ld88 Privacy Policy

Data Controller

ld88 is the data controller responsible for your personal data collected through the Platform. As data controller, ld88 determines the purposes and means of processing your personal data, and is accountable for ensuring that such processing is carried out in accordance with applicable data protection principles and the terms of this Policy.

All data-related enquiries, access requests, correction requests, and erasure requests should be directed to the ld88 data protection team at [email protected]. Please include "Privacy Request" in the subject line of your correspondence to ensure your enquiry is routed to the appropriate team member. ld88 will acknowledge all valid privacy requests within five business days (Bangladesh Standard Time, UTC+6) and will endeavour to resolve them within thirty calendar days.

Personal Data We Collect

ld88 collects personal data in two principal ways: data you provide to us directly, and data we collect automatically as a result of your use of the Platform.

Data You Provide Directly

When you register an account, complete identity verification (KYC), make deposits or withdrawals, contact our support team, or participate in promotional offers, you may provide us with the following categories of personal data:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification document details (such as National ID card number, passport number, or driving licence number).
• Contact Data: Email address, mobile telephone number, and residential address including city and postcode. For players in Bangladesh, this may include districts such as Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar.
• Financial Data: Payment method details used for deposits and withdrawals, including mobile financial service account references (bKash, Nagad, Rocket, Upay) and payment card details (Visa, Mastercard). Full card numbers are never stored by ld88; card processing is handled by our PCI-DSS compliant payment partners.
• Communications Data: The content and metadata of communications you send to our support team, including live chat transcripts, email correspondence, and support ticket records.
• Verification Data: Copies of identity documents, selfie or facial image submissions, and utility bills or bank statements submitted as part of the KYC process.

Data Collected Automatically

When you access and use the Platform, we automatically collect certain technical and behavioural data:

• Device and Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and mobile network information.
• Usage Data: Pages and game categories visited, time spent on each page, click patterns, search queries entered within the Platform, and the referring URL that directed you to the Platform.
• Transaction Data: Records of all deposits, withdrawals, wagers placed, games played, odds accepted, game outcomes, bonus claims, and promotional interactions associated with your account.
• Session Data: Login timestamps, session duration, logout events, and any security events such as failed login attempts or password reset requests.
• Geolocation Data: Approximate geographic location derived from your IP address, used for fraud detection and to determine eligibility for location-specific promotions. Precise GPS-level location data is not collected.

Data Collection Summary

Legal Basis for Processing

ld88 processes your personal data only where there is a valid legal basis for doing so. The following legal bases apply to our processing activities:

• Contractual Necessity: Processing is necessary to perform our obligations under the Terms and Conditions you agreed to at registration. This includes operating your account, processing payments, and delivering the gaming and betting services you have requested.
• Legal Obligation: Processing is necessary to comply with applicable legal obligations, including anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, fraud prevention duties, and record-keeping obligations imposed by applicable law.
• Legitimate Interests: Processing is necessary for the legitimate interests of ld88, including maintaining platform security, detecting and preventing fraud and prohibited conduct, improving Platform functionality, and conducting internal analytics — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we process your data for direct marketing purposes (such as sending promotional emails or SMS notifications about bonuses and offers), we do so only with your explicit prior consent. You may withdraw this consent at any time by contacting [email protected] or using the unsubscribe mechanism in any marketing communication.

How We Use Your Personal Data

ld88 uses the personal data we collect for the following specific purposes, each of which is grounded in one of the legal bases described in Section 3:

Account Management and Service Delivery

Your identity and contact data are used to create and maintain your ld88 account, authenticate your identity at login, process deposits and withdrawals through your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, or Mastercard), resolve disputes, and communicate service-related information such as transaction confirmations, account status notifications, and security alerts.

Identity Verification and Compliance

Your identity data and verification documents are used to complete the KYC process required before high-value transactions are processed. This processing is necessary to fulfil our legal obligations under applicable anti-money laundering and counter-terrorism financing frameworks. Records of completed verification are retained in accordance with our data retention schedule described in Section 7.

Fraud Prevention and Platform Security

Device data, IP address information, session data, and transaction records are analysed by our security systems to detect and prevent fraud, money laundering, multi-accounting, bonus abuse, and other prohibited conduct as defined in our Terms and Conditions. Where our security systems identify activity warranting further investigation, relevant data may be reviewed by ld88 compliance personnel.

Responsible Gaming Monitoring

Usage data, session data, and transaction records are used to monitor player behaviour for indicators of problem gambling. Where our systems identify patterns that may suggest a player is experiencing gambling-related harm — such as extended session lengths, rapid deposit sequences, or large loss events — we may initiate responsible gaming outreach or apply protective account restrictions in accordance with our Responsible Gaming Policy.

Platform Improvement and Analytics

Aggregated and anonymised usage data is used to analyse how players interact with the Platform, identify areas for improvement, test new features, and optimise game lobby layouts and promotional placements. This analytics processing does not involve identification of individual players.

Marketing and Promotional Communications

Where you have given explicit consent, your contact data (email address and/or mobile number) is used to send you promotional communications about bonuses, tournaments, new game releases, and seasonal offers. You may withdraw your marketing consent at any time without penalty by contacting our support team.

Data Sharing and Disclosure

ld88 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your personal data only in the following circumstances and only to the extent necessary for each purpose:

Payment Service Providers

To process your deposit and withdrawal transactions, we share the minimum necessary financial data with our payment partners, which include mobile financial service providers (bKash, Nagad, Rocket, Upay) and international card networks (Visa, Mastercard) and their acquiring banks. These providers act as independent data controllers for payment processing under their own privacy frameworks, though they are bound by contractual obligations to protect data shared by ld88.

Identity Verification Partners

To conduct KYC verification, we may share identity data and document images with specialist third-party identity verification service providers. These providers are engaged as data processors acting strictly on ld88's instructions, and are bound by data processing agreements that prohibit any use of your data for their own purposes.

Game Studio Operators

To deliver casino games, slots, and live dealer experiences from third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, limited session and account reference data is shared with these providers via secure API connections. This data sharing is limited to what is technically necessary to launch and record game rounds. Game studios do not receive your full identity or financial data.

Legal and Regulatory Disclosure

ld88 may disclose your personal data to law enforcement authorities, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to prevent or detect serious crime, protect the vital interests of an individual, or establish, exercise, or defend legal claims involving ld88.

Business Transfers

In the event of a merger, acquisition, or sale of all or a substantial part of ld88's business or assets, your personal data may be transferred to the relevant acquiring entity. In such circumstances, ld88 will take reasonable steps to ensure that the acquiring entity commits to processing your data in a manner consistent with this Policy, and will notify you of any material change to data controller identity.

International Data Transfers

ld88 operates a platform accessible to players in Bangladesh, and some of our service providers and technology partners are located in jurisdictions outside Bangladesh. As a result, your personal data may be transferred to, stored in, or processed in countries other than your country of residence.

Where personal data is transferred internationally, ld88 takes appropriate steps to ensure that an adequate level of data protection is maintained. These steps include entering into standard contractual clauses with recipients, requiring contractual data protection commitments equivalent to those applicable within ld88's operating framework, and conducting transfer impact assessments where appropriate.

By using the ld88 Platform and providing your personal data, you acknowledge that your data may be transferred, stored, and processed internationally as described in this Section, subject always to the protections described in this Policy and in our contractual arrangements with service providers.

Data Retention

ld88 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal and regulatory obligations, and to resolve disputes or enforce our agreements. The following retention principles apply:

• Account Data: Your account information, including identity and contact data, is retained for the duration of your active account relationship with ld88, and for a minimum period of five years following account closure.
• Transaction Records: Records of all financial transactions, including deposits, withdrawals, and wager histories, are retained for a minimum of five years following the date of the transaction, in accordance with applicable anti-money laundering record-keeping obligations.
• KYC Verification Records: Identity documents and verification records are retained for a minimum of five years following account closure, or for such longer period as may be required by applicable law.
• Communications and Support Records: Support correspondence and chat transcripts are retained for a minimum of two years following the resolution of the relevant support interaction.
• Technical and Session Data: Server logs, IP address records, and session data are typically retained for ninety days to one year, depending on the nature of the data and the security monitoring purpose for which it was collected.
• Marketing Consent Records: Records of your marketing consent or opt-out are retained for the period necessary to demonstrate compliance with applicable consent requirements, regardless of whether you have subsequently withdrawn consent.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player.

Cookies and Tracking Technologies

ld88 uses cookies and similar tracking technologies (including pixel tags, web beacons, and local storage objects) to operate and improve the Platform. The following categories of cookies are used:

Strictly Necessary Cookies

These cookies are essential for the Platform to function correctly. They enable core functionality such as maintaining your authenticated session, remembering your account preferences, processing deposits and withdrawals, and ensuring the security of your account. Strictly necessary cookies cannot be disabled without impairing your ability to use the Platform.

Analytics and Performance Cookies

These cookies collect aggregated information about how players use the Platform — such as which pages are visited most frequently, how long users spend in the game lobby, and which features generate the most engagement. This data is used to improve Platform performance and user experience. Analytics cookies do not collect data that directly identifies individual players.

Functionality and Preference Cookies

These cookies allow the Platform to remember choices you have made, such as your preferred language, display settings, and game lobby sort preferences, so that the Platform behaves consistently across sessions. These cookies may be managed via your browser settings.

Managing Cookies

Most web browsers allow you to control cookies through their settings. You can configure your browser to refuse all cookies, accept only certain categories of cookies, or alert you when a cookie is being set. Please note that disabling certain cookies may affect the functionality of the Platform. Instructions for managing cookies in common browsers can typically be found in the browser's "Help" or "Settings" menu.

Data Security

ld88 takes the security of your personal data seriously. We implement and maintain a range of technical and organisational security measures designed to protect your data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security measures include:

• SSL/TLS Encryption: All data transmitted between your device and the ld88 Platform is protected by industry-standard SSL/TLS encryption, ensuring that data in transit cannot be intercepted by unauthorised parties.
• Access Controls: Access to personal data within ld88's systems is restricted to employees, contractors, and service providers who have a legitimate need to access that data for the purposes described in this Policy. All personnel with access to personal data are bound by confidentiality obligations.
• Password Security: Account passwords are stored using industry-standard one-way hashing algorithms. ld88 staff cannot retrieve your password — only you have access to it, and password reset is handled through a secure verification process.
• Fraud Detection Systems: Automated systems continuously monitor transactions and account activity for indicators of fraud, account compromise, or suspicious behaviour, enabling rapid response to potential security incidents.
• Regular Security Reviews: ld88 conducts periodic reviews of its data security practices and infrastructure to identify and address emerging vulnerabilities and to align with evolving best practices in information security.

Your Privacy Rights

As a registered player on ld88, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Request". We will verify your identity before processing any request.

Right of Access

You have the right to request a copy of the personal data that ld88 holds about you, together with information about the purposes for which it is processed, the categories of data involved, and any third parties with whom it has been shared. We will provide this information within thirty calendar days of receiving a valid, verified request.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update certain account information directly via your Account dashboard. For changes to identity data (such as your name or date of birth), documentary evidence of the correct information may be required.

Right to Erasure

You have the right to request the deletion of your personal data where: the data is no longer necessary for the purpose for which it was collected; you withdraw consent and there is no other legal basis for processing; or the data has been processed unlawfully. This right is subject to our legal obligations to retain certain records (see Section 7 ), and we may be unable to fulfil erasure requests where retention is required by law.

Right to Restriction of Processing

You have the right to request that ld88 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing based on legitimate interests and that objection is being assessed. Where processing is restricted, ld88 will continue to store your data but will not actively use it pending resolution of the relevant matter.

Right to Object

You have the right to object to processing of your personal data where that processing is based on ld88's legitimate interests. You also have an unconditional right to object to processing for direct marketing purposes. Where you object to marketing, we will cease all marketing communications immediately and update your account preferences accordingly.

Right to Data Portability

Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format. You may also request that we transmit this data directly to another controller where technically feasible.

Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal. To withdraw marketing consent, contact [email protected] or use the unsubscribe link included in any promotional communication.

Children's Privacy and Age Restriction

The ld88 Platform is strictly intended for adults aged 21 years and above. ld88 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration and KYC process, and ld88 reserves the right to request additional proof of age at any time during the account lifecycle.

If ld88 becomes aware that personal data has been collected from an individual under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account. All funds associated with an underage account will be handled in accordance with our Terms and Conditions and applicable legal requirements.

If you are a parent or guardian and believe that a minor in your care has created an account on ld88, please contact us immediately at [email protected] with the subject line "Underage Account Report". We take these reports seriously and will investigate and act upon all credible reports promptly.

ld88 also supports parental control software tools. We encourage parents and guardians in Bangladesh to use available internet filtering and parental control solutions to restrict minors' access to gambling and betting websites, including ld88. For guidance on responsible gaming and self-exclusion tools, please visit our Responsible Gaming page.

Updates to This Privacy Policy

ld88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the nature of our Platform and services. When material changes are made to this Policy, ld88 will provide notice through one or more of the following channels: a prominent notice on the Platform homepage, a notification within your Account dashboard, or a direct communication to the email address registered to your account.

The updated Policy will take effect from the date stated in the revision notice. Your continued use of the Platform after the effective date of a revised Policy constitutes your acceptance of the updated terms. If you do not agree with any changes to this Policy, you must cease using the Platform and may request account closure by contacting [email protected].

The most current version of this Privacy Policy is always accessible at /privacy-policy. The "Last Updated" date displayed at the top of this document reflects the date of the most recent revision. Players are encouraged to review this Policy periodically to remain informed of how ld88 handles their personal data.