dbkk Privacy Policy

This Privacy Policy describes how dbkk ("we", "us", "our") collects, uses, stores, shares and protects the personal data of individuals ("you", "your", "the player") who access or use the dbkk online betting platform available at dbkk.io and any associated mobile or application interfaces.

This policy applies to all dbkk registered players, to individuals who have submitted a registration form but have not yet completed the account verification process, and to unregistered visitors who browse dbkk.io without creating an account. Where different provisions apply to different categories of individuals, this is clearly indicated in the relevant section.

By registering a dbkk account, making a deposit, placing a wager, or otherwise using any dbkk product or service, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein. If you do not consent, you must not use the dbkk platform.

This Privacy Policy should be read together with the dbkk Terms and Conditions and the Responsible Gaming Policy, both of which are available on this website. Where any inconsistency exists between this policy and the Terms and Conditions on a matter relating to data privacy, this Privacy Policy shall take precedence.

dbkk collects personal data from players through several channels: directly from you when you register or use the platform, automatically when you interact with the website, and from third-party identity verification and payment processing partners. The categories of data we collect are set out below.

dbkk does not collect sensitive personal data such as religious beliefs, political opinions, racial or ethnic origin, health records, or biometric identifiers unless specifically required by applicable law and with your explicit prior consent.

The personal data dbkk collects is used for the specific purposes listed below. We do not use your data for any purpose not described in this policy without first obtaining your explicit consent or updating this policy with advance notice.

• Account management: Creating and maintaining your dbkk player account, verifying your identity at registration and on an ongoing basis, and managing account security.
• Transaction processing: Processing deposits via bKash, Nagad, Rocket, Upay, Visa and Mastercard; processing BDT withdrawal requests; preventing payment fraud and chargebacks.
• Platform operation: Delivering cricket betting markets, live casino games, slot titles, bingo products and all other dbkk gaming content to your device; recording bet settlements and account balance updates.
• Regulatory compliance: Conducting know-your-customer (KYC) checks, anti-money-laundering (AML) monitoring, age verification (minimum age 21), and fraud detection as required by applicable offshore platform obligations.
• Customer support: Responding to enquiries, resolving account disputes, handling responsible gaming requests including deposit limits, cooling-off periods and self-exclusion.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the design, performance and content offering of the dbkk platform. Individual player data is not used for this purpose without anonymisation.
• Marketing communications: Where you have explicitly opted in to receive promotional communications, sending you information about dbkk bonuses, cricket promotions, new game releases and seasonal offers. You may opt out at any time by contacting support or using the unsubscribe mechanism in any marketing email.
• Security and fraud prevention: Detecting and preventing unauthorised account access, multi-accounting, bonus abuse, match-fixing-related activity, and other prohibited conduct described in the Terms and Conditions.

dbkk processes your personal data on the basis of one or more of the following legal grounds, depending on the specific processing activity in question:

• Contractual necessity: Processing your data is necessary to perform the contract represented by the dbkk Terms and Conditions that you accepted at registration. This includes account creation, transaction processing, game delivery and support services.
• Legitimate interests: dbkk has a legitimate business interest in preventing fraud, detecting multi-accounting, improving platform security, and conducting responsible gaming monitoring. These interests do not override your fundamental privacy rights.
• Legal obligation: Certain processing activities — particularly KYC identity verification and AML transaction monitoring — are carried out because dbkk is legally required to do so under applicable offshore platform obligations.
• Consent: Where processing is not required for contractual, legal or legitimate interest purposes, dbkk will ask for your explicit consent before collecting or using your data. This applies primarily to optional marketing communications. You may withdraw consent at any time.

dbkk does not sell, rent or transfer your personal data to any third party for commercial gain. However, in order to operate the platform effectively and comply with our legal obligations, it is sometimes necessary to share specific data with trusted third-party service providers. All such providers are contractually required to handle your data securely and to use it only for the purpose for which it was shared.

• Payment processors: bKash, Nagad, Rocket, Upay, Visa and Mastercard receive the minimum transaction data necessary to authorise and settle your deposits and withdrawals in BDT. This includes your registered payment method identifier and the transaction amount. Full payment card numbers are never stored by dbkk.
• Identity verification providers: Third-party KYC service providers may receive your name, date of birth and identity document images for the purpose of completing age and identity verification checks. These providers operate under strict data protection agreements.
• Fraud detection services: Anonymised or pseudonymised technical data including device fingerprints and IP addresses may be shared with fraud detection partners for the purpose of identifying prohibited multi-accounting or bonus abuse activity.
• Platform infrastructure providers: Cloud hosting, content delivery and database service providers who process data on our behalf as data processors under contractual data protection obligations.
• Game content providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe and Ezugi may receive session identifiers necessary to deliver their game content to your device. These providers do not receive your personal identity or financial data.

dbkk will not share your personal data with any law enforcement authority, government body or regulatory agency unless required to do so by a valid legal order or where we have a good-faith belief that disclosure is necessary to prevent imminent harm, fraud or illegal activity.

Because dbkk processes all transactions in Bangladeshi Taka (BDT) and relies heavily on mobile financial services widely used in Bangladesh, it is important to explain specifically how payment data is handled for bKash, Nagad, Rocket and Upay transactions as well as for card payments via Visa and Mastercard.

When you make a deposit via bKash, Nagad, Rocket or Upay, dbkk receives a transaction confirmation and a reference identifier from the payment provider. dbkk does not receive or store your full mobile wallet PIN or account password. The wallet number associated with a successful deposit is recorded against your dbkk account solely for the purpose of ensuring that withdrawals are returned to the same payment method registered in your name.

When you make a payment by Visa or Mastercard, card processing is handled by a PCI-DSS compliant payment gateway. Full card numbers, CVV codes and card expiry dates are processed exclusively by the gateway and are never transmitted to or stored on dbkk servers. dbkk receives only a tokenised card reference for the purpose of processing future transactions from the same card.

• All BDT transaction amounts are recorded in your account history and are available for review from within your dbkk account dashboard at any time.
• Deposits and withdrawal records are retained for a minimum of five years to satisfy financial record-keeping obligations.
• If you believe there is an error in your transaction history, contact the dbkk support team via live chat within 30 days of the transaction date for investigation.

The dbkk website uses cookies and similar browser-based tracking technologies to ensure that the platform functions correctly, to remember your session state when you are logged in, and to collect aggregated analytics data that helps us understand how the platform is being used and where improvements can be made.

dbkk uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your login session, store your language and currency preferences, and ensure that security tokens function correctly. You cannot opt out of strictly necessary cookies without losing core platform functionality.
• Functional cookies: These cookies remember your preferences across sessions, such as your preferred betting view layout or notification settings. They are not used to track your activity outside of the dbkk platform.
• Analytics cookies: dbkk uses anonymised analytics data to understand aggregate user behaviour on the platform — for example, which game categories are most visited, and which pages have the highest exit rates. This data is processed in aggregate and is not linked to your personal identity.
• Security cookies: Short-lived cookies used to detect and prevent cross-site request forgery (CSRF) attacks, session hijacking, and other security threats during your active session.

dbkk does not use third-party advertising cookies, pixel trackers placed by social media networks, or any tracking technology designed to build a behavioural advertising profile of individual players. You can manage cookie preferences through your browser settings. Note that disabling functional cookies may affect the performance of certain platform features.

dbkk takes the security of your personal data seriously and has implemented a layered approach to information security that covers data in transit, data at rest, access controls and incident response.

• Encryption in transit: All communications between your browser and the dbkk platform are encrypted using 256-bit TLS. This prevents interception of your login credentials, session data, and transaction details while they are being transmitted over the internet.
• Encryption at rest: Sensitive personal data stored in dbkk databases — including identity document references and financial transaction records — is encrypted at rest using AES-256 encryption. Passwords are never stored in plain text; only a salted cryptographic hash is retained.
• Access controls: Access to player personal data within dbkk's internal systems is restricted on a strict need-to-know basis. Staff who require access to player data to perform their job function are required to use strong authentication and are subject to data access audit logging.
• Vulnerability management: dbkk conducts periodic security assessments of its platform infrastructure to identify and remediate vulnerabilities. Identified vulnerabilities are prioritised and addressed in accordance with their severity rating.
• Incident response: In the event of a data security incident that poses a material risk to player data, dbkk will notify affected players as promptly as practicable and will take all reasonable steps to contain the incident and prevent recurrence.

dbkk retains personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy and to comply with applicable legal obligations. The retention periods applied to the main categories of player data are summarised in the table below.

When the applicable retention period expires, personal data is either securely deleted from dbkk systems or, where deletion is not technically practicable, is anonymised such that it can no longer be linked to any individual player. Anonymised aggregated data may be retained indefinitely for statistical and platform improvement purposes.

As a registered dbkk player, you have a number of rights in relation to the personal data that dbkk holds about you. These rights can be exercised at any time by contacting the dbkk support team via live chat or by emailing [email protected]. All requests will be acknowledged within five business days and fulfilled within 30 days of receipt.

The dbkk platform is strictly intended for individuals aged 21 years and above. dbkk does not knowingly collect personal data from any person under the age of 21. Age verification checks are conducted at registration and may be repeated prior to withdrawal processing. Where a player is found to be under the minimum age, the account will be closed immediately, any winnings will be forfeited, deposits will be returned to the original payment method, and any personal data collected will be deleted as promptly as practicable.

If you are a parent or guardian and you believe that a minor in your care has registered a dbkk account, please contact the support team immediately via live chat. We will investigate and close the account within 24 hours of receiving a verified report. dbkk takes underage gambling seriously and cooperates fully with all efforts to prevent minors from accessing the platform.

dbkk reserves the right to update or modify this Privacy Policy at any time. When material changes are made — for example, changes to the categories of data we collect, the third parties we share data with, or the rights available to you — we will publish the revised policy on this page and update the "Last Updated" date at the top of the document. Where the change is particularly significant, we will also send a notification to the email address registered to your dbkk account.

Your continued use of the dbkk platform following the publication of any update to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any change, you should stop using the platform and may request the closure of your account by contacting the support team. Historical versions of this Privacy Policy are available upon request from the support team.

If you have any questions about this Privacy Policy, wish to exercise any of the rights described in Section 10, or wish to raise a concern about how dbkk handles your personal data, please contact the support team using the details below:

• Live chat: Available 24/7 directly on the dbkk platform. This is the fastest way to reach the support team for routine account and data queries.
• Email: [email protected] — for formal data subject access requests, erasure requests, and privacy complaints. Please include your registered username and a brief description of your request in the subject line.
• Response time: All privacy-related requests are acknowledged within five business days and fully resolved within 30 days of receipt. Complex requests involving large volumes of data may take up to 60 days, in which case we will notify you of the extended timeline.
• Support hours: 24/7, Bangladesh Standard Time (BST, UTC+6).

dbkk is committed to resolving all privacy concerns promptly and transparently. If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter through any applicable legal channel available in your jurisdiction.