ad88 Privacy Policy — How We Handle Your Personal Data

1 Introduction and Scope

This Privacy Policy ("Policy") describes how ad88 ("ad88", "we", "us", "our"), operator of the online gaming platform accessible at ad88.im, collects, uses, stores, shares, and protects personal data relating to individuals who visit our website, register a player account, or otherwise interact with our services ("you", "Player", "User").

This Policy applies to all personal data processed through the ad88 platform, including data collected via the website, mobile-optimised interfaces, customer support channels, and payment processing systems. It covers players based in Bangladesh and other jurisdictions where ad88 accepts registrations.

By registering an account with ad88 or by continuing to use our platform after this Policy has been made available to you, you acknowledge that you have read and understood its contents. This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which contain additional provisions relevant to your use of the platform.

2 Data Controller Information

For the purposes of this Privacy Policy, ad88 acts as the data controller in respect of the personal data you provide when using the platform. As data controller, ad88 determines the purposes and means of processing your personal data in accordance with its obligations under applicable international data protection frameworks.

All data protection enquiries, subject access requests, or complaints relating to the handling of your personal data should be directed in writing to:

Data Protection Officer, ad88
Email: [email protected]
Available: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

3 Personal Data We Collect

ad88 collects the following categories of personal data in the course of providing its services:

3.1 Identity and Contact Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used for mandatory age verification — players must be 21 or older).
• Residential address, including city, district, and postcode (e.g., Dhaka, Chittagong, Sylhet).
• Email address and mobile phone number.
• Username chosen at registration.

3.2 Verification Documents

• Copies of government-issued photo identification (National Identity Card, passport, or driving licence).
• Proof of residential address (utility bill, bank statement, or official government correspondence dated within three months).
• Proof of payment method ownership (e.g., screenshot or confirmation associated with bKash, Nagad, Rocket, or other registered payment accounts).

3.3 Financial and Transaction Data

• Deposit and withdrawal amounts (denominated in Bangladeshi Taka, ৳).
• Payment method identifiers (mobile wallet numbers, partial card numbers — full card numbers are never stored by ad88).
• Transaction history including dates, times, and amounts.
• Bonus claims, wagering activity, and account balance history.

3.4 Technical and Usage Data

• IP address and approximate geographic location derived from IP.
• Device type, operating system, and browser version.
• Pages visited, game sessions accessed, session duration, and in-platform navigation patterns.
• Login timestamps and logout events.
• Error logs and platform performance data associated with your session.

3.5 Communications Data

• Content of support requests submitted by email or live chat.
• Survey responses and feedback submitted voluntarily.
• Promotional opt-in and opt-out records.

4 How We Collect Your Data

ad88 collects personal data through the following channels:

• Directly from you — when you complete the registration form, submit verification documents, make a deposit or withdrawal, contact support, or participate in a promotion.
• Automatically — through cookies, session tokens, and server logs when you access and navigate the ad88 platform. See Section 10 for full details of our cookie practices.
• From payment service providers — bKash, Nagad, Rocket, Upay, and banking partners may share transaction confirmation data with ad88 to facilitate the processing of deposits and withdrawals.
• From identity verification services — ad88 may use third-party identity and age verification providers to validate the information you submit during the KYC (Know Your Customer) process.
• From fraud prevention and AML screening tools — ad88 uses automated screening tools to fulfil its anti-money laundering and counter-terrorism financing obligations, which may involve cross-referencing your details against watchlists and sanctions databases.

5 Legal Basis for Processing

ad88 processes your personal data under one or more of the following legal bases, depending on the nature of the processing activity:

Where ad88 relies on consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 How We Use Your Data

ad88 uses the personal data it collects for the following purposes:

• To create, maintain, and administer your player account.
• To verify your age and identity in compliance with our Know Your Customer obligations.
• To process deposits and withdrawals through your chosen payment method (bKash, Nagad, Rocket, bank transfer, or card).
• To detect, investigate, and prevent fraud, cheating, multi-accounting, money laundering, and other prohibited conduct.
• To monitor gaming behaviour for responsible gambling indicators and to enforce self-exclusion or account restriction measures where required.
• To provide customer support and to respond to your enquiries in a timely and accurate manner.
• To send you transactional communications such as deposit confirmations, withdrawal notifications, and security alerts.
• To send you promotional communications about bonuses, new games, and platform updates, where you have opted in to receive such communications.
• To analyse aggregate, anonymised usage data for the purpose of improving the platform experience, identifying technical issues, and optimising game offerings.
• To comply with applicable legal and regulatory requirements, including the reporting of suspicious transactions to relevant authorities.

7 Sharing Your Data with Third Parties

ad88 does not sell, rent, or trade your personal data to any third party. We may, however, share your data with the following categories of trusted third parties where it is necessary to deliver our services or to comply with legal obligations:

• Payment processors and mobile wallet operators — bKash, Nagad, Rocket, Upay, Visa, Mastercard, and banking partners such as Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank, solely for the purpose of facilitating financial transactions.
• Identity and age verification providers — third-party KYC service providers who assist in verifying the identity and age of players as required by our platform's compliance obligations.
• Game software providers — licensed studios such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe may receive anonymised session data to enable game delivery and to audit fairness outcomes. No personally identifiable information is shared with game providers beyond what is technically necessary.
• Fraud prevention and AML screening platforms — third-party services that maintain sanctions lists, politically exposed persons (PEP) databases, and fraud risk indicators against which player details may be cross-referenced.
• IT infrastructure and cloud service providers — hosting providers and security services that support the technical operation of the ad88 platform, bound by strict data processing agreements.
• Law enforcement and regulatory authorities — where ad88 is required by law, court order, or regulatory instruction to disclose personal data, it will do so while taking reasonable steps to notify the affected player where legally permitted.

All third parties with whom ad88 shares personal data are required to handle that data in a manner consistent with this Privacy Policy and applicable data protection law. ad88 does not permit third parties to use your data for their own independent marketing purposes.

8 International Data Transfers

As an international online gaming platform, ad88 may process and store your personal data on servers located outside Bangladesh. When personal data is transferred internationally, ad88 ensures that appropriate safeguards are in place to protect that data to a standard that is at least equivalent to the protections that would apply within your home jurisdiction.

Safeguards used for international transfers may include standard contractual clauses, data processing agreements with certified providers, or reliance on jurisdictions that maintain adequate data protection standards recognised at international level.

9 Data Retention

ad88 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. The following general retention periods apply:

• Account data and KYC documents: Retained for a minimum of five years from the date of account closure, in accordance with standard anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• Support communications: Retained for a period of three years from the date of each communication, unless a longer period is required for ongoing dispute resolution.
• Technical and usage logs: Retained for up to 12 months in active systems, after which they are archived or deleted.
• Marketing preferences: Retained until you withdraw consent or close your account, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

10 Cookies and Tracking Technologies

ad88 uses cookies and similar tracking technologies (such as session tokens and local storage) to operate core platform functions and to gather aggregate analytical insights. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for you to navigate the platform and access secured areas of your account. These cannot be disabled without preventing core features from functioning.
• Functional Cookies: Remember your preferences such as language settings and session state so you do not need to re-enter information repeatedly during a single visit.
• Analytical Cookies: Collect anonymised data on how players navigate the platform, which pages are visited most frequently, and where technical errors occur. This data is used to improve platform performance and user experience.
• Security Cookies: Used to authenticate sessions, detect suspicious login attempts, and prevent cross-site request forgery (CSRF) attacks.

ad88 does not use advertising cookies, cross-site tracking cookies, or cookies placed by third-party advertising networks. You may manage your cookie preferences through your browser settings, though disabling strictly necessary cookies may impair your ability to use the platform.

11 Security Measures

ad88 takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption of sensitive data fields (including identity document details and payment identifiers) in our database systems.
• Role-based access controls that restrict internal access to personal data to only those staff members who require it to perform their job functions.
• Regular third-party security audits and penetration testing of the ad88 platform.
• Continuous monitoring of our systems for unusual access patterns and potential intrusions.
• Staff training on data protection obligations and information security best practices.

12 Your Data Protection Rights

Subject to applicable law, you have the following rights in relation to the personal data that ad88 holds about you:

• Right of Access: You may request a copy of the personal data ad88 holds about you, together with information about how it is being used.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances, for example while a dispute about its accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request that we provide your personal data to you in a structured, machine-readable format.
• Right to Object: You may object to the processing of your personal data where we are relying on legitimate interests as the legal basis, unless we can demonstrate compelling grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

To exercise any of these rights, please submit a written request to [email protected]. We will acknowledge your request within five business days and provide a substantive response within 30 days. In some cases, we may need to verify your identity before processing a request.

13 Children and Minors

The ad88 platform is strictly intended for adults aged 21 years or older. ad88 does not knowingly collect personal data from individuals under the age of 21. If we become aware that an account has been registered by or on behalf of a person under 21, that account will be immediately suspended, all associated funds will be withheld pending investigation, and the data will be securely deleted as soon as the investigation is concluded.

If you believe that a minor has registered an account on the ad88 platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

14 Changes to This Policy

ad88 reserves the right to update or revise this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data processing or a new sharing arrangement with third parties — we will notify registered players by email and by displaying a prominent notice on the platform no fewer than seven days before the changes take effect.

The "Last Updated" date at the top of this document will be revised whenever changes are made. We encourage you to review this Policy periodically to stay informed about how ad88 handles your personal data. Continued use of the platform following the effective date of any revised Policy constitutes your acceptance of the changes.

15 Contact and Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or about the way ad88 handles your personal data, please contact our Data Protection Officer using the details below:

Email: [email protected]
Available: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

We take all privacy complaints seriously. Upon receipt of a complaint, we will acknowledge it within five business days and aim to resolve it fully within 30 days. If you are not satisfied with the outcome of your complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction or to pursue resolution through the dispute process set out in our Terms & Conditions.