d8ads Privacy Policy
Your privacy matters to us. This Privacy Policy explains in clear terms what personal information d8ads collects, how it is used, who it may be shared with, and what rights you hold as a player on our platform. We are committed to handling your data with the highest standards of care and transparency.
How d8ads Protects Your Personal Data
SSL Encryption
All data transmitted between your device and the d8ads platform is protected by industry-standard SSL/TLS encryption. This ensures that your personal details, payment information, and account credentials cannot be intercepted in transit by unauthorised parties.
No Data Selling
d8ads does not sell, rent, or trade your personal information to any third party for their own marketing purposes. Your data is used solely to operate and improve our platform, meet our legal obligations, and deliver the services you have requested from us.
Your Data, Your Rights
As a d8ads player, you hold clear rights over your personal data — including the right to access, correct, restrict, and request deletion of information we hold about you. We will respond to all valid data requests within 30 days of receipt.
Secure Storage
Player data is stored on secured servers with restricted access controls. Only authorised d8ads personnel who need access for legitimate operational purposes — such as customer support, compliance, and fraud prevention — are permitted to access personal records.
Minimal Data Collection
We practise data minimisation — meaning we collect only the information that is genuinely necessary for account operation, identity verification, payment processing, and legal compliance. We do not collect data speculatively or for purposes beyond those described in this policy .
Defined Retention Periods
d8ads does not hold your personal data indefinitely. Retention periods are defined by the purpose for which data was collected and by applicable legal obligations. When data is no longer needed and no legal hold applies, it is securely deleted or anonymised.
Information We Collect
d8ads collects personal information from you in several ways: directly when you register and use our platform, automatically when you browse our website, and occasionally from third-party sources as part of our identity verification and fraud prevention processes. The categories of information we collect are set out below.
Registration & Account Information
When you create a d8ads account, we collect the information you provide in the registration form. This includes your full legal name, email address, date of birth, and chosen account credentials. This information is essential to create and maintain your account and to confirm that you meet our minimum age requirement of 18 years.
Identity Verification (KYC) Documents
As part of our Know Your Customer compliance obligations, we may request documentary proof of your identity and address before processing your first withdrawal or at any point during the account lifecycle. Accepted documents include a valid National Identity Card (NID), passport, or driving licence issued by a Bangladeshi authority, as well as recent utility bills or bank statements as proof of address.
Financial & Payment Information
When you make deposits or request withdrawals, we collect payment-related information necessary to process those transactions. This includes the payment method type (such as bKash, Nagad, Rocket, Upay, Visa, or Mastercard), transaction reference numbers, and account identifiers associated with your payment method. We do not store full card numbers or mobile wallet PINs on our servers — sensitive payment credentials are handled directly by our payment processing partners under their own security standards.
Usage & Behavioural Data
We automatically collect data about how you interact with the d8ads platform. This includes pages visited, games played, bet amounts and outcomes, session duration, device type and operating system, browser type and version, IP address, and approximate geographic location derived from your IP. This data helps us improve the platform experience, personalise content, and detect unusual or potentially fraudulent activity.
Communications Data
If you contact our support team by email or through any support channel, we retain records of that correspondence, including your messages, our responses, and any attachments you provide. This helps us track the resolution of your queries and maintain continuity of support.
Cookies & Tracking Data
We use cookies and similar tracking technologies to collect data about your browsing behaviour on the d8ads platform. Full details of the cookies we use and how to manage them are provided in the Cookies section of this policy.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, NID/passport number | Account creation, age verification, KYC compliance |
| Contact Data | Email address, registered phone number | Account communications, security alerts |
| Financial Data | Payment method type, transaction references | Deposit & withdrawal processing, fraud prevention |
| Technical Data | IP address, device type, browser, OS | Security, fraud detection, platform optimisation |
| Behavioural Data | Games played, bet history, session duration | Responsible gaming monitoring, personalisation |
| Communications Data | Support emails, chat transcripts | Customer support, dispute resolution |
How We Use Your Data
d8ads uses the personal information we collect for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes described here. The primary uses of your personal data are as follows:
Account Management & Service Delivery
We use your registration and contact information to create and maintain your player account, authenticate your identity when you log in, process deposits and withdrawals, and communicate important account-related updates such as transaction confirmations, security alerts, and policy change notifications. These uses are essential to fulfilling our service obligations to you as a registered player.
Identity Verification & Compliance
Your identity and KYC documents are used to verify your age and identity in compliance with our internal policies and applicable legal obligations. This process protects both you and the platform from fraud, impersonation, and underage gambling. We retain KYC records for as long as required by our compliance obligations.
Fraud Prevention & Security
Technical and behavioural data — including IP addresses, device identifiers, and gameplay patterns — are analysed by our security systems to detect and prevent fraudulent activity, account takeovers, multi-accounting, bonus abuse, and money laundering. Where suspicious activity is identified, we may flag the account for manual review by our compliance team.
Responsible Gaming Monitoring
We monitor player behavioural data — including session frequency, deposit patterns, and gameplay duration — to identify indicators of problem gambling behaviour. This data supports our responsible gaming obligations, including the delivery of self-exclusion tools, deposit limits, and time-out features. Where we identify a player who may be at risk, we may make proactive contact to offer support resources.
Platform Improvement & Personalisation
Aggregated and anonymised usage data is used to analyse how players interact with the platform, identify areas for improvement, and optimise the user experience. Where you have opted in to personalised communications, we may use your game preferences and activity history to suggest relevant promotions or game categories. You can opt out of personalised communications at any time through your account settings.
Marketing & Promotions
If you have consented to receive marketing communications, we may send you information about bonuses, seasonal promotions — such as Eid offers, Pohela Boishakh specials, and BPL season promotions — new game launches, and VIP tier updates. We will never send you marketing communications without your prior consent, and you may withdraw that consent at any time by updating your preferences or contacting us at [email protected].
Legal Obligations
We may process your personal data where necessary to comply with a legal obligation, to respond to a lawful request from a regulatory authority or law enforcement body, or to establish, exercise, or defend legal claims arising in connection with your account or transactions.
Legal Basis for Processing
d8ads processes your personal data on one or more of the following legal bases, depending on the specific processing activity in question:
- Contractual necessity: Processing required to fulfil our service agreement with you — including account creation, payment processing, and customer support — is carried out on the basis that it is necessary to perform the contract between you and d8ads.
- Legal obligation: Certain processing activities — particularly identity verification, KYC record-keeping, and responses to regulatory or law enforcement requests — are required by law. d8ads processes data for these purposes to meet its applicable legal obligations.
- Legitimate interests: We process technical and behavioural data for fraud prevention, security monitoring, and platform improvement purposes where doing so is in the legitimate interests of d8ads and our players, and where those interests are not overridden by your privacy rights. We conduct balancing assessments to confirm this where required.
- Consent: Where we rely on your consent to process personal data — for example, for marketing communications or optional personalisation features — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. Consent withdrawal requests should be sent to [email protected].
If you would like more information about the specific legal basis applicable to any particular processing activity carried out by d8ads, please contact us at [email protected]. We are happy to provide further detail upon request.
Data Sharing & Third Parties
d8ads does not sell or rent your personal data to third parties. However, we do share certain personal information with trusted third-party partners and service providers where it is necessary to operate the platform, meet our legal obligations, or deliver the services you use. All third parties with whom we share data are contractually required to process that data only for specified purposes and to maintain appropriate security standards.
Payment Processing Partners
To process your deposits and withdrawals, we share necessary payment-related information with our payment processing partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These partners operate under their own privacy policies and security standards and are independently responsible for their data handling practices in relation to payment transactions.
Identity Verification Providers
For KYC and age verification purposes, we may share identity documents and personal details with accredited third-party identity verification service providers. These providers assist us in confirming the authenticity of the documentation you submit and are bound by strict data confidentiality agreements.
Game Content Providers
Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi deliver their game content to the d8ads platform under licence. These providers may collect limited technical data — such as session identifiers and game outcome records — for game integrity, auditing, and technical support purposes. They do not receive your full personal profile.
Fraud Prevention & Security Services
We use third-party fraud detection and security monitoring tools that process technical data — including IP addresses, device fingerprints, and behavioural signals — to identify and prevent fraudulent activity on the platform. These tools operate under data processing agreements that restrict their use of your data to the fraud prevention purpose only.
Legal & Regulatory Disclosures
d8ads may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, by a valid legal order, or where we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of d8ads, our players, or the public. Where possible and legally permissible, we will notify you of such requests before disclosure.
Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of d8ads's assets, your personal data may be transferred to the relevant successor entity as part of that transaction. We will notify affected players of any such transfer and the privacy implications by email and by a prominent notice on the platform in advance of the transfer taking effect.
No data is ever sold to advertisers or data brokers. Any third party that receives your personal data from d8ads is contractually bound to handle it only for the specific purpose for which it was shared and is prohibited from using it for their own unrelated marketing or commercial purposes.
Data Retention & Deletion
d8ads retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. When personal data is no longer required and no legal retention obligation applies, it is securely deleted or irreversibly anonymised.
Standard Retention Periods
| Data Type | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Legal obligation / contractual |
| KYC identity documents | Duration of account + 5 years post-closure | Legal obligation (AML compliance) |
| Transaction records | 7 years from transaction date | Legal obligation (financial records) |
| Customer support communications | 3 years from last interaction | Legitimate interest / dispute resolution |
| Marketing consent records | Until consent withdrawn + 3 years | Legal obligation (consent records) |
| Technical / log data | Up to 13 months | Legitimate interest (security, fraud) |
Account Closure & Data Deletion Requests
If you close your d8ads account, we will retain certain personal data for the periods specified in the table above in order to meet our legal and regulatory obligations. Data that is not subject to a mandatory retention period will be deleted or anonymised within 90 days of account closure. You may submit a formal data deletion request by contacting us at [email protected]. We will respond within 30 days and provide details of any data that must be retained and the reasons why.
To submit a data access, correction, or deletion request, please email [email protected] with the subject line "Data Request" and include your registered email address and the nature of your request. We handle all data requests within 30 days of receipt.
Your Privacy Rights
As a d8ads player, you hold the following rights in respect of your personal data. These rights may be subject to certain limitations where our legal obligations require us to retain or continue processing specific data, but we will always act in good faith and provide a clear explanation where a right cannot be fully exercised.
- Right of Access: You have the right to request a copy of the personal data that d8ads holds about you, along with information about how it is used, where it comes from, and who it has been shared with. We will provide this information in a clear, accessible format within 30 days of your request.
- Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly through your account dashboard or by contacting our support team.
- Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent on which processing was based, or where the data has been processed unlawfully. This right is subject to our legal retention obligations, which may require us to retain certain data regardless.
- Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while we investigate a dispute about the accuracy of your data or the lawfulness of our processing activities.
- Right to Data Portability: Where processing is based on your consent or on a contract with you, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that we transmit it directly to another data controller where technically feasible.
- Right to Object: You have the right to object to the processing of your personal data where that processing is based on our legitimate interests. Where you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your rights, or where the processing is necessary for the establishment, exercise, or defence of legal claims.
- Right to Withdraw Consent: Where we process your data based on your consent — such as for marketing communications — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing that took place before withdrawal.
To exercise any of the above rights, please contact us at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 5 business days and provide a substantive response within 30 days. If we require additional time to respond — for example, due to the complexity or volume of your request — we will inform you within the initial 30-day window and provide an estimated completion date.
Data Security Measures
d8ads takes the security of your personal data seriously. We have implemented a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, disclosure, alteration, or destruction.
Technical Safeguards
- All data in transit between your device and the d8ads platform is protected by SSL/TLS encryption using current industry-standard cipher suites.
- Sensitive data held in our systems — including identity documents and financial records — is encrypted at rest using strong encryption algorithms.
- Access to personal data stored on our systems is restricted to authorised personnel only, via role-based access controls and multi-factor authentication.
- Our systems undergo regular security assessments and vulnerability testing to identify and address potential weaknesses before they can be exploited.
- We employ intrusion detection and monitoring systems that flag and alert on anomalous access patterns in real time.
Organisational Safeguards
- All d8ads staff who handle personal data receive regular training on data protection obligations and security best practices.
- Our data protection policies and procedures are reviewed and updated periodically to reflect changes in the threat landscape and applicable legal requirements.
- Third-party service providers who process data on our behalf are subject to due diligence assessments and contractual data processing agreements prior to engagement.
Data Breach Response
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, d8ads will notify affected players without undue delay following our discovery of the incident. Our notification will include a description of the nature of the breach, the categories and approximate volume of data affected, the likely consequences of the breach, and the measures we have taken or propose to take to address it and mitigate its effects.
If you suspect that your d8ads account has been accessed without your authorisation, please contact us immediately at [email protected]. We will investigate promptly, secure your account, and guide you through any necessary remedial steps.
Updates to This Policy
d8ads reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we provide. When material changes are made, we will notify registered players by email to the address on file and by publishing a prominent notice on the platform. The updated policy will clearly state the new effective date at the top of the document.
Minor updates — such as typographical corrections or clarifications that do not materially alter the substance of this policy — may be made without individual notification, though the current version of this policy will always be accessible at https://d8ads.app/privacy-policy.
We encourage you to review this Privacy Policy periodically so that you remain informed about how d8ads collects, uses, and protects your personal information. If you continue to use the d8ads platform after the effective date of any revised policy, you are deemed to have acknowledged the updated terms.
Contact Us About Privacy
If you have any questions, concerns, or requests relating to this Privacy Policy or to d8ads's data processing practices, please contact our support team using the details below. We are committed to handling all privacy-related enquiries promptly and transparently.
- Email: [email protected]
- Subject line for privacy matters: "Privacy Enquiry" or "Data Request"
- Response time: Within 5 business days for general enquiries; within 30 days for formal data rights requests
- Operating hours: Seven days a week, Bangladesh Standard Time (BST, UTC+6)
All privacy correspondence should be sent to [email protected]. Please include your registered account email address in all privacy-related communications to help us locate your records and respond accurately.
Ready to Play? Your Data is Safe With Us.
Now that you know how d8ads protects your privacy, explore our full game library — live casino tables, cricket betting markets, and premium slot games are all waiting for you.
d8ads Casino Cricket Betting Slots Read Our FAQ Responsible Gaming18+ Only Please gamble responsibly. Only wager what you can afford to lose.