot be disabled without impairing your ability to use the platform.
• Functional cookies: Used to remember your preferences, such as language settings and previously selected deposit methods, to make your experience more convenient.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate the hd888 platform. This data is used to improve site performance and user experience. Analytics data is not linked to individual player identities.
• Security cookies: Used to detect and prevent fraudulent activity, including bot traffic and credential-stuffing attacks.

hd888 does not use third-party advertising or retargeting cookies. No cookie data is shared with advertising networks or social media platforms for the purpose of targeting you with external advertisements.

You may manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging into or using the hd888 platform.

9. Security Measures

hd888 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, or destruction. These measures include:

• TLS 1.3 encryption for all data transmitted between your device and the hd888 platform.
• AES-256 encryption for all sensitive data stored at rest, including payment credentials and identity documents.
• Multi-factor authentication options for player accounts.
• Role-based access controls limiting hd888 staff access to personal data on a strict need-to-know basis.
• Automated fraud monitoring and anomaly detection systems operating in real time, 24 hours a day.
• Regular third-party security audits and penetration testing of the hd888 platform infrastructure.
• Secure, access-controlled data centres for all server infrastructure.

Notwithstanding these measures, no method of electronic transmission or storage is completely secure. hd888 cannot guarantee absolute security against all possible threats and accepts no liability for data breaches caused by factors outside our reasonable control, including player-side security failures such as shared or compromised passwords.

10. Your Data Rights

As a player on the hd888 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, contact hd888 at [email protected] with the subject line "Data Rights Request":

• Right of Access: You may request a copy of the personal data hd888 holds about you, including the categories of data, the purposes for which it is processed, and any third parties with whom it has been shared.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held in your account. Some corrections may require re-submission of identity documents.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to hd888's legal retention obligations. Note that regulatory record-keeping requirements may prevent full erasure until the applicable retention period has expired.
• Right to Restriction of Processing: You may request that hd888 restrict the processing of your data in certain circumstances, such as while the accuracy of the data is being contested.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you may request that hd888 provide your data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent (such as receiving promotional communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to Object: You may object to the processing of your data on the basis of legitimate interests, including profiling for fraud detection, where you believe your individual circumstances warrant an exception. hd888 will assess such objections on a case-by-case basis.

hd888 will respond to all verified data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, and you will be notified of any such extension.

11. Children's Privacy

The hd888 platform is strictly intended for adults aged 21 years and above. hd888 does not knowingly collect personal data from any person under the age of 21. If hd888 determines that a player account has been created by a person under 21, the account will be suspended immediately, all associated data will be deleted (except where retention is required by law), and any deposited balance will be returned to the original payment source following identity verification.

If you believe that a minor has registered an account on hd888, please contact us immediately at [email protected] so that we may take appropriate action without delay.

12. International Data Transfers

hd888 operates on a global infrastructure and may transfer your personal data to servers or service providers located outside Bangladesh. Where such transfers occur, hd888 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that described in this Policy. These safeguards include contractual data processing agreements with all third-party processors and the use of encrypted transfer protocols for all cross-border data transmission.

By using the hd888 platform, you consent to the transfer of your personal data to countries outside Bangladesh where necessary for the provision of our services, subject to the safeguards described above.

13. Third-Party Links

The hd888 platform may contain references to game studios and payment service providers that operate their own platforms and privacy practices. hd888 is not responsible for the privacy practices of any third-party service and does not endorse or make any representations about the data handling of external platforms. This Privacy Policy applies solely to data collected and processed by hd888 in connection with the hd888 platform and services.

14. Updates to This Privacy Policy

hd888 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. Material changes will be communicated to registered players via email notification or a prominent in-platform notice at least 14 days before the updated Policy takes effect. The effective date displayed at the top of this document will be updated with each revision.

Your continued use of the hd888 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to any revision, you must discontinue use of the platform and may request account closure in accordance with the Terms & Conditions.

15. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by hd888, please contact our Data Protection team using the following details:

• Email: [email protected] — subject line: "Privacy Policy Enquiry" or "Data Rights Request"
• Live Chat: Available 24/7 via your hd888 account dashboard
• Response Commitment: All privacy-related enquiries acknowledged within 72 hours; substantive response within 30 calendar days
• Operating Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)