Privacy Policy — How ddkk Protects Your Personal Data

About This Policy

This Privacy Policy ("Policy") describes how ddkk ("we", "us", "our", "the Platform") collects, uses, stores, and shares personal data about individuals ("you", "your", "the Player") who access or use the ddkk online casino and sports betting platform available at ddkk.bio. This Policy applies to all data processing activities conducted by ddkk in connection with the delivery of our services to players in Bangladesh and any other jurisdiction in which we operate.

ddkk is committed to handling your personal data responsibly and in accordance with widely recognised data protection principles. We collect only the data we genuinely need to deliver a safe, fair, and enjoyable online gaming experience, and we retain it only for as long as is necessary for the purposes described in this Policy or as required by applicable record-keeping obligations.

This Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this Policy and the Terms & Conditions on a data-related matter, this Policy shall prevail. For matters unrelated to data processing, the Terms & Conditions take precedence.

Data We Collect

ddkk collects several categories of personal data at different stages of the player relationship. The table below outlines the primary categories of data we may hold about you.

We do not collect special category data (such as racial or ethnic origin, religious beliefs, health information, or political opinions) unless you voluntarily provide it in the context of a responsible gaming support interaction, in which case it is treated with the highest level of sensitivity and used solely to assist you.

How We Collect Data

ddkk collects personal data through the following channels and mechanisms:

• Direct submission: Data you provide voluntarily when you register an account, complete KYC verification, make a deposit or withdrawal request, contact our support team, or respond to a survey or promotion.
• Automated collection: Technical and behavioural data collected automatically via server logs, cookies, session tracking pixels, and analytics tools when you visit or interact with the ddkk platform. See Section 8 (Cookies & Tracking) for full details.
• Payment provider data: Transaction reference data (but not full payment credentials) passed by bKash, Nagad, Rocket, Upay, Visa, and Mastercard when you initiate a deposit or withdrawal. ddkk does not directly handle or store full card numbers or mobile banking PINs.
• Identity verification services: Where ddkk uses a third-party identity verification provider to assist with KYC checks, that provider may return a verification result and a risk score to us based on the documents you submit.
• Publicly available sources: In connection with fraud prevention and anti-money-laundering checks, ddkk may consult publicly available databases or watchlists. No personal data collected from public sources is used for marketing.

Why We Use Your Data

ddkk uses your personal data strictly for the purposes listed below. We do not use your data for purposes incompatible with those for which it was originally collected without notifying you and, where required, obtaining your consent.

• Account creation and management: To register, maintain, and administer your ddkk account, including verifying your identity, age, and eligibility to use the platform.
• Service delivery: To process deposits, execute withdrawals, credit bonuses, display your gaming history, and deliver the full range of casino and sports betting services offered on ddkk.
• Identity and age verification (KYC): To satisfy our obligation to verify that every player is aged 21 or above and is who they claim to be, in accordance with responsible gaming standards and anti-money-laundering best practice.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, bonus abuse, and other forms of misconduct that could harm players or the integrity of the platform.
• Responsible gaming compliance: To monitor for signs of problem gambling behaviour, enforce self-exclusion decisions, apply deposit limits set by you, and provide responsible gaming interventions where warranted.
• Customer support: To respond to your enquiries, complaints, and feedback in a timely and effective manner, and to maintain records of communications for quality assurance and dispute resolution purposes.
• Legal and regulatory compliance: To fulfil any record-keeping, reporting, or cooperation obligations that may be imposed on ddkk by applicable law or regulatory guidance.
• Platform improvement: To analyse aggregated behavioural and technical data in order to identify bugs, optimise performance, and develop new features that improve the player experience.
• Personalisation: Where you have not opted out, to personalise the content and promotions you see on the platform based on your gaming history and preferences. You may opt out of personalisation at any time via your account settings.
• Direct marketing: Where you have given explicit consent, to send you promotional communications about new games, seasonal offers, and ddkk updates by email or in-platform notification. You may withdraw consent at any time.

Legal Basis for Processing

Every processing activity carried out by ddkk rests on at least one of the following recognised legal bases. Where multiple bases apply, the primary basis is identified in the table below.

Sharing Your Data

ddkk does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the relevant purpose.

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and their respective banking partners receive only the transaction data necessary to process your deposit or withdrawal. They do not receive your gaming history or full identity documents.
• Identity verification providers: Where a third-party KYC provider is used to verify your identity documents and age, that provider receives only the documents and personal details necessary for the verification check and is contractually prohibited from using your data for any other purpose.
• Game software providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified game studios may receive anonymised session and technical data necessary to deliver their games within the ddkk platform. They do not receive your name, contact details, or financial data.
• Analytics and platform tools: Aggregated and anonymised technical and behavioural data may be processed by analytics service providers for the purpose of platform performance monitoring and improvement. No personally identifiable data is shared in this context.
• Legal and regulatory authorities: ddkk will disclose personal data to law enforcement, financial intelligence units, or other competent authorities when required to do so by applicable law, a valid court order, or regulatory directive. We will notify you of such disclosures where legally permitted to do so.
• Business continuity: In the event of a merger, acquisition, or transfer of all or part of ddkk's business, player data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. You will be notified in advance of any such transfer.

Data Retention

ddkk retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, unless a longer retention period is required or permitted by applicable law. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be linked to any individual. Where anonymisation is used in preference to deletion, the anonymised data may be retained indefinitely for statistical and analytical purposes.

Cookies & Tracking Technologies

ddkk uses cookies and similar tracking technologies to deliver and improve our platform, ensure security, and — where you have consented — provide a personalised experience. A cookie is a small text file placed on your device when you visit a website. It allows the website to remember information about your visit, such as your session state and preferences.

The following categories of cookies are used on the ddkk platform:

• Strictly necessary cookies: Required for the platform to function. These cookies manage your login session, maintain your account state across pages, and protect against cross-site request forgery. They cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: Used to collect aggregated, anonymised data on how players use the platform — which pages are visited most frequently, where errors occur, and how session flows can be improved. These cookies do not identify you personally.
• Functional cookies: Remember your preferences such as preferred language, last-used payment method display, and game filter settings, so that you do not need to reconfigure them on each visit.
• Security cookies: Help us detect and prevent fraudulent activity, bot access, and account takeover attempts by fingerprinting known malicious traffic patterns.

ddkk does not use advertising or cross-site tracking cookies. No third-party advertising network places cookies on the ddkk platform. You may control cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use the platform.

Data Security

ddkk takes the security of your personal data seriously. We implement a layered set of technical and organisational security measures designed to protect your data against unauthorised access, disclosure, alteration, and destruction. Key security measures in place include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the ddkk servers is encrypted in transit using industry-standard 256-bit SSL/TLS protocols. This applies to login sessions, deposit requests, account data updates, and all other platform interactions.
• Encrypted data storage: Sensitive personal data held in ddkk's databases — including identity verification documents and financial data — is encrypted at rest using AES-256 encryption.
• Segregated player funds: Player account balances are held in segregated accounts separate from ddkk's operational funds, ensuring your money is protected from company financial risk.
• Access controls: Access to personal data within ddkk's internal systems is restricted on a strict need-to-know basis. Staff members access only the data necessary to perform their assigned function. All internal access is logged and audited.
• Two-factor authentication (2FA): Players are strongly encouraged to enable 2FA on their accounts. ddkk staff accounts with access to player data require 2FA as mandatory.
• Regular security assessments: ddkk conducts periodic security reviews of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a data security incident that poses a risk to your rights and freedoms, ddkk will notify affected players without undue delay and take immediate remediation action.

Your Rights

As a player whose personal data is processed by ddkk, you hold a set of rights in relation to that data. ddkk is committed to facilitating the exercise of these rights promptly and without unnecessary obstruction. The following rights apply to your personal data held by ddkk:

• Right to access: You may request a copy of all personal data ddkk holds about you. We will provide this in a structured, commonly used format within 30 days of a valid request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct it. Updates to basic account information (name, contact details) can be made directly through your account settings for minor changes; significant changes require identity re-verification.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where you believe processing is unlawful. Note that this right is subject to our legal retention obligations — we may be required to retain certain data (e.g., transaction records) for a defined period regardless of an erasure request.
• Right to restriction: You may request that we restrict the processing of your data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to data portability: You may request that we provide your personal data in a machine-readable format (e.g., CSV or JSON) so that you can transfer it to another service provider.
• Right to object: You may object to processing carried out on the basis of legitimate interests. You may also object to direct marketing at any time, with no need to provide a reason, and we will cease marketing communications immediately upon receipt of your objection.
• Right to withdraw consent: Where processing is based on your consent (e.g., direct marketing), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, contact the ddkk privacy team at [email protected] with the subject line "Privacy Rights Request — [Your Request Type]". We will acknowledge your request within 48 hours and respond in full within 30 calendar days. Complex or multiple requests may require up to 60 days; we will notify you if this is the case.

Children & Minors

The ddkk platform is strictly for adults aged 21 and above. We do not knowingly collect, process, or store personal data relating to any person under the age of 21. If you are under 21, you must not use the ddkk platform, register an account, or submit any personal data to us.

If ddkk discovers or is notified that personal data has been collected from a person under the age of 21 — whether as a result of misrepresentation during registration or any other circumstance — we will immediately suspend the relevant account, delete all associated personal data, and report the incident as required by our responsible gaming obligations. 21+ only.

Third-Party Links

The ddkk platform may contain references or links to the websites of third-party game providers, payment partners, and other service providers. This Privacy Policy applies exclusively to data processed by ddkk in connection with the ddkk.bio platform. It does not govern the privacy practices of any third-party website or service, even where that third-party service is accessible from within the ddkk platform.

ddkk does not accept responsibility for the privacy policies or data handling practices of third parties, including game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, or payment partners such as bKash, Nagad, Rocket, Upay, Visa, and Mastercard. We recommend that you review the privacy policy of any third-party service before submitting personal data to it. Your interactions with those third parties are governed solely by their own terms and privacy policies.

Policy Updates

ddkk reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, new legal or regulatory requirements, or improvements to our platform. The effective date at the top of this page and at the top of the hero section above will always reflect the date of the most recent revision.

When material changes are made to this Policy — changes that substantively affect your rights or how your data is used — we will notify registered players by email to the address on file and/or by displaying a prominent notice on the platform for a minimum of seven days before the changes take effect. For minor, non-substantive changes (such as corrections of typographical errors, clarifications, or updates to contact information), no prior notice will be provided, but the effective date will be updated.

Your continued use of the ddkk platform following the effective date of any material amendment constitutes your acknowledgement of the revised Policy. If you do not accept the revised Policy, please discontinue use of the platform and contact our support team to discuss account closure and the withdrawal of any remaining balance.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ddkk handles your personal data, please contact our dedicated privacy support team. We are available 24 hours a day, seven days a week, and will acknowledge all privacy-related enquiries within 48 hours.

• Email (privacy enquiries): [email protected] — use subject line "Privacy Enquiry" or "Privacy Rights Request — [Request Type]"
• Live Chat: Available directly within the ddkk platform — 24/7, average response under 3 minutes
• Response time: Privacy rights requests acknowledged within 48 hours; responded to in full within 30 calendar days
• Language: All privacy support is provided in English

For guidance on setting deposit limits, enabling self-exclusion, or accessing responsible gaming tools, visit the Responsible Gaming page. For general platform questions, visit the FAQ page.