dhk8 Privacy Policy

When you register for an account, make a deposit, contact support, or otherwise interact with the dhk8 Platform, you may provide us with the following categories of personal information:

• Identity information — your full name, date of birth, and a copy of a government-issued identity document provided during KYC verification.
• Contact information — your mobile phone number and, where provided, your email address.
• Financial information — details of the payment method used for deposits and withdrawals, such as your bKash or Nagad mobile account number, or the last four digits of a Visa or Mastercard used on the Platform. We do not store full card numbers.
• Support communications — the content of messages you send to our support team, including any attachments or documents you provide to assist with your query or verification request.

When you access the Platform, our systems automatically collect certain technical and behavioural data. This information is used to maintain Platform security, improve performance, and detect suspicious or fraudulent activity. Automatically collected data includes:

• Device and browser information — device type, operating system, browser type and version, screen resolution, and preferred language settings.
• Usage data — pages visited, time spent on each page, games launched, bets placed, features used, and navigation paths within the Platform.
• Network and location data — your IP address, approximate geographic location derived from your IP address, and network connection type. We do not collect precise GPS location data.

dhk8 uses the personal information we collect for the following specific purposes. We do not use your data for any purpose that is not listed below without first obtaining your explicit consent:

• Account management — to create and maintain your registered account, verify your identity, and process deposits and withdrawals through your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, or Mastercard).
• Platform operation — to provide access to games, betting services, bonuses, and all other features of the dhk8 Platform, and to personalise your experience based on your usage history and preferences.
• Regulatory compliance — to fulfil our KYC obligations, detect and prevent fraud, money laundering, and underage gambling, and to comply with any applicable laws or requests from regulatory or law enforcement authorities.
• Customer support — to respond to your questions, resolve disputes, process complaints, and provide assistance with account issues, technical problems, and payment queries.
• Responsible gaming — to monitor usage patterns for signs of problem gambling, to apply deposit limits and self-exclusion measures requested by players, and to fulfil our obligations under applicable responsible gaming standards.
• Platform improvement — to analyse aggregated and anonymised usage data in order to identify technical issues, optimise Platform performance, and develop new features. This analysis does not identify you personally.

dhk8 processes personal data only where a lawful basis exists for doing so. The legal bases on which we rely are:

• Contractual necessity — processing that is required to perform the contract we have with you, including creating your account, processing transactions, and providing the games and services you have requested.
• Legal obligation — processing that is necessary for us to comply with applicable laws, including KYC verification, anti-money-laundering checks, and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate interests — processing carried out for our legitimate business interests, such as fraud detection, Platform security, improving our services, and ensuring the integrity of the gaming environment, where these interests are not overridden by your rights.
• Consent — where you have given us your explicit consent to process data for a specific purpose, such as receiving promotional communications. You may withdraw consent at any time by contacting our support team, without affecting the lawfulness of processing carried out before withdrawal.

dhk8 does not sell, rent, or trade your personal information to any third party. We may share your data only in the following limited circumstances:

• Service providers — we engage trusted third-party companies to support Platform operations, such as payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard networks), identity verification services, game hosting providers, and customer support tools. These providers are contractually bound to process your data only as directed by dhk8 and may not use it for their own purposes.
• Regulatory and law enforcement authorities — where we are required by applicable law, court order, or lawful government request to disclose personal data. dhk8 will, where legally permitted, notify you of any such request before complying.
• Business transfers — in the event that dhk8 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer in advance.
• Fraud prevention — we may share data with other gaming operators, fraud prevention agencies, or financial intelligence units where we have a legitimate interest in preventing or investigating fraud, money laundering, or other illegal activity.

All third-party service providers who receive personal data from dhk8 are required to maintain appropriate security measures and may only process that data for the purposes for which it was shared. dhk8 does not authorise any service provider to sell your personal data.

dhk8 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device by your browser. We use the following categories of cookies:

• Essential cookies — required for the Platform to function correctly. These include session authentication cookies that keep you logged in, security cookies that protect against cross-site request forgery, and cookies that remember your language preference. These cannot be disabled without breaking core Platform functionality.
• Analytics cookies — used to collect anonymised data about how users navigate the Platform, which pages are most visited, how long sessions last, and where users encounter errors. This data is used in aggregate form to improve Platform design and performance.
• Functional cookies — used to remember your preferences and personalise your experience, such as storing your preferred deposit method or remembering that you have dismissed a notification.

You may control cookie settings through your browser preferences. Please note that disabling certain cookies may affect the functionality of the Platform. We do not use third-party advertising cookies or tracking pixels that serve targeted advertisements across other websites.

dhk8 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include SSL (Secure Sockets Layer) encryption for all data transmitted between your device and our servers, access controls that restrict internal access to personal data on a need-to-know basis, regular security audits and vulnerability assessments of our Platform infrastructure, and secure, encrypted storage for sensitive data such as identity documents submitted during KYC verification.

Despite our best efforts, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. If you have reason to believe that your account has been compromised or that your personal data has been accessed without authorisation, please contact our support team immediately at [email protected] (plain text — not a clickable link). dhk8 will investigate all credible reports of data security incidents promptly and will take appropriate remedial action where a breach is confirmed.

dhk8 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. In general, account data is retained for the duration of your account's active status and for a period of five years following account closure, in order to satisfy our KYC record-keeping obligations and any applicable limitation periods for legal claims. Transaction records are retained for a minimum of five years in accordance with anti-money-laundering requirements. Support communications are retained for up to two years following the resolution of the relevant query.

Where personal data is no longer required for any lawful purpose, dhk8 will securely delete or anonymise it. Anonymised data — data from which all identifying information has been irreversibly removed — may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data under applicable privacy standards.

Subject to applicable law, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our support team at [email protected] (plain text — not a clickable link). We will respond to all verified requests within a reasonable timeframe, typically within 30 days:

• Right of access — you may request a copy of the personal data dhk8 holds about you, along with information about how that data is used and with whom it has been shared.
• Right to rectification — if any personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it. We will act on verified correction requests promptly.
• Right to erasure — in certain circumstances you may request that we delete the personal data we hold about you. This right is not absolute and may be subject to overriding legal obligations, such as our KYC record-keeping requirements.
• Right to restriction — you may request that we restrict the processing of your personal data in certain circumstances, for example while a correction request is being resolved.
• Right to object — where we process your data on the basis of legitimate interests, you have the right to object to that processing. We will assess your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

To exercise any of your rights, please contact us in writing at [email protected] (plain text address — not a clickable link). We may ask you to verify your identity before acting on your request in order to protect your data from unauthorised access by a third party.

The dhk8 Platform is strictly intended for users aged 21 and above. We do not knowingly collect personal data from any person under the age of 21. If we become aware that we have inadvertently collected personal data from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and you believe that your child has registered on dhk8 or provided us with personal data, please contact our support team immediately at [email protected] (plain text — not a clickable link) so that we can take appropriate action.

The dhk8 Platform incorporates games and content supplied by third-party game studios and providers, such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi. When you interact with games hosted by these providers, some data may be transmitted directly to those providers' systems in order to operate the game correctly. These providers operate under their own privacy policies, which we encourage you to review. dhk8 is not responsible for the privacy practices of third-party game providers. Additionally, the Platform may contain links to external websites or resources. dhk8 has no control over the content or privacy practices of any external website, and this Policy does not apply to any website outside of dhk8's own Platform.

dhk8 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or Platform features. When we make changes, we will update the effective date at the top of this page. Where a change is material — for example, a significant change to the categories of data we collect or the purposes for which we use it — we will provide advance notice to registered users via the Platform or by email. Your continued use of the Platform following the publication of a revised Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should stop using the Platform and may request deletion of your personal data, subject to our legal retention obligations.