dk89 Privacy Policy

1 Introduction

dk89 operates the online casino and sports betting platform accessible at dk89.io, serving players primarily located in Bangladesh. As a platform that handles both personal data and financial transactions, we understand the serious responsibility we carry in relation to your privacy.

This Privacy Policy sets out in full how dk89 collects, processes, stores, protects, and in limited circumstances shares the personal data of its registered users and website visitors. It also explains the legal basis on which we rely to process your data and the rights you hold as a data subject.

This Policy should be read alongside the dk89 Terms & Conditions, which govern the broader contractual relationship between dk89 and its players. Where any conflict exists between this Policy and the Terms & Conditions in relation to data handling matters, this Privacy Policy takes precedence.

We do not sell your personal data to third parties for marketing purposes. We do not share your data with any party that has not agreed to process it in accordance with our instructions and applicable data protection standards. These are foundational commitments at dk89, not optional extras.

2 Personal Data We Collect

dk89 collects personal data across several categories depending on the nature of your interaction with the platform. The table below summarises the main data categories we collect and typical examples within each:

We do not collect sensitive special-category personal data such as racial or ethnic origin, political opinions, religious beliefs, health records, or biometric data beyond what is strictly necessary for identity verification purposes.

3 How We Collect Your Data

dk89 collects personal data through the following channels and mechanisms:

• Direct submission: Data you provide when creating an account, completing identity verification, making a deposit or withdrawal, submitting a support request, or updating your account profile.
• Automated technical collection: Data collected automatically when you access the dk89 platform, including IP addresses, device identifiers, browser fingerprints, and session activity logs, gathered via server logs, cookies, and analytics tools.
• Payment processors: Transaction confirmation data received from mobile banking providers (bKash, Nagad, Rocket, Upay) when you initiate a deposit or withdrawal. This data is limited to transaction reference numbers, amounts, and timestamps necessary to process and reconcile payments.
• Identity verification partners: Where we use third-party KYC or document verification services to validate the identity documents you submit, those services may return structured identity data (name, date of birth, document validity status) to dk89 for account verification purposes.
• Publicly available sources: In limited circumstances related to fraud prevention or sanctions screening, we may verify information against publicly available databases or regulatory watchlists.

We do not purchase personal data from data brokers, list providers, or any other commercial data supplier. All personal data we hold has been provided directly by the player or collected through the player's own interaction with the dk89 platform.

4 How We Use Your Personal Data

dk89 uses the personal data it collects for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent or updating this Privacy Policy:

• Account creation and management: Creating your player account, authenticating your identity at login, maintaining your account preferences and history, and providing access to all platform features.
• Identity and age verification: Confirming that you are who you say you are and that you meet the 21+ age requirement before allowing real-money gaming activity on your account.
• Payment processing: Processing your deposit and withdrawal requests through bKash, Nagad, Rocket, or Upay; reconciling transactions; and maintaining accurate financial records.
• Fraud prevention and security: Detecting and investigating suspicious account activity, identifying coordinated bonus abuse, preventing money laundering, and protecting the integrity of the dk89 platform and its player community.
• Legal and regulatory compliance: Meeting our obligations under applicable anti-money laundering (AML) and know-your-customer (KYC) requirements, responding to lawful requests from regulatory authorities, and maintaining records as required by law.
• Customer support: Responding to your enquiries, resolving disputes, and processing complaints through our support channels.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling behaviour, applying player-requested limits or exclusions, and administering responsible gaming tools.
• Platform improvement: Analysing aggregated and anonymised usage data to improve platform performance, user experience, game selection, and technical reliability.
• Marketing communications (with consent): Sending you promotional offers, bonus notifications, tournament announcements, and seasonal promotions via SMS or email where you have opted in to receive marketing communications. You may withdraw this consent at any time by contacting [email protected].

5 Legal Basis for Processing

dk89 processes your personal data on the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing that is necessary to perform the contract between you and dk89 — primarily account management, payment processing, and delivery of gaming services.
• Legal obligation: Processing required to comply with applicable law, including AML/KYC obligations, record-keeping requirements, and responses to lawful regulatory enquiries.
• Legitimate interests: Processing carried out in pursuit of dk89's legitimate business interests, including fraud prevention, platform security, and anonymised analytics — where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing carried out on the basis of your freely given, specific, informed consent — principally the sending of direct marketing communications. You may withdraw consent for marketing at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Data Sharing & Third Parties

dk89 does not sell your personal data. We share your personal data only in the specific, limited circumstances described below, and only with recipients who are bound by appropriate data protection obligations:

• Payment service providers: Mobile banking operators including bKash, Nagad, Rocket, and Upay receive only the transaction data necessary to process your specific payment request. They do not receive your full profile, gaming history, or any data beyond what is required for payment routing and confirmation.
• Identity verification services: Third-party KYC and document verification providers who process identity documents submitted during account verification. These providers act as data processors under strict contractual data processing agreements.
• IT infrastructure and hosting providers: Server hosting, cloud storage, and platform infrastructure providers who store and process platform data on dk89's behalf, subject to data processing agreements and security standards.
• Fraud prevention and AML screening services: Specialist third-party tools used to detect suspicious behaviour, screen against sanctions lists, and identify coordinated fraudulent activity across the platform.
• Regulatory and law enforcement authorities: Where dk89 is required by law, court order, or regulatory directive to disclose personal data, we will comply with such a requirement and will notify the affected player where legally permitted to do so.
• Professional advisors: Legal counsel, accountants, and auditors, where disclosure is necessary and subject to professional confidentiality obligations.

7 Data Retention

dk89 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as general guidelines:

• Active account data: Retained for the duration of your account's active status plus a period of 5 years following account closure, to comply with AML record-keeping obligations and to resolve any disputes that may arise after closure.
• Transaction records: Financial transaction records, including deposit and withdrawal histories, are retained for a minimum of 5 years from the date of each transaction, in line with standard financial record-keeping requirements.
• Identity verification documents: Copies of identity documents submitted for KYC purposes are retained for a minimum of 5 years following account closure.
• Support communications: Customer support correspondence is retained for 3 years following resolution of the relevant query or complaint.
• Technical logs: Server logs, access logs, and security event logs are retained for up to 12 months, after which they are securely deleted or anonymised.
• Marketing consent records: Records of your marketing preferences and consent history are retained for the duration of your account and for 2 years following account closure or withdrawal of consent, to demonstrate compliance.

When personal data is no longer required for any lawful purpose, dk89 will securely delete or irreversibly anonymise it in accordance with our internal data destruction procedures.

8 Data Security

dk89 takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or alteration. Key security measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and dk89 servers is encrypted using industry-standard 256-bit SSL/TLS protocols, the same level of encryption used by major international financial institutions.
• Encrypted data storage: Sensitive personal data, including identity documents and financial records, is stored in encrypted form on secure servers. Encryption keys are managed separately from the encrypted data.
• Access controls: Access to personal data within dk89's systems is strictly limited to personnel who require it to perform their specific job functions. Role-based access controls and multi-factor authentication are applied to all internal systems.
• Regular security assessments: dk89 conducts periodic security reviews, vulnerability assessments, and penetration tests to identify and remediate potential weaknesses in our systems and processes.
• Incident response procedures: In the event of a data security incident that poses a risk to player rights and freedoms, dk89 has documented incident response procedures that include notification to affected players as quickly as practicable.

While dk89 applies robust security measures, no digital platform can guarantee absolute security against all possible threats. You are responsible for maintaining the confidentiality of your own account credentials and for notifying dk89 immediately at [email protected] if you suspect your account has been compromised.

9 Cookies & Tracking Technologies

dk89 uses cookies and similar tracking technologies to enable core platform functionality, improve your experience, and gather aggregated usage analytics. The following categories of cookies are used on the dk89 platform:

• Essential cookies: These are strictly necessary for the platform to function. They manage your login session, maintain your account state, enable secure transaction processing, and support fraud prevention mechanisms. These cookies cannot be disabled without impairing core platform functionality.
• Functional cookies: These cookies remember your preferences, such as your preferred language display, notification settings, and last-viewed game categories, to personalise your experience on return visits.
• Analytics cookies: These cookies collect anonymised data about how visitors use the dk89 platform — which pages are most visited, how long sessions last, and which features are most frequently used — to help us improve platform design and performance.
• Security cookies: Short-lived cookies used to support security features such as CSRF (Cross-Site Request Forgery) protection and login attempt monitoring.

dk89 does not use third-party advertising cookies or behavioural profiling cookies for the purpose of serving targeted advertisements on external websites. You may manage cookie preferences through your browser settings. Disabling essential cookies may limit your ability to use core platform features.

10 Your Data Rights

As a player whose personal data is processed by dk89, you hold a number of rights in relation to that data. dk89 is committed to facilitating the exercise of these rights promptly and without unnecessary friction. Your rights include:

• Right of access: You may request a copy of the personal data dk89 holds about you. We will provide this in a clear, structured format within 30 days of a verified request.
• Right to rectification: You may request correction of any personal data we hold about you that is inaccurate or incomplete. Minor profile details (such as contact information) can be updated directly within your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (where consent was the legal basis), or where processing is unlawful. This right is subject to our legal obligation to retain certain records for regulatory compliance purposes.
• Right to restrict processing: You may request that dk89 limit how we use your personal data in certain circumstances, for example while the accuracy of the data is contested.
• Right to data portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to object: You may object to processing carried out on the basis of legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to withdraw consent: Where we process your data on the basis of consent (primarily for marketing communications), you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

11 Minors & Age Restriction

The dk89 platform is strictly intended for adults aged 21 and above. dk89 does not knowingly collect personal data from any individual under the age of 21. Age verification is a mandatory step in the account registration process, and we reserve the right to request additional documentary evidence of age at any point during the account lifecycle.

If dk89 discovers or is informed that personal data has been collected from an individual who is under 21 years of age, we will immediately suspend the relevant account, delete all associated personal data, and refund any deposited funds to the payment method from which they were received.

If you are a parent or guardian and you believe that a minor under your care may have registered with and used the dk89 platform, please contact us immediately at [email protected]. We treat all such reports as a priority and will investigate and respond within 24 hours.

12 Changes to This Privacy Policy

dk89 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made, we will notify registered players via the mobile number or email address on their account, or via a prominent notice displayed on the platform upon their next login.

The "Last Updated" date at the top of this document will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how dk89 protects your personal data.

Your continued use of the dk89 platform following the posting of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any change to this Policy, you should cease using the platform and contact [email protected] to request account closure and data deletion where applicable.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data dk89 holds about you, please contact our dedicated support team through the following channel:

Please use plain email when submitting privacy requests. Do not include sensitive account credentials such as passwords in any email communication. The email address above is displayed as plain text and is not a clickable link.