db98 Privacy Policy

1. Introduction

db98 is committed to protecting the privacy and personal data of every player who uses the platform. This Policy has been drafted in plain, formal English to ensure that all players — including those accessing the platform from Dhaka, Chittagong, Sylhet, Khulna, and across Bangladesh — can clearly understand how their personal information is managed.

This Policy applies to all personal data collected through the db98 website, mobile interface, customer support channels, and any other touchpoint through which you interact with the platform. It should be read alongside the db98 Terms and Conditions and Responsible Gaming Policy, both of which are available via the footer navigation of this site.

We review and update this Policy periodically to reflect changes in our practices, technology, applicable regulations, or legal requirements. The date at the top of this Policy indicates when it was last revised. Continued use of the platform following an update constitutes your acceptance of the revised Policy.

2. Personal Data We Collect

db98 collects the following categories of personal data, depending on how you interact with the platform:

Category	Examples	When Collected
Identity Data	Full legal name, date of birth, national ID or passport number, photograph	Account registration and KYC verification
Contact Data	Email address, Bangladesh mobile number, residential address	Account registration and profile updates
Financial Data	bKash / Nagad / Rocket / Upay account numbers, Visa / Mastercard details (masked), transaction history, deposit and withdrawal records	Payment processing
Technical Data	IP address, browser type and version, device type and operating system, time zone, cookie identifiers, session tokens	Automatically on platform access
Usage Data	Pages visited, games played, bets placed, session duration, click paths, feature interactions	Automatically during platform use
Communications Data	Live chat transcripts, support emails, feedback submissions	When you contact our support team
Responsible Gaming Data	Deposit limit settings, self-exclusion requests, cooling-off periods, account restriction history	When you use responsible gaming tools

db98 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where this is strictly required by applicable law or where you have provided it voluntarily in the context of a responsible gaming request.

3. How We Collect Your Data

We collect personal data through the following means:

• Direct interactions: Data you provide when you register an account, complete identity verification, make a deposit or withdrawal, contact support, or update your profile settings.
• Automated technologies: Technical and usage data collected automatically via cookies, server logs, and similar tracking technologies when you access or navigate the platform.
• Third-party sources: Identity and fraud-risk data received from our KYC verification partners and payment processors (such as bKash, Nagad, and card scheme operators) to supplement and verify the information you provide directly.
• Publicly available sources: In limited circumstances, we may cross-reference publicly available information (such as official sanctions lists) as part of our legal compliance obligations.

4. Legal Basis for Processing

db98 processes your personal data only where we have a valid legal basis to do so. The applicable legal bases are:

• Contractual necessity: Processing required to perform our contract with you — including operating your account, processing transactions, and providing access to games and betting markets.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, and record-keeping obligations.
• Legitimate interests: Processing that serves our legitimate business interests where those interests are not overridden by your data protection rights — for example, fraud prevention, platform security, and product improvement analytics.
• Consent: For optional processing activities — such as sending you promotional communications — we rely on your explicit consent, which you may withdraw at any time without affecting the lawfulness of processing carried out before withdrawal.

5. How We Use Your Personal Data

db98 uses the personal data we collect for the following purposes:

• To create, verify, and maintain your db98 account, including age verification to enforce the 21+ eligibility requirement.
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to reconcile account balances accurately.
• To detect, investigate, and prevent fraudulent activity, account abuse, money laundering, and other prohibited conduct as described in the Terms and Conditions.
• To comply with applicable legal and regulatory obligations, including responding to lawful requests from competent authorities.
• To personalise your experience on the platform, including surfacing relevant games, betting markets, and promotional offers based on your activity history.
• To provide customer support, resolve disputes, and respond to enquiries submitted through live chat or email.
• To administer our responsible gaming programme, including applying deposit limits, self-exclusion periods, and account restrictions that you have requested or that we are obligated to apply.
• To conduct internal analytics, test and improve platform features, and ensure the technical performance and security of the service.
• To send you transactional communications (such as deposit confirmations and withdrawal notifications) and, where you have consented, promotional communications about offers, new games, and platform updates.

6. Sharing Your Personal Data

db98 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share personal data only in the following limited circumstances:

• Service providers: We share data with trusted third-party vendors who process data on our behalf under binding data processing agreements — including KYC and identity verification providers, payment processors, fraud detection services, and hosting infrastructure providers. These parties are contractually prohibited from using your data for any purpose beyond the specific service they provide to db98.
• Payment partners: When you make a deposit or request a withdrawal, necessary transaction data is shared with the relevant payment provider (bKash, Nagad, Rocket, Upay, Visa, or Mastercard) to facilitate and settle the transaction.
• Legal and regulatory authorities: We may disclose personal data to competent government authorities, law enforcement agencies, or regulators where required by applicable law, court order, or regulatory directive. We will notify you of such disclosures where permitted by law.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of our assets, personal data held by db98 may be transferred to the relevant successor entity. We will notify affected players of any such transfer in advance where practicable.
• With your consent: In any other circumstance not described above, we will seek your explicit consent before sharing your personal data with a third party.

7. Cookies & Tracking Technologies

db98 uses cookies and similar technologies (such as pixel tags and local storage) to operate and improve the platform. Cookies are small text files stored on your device that help us recognise you between sessions and understand how the platform is used.

We use the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function correctly. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without disrupting platform functionality.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate the platform — including pages visited, session duration, and error events. This data is used solely to improve the platform experience and is not linked to your individual identity.
• Preference cookies: Used to remember your platform settings and preferences (such as display language and notification choices) between sessions.

You can manage or disable optional cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality or performance of the db98 platform. Instructions for managing cookies are available in the help documentation of all major browsers.

8. Data Retention

db98 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for a minimum of five years from the date of account closure, in line with standard AML and KYC record-keeping obligations.
• Financial and transaction data: Retained for a minimum of five years from the date of each transaction to satisfy financial record-keeping requirements.
• Communications and support data: Retained for a period of three years from the date of the relevant interaction, or longer if the matter relates to an open dispute or legal proceeding.
• Responsible gaming data: Self-exclusion records and restriction history are retained for the duration of the exclusion period plus a minimum of five years to prevent circumvention of exclusion agreements.
• Technical and usage data: Aggregated and anonymised after 24 months. Raw session log data is retained for a maximum of 12 months for security and fraud investigation purposes.

Where personal data is no longer required for any lawful purpose, it is securely deleted or irreversibly anonymised in accordance with our internal data disposal procedures.

9. Data Security

db98 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption of sensitive data fields (including payment details and identity documents) in database storage.
• Role-based access controls that restrict internal access to personal data on a strict need-to-know basis.
• Regular security audits, penetration testing, and vulnerability assessments conducted by qualified security professionals.
• Multi-factor authentication requirements for all internal administrative systems.
• Documented incident response procedures with defined timelines for breach detection, containment, and notification.

While db98 takes all reasonable steps to protect your data, no internet-based service can guarantee absolute security. You are responsible for maintaining the security of your own login credentials. If you believe your db98 account has been compromised, you must notify us immediately via live chat or by emailing [email protected].

10. Your Data Subject Rights

As a data subject, you have the following rights in relation to the personal data db98 holds about you. To exercise any of these rights, please submit a written request to [email protected]. We will acknowledge your request within five business days and aim to respond substantively within 30 calendar days.

• Right of access: You may request a copy of the personal data db98 holds about you, along with information about the purposes for which it is processed and the third parties with whom it has been shared.
• Right to rectification: You may request correction of inaccurate or incomplete personal data held in your account. Minor corrections (such as updating your contact email) can also be made directly through your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal and regulatory retention obligations. We will inform you if retention obligations prevent full erasure.
• Right to data portability: You may request a copy of personal data you have provided to db98 in a structured, commonly used, machine-readable format where the processing was carried out on the basis of consent or contractual necessity.
• Right to object: You may object to processing based on legitimate interests, including profiling for personalisation purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to restrict processing: You may request that we restrict processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of the data is under investigation.

11. Children's Privacy

The db98 platform is strictly intended for adults aged 21 and above. We do not knowingly collect or process personal data from individuals under the age of 21. If we become aware that we have inadvertently collected data from a person under 21, we will take immediate steps to delete that data and close the associated account.

If you believe that a person under the age of 21 has registered an account with db98, please notify us immediately at [email protected] so that we can investigate and take appropriate action without delay.

12. Third-Party Links

The db98 platform may contain references to third-party services — such as payment partners (bKash, Nagad, Rocket, Upay) and game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi). These third parties operate under their own privacy policies and data practices, for which db98 accepts no responsibility.

We encourage you to review the privacy policy of any third-party service you interact with in connection with your db98 account, particularly those relating to your chosen payment method. Your use of third-party services is entirely at your own discretion and risk.

13. Updates to This Policy

db98 reserves the right to update this Privacy Policy at any time. Where changes are material — meaning they significantly affect your privacy rights or the way we process your data — we will provide advance notice via a notice posted on the platform or by email to the address registered to your account, at least 14 days before the changes take effect.

The most current version of this Policy will always be available at db98.io/privacy-policy. We recommend reviewing this page periodically to stay informed of any updates. The "Last Updated" date at the top of this document indicates when the current version was published.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way db98 handles your personal data, please contact our support team using the details below. All contact information is displayed as plain text and is not a clickable element:

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the live chat widget accessible on all pages of the platform
• Support Hours: 24/7 — Bangladesh Standard Time (BST, UTC+6), including all national public holidays

For data subject access requests, deletion requests, or objections to processing, please include "Privacy Request" in the subject line of your email and provide your registered account username and mobile number so that we can locate your records efficiently. We aim to acknowledge all privacy-related requests within five business days and to provide a full response within 30 calendar days.