hdb88 Privacy Policy

hdb88 ("the Company", "we", "us", "our") operates the online betting and gaming platform at hdb88.io ("the Platform"). This Privacy Policy explains how hdb88 collects, processes, stores, and protects personal data belonging to registered players, website visitors, and prospective users ("you", "your") in connection with your use of the Platform.

hdb88 is committed to handling personal data with transparency, integrity, and in compliance with internationally recognised data protection principles. We operate primarily in the Bangladesh market and design our data practices to meet the expectations of Bangladeshi players while adhering to the standards of our international operating licence.

By registering an account or continuing to use the Platform, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy. This Policy should be read alongside the hdb88 Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference.

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact the hdb88 Data Protection team at the email address provided in Section 13 of this document.

hdb88 collects personal data through several channels including account registration, ongoing platform use, payment processing, identity verification, customer support interactions, and automated technical means. The categories of personal data we collect are set out below.

2.1 Registration Data

When you create an hdb88 account, we collect the following information which you provide voluntarily:

• Full legal name
• Date of birth (for age verification — 21+ only)
• Residential address (including city, division, and postcode)
• Email address
• Mobile phone number
• Username and encrypted password
• Preferred currency (BDT)

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) programme, we may collect copies of:

• Government-issued photo identification (National Identity Card, passport, or driving licence)
• Proof of residential address (utility bill, bank statement, or government correspondence dated within 90 days)
• Proof of payment method ownership (screenshot or confirmation of bKash, Nagad, Rocket, or bank account registered in your name)
• Selfie photograph for biometric matching where required

2.3 Financial & Transaction Data

hdb88 records all financial transactions processed through the Platform, including:

• Deposit and withdrawal amounts, timestamps, and method used (bKash, Nagad, Rocket, Upay, bank transfer, card)
• Mobile wallet numbers or bank account references (masked after verification)
• Transaction reference numbers and payment gateway responses
• Running account balance history

2.4 Gaming & Betting Activity Data

We automatically record your activity on the Platform, including:

• Bets placed, game sessions, wager amounts, and outcomes
• Bonus and promotion usage, wagering progress, and redemption history
• Game preference patterns and session duration
• Self-exclusion requests and responsible gaming limit settings

2.5 Technical & Device Data

When you access the Platform, our servers automatically collect:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Session timestamps, page views, and click-path data
• Cookie identifiers and similar tracking technologies (see Section 6)

2.6 Customer Support Data

When you contact hdb88 support via Live Chat or email, we retain records of the conversation, the nature of the enquiry, any documents provided, and the resolution outcome. Support records are used to improve service quality and to maintain an audit trail of account-related communications.

hdb88 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose incompatible with those listed below without first obtaining your explicit consent.

hdb88 does not use automated decision-making or profiling in a way that produces legal or similarly significant effects on players without human review. Where automated systems flag an account for fraud or responsible gaming concerns, a member of the hdb88 compliance team reviews the case before any account action is taken.

hdb88 processes personal data on the following lawful bases:

• Contractual necessity: Processing required to fulfil the account agreement between hdb88 and the Player — including registration, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable laws, including anti-money-laundering regulations, age verification requirements, and reporting obligations to relevant authorities.
• Legitimate interests: Processing carried out for hdb88's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — for example, receiving promotional emails or SMS communications. You may withdraw consent at any time by contacting hdb88 support.

Where hdb88 relies on legitimate interests as the legal basis for processing, we conduct a balancing test to ensure that our interests are proportionate and do not unfairly override your privacy rights. Records of these assessments are maintained by our compliance team.

hdb88 does not sell, rent, or trade your personal data. We share data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

5.1 Payment Processors

To process deposits and withdrawals, hdb88 shares relevant financial and identity data with licensed payment service providers including bKash, Nagad, Rocket, Upay, and card-network processors. These providers are contractually bound to process your data only for payment purposes and in accordance with their own privacy policies and applicable financial regulations.

5.2 Identity Verification Providers

hdb88 may engage third-party KYC and AML screening services to verify identity documents and check against sanctions and politically exposed persons (PEP) lists. These providers process only the data necessary for the specific verification task and are not permitted to retain or use your data for any other purpose.

5.3 Game Providers

hdb88's platform integrates games from third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game hosted by a third-party provider, your gameplay data (session ID, wager, outcome) is transmitted to that provider's server for game resolution purposes. Game providers receive no personally identifiable registration data beyond a pseudonymous player identifier.

5.4 Legal & Regulatory Authorities

hdb88 will disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by law, by a valid court order, or where disclosure is necessary to protect the rights, property, or safety of hdb88, its players, or the general public.

5.5 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of assets involving hdb88, personal data held by the Company may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer and the new entity will be bound by the terms of this Privacy Policy or an equivalent standard of protection.

hdb88 uses cookies and similar technologies to ensure the Platform functions correctly, to remember your preferences, and to analyse how the Platform is used. The following types of cookies may be present on your device when you use hdb88.io:

You may control or disable cookies through your browser settings. Please note that disabling essential cookies will prevent core Platform functionality from operating correctly and may prevent you from logging in or completing transactions. hdb88 does not use third-party advertising cookies or cross-site tracking cookies.

hdb88 retains personal data for the periods set out below, after which data is securely deleted or irreversibly anonymised. Retention periods are determined by the nature of the data and the legal or operational requirements that necessitate its storage.

• Account and registration data: Retained for the lifetime of the account plus 5 years following permanent account closure, to comply with AML record-keeping obligations.
• KYC and identity verification documents: Retained for 5 years from the date of verification or from the date of account closure, whichever is later.
• Financial transaction records: Retained for 7 years from the date of the transaction in line with standard financial record-keeping requirements.
• Gaming and betting activity logs: Retained for 3 years for dispute resolution and responsible gaming analysis purposes.
• Customer support communications: Retained for 2 years from the date of the last communication on a given support ticket.
• Technical and device data (logs): Retained for 12 months in anonymised or pseudonymised form.

Where a legal dispute, regulatory investigation, or law enforcement request is active, hdb88 may extend the retention period for relevant data until the matter is fully resolved, regardless of the standard retention period stated above.

hdb88 implements a comprehensive, layered approach to data security. Our technical and organisational measures include:

• 256-bit SSL/TLS encryption on all data in transit between the Player's device and hdb88's servers.
• AES-256 encryption for sensitive data stored in hdb88's databases, including passwords (bcrypt hashed with salt), payment method references, and identity document copies.
• Role-based access controls (RBAC) ensuring that staff members can only access personal data necessary for their specific job function.
• Multi-factor authentication (MFA) for all administrative access to systems holding personal data.
• Regular penetration testing and vulnerability assessments conducted by qualified third-party security professionals.
• Automated intrusion detection and anomaly monitoring systems that alert the security team to unusual access patterns in real time.
• Secure data centre infrastructure with physical access controls, fire suppression, and environmental monitoring.
• Staff data protection training conducted upon onboarding and refreshed annually for all personnel handling personal data.

Despite these measures, no online platform can guarantee absolute security. hdb88 encourages all players to use a strong, unique password for their account and to enable any additional security features available in their account settings. Never share your login credentials with any third party.

hdb88 respects your rights over your personal data. Subject to applicable law and any overriding legal obligations, you are entitled to exercise the following rights at any time:

• Right of Access: You may request a copy of all personal data hdb88 holds about you. We will provide this in a structured, commonly used, machine-readable format within 30 calendar days of receipt of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Minor corrections (such as updating a phone number) can be made via the account settings panel or by contacting support.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent on which processing was based. Note that hdb88 may be required to retain certain data for legal and regulatory reasons even following an erasure request.
• Right to Restrict Processing: You may request that hdb88 restrict the processing of your data in certain circumstances — for example, while a rectification request is being reviewed.
• Right to Data Portability: You may request that hdb88 transfer your personal data directly to another organisation in a structured, machine-readable format where technically feasible.
• Right to Object: You may object to processing carried out on the basis of legitimate interests or for direct marketing purposes. hdb88 will cease processing upon receipt of a valid objection unless there are compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact the hdb88 Data Protection team at the email address provided in Section 13 below. All requests will be verified for identity before processing. hdb88 will not charge a fee for standard rights requests, though a reasonable administrative fee may apply for manifestly unfounded or excessive repeat requests.

hdb88 is a strictly 21+ platform. We do not knowingly collect personal data from individuals under the age of 21. Every registration is subject to automated age-check procedures and manual KYC review. Where hdb88 discovers that personal data has been collected from a person under 21 years of age, that data will be deleted immediately and the associated account will be closed without exception.

Parents and guardians who believe that a minor may have registered on the Platform without authorisation are encouraged to contact hdb88 support immediately via Live Chat so that the matter can be investigated and resolved promptly. hdb88 cooperates fully with all requests relating to the protection of minors' data.

hdb88 supports the use of parental control software and internet filtering tools to prevent underage access to online gambling platforms. We recommend tools such as Gamban, GamCare's Safer Gambling tools, and similar solutions for households that include individuals under 21 years of age.

hdb88 operates as an international platform and, as a result, personal data may be transferred to and processed in countries outside of Bangladesh. Where such transfers occur, hdb88 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Privacy Policy.

Safeguards for international transfers include:

• Contractual data transfer agreements incorporating standard contractual clauses between hdb88 and receiving entities.
• Transfer only to third-party processors who can demonstrate equivalent data protection standards through certification, audit, or contractual commitment.
• Technical encryption measures ensuring data is protected in transit regardless of geographic routing.

By registering an hdb88 account, you acknowledge and consent to your personal data being transferred internationally in accordance with the safeguards described above.

hdb88 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, a new category of data being collected, a new third-party processor being engaged, or a change to retention periods — hdb88 will provide at least 14 days' notice to players via a prominent notice on the Platform and, where possible, via email to the player's registered address.

The date of the most recent revision is shown at the top of this document. Continued use of the Platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree to an updated Privacy Policy, you must discontinue use of the Platform and contact support to arrange account closure.

We recommend reviewing this Privacy Policy periodically to stay informed about how hdb88 protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way hdb88 handles your personal data, please contact our Data Protection team using the details below. All correspondence will be acknowledged within 2 business days and resolved within 30 calendar days.

Data Protection Enquiries:
Email: [email protected]
Subject line: Privacy Policy Enquiry — [Your Registered Username]

Customer Support (General):
Email: [email protected]
Live Chat: Available 24/7 inside the Platform
WhatsApp: +880 1700 000000 (plain text — not a clickable link)
Support Hours: 24/7 (Bangladesh Standard Time, UTC+6)

Registered Office:
hdb88 is operated by an internationally registered entity under an offshore gaming licence. For the full registered address and licence details, please contact support using the email above.