pcd888 Privacy Policy

Data Controller Information

For the purposes of this Privacy Policy, pcd888 acts as the data controller in respect of personal data collected from players and visitors through the pcd888 platform at pcd888.app. As the data controller, pcd888 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is conducted lawfully, fairly, and transparently.

If you have any questions, concerns, or requests relating to how pcd888 handles your personal data, you may contact the pcd888 privacy team at any time using the contact information set out in Section 12 of this Policy. pcd888 is committed to responding to all privacy-related enquiries promptly and substantively.

What Personal Data We Collect

pcd888 collects personal data from you in three principal ways: data you provide directly during registration and account use, data generated automatically as a result of your interaction with the platform, and data received from third-party service providers such as payment processors and identity verification agencies. The categories of data collected are set out below.

Lawful Basis for Processing

pcd888 processes your personal data only where a valid lawful basis exists for doing so. The following bases apply to pcd888's data processing activities:

• Contractual Necessity: Processing required to create your pcd888 account, process deposits and withdrawals, operate games and betting markets, and honour bonus commitments — all of which are necessary to perform the service you have contracted with pcd888 to receive.
• Legal Obligation: Processing required to comply with anti-money-laundering (AML) requirements, identity verification obligations, fraud reporting duties, and any other applicable legal or regulatory requirement.
• Legitimate Interests: Processing carried out to detect and prevent fraud, maintain platform security, conduct internal analytics to improve service quality, and manage the risk of problem gambling — provided such interests are not overridden by your fundamental privacy rights.
• Consent: Processing of optional data, such as marketing communications preferences and non-essential cookies, which is conducted only on the basis of your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Where pcd888 relies on legitimate interests as the lawful basis, a balancing test is conducted to ensure that the interests of pcd888 do not override your right to privacy. You have the right to object to processing based on legitimate interests at any time — see Section 9 for details on how to exercise this right.

How We Use Your Personal Data

pcd888 uses the personal data collected from players across Bangladesh for the following specific purposes. Each purpose is paired with the applicable lawful basis described in Section 3.

• Account Creation and Management: To register your player account, verify your identity and age (18+ only), maintain your account profile, and communicate account-related updates. (Basis: Contract)
• Payment Processing: To facilitate deposits via bKash, Nagad, Rocket, and bank transfers, and to process verified withdrawal requests in BDT. (Basis: Contract)
• Regulatory Compliance (KYC/AML): To verify player identity, screen against watchlists, monitor transaction patterns for suspicious activity, and maintain records as required by applicable law. (Basis: Legal Obligation)
• Fraud Detection and Security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, bonus abuse, and unauthorised access attempts. (Basis: Legitimate Interests)
• Responsible Gaming: To monitor player behaviour for indicators of problem gambling, enforce deposit limits and self-exclusion requests, send reality-check notifications, and refer at-risk players to support resources. (Basis: Legal Obligation / Legitimate Interests)
• Platform Improvement and Analytics: To analyse aggregated behavioural data, improve game selection, optimise platform performance, and personalise the user experience where permitted. (Basis: Legitimate Interests)
• Marketing Communications: To send promotional offers, bonus notifications, and news about pcd888 events such as BPL cricket promotions or Eid special offers — but only where you have given explicit consent and have not subsequently opted out. (Basis: Consent)
• Customer Support: To respond to your enquiries, resolve disputes, and maintain a record of correspondence for quality assurance purposes. (Basis: Contract / Legitimate Interests)

Data Sharing and Third Parties

pcd888 does not sell your personal data to any third party. However, in order to deliver its services effectively and fulfil its legal obligations, pcd888 shares limited personal data with carefully selected third-party service providers and, where legally required, with regulatory or law enforcement bodies. All third-party processors are subject to data processing agreements that restrict their use of your data to the specific purpose for which it was shared.

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card network processors (Visa, Mastercard) receive the minimum payment-related data necessary to authorise transactions.
• Identity Verification Providers: Third-party KYC agencies that provide age verification, document authentication, and liveness detection services in support of pcd888's compliance obligations.
• Game Software Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive technical session identifiers necessary to deliver their games via the pcd888 platform. These providers do not receive full player identity data.
• Fraud Prevention and Security Vendors: Specialist providers of anti-fraud, bot detection, and cybersecurity services that assist pcd888 in protecting players and the platform.
• IT Infrastructure Providers: Cloud hosting and content delivery network providers that store and transmit pcd888 platform data under strict contractual data protection obligations.
• Legal and Regulatory Authorities: Where pcd888 is legally compelled to disclose data by a court order, regulatory direction, or law enforcement request, pcd888 will comply with such obligations. pcd888 will notify you of any such disclosure to the extent permitted by law.

pcd888 requires all third-party processors to implement appropriate technical and organisational security measures to protect your personal data. pcd888 conducts periodic reviews of its third-party processor relationships to ensure continued compliance with applicable data protection standards.

Cookies and Tracking Technologies

pcd888 uses cookies and similar tracking technologies (including local storage, session tokens, and pixel tags) to operate the platform, remember your preferences, maintain your logged-in session, detect fraud, and analyse how players interact with the site. The following categories of cookies are in use on the pcd888 platform:

You may manage your cookie preferences at any time through the pcd888 account settings. Please note that disabling non-essential cookies will not affect your ability to use the core pcd888 platform, but may reduce the relevance of promotional content shown to you.

Most web browsers also provide controls to block or delete cookies at the browser level. Consult your browser's help documentation for instructions. Be aware that browser-level cookie blocking may affect the functionality of some platform features, including session persistence across visits.

Data Retention Periods

pcd888 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or compliance obligations. The table below outlines the standard retention periods applied to the principal categories of player data.

On expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with pcd888's data destruction procedures. Where data is anonymised rather than deleted, the resulting anonymised dataset no longer constitutes personal data and may be retained and used by pcd888 indefinitely for statistical and analytical purposes.

How We Protect Your Data

pcd888 implements a comprehensive information security programme designed to protect player data against unauthorised access, disclosure, alteration, and destruction. Our security measures are reviewed and updated on a continuous basis to address evolving threats.

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or mobile device and the pcd888 platform is encrypted using industry-standard TLS 1.2 or higher protocols.
• Data Encryption at Rest: Sensitive data fields — including payment method identifiers, identity document references, and account credentials — are encrypted in storage using AES-256 encryption.
• Access Controls: Access to personal data within pcd888's systems is strictly limited on a need-to-know basis. All internal access is authenticated, logged, and subject to regular audit.
• Two-Factor Authentication: pcd888 supports two-factor authentication (2FA) via SMS for player accounts and mandates it for all internal administrative access.
• Penetration Testing: pcd888 engages independent security specialists to conduct periodic penetration testing of the platform infrastructure and applications.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, pcd888 will notify affected players and relevant authorities within 72 hours of becoming aware of the incident, in accordance with applicable data protection law.
• Employee Training: All pcd888 staff who handle personal data receive mandatory data protection training upon joining and at regular intervals thereafter.

Your Privacy Rights

As a pcd888 player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact the pcd888 privacy team at [email protected] with the subject line "Privacy Rights Request". pcd888 will acknowledge your request within 5 business days and provide a substantive response within 30 business days. Identity verification may be required before a request is processed.

• Right of Access: You may request a copy of the personal data pcd888 holds about you, together with information about the purposes for which it is processed, the categories of data held, and the recipients with whom it has been shared.
• Right to Rectification: You may request that inaccurate or incomplete personal data held by pcd888 be corrected or updated. You may update basic profile information directly through the pcd888 account dashboard at any time.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the processing is unlawful. This right is subject to overriding legal retention obligations — pcd888 cannot delete data it is legally required to retain.
• Right to Restriction of Processing: You may request that pcd888 restrict the processing of your data in certain circumstances, such as where you contest the accuracy of the data or object to processing based on legitimate interests, pending pcd888's assessment of your objection.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request that pcd888 provide your personal data in a structured, commonly used, and machine-readable format so that it can be transferred to another controller.
• Right to Object: You may object at any time to processing of your personal data that is based on pcd888's legitimate interests, including profiling. You may also object at any time to the processing of your data for direct marketing purposes, including profiling for marketing purposes. pcd888 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without penalty. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

Children's Privacy

The pcd888 platform is strictly intended for adults aged 18 and above. pcd888 does not knowingly collect personal data from any person under the age of 18. Age verification checks are conducted as part of the registration and KYC process to enforce this restriction across all players in Bangladesh and beyond.

If pcd888 discovers or is notified that personal data has been collected from a person under the age of 18, that account will be closed immediately, all funds will be returned to the originating payment source, and all personal data associated with the account will be deleted from pcd888's systems within 30 days, subject to any legal hold obligations that may apply.

If you are a parent or guardian and believe that a minor in your care has registered a pcd888 account or provided personal data to pcd888, please contact the privacy team immediately at [email protected] with the subject line "Underage Account Report". pcd888 will investigate and act on all such reports as a matter of priority.

Changes to This Privacy Policy

pcd888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to the pcd888 platform. The "Last Updated" date at the top of this page will be revised whenever a material amendment is made.

Where changes are material — meaning they significantly affect your rights or the way pcd888 processes your data — pcd888 will notify registered players by email to the address on file and by posting a prominent notice on the pcd888 platform at least 14 days before the changes take effect. For non-material clarifications or corrections, changes may take effect immediately upon publication.

Your continued use of the pcd888 platform following the effective date of any amended Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any changes made to this Policy, you should discontinue your use of the platform and contact the support team to initiate account closure.

pcd888 recommends that you review this Privacy Policy periodically, at least once every six months, to remain informed of how your personal data is being handled. The most current version is always accessible at pcd888.app/privacy-policy.

Contact Our Privacy Team

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have concerns about the way pcd888 handles your personal data, please reach out to the pcd888 privacy team using the contact details below. All privacy-related communications are handled with strict confidentiality.

pcd888 is committed to resolving all privacy concerns in a fair, transparent, and timely manner. If you are not satisfied with pcd888's response to a privacy rights request, you retain the right to escalate your complaint to the relevant data protection authority in your jurisdiction. pcd888 will cooperate fully with any such regulatory process.