cd88 Privacy Policy
At cd88, we are committed to protecting the personal data of every user who interacts with our platform. This Privacy Policy explains what information we collect, how we use and store it, who we share it with, and the rights you hold as a data subject. We encourage all cd88 users to read this document in full before registering an account.
Core Privacy Principles at cd88
These six principles guide every data-handling decision we make at cd88. They are operational standards, not marketing commitments.
Transparency
We tell you exactly what data we collect, why we collect it, and how long we keep it. There are no hidden data practices at cd88. This Privacy Policy is the complete and accurate record of our data handling.
Purpose Limitation
Data collected for one purpose — such as identity verification — is not repurposed for unrelated activities. Every data point we hold has a defined and documented reason for being collected and retained.
Data Minimisation
cd88 collects only the information that is genuinely necessary to provide the services you use. We do not request data for its own sake. If a piece of information is not needed to operate your account, we do not ask for it.
Security by Design
All data on the cd88 platform is protected by 256-bit SSL encryption in transit and AES-256 encryption at rest. Passwords are stored as one-way hashed values. Our security posture is reviewed and tested on a regular basis.
User Rights
You have the right to access, correct, export, and in certain circumstances delete the personal data cd88 holds about you. Requests are handled within 10 business days. Contact our support team to exercise these rights.
Retention Limits
cd88 does not retain personal data indefinitely. Each category of data has a defined retention period aligned with legal obligations and operational necessity. When the retention period expires, data is securely deleted or anonymised.
1 Who We Are
This Privacy Policy applies to the cd88 online gaming platform, accessible at cd88.io ("the Platform", "cd88", "we", "us", "our"). cd88 operates as an online casino and sports betting service targeting players in Bangladesh. For the purposes of this Privacy Policy, cd88 acts as the data controller in respect of all personal information collected from users of the Platform.
When this Policy refers to "you", "your", or "the User", it means any individual who accesses the cd88 website, creates or holds a registered account, engages in any financial transaction on the Platform, or otherwise interacts with cd88's services in any capacity.
2 Data We Collect
cd88 collects personal data through several channels: directly from you during registration and account management, automatically through your use of the Platform, and in limited circumstances from trusted third-party verification services. The categories of data we collect are as follows:
2.1 Registration and Identity Data
- Full legal name as it appears on your government-issued ID
- Date of birth (used for mandatory 21+ age verification)
- Residential address in Bangladesh
- Mobile phone number registered to your bKash, Nagad, Rocket, or Upay account
- Email address (if provided)
- Username and hashed password
2.2 Identity Verification (KYC) Documents
- Scanned copy or photograph of your National Identity Card (NID) or passport
- Proof of address document (utility bill or bank statement dated within 90 days)
- Screenshot or confirmation of your registered mobile money account
2.3 Financial Data
- Deposit and withdrawal transaction records including amounts, timestamps, and mobile money reference numbers
- Account balance history
- Bonus and promotional credit records
2.4 Gaming Activity Data
- Bet history, bet amounts, odds accepted, and settlement outcomes
- Game session durations and timestamps
- Sports events and game titles wagered on
- Responsible gaming tool settings (deposit limits, self-exclusion status, cool-off periods)
2.5 Technical and Device Data
- IP address and approximate geographic location derived from it
- Device type, operating system, and browser version
- Session logs including login timestamps and actions taken
- Cookie and tracking data (see Section 6)
2.6 Communications Data
- Records of all support interactions including live chat transcripts and WhatsApp message threads
- Email correspondence with the cd88 support team
- Feedback, complaints, and dispute records
| Data Category | Collected At | Mandatory |
|---|---|---|
| Registration & Identity | Account sign-up | Yes |
| KYC Documents | Verification request | Yes (for withdrawals) |
| Financial Transactions | Each deposit / withdrawal | Yes |
| Gaming Activity | During gameplay | Yes (automatic) |
| Technical & Device | Each platform visit | Yes (automatic) |
| Communications | When contacting support | Only if you contact us |
3 How We Use Your Data
cd88 uses the personal data it collects for the following specific purposes. We do not use your data for any purpose not listed below without first obtaining your explicit consent:
3.1 Account Management and Service Delivery
Your registration and identity data is used to create and maintain your cd88 account, verify your identity, process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and ensure the proper functioning of all Platform services you access.
3.2 Age and Identity Verification
cd88 is legally and ethically obligated to ensure that all active users are aged 21 or above. KYC documents and date-of-birth data are processed solely to fulfil this obligation and to comply with anti-money laundering requirements. This data is not used for marketing or profiling purposes.
3.3 Fraud Prevention and Security
Technical and device data, IP addresses, and session logs are analysed to detect and prevent fraudulent activity, account takeover attempts, bonus abuse, money laundering, and other prohibited conduct. Automated monitoring systems flag unusual patterns for review by our compliance team.
3.4 Responsible Gaming Compliance
Gaming activity data is monitored to identify patterns that may indicate problem gambling behaviour. Where such patterns are detected, cd88 may proactively contact the user to offer responsible gaming resources or apply account restrictions in accordance with its Responsible Gaming policy.
3.5 Customer Support
Communications data is retained to enable our support team to handle your enquiries effectively, maintain a consistent service history, and resolve disputes fairly. Support records are not used for any purpose beyond managing your account relationship with cd88.
3.6 Legal and Regulatory Obligations
cd88 may process and disclose your data where required to do so by applicable law, court order, or request from a competent regulatory authority. In such cases, cd88 will disclose only the minimum data required to satisfy the legal obligation and will notify you where permitted to do so.
3.7 Platform Improvement
Aggregated, anonymised gaming and technical data may be used to analyse platform performance, identify areas for improvement, and develop new features. This analysis uses statistical data with all personally identifiable information removed.
4 Legal Basis for Processing
cd88 processes your personal data on the following legal grounds depending on the nature of the processing activity:
- Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you agreed to at registration — including account management, payment processing, and service delivery.
- Legal Obligation: Processing required to comply with applicable laws, including age verification, anti-money laundering checks, and responses to lawful regulatory requests.
- Legitimate Interests: Processing carried out for fraud prevention, security monitoring, and platform improvement, where cd88's legitimate business interests are not overridden by your fundamental rights and freedoms.
- Consent: Processing for optional marketing communications where you have provided explicit opt-in consent. You may withdraw this consent at any time by contacting our support team.
5 Data Sharing
cd88 does not sell, rent, or trade your personal data with any third party for commercial purposes. Data is shared only in the limited circumstances described below, and only to the extent necessary for the stated purpose:
5.1 Payment Processors
Your mobile number and transaction reference data are shared with bKash, Nagad, Rocket, and Upay solely to process your deposit and withdrawal requests. These providers operate under their own privacy policies and are responsible for data they independently collect through their applications.
5.2 Identity Verification Services
Where automated KYC checks are employed, your identity document data may be processed by a third-party verification service operating under a data processing agreement with cd88. This service is contractually prohibited from using your data for any purpose other than performing the verification requested by cd88.
5.3 Legal and Regulatory Authorities
cd88 may disclose user data to law enforcement agencies, financial intelligence units, or other competent authorities where required by applicable law or valid legal process. cd88 will not make such disclosures voluntarily beyond the minimum required by law.
5.4 Business Transfers
In the event that cd88 undergoes a merger, acquisition, or sale of all or part of its business assets, user data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and given the opportunity to delete your account prior to completion where practicable.
6 Cookies & Tracking
cd88 uses cookies and similar tracking technologies to maintain session continuity, ensure platform security, and gather anonymised usage statistics. The categories of cookies we use are as follows:
6.1 Essential Cookies
These cookies are strictly necessary for the Platform to function. They manage your login session, maintain your account state across pages, and protect against cross-site request forgery (CSRF). The Platform cannot operate without these cookies and they cannot be disabled.
6.2 Analytics Cookies
Anonymised analytics cookies help cd88 understand how users navigate the Platform, which pages and game categories receive the most engagement, and where technical issues may be occurring. All data collected through analytics cookies is aggregated and contains no personally identifiable information.
6.3 Preference Cookies
These cookies remember your display preferences — such as language settings and notification preferences — so that you do not need to reconfigure them on each visit.
6.4 Managing Cookies
You may configure your browser to block or delete cookies at any time. Please note that disabling essential cookies will prevent the Platform from functioning correctly and may result in your inability to log in or process transactions. Instructions for managing cookies are available in your browser's settings documentation.
7 Data Retention
cd88 retains personal data only for as long as is necessary for the purposes for which it was collected and to comply with applicable legal obligations. The following retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years | Legal & AML compliance |
| KYC documents | Duration of account + 5 years | Regulatory obligation |
| Financial transaction records | 7 years from transaction date | Financial record-keeping law |
| Gaming activity logs | 3 years from last activity | Responsible gaming & dispute resolution |
| Support communications | 3 years from last interaction | Dispute resolution |
| Technical & device logs | 12 months from collection | Security monitoring |
| Marketing consent records | Until consent is withdrawn + 1 year | Proof of consent |
Upon expiry of the applicable retention period, data is securely deleted or irreversibly anonymised. Anonymised data — from which no individual can be identified — may be retained indefinitely for statistical analysis purposes.
8 Security Measures
cd88 employs a layered security architecture designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our technical and organisational security measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and cd88 servers
- AES-256 encryption at rest for all databases containing personal data
- One-way cryptographic hashing (bcrypt) for all stored passwords — cd88 employees cannot view your password in plain text
- Multi-factor authentication available for account access, strongly recommended for all users
- Automated intrusion detection systems monitoring for anomalous access patterns and potential breaches in real time
- Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required by their role
- Regular security assessments including penetration testing and vulnerability scanning of Platform infrastructure
Despite these measures, no system can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, cd88 will notify affected users without undue delay and take all reasonable steps to contain and remediate the breach.
9 Your Rights
As a cd88 user, you hold the following rights in respect of the personal data we process about you. To exercise any of these rights, please contact our support team at [email protected]. We will acknowledge your request within 2 business days and provide a substantive response within 10 business days.
9.1 Right of Access
You have the right to request a copy of all personal data cd88 holds about you, along with information about how it is being processed. We will provide this in a structured, machine-readable format where technically feasible.
9.2 Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Corrections to core identity data may require re-submission of identity documents for verification purposes.
9.3 Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. Please note that certain data must be retained for the periods specified in Section 7 to comply with legal obligations, and erasure requests cannot override these obligations.
9.4 Right to Restrict Processing
You have the right to request that cd88 restrict processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested or while an objection to processing is being assessed.
9.5 Right to Data Portability
Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to have it transmitted to another data controller where technically feasible.
9.6 Right to Object
You have the right to object to processing based on cd88's legitimate interests. cd88 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defence of legal claims.
10 Children's Privacy
The cd88 platform is strictly intended for adults aged 21 and above. cd88 does not knowingly collect personal data from any individual under the age of 21. If we become aware that personal data has been collected from a person below the minimum age, that account will be immediately suspended, the data will be deleted, and any associated funds will be handled in accordance with our Terms & Conditions.
If you are a parent or guardian and believe that a minor in your care has registered an account on cd88, please contact our support team immediately at [email protected]. We take underage access extremely seriously and will act on any credible report without delay.
11 Third-Party Links
The cd88 platform may contain references to or integrations with third-party services such as mobile money providers (bKash, Nagad, Rocket, Upay) and game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi). When you interact with these third-party services, you are subject to their own privacy policies and data handling practices, over which cd88 has no control.
cd88 is not responsible for the privacy practices of any third party whose services are accessed via the Platform. We recommend that you review the privacy policy of any third-party service you use in connection with your cd88 account.
12 Policy Amendments
cd88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. Where amendments are material, we will notify registered users via email or an in-platform notification at least 7 days before the updated Policy takes effect.
The current version of this Privacy Policy will always be accessible at cd88.io/privacy-policy with the "Last Updated" date clearly displayed at the top of the document. Your continued use of the cd88 platform after the effective date of any amendment constitutes your acceptance of the updated Policy. If you do not agree with any change, you must cease use of the Platform and may request account closure as described in Section 9.
13 Contact & Complaints
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how cd88 has handled your personal data, please contact us through any of the following channels:
- Email: [email protected] — for data subject requests, privacy concerns, and formal complaints
- Live Chat: Available 24/7 on the cd88 Platform — for general privacy queries and account data questions
- WhatsApp: Available 24/7 — contact details provided within your account dashboard after login
- Response Time: 2 business days for acknowledgement; 10 business days for substantive response to data subject requests
- Operating Hours: All support channels operate on Bangladesh Standard Time (BST, UTC+6)
If you are not satisfied with cd88's response to a privacy complaint, you may escalate the matter through cd88's formal dispute resolution process as outlined in the Terms & Conditions.
Your Data is Safe at cd88
Now that you understand how we protect your personal information, explore the full cd88 platform with confidence. Cricket, live casino, 1,000+ slots, and instant BDT payments — all secured by 256-bit encryption. For players aged 21 and above.