Privacy Policy — How pdc88 Collects, Uses, and Protects Your Data

1. Introduction

Welcome to pdc88. This Privacy Policy ("Policy") describes how pdc88 ("we", "us", "our") collects, uses, stores, and protects personal information provided by users ("you", "your", "Player") when accessing or using the pdc88 online casino and sports betting platform at https://pdc88.bio (the "Platform"). This Policy applies to all services offered through the Platform, including account registration, deposit and withdrawal processing, game participation, and customer support interactions.

pdc88 is committed to safeguarding the privacy and security of every player's personal information. We process personal data responsibly, transparently, and in accordance with applicable data protection principles. By creating an account on pdc88 or continuing to use the Platform after the effective date of this Policy, you acknowledge that you have read, understood, and consented to the practices described herein.

This Policy should be read alongside the pdc88 Terms and Conditions, which are incorporated herein by reference. In the event of any conflict between this Policy and the Terms and Conditions in respect of data handling, the Terms and Conditions shall take precedence unless this Policy provides greater protection to you as a data subject.

2. Data Controller

For the purposes of this Privacy Policy, pdc88 acts as the data controller in respect of personal data collected from users of the Platform. As data controller, pdc88 determines the purposes and means of processing your personal information and bears responsibility for ensuring that such processing is conducted lawfully and in accordance with the principles set out in this Policy.

All data protection enquiries, subject access requests, and rights-related communications should be directed to the pdc88 data protection contact at [email protected]. Please include "Data Protection" in the subject line of your email to ensure your enquiry is directed to the appropriate team without delay.

3. Data We Collect

pdc88 collects personal data through several channels, including directly from you during registration and account use, automatically through your use of the Platform, and from third-party service providers involved in delivering our services. The categories of personal data we collect are described below.

3.1 Registration and Identity Data

When you create a pdc88 account, we collect your full legal name, date of birth, chosen username, email address, mobile phone number, and residential address. This information is required to verify your identity, confirm you meet the minimum age requirement of 21 years, and create and manage your account.

3.2 Know Your Customer (KYC) Verification Data

To comply with responsible gaming and anti-money laundering obligations, pdc88 may request copies of government-issued identification documents such as your National Identity Card, passport, or driving licence. We may also request proof of address documents such as utility bills or bank statements, and evidence of payment method ownership.

3.3 Financial and Transaction Data

We collect details of all deposits, withdrawals, and in-game transactions conducted through your pdc88 account. This includes transaction amounts in Bangladeshi Taka (BDT), transaction timestamps, and the payment method identifiers associated with each transaction (e.g., your bKash, Nagad, or Rocket mobile wallet number). We do not store full payment card numbers, PIN codes, or mobile banking passwords.

3.4 Gaming and Betting Activity Data

pdc88 records your full gaming and betting history, including bet amounts, game titles, sports markets selected, wager outcomes, bonus usage, and session durations. This data is used for account management, dispute resolution, responsible gaming monitoring, and service improvement purposes.

3.5 Technical and Device Data

When you access pdc88, we automatically collect certain technical information including your IP address, browser type and version, operating system, device identifiers, screen resolution, referring URL, and geolocation data (country or city level). This data helps us maintain Platform security, prevent fraud, and optimise the user experience.

3.6 Communication Data

We retain records of all communications between you and pdc88, including emails, live chat transcripts, and support ticket history. This data is used to resolve disputes, improve service quality, and maintain an accurate record of your interactions with our support team.

Data Category	Examples	Primary Purpose
Identity Data	Full name, date of birth, NID, username	Account creation, age verification, KYC
Contact Data	Email address, mobile number, home address	Account communications, support
Financial Data	bKash / Nagad / Rocket wallet ID, transaction amounts	Deposit and withdrawal processing
Gaming Data	Bet history, game sessions, bonus usage	Account management, responsible gaming
Technical Data	IP address, device type, browser, geolocation	Security, fraud prevention, UX optimisation
Communication Data	Support emails, live chat logs	Dispute resolution, service quality

4. How We Use Your Data

pdc88 uses the personal data we collect for the following specific purposes:

• Account Registration and Management: To create, verify, and administer your pdc88 player account, including processing KYC documentation and maintaining accurate account records.
• Service Delivery: To provide access to betting markets, casino games, live dealer tables, and all other features available on the pdc88 Platform.
• Payment Processing: To process deposits via bKash, Nagad, Rocket, Upay, and supported bank transfers, and to execute withdrawal requests to your verified payment method.
• Fraud Prevention and Security: To detect and prevent fraudulent activity, unauthorised account access, money laundering, and other prohibited conduct through automated and manual review processes.
• Responsible Gaming Compliance: To monitor your gaming behaviour for signs of problem gambling, enforce self-exclusion and deposit limit settings you have activated, and comply with responsible gaming obligations.
• Customer Support: To respond to your enquiries, process complaints, investigate disputes, and maintain records of your interactions with the pdc88 support team.
• Legal and Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering regulations, retain transaction records as required by law, and cooperate with lawful requests from regulatory or law enforcement authorities.
• Service Improvement: To analyse Platform usage patterns, identify technical issues, test new features, and continuously improve the quality and security of the pdc88 service.
• Marketing Communications: To send you promotional offers, bonus notifications, and seasonal campaigns by email or SMS — but only where you have provided explicit consent to receive marketing communications and only until such time as you withdraw that consent.

5. Legal Basis for Processing

pdc88 processes your personal data on the basis of one or more of the following lawful grounds:

• Contractual Necessity: Processing is necessary to perform the contract between you and pdc88, including account registration, game delivery, and payment processing.
• Legal Obligation: Processing is required to comply with applicable legal obligations including anti-money laundering regulations, age verification requirements, and transaction record-keeping mandates.
• Legitimate Interests: Processing is necessary for pdc88's legitimate interests in maintaining Platform security, preventing fraud, improving our services, and protecting the integrity of our gaming environment, provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: For certain processing activities — specifically the sending of direct marketing communications — pdc88 relies on your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

6. Sharing Your Data

pdc88 does not sell, rent, or disclose your personal data to third parties for commercial purposes. We may share your data with trusted third parties in the following limited circumstances:

6.1 Payment Service Providers

Your financial and identity data is shared with bKash, Nagad, Rocket, Upay, and partner banks (BRAC Bank, City Bank, Islami Bank) solely to the extent necessary to process your deposit and withdrawal transactions. These providers are contractually bound to handle your data securely and use it only for the purpose of completing your transactions.

6.2 Game Providers

To deliver our casino and live gaming services, pdc88 shares necessary technical data (such as your session token and game participation data) with certified game studios including Evolution Gaming, Pragmatic Play, NetEnt, PG Soft, Ezugi, and Spribe. These providers operate under strict data processing agreements and may not use your data for any purpose beyond delivering the game session.

6.3 Identity Verification Partners

pdc88 may use trusted third-party identity verification services to assist with KYC document checks. Such partners process your identity documents solely for verification purposes and are prohibited from retaining your data beyond the verification exercise.

6.4 Legal and Regulatory Authorities

pdc88 may disclose your personal data to competent legal, regulatory, or law enforcement authorities where we are required to do so by applicable law, court order, or binding regulatory instruction. In such cases, pdc88 will disclose only the minimum data necessary to satisfy the legal requirement and will, where legally permissible, notify you of the disclosure.

6.5 Business Transfers

In the event that pdc88 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the relevant successor entity. We will provide notice of any such transfer and ensure that the receiving entity is bound by privacy obligations at least as protective as those in this Policy.

7. Cookies and Tracking Technologies

pdc88 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain your session, and analyse usage patterns. A cookie is a small text file placed on your device when you visit the Platform. Cookies do not contain executable code and cannot access other data stored on your device.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They enable core features such as session management, security enforcement, and payment flow continuity. These cookies cannot be disabled without impairing Platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised data about how users interact with the Platform — which pages are visited most frequently, how long sessions last, and where users encounter errors. This data helps us improve the Platform experience.
• Functional Cookies: These cookies remember your preferences (such as language settings and preferred currency display) to provide a more personalised experience on subsequent visits.
• Fraud Prevention Cookies: These cookies assist our security systems in identifying unusual device or session behaviour that may indicate fraudulent or bot-driven activity.

7.2 Managing Cookies

You may control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies at the device level. Please note that disabling strictly necessary cookies will prevent you from accessing certain features of the pdc88 Platform, including the ability to log in and maintain a game session.

8. Data Retention

pdc88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. The following retention schedule applies:

Data Category	Retention Period	Reason
Account and Identity Data	5 years after account closure	AML compliance and regulatory obligations
KYC Documents	5 years after account closure	Regulatory record-keeping requirements
Transaction Records	5 years from transaction date	Financial audit and AML obligations
Gaming and Betting History	3 years after account closure	Dispute resolution and responsible gaming
Support and Communication Logs	2 years from last interaction	Quality assurance and dispute resolution
Technical and Device Data	12 months from collection	Security monitoring and fraud prevention
Marketing Consent Records	Until consent is withdrawn + 1 year	Proof of lawful marketing basis

Upon expiry of the applicable retention period, personal data is securely deleted from active systems and any backup archives in accordance with pdc88's internal data destruction policy. Where full deletion is not immediately technically feasible (e.g., for backup systems), the data is rendered inaccessible to active processing until destruction is complete.

9. Data Security

pdc88 implements a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes the following controls:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser and the pdc88 Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols, preventing interception of your data in transit.
• Encrypted Data Storage: Sensitive personal and financial data stored on pdc88 servers is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from encrypted data and rotated on a defined schedule.
• Access Controls: Access to personal data within pdc88's internal systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged, monitored, and subject to regular review.
• Intrusion Detection and Monitoring: pdc88's infrastructure is monitored 24/7 by automated intrusion detection systems. Anomalous access patterns trigger immediate security alerts and investigation protocols.
• Regular Security Audits: pdc88 engages independent cybersecurity specialists to conduct periodic penetration testing and vulnerability assessments of the Platform infrastructure.
• Staff Training: All pdc88 personnel with access to personal data complete mandatory data protection and information security training on an annual basis.

10. Your Rights

As a data subject, you hold the following rights in relation to the personal data pdc88 holds about you. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving your request.

pdc88 will not charge a fee for standard data rights requests. However, where a request is manifestly unfounded or excessive in scope, pdc88 reserves the right to charge a reasonable administrative fee or to decline the request, providing written reasons for doing so.

11. Children's Privacy

The pdc88 Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect, process, or retain personal data from any individual under the age of 21. If we become aware that a registered user is under 21, their account will be immediately suspended, all personal data associated with the account will be deleted in accordance with our data destruction procedures, and any funds held will be dealt with in accordance with our Terms and Conditions and applicable legal requirements.

If you are a parent or guardian and you believe that a minor in your care has registered an account on pdc88, please contact us immediately at [email protected] so that we can investigate and take the appropriate action without delay.

12. International Data Transfers

pdc88 operates servers and may engage service providers located in jurisdictions outside Bangladesh. Where personal data is transferred to a country that does not provide an equivalent level of data protection to that available in Bangladesh, pdc88 ensures that appropriate safeguards are in place before the transfer occurs. These safeguards may include contractual clauses that require the receiving party to protect your data in accordance with standards equivalent to those described in this Policy.

Your data may be processed by game providers such as Evolution Gaming, Pragmatic Play, and Spribe, whose infrastructure may be hosted in jurisdictions including Malta, Gibraltar, or Estonia. In all such cases, pdc88 has entered into data processing agreements with these providers that impose obligations consistent with the protections in this Policy.

13. Third-Party Links

The pdc88 Platform may contain references to third-party services, game studios, or partner organisations. This Privacy Policy applies solely to personal data collected and processed by pdc88 directly. Where you interact with a third-party service — including a game provider's dedicated interface or a payment processor's gateway — that provider's own privacy policy will govern the data collected during that interaction. pdc88 is not responsible for the privacy practices of any third party and encourages you to review the privacy policies of any third-party services you use in connection with the pdc88 Platform.

14. Changes to This Policy

pdc88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the scope of services offered on the Platform. The "Last Updated" date at the top of this document will be revised whenever a material change is made.

Where a change is material — meaning it affects the way we collect, use, or share your personal data in a manner that may affect your rights — pdc88 will notify all registered members by email at least 7 days before the change takes effect. Non-material clarifications or corrections may be published without advance notice.

Your continued use of the pdc88 Platform after the effective date of any amended Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you may close your account and request deletion of your personal data in accordance with Section 10 of this Policy.

15. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or about the way pdc88 handles your personal data, please do not hesitate to contact our data protection team using the details below. We are committed to responding to all data-related enquiries within 30 days of receipt.

If you are not satisfied with our response to your data protection enquiry, you have the right to escalate your complaint to the relevant data protection authority or seek independent legal advice. pdc88 will cooperate fully with any lawful investigation by a competent supervisory authority.