doni88 Privacy Policy

1. Introduction and Scope

1.1 This Privacy Policy ("Policy") describes how doni88 ("we", "us", "our") collects, uses, stores, discloses, and protects the personal data of individuals ("you", "Member") who access or use the doni88 online gaming platform at doni88.asia, including all associated pages, features, and services.

1.2 This Policy applies to all personal data collected through: (a) account registration and profile management; (b) deposits, withdrawals, and payment processing via bKash, Nagad, Rocket, Upay, and linked bank accounts; (c) gameplay activity across sports betting, live casino, slots, Rummy, Mahjong Ways, and crash games; (d) communications with our support team; and (e) your use of the doni88 website and any cookies or tracking technologies we deploy.

1.3 This Policy should be read alongside our Terms & Conditions and Responsible Gaming page, which together form the complete set of agreements governing your use of doni88.

2. Data Controller

2.1 doni88 is the data controller for all personal data collected through the platform. As data controller, doni88 determines the purposes and means by which your personal data is processed.

2.2 If you have any questions, concerns, or requests regarding this Policy or the way your personal data is handled, you may contact us at any time:

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6)

2.3 We aim to respond to all data-related enquiries within 5 business days and to resolve them fully within 30 calendar days of receipt.

3. Personal Data We Collect

3.1 We collect the following categories of personal data when you register and use doni88:

• Identity Data: Full legal name, date of birth, gender, and a government-issued identification number (National ID or passport number) collected during account verification.
• Contact Data: Bangladesh mobile phone number, email address (if provided), and residential address (city and division level, e.g., Dhaka, Chittagong, Sylhet, Khulna).
• Financial Data: bKash account number, Nagad account number, Rocket account number, Upay account number, or bank account details (account number and bank name — e.g., Dutch-Bangla Bank, BRAC Bank, City Bank) used for deposits and withdrawals. We do not store full card numbers for Visa or Mastercard transactions; these are handled exclusively by our PCI-DSS-compliant payment processor.
• Transaction Data: Records of all deposits, withdrawals, bonus claims, and gaming transactions including amounts in Bangladeshi Taka, timestamps (Bangladesh Standard Time, UTC+6), and transaction reference numbers.
• Technical Data: IP address, device type, operating system (e.g., Android version), browser type, mobile network carrier (e.g., Grameenphone, Robi, Banglalink), and session duration.
• Usage Data: Pages visited, games played, bet history, session logs, and platform navigation patterns.
• Communications Data: Records of messages sent to and received from our support team, including chat transcripts, email correspondence, and support ticket content.

3.2 We do not knowingly collect sensitive personal data such as biometric data, health information, or racial or ethnic origin beyond what is strictly required for identity verification and responsible gaming compliance.

3.3 Where you choose not to provide certain personal data, we may be unable to create your account, process payments, or provide specific features of the platform.

4. How We Collect Your Data

4.1 doni88 collects personal data through the following means:

• Direct submission: Data you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting support, or updating your profile settings.
• Automated technologies: Cookies, session tokens, server logs, and analytics tools that record technical and usage data as you interact with the platform. See Section 9 for full details on cookies.
• Payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and linked banking partners when you initiate a deposit or withdrawal.
• Identity verification partners: Where we use a third-party service to assist with document verification, we receive a verification outcome (pass/fail) and a confidence score. We do not receive or store raw biometric data from such partners.
• Publicly available sources: In limited fraud-prevention circumstances, we may cross-reference data against public records, sanctions lists, or commercially available databases.

5. Purposes for Processing and Legal Basis

5.1 The table below summarises the primary purposes for which doni88 processes your personal data and the legal basis relied upon for each purpose:

6. Sharing Your Personal Data

6.1 doni88 does not sell, rent, or trade your personal data to third parties for marketing purposes. We share data only in the following limited circumstances and only to the minimum extent necessary:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the transaction data necessary to process your financial instructions. These parties process data under their own privacy policies and relevant financial regulations.
• Identity verification providers: Third-party verification services receive the documents and data you submit during the KYC (Know Your Customer) process. They are contractually bound to process this data solely for verification purposes.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified studios may receive a pseudonymous player session identifier necessary to deliver games and settle outcomes. They do not receive your name, contact details, or financial account numbers.
• IT and hosting providers: Trusted infrastructure partners who host the doni88 platform servers may process technical and usage data as part of their hosting service. These partners are bound by strict data processing agreements.
• Law enforcement and regulators: Where required by applicable law, court order, or government authority, doni88 will disclose personal data to the relevant Bangladesh authority. We will notify you of such disclosure where legally permitted to do so.

6.2 All third parties with whom doni88 shares personal data are required to maintain appropriate technical and organisational security measures consistent with the sensitivity of the data shared.

7. Data Retention

7.1 doni88 retains your personal data for as long as your account is active and for a period thereafter as required to comply with legal, regulatory, accounting, and reporting obligations. Specific retention periods are as follows:

• Account and identity data: Retained for the duration of your active account and for a minimum of 5 years following account closure, in line with financial record-keeping standards applicable to Bangladesh.
• Transaction records: All deposit, withdrawal, and betting transaction records are retained for a minimum of 5 years from the date of each transaction.
• Support communications: Retained for 3 years from the date of the most recent communication in a given thread.
• Technical and usage data (non-financial logs): Retained for 12 months on a rolling basis, after which aggregate or anonymised analytics data may be retained indefinitely.
• Responsible gaming records: Self-exclusion requests, deposit limit settings, and cooling-off period records are retained for a minimum of 7 years to ensure compliance and prevent re-registration during exclusion periods.

7.2 Once the applicable retention period expires, personal data is securely deleted or anonymised such that it can no longer be attributed to a specific individual.

8. Data Security

8.1 doni88 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit TLS/SSL encryption for all data in transit between your device and the doni88 platform.
• AES-256 encryption for sensitive data stored at rest, including financial account references and identity document data.
• Role-based access controls ensuring that only authorised doni88 personnel with a verified business need can access personal data.
• Regular security assessments and penetration testing of the platform infrastructure.
• Multi-factor authentication requirements for all internal administrative systems.
• Automatic session timeouts to protect accounts accessed from shared or public devices.

8.2 While doni88 takes all reasonable precautions, no system connected to the internet can be guaranteed as completely secure. In the event of a data breach that is likely to result in risk to your rights and freedoms, doni88 will notify affected Members without undue delay and in accordance with applicable notification obligations.

8.3 Members are responsible for keeping their own login credentials secure and for ensuring their personal devices are protected with up-to-date security software. doni88 will never ask for your password via email, SMS, or any other channel.

9. Cookies and Tracking Technologies

9.1 doni88 uses the following categories of cookies and similar technologies on the platform:

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Analytics cookies: Used to understand how Members navigate the platform — which pages are visited most, where users drop off, and how long sessions last. This data is collected in aggregate and used solely to improve the doni88 experience. No individual is identified from analytics data.
• Preference cookies: Used to remember your platform settings, such as language preference and notification opt-in status, so you do not need to reconfigure them on every visit.

9.2 doni88 does not deploy third-party advertising or retargeting cookies. We do not allow ad networks to set cookies on your device through our platform.

9.3 You can manage cookie preferences through your browser settings. However, disabling strictly necessary cookies will prevent you from logging in and using core platform features.

10. Your Data Rights

10.1 As a doni88 Member, you have the following rights with respect to your personal data:

• Right of access: You may request a copy of all personal data doni88 holds about you. We will provide this within 30 calendar days of a verified request.
• Right to rectification: If any of the personal data we hold is inaccurate or incomplete, you may request that it be corrected. Minor profile updates (e.g., contact number) can be made directly within your account settings.
• Right to erasure: You may request deletion of your personal data subject to our legal retention obligations. We will delete or anonymise data that is no longer required for a legitimate purpose and is not subject to a mandatory retention period.
• Right to restrict processing: In certain circumstances, you may request that we limit how your data is used while a dispute or correction request is being resolved.
• Right to data portability: You may request a copy of your personal data in a structured, machine-readable format (e.g., CSV) for data you have provided to us under consent or contract.
• Right to withdraw consent: Where processing is based on your consent (e.g., promotional communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to object: You may object to processing carried out under our legitimate interests, including direct marketing. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

10.2 To exercise any of the above rights, please contact us at [email protected] with the subject line "Data Rights Request" and a description of your request. We may ask you to verify your identity before processing the request.

11. Minors and Age Restriction

11.1 The doni88 platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from persons under the age of 21. If you are a parent or guardian and believe your child has registered on doni88 without your consent, please contact us immediately at [email protected] so that we can close the account and delete the associated data.

11.2 doni88 uses date-of-birth verification at the point of registration and reserves the right to request documentary proof of age from any Member at any time. Accounts found to belong to persons under 21 will be closed and all balances forfeited in accordance with our Terms & Conditions.

12. International Data Transfers

12.1 doni88 is a platform primarily serving Bangladesh-based Members. Some of our technology infrastructure, game content providers (including Pragmatic Play, Evolution Gaming, and Spribe), and identity verification partners may be located outside Bangladesh. Where personal data is transferred internationally, doni88 ensures that appropriate safeguards are in place, including contractual data protection clauses that require recipient organisations to protect your data to a standard equivalent to this Policy.

12.2 By registering on doni88, you acknowledge and consent to the transfer of your personal data to countries or jurisdictions outside Bangladesh where such transfers are necessary to deliver the services described in this Policy.

13. Third-Party Services

13.1 The doni88 platform does not contain links to external third-party websites for general browsing purposes. However, the game lobby embeds content delivered by certified game studios. These studios operate under their own privacy and data security frameworks. doni88 is not responsible for the data practices of third-party game providers beyond the contractual obligations we impose on them as described in Section 6.

13.2 Payment service providers (bKash, Nagad, Rocket, Upay) process payment transactions under their own terms of service and privacy policies, which Members should review independently through those providers' official channels.

14. Changes to This Privacy Policy

14.1 doni88 may revise this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform features. When we make material changes, we will update the effective date at the top of this page and notify registered Members via their registered mobile number or email address.

14.2 Continued use of the doni88 platform after the publication of a revised Policy constitutes your acceptance of the updated terms. We encourage Members to review this page periodically to stay informed of how their data is protected.

14.3 The current version of this Privacy Policy supersedes all previous versions. If you have a printed or saved copy of an earlier version, please discard it and refer to the live version at doni88.asia/privacy-policy.

15. Contact Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to report a privacy concern, please reach out to the doni88 privacy team:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: "Privacy Policy Enquiry" or "Data Rights Request"
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6)
• Response Time: Within 2 business hours for urgent matters; within 5 business days for data rights requests