ctg88 Privacy Policy — How We Handle Your Data

1 Introduction

This Privacy Policy ("Policy") describes how ctg88 ("ctg88", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "Player", "User") who access or use the ctg88 platform at https://ctg88.io and all associated services, products, and mobile-optimised interfaces (collectively, the "Platform").

ctg88 is committed to handling your personal data with integrity, transparency, and in full compliance with applicable data protection principles. We recognise that privacy is a fundamental right and that players entrust us with sensitive personal and financial information when they register and use our Platform. This Policy explains precisely how we honour that trust.

By accessing the Platform, completing the registration process, or otherwise providing your personal data to ctg88, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the Platform.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference into the overall framework governing your use of ctg88.

2 Data Controller

For the purposes of this Privacy Policy, ctg88 acts as the data controller in respect of all personal data collected from users of the Platform. As data controller, ctg88 determines the purposes and means of processing your personal data.

ctg88 may engage third-party service providers who act as data processors on its behalf. All such processors are contractually required to handle your data in accordance with ctg88's instructions and in compliance with applicable data protection standards. A list of categories of processors is provided in Section 7 (Data Sharing) of this Policy.

If you have any questions about how ctg88 processes your personal data, or if you wish to exercise any of your data subject rights, please contact our data support team at [email protected]. All privacy-related enquiries are handled by a designated member of the ctg88 compliance team.

3 Personal Data We Collect

ctg88 collects the following categories of personal data from users of the Platform:

3.1 Identity Data

• Full legal name (as it appears on government-issued identification)
• Date of birth
• Gender (where provided voluntarily)
• National ID number, passport number, or driving licence number (collected during KYC verification)
• Scanned copies or photographs of identity documents submitted for KYC

3.2 Contact Data

• Email address
• Mobile phone number
• Residential address (including district, city, and postal code within Bangladesh)

3.3 Account Data

• Username and encrypted password
• Account registration date and time
• Account status and verification level
• Communication preferences and marketing opt-in status

3.4 Financial Data

• Mobile financial service account details (bKash, Nagad, Rocket, Upay account numbers — used for deposit and withdrawal processing)
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment reference numbers
• Account balance records
• Source of funds documentation (where requested as part of enhanced due diligence)

3.5 Wagering & Gaming Data

• Bet history, including market selections, stake amounts, odds, and outcomes
• Game session records, including game titles played, session duration, and wagering amounts
• Bonus history and wagering requirement progress
• Responsible gaming tool settings (deposit limits, self-exclusion status, cool-off periods)

3.6 Technical & Device Data

• IP address
• Device type, operating system, and browser version
• Session timestamps and login history
• Geolocation data (country and approximate region, derived from IP address)
• Cookie identifiers and similar tracking technologies (see Section 8)

3.7 Communications Data

• Records of communications between you and ctg88 customer support, including email threads, chat logs, and support ticket history
• Complaint and dispute records
• Feedback and survey responses (where submitted voluntarily)

4 How We Collect Your Data

ctg88 collects personal data through the following channels and methods:

• Registration: When you create an Account on the Platform, you directly provide identity, contact, and account data.
• KYC Verification: When you submit identity documents or proof of address as part of the verification process, you provide identity and address data.
• Deposits & Withdrawals: When you initiate financial transactions, we collect financial data directly from the transaction flow and from our payment processing partners.
• Platform Usage: As you navigate and use the Platform — placing bets, playing games, visiting pages — we automatically collect technical and wagering data via server logs, analytics tools, and cookies.
• Customer Support: When you contact our support team, we collect communications data directly from the content of your messages.
• Promotions & Surveys: When you participate in promotions or complete surveys, we collect any data you voluntarily provide in that context.
• Third Parties: In certain cases, we may receive data about you from third-party service providers such as identity verification partners, fraud prevention services, or payment processors who share data with us as part of our contractual arrangements.

5 How We Use Your Personal Data

ctg88 uses the personal data it collects for the following purposes:

ctg88 will not use your personal data for any purpose not listed above without first providing you with appropriate notice and, where required, obtaining your consent.

6 Lawful Basis for Processing

ctg88 processes your personal data on one or more of the following lawful bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between you and ctg88, including account registration, KYC, deposit and withdrawal processing, and the delivery of betting and gaming services.
• Legal Obligation: Processing required for ctg88 to comply with applicable legal obligations, including anti-money laundering (AML) requirements, identity verification requirements, and record-keeping obligations.
• Legitimate Interests: Processing carried out in pursuit of ctg88's legitimate business interests, where those interests are not overridden by your data protection rights. This includes fraud prevention, platform security, responsible gaming monitoring, and analytics to improve the Platform.
• Consent: Where ctg88 relies on your consent as the legal basis for processing — for example, for marketing communications or the use of non-essential cookies — you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal. To withdraw consent, contact [email protected].

7 Data Sharing & Disclosure

7.1 Service Providers and Data Processors

ctg88 shares your personal data with the following categories of third-party service providers who process data on our behalf and under our instructions:

• Payment Processors: bKash, Nagad, Rocket, and Upay — to facilitate deposit and withdrawal transactions.
• Identity Verification Partners: Third-party KYC and age verification service providers who verify the authenticity of identity documents submitted by players.
• Fraud Prevention Services: Risk and fraud analytics providers who assist ctg88 in detecting and preventing fraudulent account activity, money laundering, and unauthorised access.
• Game Providers: Third-party game studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe — who receive limited player data (such as player ID and session token) to facilitate game delivery and dispute resolution.
• Cloud Infrastructure Providers: Cloud hosting and data storage providers who host the Platform and its databases under appropriate data processing agreements.
• Customer Support Tools: Support desk software providers who process communications data when you contact ctg88 support.
• Analytics Providers: Web analytics services that process anonymised or pseudonymised technical data to help ctg88 understand Platform usage patterns.

7.2 Legal Disclosures

ctg88 may disclose your personal data to competent authorities, regulators, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory direction. Such disclosures are made only to the extent necessary and in compliance with applicable legal requirements.

7.3 No Sale of Personal Data

ctg88 does not sell, rent, or otherwise transfer your personal data to third parties for their own independent marketing, commercial, or analytical purposes. Any data sharing arrangement is governed by a formal data processing agreement that limits the processor's use of your data strictly to the purpose for which it was shared.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of ctg88's business assets, your personal data may be transferred to the acquiring or successor entity as part of that transaction. ctg88 will notify you of any such transfer and the privacy practices of the successor entity prior to your data being transferred.

8 Cookies & Tracking Technologies

ctg88 uses cookies and similar tracking technologies on the Platform to enhance your user experience, maintain your session, and analyse Platform usage. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session management cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery. These cookies cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations. Disabling these may affect your experience.
• Analytics Cookies: Collect anonymised information about how users navigate and interact with the Platform. This data helps ctg88 identify areas for improvement. Analytics cookies are only set where you have consented to their use.
• Performance Cookies: Monitor Platform performance and error rates to help our technical team identify and resolve issues quickly.

You can manage your cookie preferences at any time via your browser settings. Please note that disabling certain categories of cookies may impair the functionality of the Platform or prevent you from accessing certain features.

9 Data Retention

ctg88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your account plus a minimum of 5 years following account closure, in order to satisfy anti-money laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of the transaction.
• KYC Documents: Retained for the duration of your account plus 5 years following account closure. Documents are stored in encrypted form.
• Wagering and Gaming Records: Retained for a minimum of 3 years from the date of the activity.
• Customer Support Communications: Retained for 2 years from the date of the final communication in each support thread.
• Technical and Device Data: Retained for up to 12 months in server logs, after which it is either anonymised or deleted.
• Marketing Preferences: Retained until you withdraw consent or request deletion, plus a short additional period to process the opt-out.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual.

10 Data Security

ctg88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS Encryption: All data in transit between your device and the ctg88 Platform is encrypted using industry-standard TLS protocols.
• Encryption at Rest: Sensitive data stored in our systems — including KYC documents, payment details, and passwords — is encrypted using AES-256 or equivalent standards.
• Password Hashing: User passwords are stored exclusively as salted cryptographic hashes. ctg88 staff cannot access your plain-text password.
• Access Controls: Access to personal data within ctg88's systems is restricted on a need-to-know basis. Staff are granted access only to the data categories necessary to perform their specific role.
• Security Monitoring: ctg88 operates continuous monitoring of its systems for unusual access patterns, intrusion attempts, and data anomalies.
• Regular Audits: ctg88 conducts periodic internal security reviews and works with external security professionals to assess and strengthen its data protection posture.
• Incident Response: ctg88 maintains a documented data breach response procedure that includes player notification obligations where a breach is likely to result in a risk to your rights and freedoms.

While ctg88 takes all reasonable steps to secure your data, no internet-based service can guarantee absolute security. You are also responsible for maintaining the security of your own Account credentials. Never share your ctg88 password with anyone.

11 Your Data Rights

As a user of the ctg88 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request" along with your registered email address and a description of your request.

ctg88 will acknowledge all data rights requests within 48 hours and will aim to resolve them within 30 calendar days. In complex cases requiring additional time, ctg88 will notify you of the reason for the delay and the expected resolution date.

12 Children & Minors

The ctg88 Platform is strictly restricted to individuals aged 21 years and above. ctg88 does not knowingly collect, use, or retain personal data from individuals under the age of 21. Age verification is a mandatory part of our registration and KYC process.

If ctg88 discovers or is notified that personal data has been collected from a person under the age of 21, it will immediately delete all associated account data, void any transactions, and close the Account. If you believe that ctg88 may have inadvertently collected data from a minor, please contact [email protected] immediately so that appropriate action can be taken without delay.

13 International Data Transfers

ctg88 operates primarily as a platform serving players in Bangladesh. Some of our third-party service providers — including game providers, cloud infrastructure partners, and fraud prevention services — may be located outside Bangladesh and may process your personal data in their respective jurisdictions.

Where such international transfers occur, ctg88 ensures that appropriate safeguards are in place to protect your data, including contractual protections in the form of data processing agreements that require overseas processors to apply security and privacy standards equivalent to those described in this Policy.

By using the ctg88 Platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside your country of residence, and you consent to such transfers taking place in accordance with the safeguards described in this section.

14 Third-Party Services & Links

The ctg88 Platform integrates third-party game content provided by studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe. These providers operate their own game platforms within the ctg88 interface. While ctg88 governs the overall player experience, each game provider processes certain player data (such as session tokens and bet records) independently under their own privacy practices to support game delivery and integrity.

ctg88 is not responsible for the privacy practices of third-party game providers or any other third parties. We encourage you to review the privacy policies of any third-party services you interact with. ctg88 does not place external links to third-party websites on the Platform and does not include advertising from third-party networks.

15 Amendments to This Policy

ctg88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes to this Policy, we will notify registered players via email or through a prominent notice on the Platform at least 7 days before the revised Policy takes effect.

The effective date of the current version is displayed at the top of this document. We recommend bookmarking this page and reviewing it periodically. Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

If you do not agree with any changes to this Privacy Policy, you must discontinue use of the Platform and may request account closure by contacting [email protected].

16 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ctg88 handles your personal data, please contact our dedicated privacy support team using the details below. We are committed to responding to all privacy-related enquiries promptly and transparently.

• Email: [email protected]
• Subject Line: Privacy Policy Enquiry
• Response Time: Within 48 hours on business days (Bangladesh Standard Time, UTC+6)
• Support Hours: Available 24/7 for all players in Bangladesh

For data rights requests specifically (access, erasure, portability, rectification, objection), please include your registered email address, a clear description of your request, and any relevant account reference numbers to help us process your request efficiently.

ctg88 takes every privacy enquiry seriously. Our compliance team reviews all data-related communications and escalates complex matters to senior staff where appropriate. We aim to resolve all requests within 30 calendar days of receipt.