dig88 Privacy Policy

Our Privacy Commitments at a Glance

dig88 is committed to handling your personal data responsibly and transparently. The cards below summarise our core privacy commitments. Full details are set out in the numbered sections that follow.

1Introduction

This Privacy Policy ("Policy") describes how dig88 ("we", "us", or "our") collects, uses, stores, shares, and protects personal data about users ("you" or "your") who register for or use the dig88 website and mobile platform (collectively, the "Platform"). This Policy applies to all services provided under the dig88 brand, including but not limited to sports betting, live casino, slots, crash games, virtual sports, and all associated account management and payment features.

By accessing or using the Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform. This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are published on this website.

2Personal Data We Collect

We collect personal data in three primary ways: information you provide directly, information generated by your use of the Platform, and information received from trusted third parties. The categories of data we collect are set out below.

Information You Provide Directly

• Registration data: full name, date of birth, gender, mobile phone number, email address, and residential address as provided when you open a dig88 account.
• Identity verification documents: government-issued photo ID (national ID card or passport), proof of address (utility bill, bank statement), and other KYC documentation requested during account verification.
• Financial data: bKash account number, Nagad account number, Rocket number, bank account details, and transaction history associated with deposits and withdrawals on the Platform.
• Communications: messages, emails, live chat transcripts, and other correspondence you send to dig88 customer support, including any complaints or feedback.
• Responsible gaming self-declarations: information you provide when requesting deposit limits, session time reminders, cooling-off periods, or self-exclusion, including reasons stated for self-exclusion requests.

Information Generated by Your Use of the Platform

• Betting and gaming activity: game histories, bet amounts, win and loss records, sport and game category preferences, session durations, and account balance history.
• Device and technical data: IP address, device type, operating system, browser type and version, mobile network operator, and screen resolution collected automatically when you access the Platform.
• Log data: server-side logs recording login timestamps, page views, navigation paths, errors encountered, and actions taken within the Platform.
• Cookie and analytics data: data collected via first-party cookies and analytics tools to understand how users navigate the Platform, measure feature adoption, and identify technical issues. See Section 6 for full cookie details.

Information Received from Third Parties

• Payment processor confirmations: transaction verification data received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other financial institutions confirming successful deposits or withdrawals.
• Identity verification providers: responses from third-party identity verification services used to validate documents submitted during KYC checks, including automated document authenticity scores.
• Fraud and compliance databases: information received from anti-fraud and anti-money-laundering screening services used to protect the integrity of the Platform and comply with applicable regulations.

3How We Use Your Personal Data

dig88 uses the personal data we collect for specific, legitimate purposes only. We do not process your data in any way that is incompatible with the purposes for which it was originally collected. Our primary data uses are set out below.

4Legal Basis for Processing

dig88 processes your personal data only where a valid legal basis exists. The legal bases we rely on are as follows:

• Contract performance: processing that is necessary to provide you with the services you have requested, including account registration, game access, deposits, and withdrawals. Without this processing, we cannot deliver our services.
• Legal obligation: processing required to comply with applicable law, including age verification, KYC, anti-money-laundering screening, record-keeping obligations, and responding to lawful requests from competent authorities.
• Legitimate interests: processing for security monitoring, fraud prevention, platform improvement, and analytics, where our legitimate business interests are balanced against your privacy rights and are not overridden by those rights.
• Consent: where we rely on your consent for a specific processing activity (for example, sending you optional promotional communications), you may withdraw that consent at any time by contacting customer support or updating your account notification preferences.

5Sharing Your Personal Data

dig88 does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below and only to the minimum extent necessary for the stated purpose.

• Game providers and software suppliers: we share limited technical and account data with licensed third-party game providers (such as Pragmatic Play, Evolution Gaming, and Spribe) solely to enable you to access and play their games on the dig88 Platform.
• Payment processors: we share the financial data necessary to process your deposit and withdrawal requests with bKash, Nagad, Rocket, Upay, and partner banks. These providers are contractually required to handle your data securely and use it only for payment processing.
• Identity verification and compliance providers: we share identity document images and personal details with KYC verification partners and anti-money-laundering screening services as required to meet our legal and responsible gaming obligations.
• Legal and regulatory authorities: we may disclose your personal data to law enforcement agencies, courts, or regulatory bodies where we are legally compelled to do so, where disclosure is necessary to protect the safety of a person, or where disclosure is required to defend dig88's legal rights.
• Business successors: in the event that dig88 undergoes a merger, acquisition, or sale of all or part of its business assets, your personal data may be transferred to the successor entity as part of that transaction, subject to the same privacy protections described in this Policy.

6Cookies and Tracking Technologies

dig88 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file stored on your device when you visit a website. We use the following categories of cookies:

• Strictly necessary cookies: these are essential to the operation of the Platform and cannot be disabled. They are used to maintain your login session, remember your language preference, and ensure secure navigation between pages.
• Functional cookies: these remember your preferences (such as display settings and notification preferences) to provide a more personalised experience on return visits.
• Analytics cookies: these collect anonymised information about how visitors use the Platform — which pages they visit most, how long they stay, and what errors they encounter — so we can improve performance and user experience.
• Security cookies: these help us detect and prevent fraudulent login attempts, bot activity, and other malicious behaviour targeting your account or the Platform.

You may configure your browser to refuse cookies or to alert you when cookies are being sent. Please note that disabling strictly necessary cookies will impair the functionality of the Platform and may prevent you from logging in or completing transactions. We do not use third-party advertising cookies or cross-site tracking cookies.

7Data Retention

dig88 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal and regulatory obligations, and to resolve any disputes or enforce our agreements. Our retention periods are as follows:

• Active account data: retained for the full duration of your account's active lifetime plus a period of 5 years following account closure to meet anti-money-laundering record-keeping requirements.
• KYC and identity verification records: retained for a minimum of 5 years following account closure, in accordance with applicable anti-money-laundering and identity verification record-keeping obligations.
• Customer support and complaints records: retained for 3 years from the date the support case or complaint was closed, to enable us to refer to prior interactions in the event of a recurring issue or dispute.

8Data Security

dig88 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect your data against unauthorised access, accidental loss, destruction, or alteration. Our security measures include:

• SSL/TLS encryption on all data transmitted between your device and the Platform, ensuring that your login credentials, financial data, and personal information cannot be intercepted in transit.
• Encrypted storage of sensitive data including passwords (stored as salted cryptographic hashes, never in plain text) and financial account details.
• Access controls restricting your personal data to authorised dig88 employees and contractors who require access to perform their designated job functions, with all access activity logged and auditable.
• Regular security assessments and vulnerability testing of Platform infrastructure to identify and remediate potential weaknesses before they can be exploited.

Despite these measures, no system connected to the internet can be guaranteed to be completely secure. If you suspect that your dig88 account has been compromised, please contact customer support immediately via live chat so we can take swift protective action on your behalf.

9Your Data Rights

dig88 respects your rights in relation to your personal data. You may exercise any of the following rights at any time by contacting our customer support team via live chat or by emailing [email protected]:

• Right of access: you may request a copy of all personal data that dig88 holds about you, together with information about how it is used and with whom it has been shared.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it. We will act on valid rectification requests without undue delay.
• Right to erasure: in certain circumstances (for example, where your data is no longer necessary for the purpose for which it was collected and no legal retention obligation overrides), you may request that we delete your personal data.
• Right to restrict processing: you may request that we limit the way we use your personal data in certain circumstances, for example while a rectification request is under review.
• Right to object: where we process your data on the basis of legitimate interests, you may object to that processing. We will assess your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to data portability: where processing is based on your consent or a contract with you, and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.

We will respond to all valid data rights requests within 30 days of receipt. In complex cases we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. We will not charge a fee for handling data rights requests except where requests are manifestly unfounded or excessive.

10Payments and Financial Data

When you make a deposit or request a withdrawal on dig88 using bKash, Nagad, Rocket, Upay, or a partner bank, the relevant financial data is transmitted directly and securely to the payment processor. dig88 does not store full payment account numbers (such as full bKash wallet numbers) on its own servers beyond what is strictly necessary to reference and reconcile your transactions.

All financial transactions on the Platform are recorded in our transaction logs for compliance, audit, and dispute resolution purposes. These records are retained in accordance with the data retention periods set out in Section 7 of this Policy. dig88 does not process card payments directly and is not a payment institution; all payment processing is handled by our licensed payment partners.

11Responsible Gaming and Data

dig88 uses certain personal data specifically to fulfil its responsible gaming obligations. This includes monitoring your gaming activity for signs of potentially harmful gambling patterns, applying deposit limits and cooling-off periods you have requested, enforcing self-exclusion decisions, and preventing self-excluded players from opening new accounts. This processing is carried out in your interests and in fulfilment of our duty of care as an online gaming operator. 21+ only.

If you have requested self-exclusion, dig88 will retain a record of your self-exclusion on a restricted-access list for a minimum of 6 months following the exclusion request, and will use that record to prevent re-registration. This retention serves your interests and is not subject to erasure requests during the active self-exclusion period.

12Third-Party Links

The dig88 Platform may contain references to game providers and payment partners whose services are integrated into the Platform. While we take care to work only with reputable partners, dig88 is not responsible for the privacy practices of any third-party service providers. Each provider's own privacy policy governs how they handle data collected directly by their systems. We encourage you to review the privacy policies of any third-party providers whose services you use in connection with the dig88 Platform.

13Children's Privacy

dig88 is strictly an adults-only platform for players aged 21 and above. We do not knowingly collect personal data from any person under the age of 21. If we become aware that a person under the age of 21 has registered an account or provided personal data to dig88, we will immediately close the account, delete all associated personal data, and void any transactions made. If you believe that a minor has used or attempted to use the dig88 Platform, please notify us immediately via live chat.

14Changes to This Privacy Policy

dig88 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable law, or Platform features. When we make material changes to this Policy, we will post a notice on the Platform and, where required, notify registered users by their registered mobile number or email address. The date at the top of this Policy indicates when it was last revised. We encourage you to review this Policy periodically to stay informed about how we protect your data.

15Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a data-related concern, please contact the dig88 support team. Our team is available 24 hours a day, 7 days a week via live chat on the Platform.