dhk8 Privacy
Policy

1. Introduction & Scope

This Privacy Policy ("Policy") describes how dhk8 ("the Company", "we", "us", "our"), operating the Platform at dhk8.io, collects, uses, stores, and protects the personal data of individuals ("you", "your", "the Player") who register for or use any dhk8 service.

This Policy applies to all personal data collected through the dhk8 website, mobile-optimised site, any associated applications, and all communications between dhk8 and its players. It covers data collected from players located in Bangladesh and any other jurisdiction from which the Platform is accessed.

By registering an account on dhk8 or by continuing to use the Platform after the effective date of this Policy, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. This Policy must be read in conjunction with the dhk8 Terms & Conditions, which are incorporated by reference.

2. Data Controller

For the purposes of this Policy, dhk8 acts as the data controller in respect of all personal data collected directly from players through the Platform. As data controller, dhk8 determines the purposes and means by which your personal data is processed.

Where dhk8 engages third-party service providers to process data on its behalf (for example, payment processors or KYC verification providers), those parties act as data processors under written agreements that impose data protection obligations equivalent to those described in this Policy. dhk8 remains responsible for ensuring that such processors handle your data appropriately.

All data protection enquiries, access requests, and formal complaints should be directed to the dhk8 support team using the contact details provided in Section 14 of this Policy.

3. Personal Data We Collect

dhk8 collects personal data across several categories, each tied to a specific operational purpose. The table below summarises the categories of personal data collected and the context in which they are gathered:

dhk8 does not knowingly collect sensitive personal data such as biometric identifiers, health information, political opinions, or religious beliefs. Where identity document images are collected for KYC purposes, they are processed solely for age and identity verification and are subject to enhanced security controls.

4. How We Use Your Data

dhk8 uses your personal data for the following defined purposes only:

• Account management: Creating, maintaining, and administering your dhk8 player account, including authentication and account security.
• Transaction processing: Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and banking channels, and maintaining accurate financial records.
• Identity verification: Conducting KYC checks to verify your identity and age in accordance with anti-money laundering best practices and responsible gaming obligations.
• Fraud prevention: Monitoring account activity, transaction patterns, and login behaviour to detect and prevent fraudulent activity, money laundering, and bonus abuse.
• Responsible gaming: Monitoring betting patterns to identify signs of problem gambling behaviour and to enforce player-requested limits, cooling-off periods, and self-exclusion instructions.
• Customer support: Responding to your enquiries, resolving disputes, and maintaining records of support interactions for quality assurance purposes.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the Platform's features, performance, and user experience.
• Legal compliance: Retaining records as required by applicable financial crime legislation, and responding to lawful requests from regulatory authorities.
• Direct communications: Sending you account notifications, transaction confirmations, security alerts, and — where you have opted in — promotional communications about relevant dhk8 offers.

dhk8 does not use personal data for automated individual decision-making that produces legal or similarly significant effects without human oversight. Responsible gaming flags generated automatically by the system are reviewed by a qualified support team member before any restrictive action is taken on a player's account.

5. Legal Basis for Processing

dhk8 processes your personal data on the following lawful bases, each linked to the purpose described in Section 4:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions agreed at registration — including account management, transaction processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws and regulations — including KYC verification, AML record-keeping, and responses to lawful authority requests.
• Legitimate interests: Processing carried out in the legitimate interests of dhk8 or its players — including fraud prevention, security monitoring, platform improvement, and responsible gaming oversight — where such interests are not overridden by your individual rights.
• Consent: Processing of your data for optional marketing communications, where you have given explicit consent at registration or through your account preferences. You may withdraw this consent at any time without affecting the lawfulness of processing prior to withdrawal.

6. Cookies & Tracking Technologies

The dhk8 Platform uses cookies and similar tracking technologies to support its operation. Cookies are small data files stored on your device that help us recognise returning visitors, maintain session state, and understand how the Platform is used.

6.1 Essential Cookies

Essential cookies are required for the Platform to function correctly. They enable features such as maintaining your login session, remembering your currency preference (BDT), and preserving your game state during a session. Essential cookies cannot be disabled without significantly impairing Platform functionality.

6.2 Analytical Cookies

Analytical cookies collect aggregated, anonymised data about how players navigate the Platform — including pages visited, time spent, and features used. This data is used solely to improve Platform performance and user experience. No individual player can be identified from analytical cookie data in isolation.

6.3 Functional Cookies

Functional cookies remember preferences you have set — such as your preferred game category or notification settings — so that your experience is consistent across sessions. These cookies are not used for advertising purposes.

dhk8 does not use third-party advertising cookies or cross-site tracking cookies. You may manage your cookie preferences through your browser settings at any time, though disabling essential cookies may affect your ability to use certain Platform features.

7. Data Sharing & Third Parties

dhk8 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, and banking partners receive the minimum financial data required to process your deposit or withdrawal transaction. These providers are contractually bound to handle your data securely and not to use it for any other purpose.
• KYC and identity verification providers: Identity documents and verification data are shared with contracted third-party KYC providers solely for the purpose of age and identity verification. These providers are bound by equivalent data protection obligations.
• IT infrastructure and hosting providers: dhk8's Platform infrastructure is hosted on secure servers. Hosting providers may have technical access to stored data as part of infrastructure management but are contractually prohibited from accessing or processing player data for any independent purpose.
• Legal and regulatory authorities: dhk8 will disclose personal data to law enforcement, regulatory authorities, or courts when required to do so by applicable law or valid legal process. dhk8 will, where legally permissible, notify affected players of such disclosures.
• Professional advisors: Lawyers, accountants, and auditors may access personal data on a strictly confidential and need-to-know basis for the purpose of providing professional services to dhk8.

All third-party recipients of dhk8 player data are vetted for data security standards and are bound by written data processing agreements before any data is shared.

8. International Data Transfers

dhk8's primary data processing occurs on servers located in the Asia-Pacific region. In some cases, the third-party service providers referenced in Section 7 may process data in jurisdictions outside Bangladesh. Where such transfers occur, dhk8 ensures that appropriate safeguards are in place — including contractual clauses that impose data protection standards consistent with this Policy on the receiving party. By using the dhk8 Platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions other than Bangladesh for the purposes described in this Policy.

9. Data Retention

dhk8 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following indicative retention periods apply:

• Active account data: Retained for the duration of the account relationship plus a minimum of five years following permanent account closure, in accordance with financial record-keeping requirements.
• Transaction records: Retained for a minimum of five years from the date of the transaction, in accordance with AML obligations.
• KYC verification documents: Retained for a minimum of five years following account closure. Documents may be retained longer if required by a specific regulatory request or ongoing investigation.
• Customer support records: Retained for two years following the resolution of the relevant support interaction, unless the matter is subject to ongoing dispute or legal proceedings.
• Analytical and behavioural data: Anonymised and aggregated after twelve months. Identifiable behavioural data is not retained beyond this period unless required for an active responsible gaming or fraud investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with dhk8's internal data deletion procedures.

10. Your Data Rights

As a dhk8 player, you hold the following rights in relation to your personal data. Requests may be submitted to the dhk8 support team and will be acknowledged within 48 hours and resolved within 30 days of receipt:

11. Data Security

dhk8 implements a layered security architecture to protect player data against unauthorised access, disclosure, alteration, and destruction. Key security measures in place include:

• Transport security: All data transmitted between your device and the dhk8 Platform is encrypted using TLS 1.2 or higher (256-bit SSL). Certificate validity is monitored continuously.
• Storage encryption: Personal data stored in dhk8 databases is encrypted at rest using AES-256 encryption. Database access is restricted to authorised systems and personnel only.
• Access controls: Role-based access controls are enforced across all internal systems. No employee has access to player personal data beyond the scope of their defined role. All access to personal data is logged and subject to audit.
• Two-factor authentication: Player accounts are protected by OTP-based two-factor authentication. Players are strongly encouraged to keep their OTP device secure and to notify support immediately if they suspect unauthorised access.
• Penetration testing: The dhk8 Platform undergoes regular security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: dhk8 maintains an internal data breach response procedure. In the event of a breach affecting player personal data, affected players will be notified promptly and appropriate remediation steps taken.

While dhk8 takes all reasonable precautions to protect your personal data, no online system can guarantee absolute security. Players are also responsible for maintaining the confidentiality of their own login credentials and for using secure networks when accessing the Platform.

12. Children & Minors

The dhk8 Platform is strictly prohibited for individuals under the age of 21. dhk8 does not knowingly collect personal data from any person under 21 years of age. If dhk8 becomes aware that personal data has been collected from a minor — including through the use of false registration information — the account will be immediately suspended, all associated data will be deleted, and any deposited funds will be returned to the originating payment source after identity verification.

Parents and guardians who believe a minor may have registered on the dhk8 Platform should contact the support team immediately via live chat or email. dhk8 takes all such reports seriously and will investigate and respond within 24 hours.

13. Changes to This Policy

dhk8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in data practices, legal obligations, or Platform functionality. When material changes are made, registered players will be notified via on-platform notification or by email to the address associated with their account, a minimum of 7 days before the updated Policy takes effect.

The effective date at the top of this Policy will be updated to reflect the date on which the most recent version entered into force. Continued use of the Platform after the effective date of an amended Policy constitutes acceptance of the revised terms. Players who do not agree with a material change are entitled to close their account and withdraw their real-money balance in accordance with the withdrawal procedures set out in the Terms & Conditions.

Archived versions of previous Privacy Policy documents are available upon request by contacting the dhk8 support team.

14. Contact & Data Requests

All privacy-related enquiries, data subject access requests, correction requests, deletion requests, and formal complaints should be submitted through the following channels. dhk8 will acknowledge all requests within 48 hours and provide a substantive response within 30 days:

• Live Chat: Available 24/7 directly on the dhk8 Platform — the fastest channel for urgent privacy concerns.
• Email: [email protected] — please include "Privacy Request" in the subject line and provide your registered account username to expedite processing.
• WhatsApp: +880 1700 000 000 — available during standard support hours, Bangladesh Standard Time (BST, UTC+6).

For formal data subject access requests, dhk8 may ask you to verify your identity before releasing personal data to ensure we are responding to the legitimate account holder. Identity verification for access requests follows the same process as standard KYC verification.

If you are dissatisfied with dhk8's response to a privacy complaint, you have the right to escalate your complaint through appropriate channels available in your jurisdiction. dhk8 will provide reasonable assistance to players seeking to understand their options for further recourse.