nd88 Privacy Policy — Your Data, Protected

This Privacy Policy ("Policy") describes how nd88 ("nd88", "we", "us", "our") collects, processes, stores, shares, and protects personal data provided by or collected about users ("you", "Player", "User") who access or use the nd88 online gaming and sports betting platform at nd88.im and all associated interfaces ("Platform"). This Policy forms part of the agreement between you and nd88 alongside our Terms & Conditions and Responsible Gaming policy. By registering an account or using the nd88 Platform, you acknowledge that you have read and understood this Policy.

1 Data We Collect

nd88 collects personal data about you from several sources depending on how you interact with the Platform. We collect only the data that is necessary to provide you with a safe, compliant, and high-quality gaming experience. The categories of personal data we collect are described below.

1.1 Registration Data

When you create an nd88 account, we collect your full legal name as it appears on your government-issued identification document, your date of birth, a valid email address, your Bangladesh mobile phone number, and a username of your choosing. This information is mandatory — without it, we cannot open a verified account or process withdrawals on your behalf.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer process, nd88 may collect copies of government-issued photo identification (National ID Card, passport, or driving licence), proof of address documentation dated within the last three months, and proof of ownership for any payment method linked to your account. These documents are used solely for identity and age verification and for satisfying anti-money-laundering obligations.

1.3 Financial Transaction Data

nd88 records all deposit and withdrawal transactions on your account, including the payment method used (bKash, Nagad, Rocket, Upay, bank transfer, or card), transaction amounts in Bangladeshi Taka (BDT), transaction timestamps, and the reference identifiers generated by each payment provider. nd88 does not store full card numbers or mobile banking PINs — payment method authentication is handled exclusively by the relevant payment provider's secure gateway.

1.4 Gaming Activity Data

We collect records of all betting and gaming activity conducted through your nd88 account, including sports bet selections, stake amounts, odds accepted, casino and slot game sessions, fishing game sessions, game results, bonus usage, and wagering progress. This data is used to manage your account, settle bets, audit bonus activity, and identify responsible gaming indicators.

1.5 Technical and Device Data

When you access the nd88 Platform, our servers automatically collect certain technical data including your IP address, device type and operating system, browser type and version, session timestamps, pages visited, features used, and referral source (the page or link through which you arrived at nd88.im). This data is collected via server logs and analytics tools.

1.6 Communications Data

If you contact nd88 customer support, participate in promotions, respond to surveys, or correspond with us via email, we retain records of that communication including the content of messages and the date and time of contact. These records help us resolve disputes, improve support quality, and maintain an audit trail of account-related communications.

2 How We Use Your Data

nd88 uses the personal data we collect for specific, defined purposes. We do not use your data for any purpose that is incompatible with the purposes stated at the time of collection. The primary purposes for which nd88 processes your personal data are as follows:

Purpose	Data Used	Necessity
Account registration and management	Registration data, device data	Essential — contract performance
Identity and age verification (KYC)	KYC documents, registration data	Essential — legal obligation
Processing deposits and withdrawals	Financial transaction data	Essential — contract performance
Settling bets and gaming sessions	Gaming activity data	Essential — contract performance
Fraud prevention and security monitoring	All categories	Essential — legitimate interest
Anti-money-laundering compliance	Financial data, KYC data	Essential — legal obligation
Responsible gaming monitoring	Gaming activity, financial data	Essential — legal & ethical obligation
Customer support and dispute resolution	Communications data, account data	Essential — contract performance
Personalised promotions and bonus offers	Gaming activity, registration data	Consent-based — opt-out available
Platform analytics and performance improvement	Technical and device data	Legitimate interest — anonymised where possible

nd88 does not use personal data for automated decision-making that produces significant legal effects on you without human review. Our fraud and responsible gaming monitoring systems may flag accounts for review, but all consequential decisions (such as account suspension) are reviewed by a human member of the nd88 risk or compliance team before action is taken.

3 Legal Basis for Processing

nd88 processes your personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contract Performance: Processing that is necessary to fulfil the agreement between you and nd88 — including account management, bet settlement, and payment processing — is carried out on the basis that it is required to perform our contractual obligations to you.
• Legal Obligation: nd88 is required by applicable law and regulation — including anti-money-laundering legislation and age verification requirements — to collect and retain certain categories of personal data. Processing for these purposes is mandatory and cannot be opted out of.
• Legitimate Interest: nd88 processes certain data (such as technical logs for security monitoring and anonymised analytics for platform improvement) on the basis of our legitimate business interests, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: For non-essential processing activities — such as sending you personalised promotional offers by email or SMS — nd88 relies on your explicit consent. You may withdraw this consent at any time by updating your communication preferences in your account settings or by contacting [email protected]. Withdrawing marketing consent does not affect the lawfulness of prior processing and does not restrict your ability to continue using the nd88 Platform.

4 Data Sharing & Third Parties

nd88 does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. We share your data only where it is necessary to operate the Platform, meet legal obligations, or protect the security and integrity of the nd88 service. The categories of third parties with whom we may share your data are set out below.

4.1 Payment Service Providers

To process your deposits and withdrawals, nd88 shares relevant financial data with payment service providers including bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner Bangladeshi banks. Each payment provider operates its own privacy policy and data security standards. nd88 shares only the minimum data necessary to authenticate and process each transaction.

4.2 Game Studio Providers

nd88's casino, slot, and fishing game content is delivered by third-party game studio providers including Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Ezugi, and Spribe. These providers may receive limited session data (such as a pseudonymous player token, stake amount, and game result) to operate their real-time game engines and maintain game integrity. nd88 selects game providers who maintain industry-standard data security certifications.

4.3 Identity Verification Services

nd88 uses third-party KYC and age verification service providers to validate the identity documents you submit. These providers receive the document images and personal details required to perform the verification check and return a verification result to nd88. KYC providers engaged by nd88 are contractually bound to process your data only for the verification purpose and to delete raw document images after verification is complete.

4.4 Analytics and Security Providers

nd88 uses third-party analytics and cybersecurity tools to monitor platform performance, detect fraud, and prevent DDoS attacks. These tools may process technical data such as IP addresses and session metadata. Where possible, nd88 configures these tools to anonymise or pseudonymise personal data before processing.

4.5 Legal and Regulatory Authorities

nd88 will disclose personal data to law enforcement agencies, regulatory bodies, or courts in Bangladesh or other applicable jurisdictions where we are legally compelled to do so by a valid court order, statutory obligation, or regulatory instruction. nd88 will, where legally permissible, notify the affected Player before complying with such a disclosure request.

5 Cookies & Tracking

nd88 uses cookies and similar tracking technologies on the nd88.im Platform to provide essential functionality, improve your experience, and support platform analytics and security monitoring. This section explains the types of cookies we use and how you can manage them.

5.1 Types of Cookies Used by nd88

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your login session, remember your account preferences, and protect your account from session hijacking. These cookies cannot be disabled without breaking core Platform functionality.
• Analytics Cookies: nd88 uses analytics cookies to collect aggregated, anonymised data about how Players navigate the Platform — which pages are visited most frequently, where Players exit, and how long sessions last. This data helps us improve the Platform's usability and content. These cookies can be disabled without affecting your ability to use nd88.
• Performance Cookies: These cookies help nd88 monitor the technical performance of the Platform, including page load times, error rates, and API response times. They allow our technical team to identify and resolve performance issues quickly.
• Fraud Prevention Cookies: nd88 uses certain cookies as part of our fraud and bot detection systems. These cookies help distinguish between genuine human Players and automated scripts attempting to exploit the Platform. They are considered necessary for security purposes.

5.2 Managing Your Cookie Preferences

You can manage your cookie preferences at any time through your browser settings. Most modern browsers allow you to block all non-essential cookies, clear existing cookies, or receive notifications when cookies are set. Please note that blocking strictly necessary cookies will prevent you from logging in to your nd88 account. If you need guidance on managing cookies in your specific browser, refer to the browser's official help documentation.

nd88 does not use cookies to track your activity on other websites, to build advertising profiles about you, or to share behavioural data with social media advertising networks.

6 Data Retention

nd88 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory retention obligations, and to resolve any disputes that may arise. The following retention periods apply to the main categories of personal data held by nd88:

Data Category	Retention Period	Basis for Retention
Account registration data	Duration of account + 5 years after closure	Legal obligation / dispute resolution
KYC identity documents	Duration of account + 5 years after closure	Anti-money-laundering legal obligation
Financial transaction records	7 years from transaction date	Tax and AML legal obligation
Gaming activity logs	Duration of account + 3 years after closure	Responsible gaming / dispute resolution
Customer support communications	3 years from last contact	Dispute resolution / quality assurance
Technical / server logs	12 months on a rolling basis	Security monitoring / legitimate interest
Marketing consent records	Until consent withdrawn + 2 years	Consent audit trail
Self-exclusion records	Indefinite (permanent record)	Responsible gaming legal obligation

When personal data is no longer required under the applicable retention period, nd88 will securely delete or anonymise it so that it can no longer be linked to you as an individual. Anonymised or aggregated data that cannot identify you may be retained indefinitely for statistical and business analysis purposes.

7 Your Privacy Rights

As an nd88 Player, you hold a number of rights in relation to the personal data we hold about you. nd88 is committed to honouring these rights within reasonable timeframes and without charge in the majority of cases. Your rights are described below.

• Right of Access: You have the right to request a copy of the personal data nd88 holds about you, along with information about how that data is being used. nd88 will respond to access requests within 30 days of receipt.
• Right to Rectification: If any personal data nd88 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account details (such as your email address or phone number) directly within your account settings. For corrections to identity documents or date of birth, contact our support team at [email protected] with the corrected documentation.
• Right to Erasure ("Right to be Forgotten"): You may request that nd88 delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other legal basis for continued processing. Note that nd88 is legally required to retain certain data (such as financial transaction records and KYC documents) for minimum statutory periods even after account closure, which may limit the scope of erasure requests.
• Right to Restriction of Processing: You may request that nd88 restrict the active processing of your personal data in certain circumstances — for example, while a disputed data accuracy issue is being resolved, or while an objection to processing is being assessed.
• Right to Data Portability: Where nd88 processes your personal data by automated means on the basis of your consent or for contract performance, you have the right to receive a structured, commonly used, machine-readable copy of your data that you can transfer to another service provider.
• Right to Object: You have the right to object to nd88 processing your personal data for direct marketing purposes at any time, with immediate effect. You also have the right to object to processing carried out on the basis of legitimate interest, though nd88 may be able to demonstrate compelling legitimate grounds that override your objection in specific cases.
• Right to Withdraw Consent: Where nd88 relies on your consent to process personal data, you may withdraw that consent at any time by updating your account preferences or contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

8 Contact & Data Protection Officer

nd88 takes data privacy seriously and has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection law. If you have any questions, concerns, or complaints about how nd88 handles your personal data — or if you wish to exercise any of your privacy rights — you may contact us using the details below.

8.1 General Privacy Enquiries

For general questions about this Privacy Policy or about how nd88 processes your personal data, contact our customer support team. The email address for privacy-related enquiries is [email protected]. Please include "Privacy" in your subject line so your message is routed to the appropriate team. Responses to general privacy enquiries are provided within 5 business days.

8.2 Formal Privacy Rights Requests

To submit a formal data subject rights request (access, rectification, erasure, portability, restriction, or objection), email [email protected] with the subject line "Privacy Rights Request — [Your Request Type]". Include your registered username and the email address associated with your nd88 account. nd88 will verify your identity before processing the request to protect against unauthorised access to account data.

8.3 Policy Updates

nd88 reviews this Privacy Policy at least annually and whenever there is a material change in how we process personal data. Where changes are significant, nd88 will notify registered Players by email at least 14 days before the updated Policy takes effect. The effective date at the top of this Policy will be updated accordingly. We encourage you to review this Policy periodically. Continued use of the nd88 Platform after the effective date of an updated Policy constitutes acceptance of the revised terms.