What personal data is collected

• Account and identity details: name, date of birth, gender, nationality, documents for KYC (for example, NID or passport) and verification images.
• Contact details: mobile number, email, billing or residential address.
• Payment and transaction information: partial card data, mobile wallet or bank identifiers, deposits, withdrawals, and betting records.
• Technical and usage data: IP address, device and browser, cookies, logins, page views, session timestamps, and approximate location.
• Preferences and settings: language, responsible gaming limits, notification choices.

Why the information is collected

• To provide online services, open and manage the user account, and process payments.
• To verify age and identity, prevent fraud and money laundering, and meet legal obligations.
• To secure the platform, fix issues, and improve features based on usage patterns.
• To communicate service updates and respond to support requests.

Protection measures

• Encryption in transit (TLS) and at rest for sensitive data.
• Role-based access controls, staff authentication, and least-privilege permissions.
• Network segregation, audit logging, and monitoring for suspicious activity.
• Vendor due diligence and contractual safeguards for processors.
• Regular security testing and an incident response process.

User rights

• Access personal information, request a copy, and know the sources and recipients.
• Correct inaccurate data and update profile details.
• Request deletion, restrict processing, or object to certain uses, including direct marketing.
• Data portability for information provided to us, where technically feasible.
• Withdraw consent at any time, without affecting earlier lawful processing.

Retention

• Account, KYC, and transaction records may be stored for at least five years after account closure to meet anti-money laundering requirements.
• Log and security records are kept for operational and legal needs.
• See the Use of Cookies section for cookie retention.

Compliance

• DBBet follows applicable laws of Bangladesh, including cyber security and consumer protection requirements, and applies international best practices aligned with GDPR principles.

How we use personal data

• Account services: registration, identity checks, age verification, and account security.
• Transactions: deposits, withdrawals, payment reconciliation, and chargeback handling.
• Service operations: troubleshooting, performance monitoring, and platform optimisation.
• Responsible gaming: setting and enforcing limits, self-exclusion, and support referrals where requested.
• Analytics: measuring usage, detecting errors, and improving user experience.
• Compliance: KYC/AML screening, record-keeping, dispute resolution, and responses to lawful requests.
• Communications: service messages, policy updates, and notices required by law. Marketing messages are sent only where permitted, and users can opt out at any time.

Processing is based on lawful grounds such as consent, performance of a contract, legitimate interests, and compliance with legal obligations. Processing is conducted transparently and limited to the stated purposes.

How users can exercise their rights

• Access: request a copy of your data and key details about its collection and use.
• Update: correct or update profile, contact, and payment details where available in your account.
• Delete: request deletion of personal data. Certain records may be retained where required by law or for legitimate interests, such as fraud prevention and accounting.

Process

• Submit a request through the help centre or the contact page on the website.
• We may ask for identity verification before actioning a request.
• We aim to respond within 30 days. Complex requests may require more time, and you will be informed.

By using DBBet, you consent to security checks and to processing of payment information by payment providers and banks for verification, settlement, and fraud prevention.

• The services are intended for adults aged 18 and above. Registration and use by minors are not permitted.
• The operator cannot confirm a person’s age without supporting documents. Verification may be requested at any time.
• If a minor’s information is discovered, the account will be closed and related data will be deleted where lawful.
• Parents or legal guardians can request deletion by contacting support and providing proof of guardianship and the minor’s details.

• Personal data may be processed in other countries where our service providers, payment partners, KYC vendors, and cloud platforms operate.
• Using the website and services means you consent to such transfers for the purposes explained in this document.
• Partners are bound by confidentiality and data protection obligations. We implement contractual safeguards, access controls, and encryption to protect information during transfer and storage.

• This Privacy Policy sets rules for personal data handling. A separate disclaimer or notice may clarify, limit, or expand how these rules apply in specific cases.
• The disclaimer takes effect when the user accepts this policy by signature, acceptance, or accession made through the website or account interface.
• If any term conflicts with mandatory law, the lawful requirement will prevail. Rights and remedies under applicable law remain available to the user.

• Cookies are small files stored on a device that help websites remember a user and understand how services are used.
• We use cookies for statistics, behaviour analysis, personalisation, security, and site improvement.
• Types: essential (required for the site), preference, analytics, and advertising cookies.
• Retention: up to 1 year from the last visit, unless the browser removes them earlier.
• Users can manage cookies through browser settings or consent tools on the site. Blocking some cookies may affect functionality.

• Using DBBet and creating an account means full acceptance of this Privacy Policy and any updates posted on the website.
• If versions differ, the most recent version published on the site will prevail and govern the collection and processing of personal data.

• Personal data may be shared where necessary with third parties, such as payment processors, verification providers, analytics vendors, cloud hosts, professional advisors, dispute resolution bodies, and public authorities.
• Sharing may occur to comply with law, manage disputes, enforce agreements, prevent fraud, or deliver requested services.
• A list or categories of service providers may be published on the website; if not, users will be informed of the purpose and scope when required.
• Providing data for these purposes constitutes consent to transfer and processing by those parties, each operating under their own privacy policies.

• The website may include links to external websites that are operated by third parties and have their own privacy policies.
• DBBet is not responsible for how those websites collect, use, or share information.
• Users should review the privacy notices of any external site before providing personal data or continuing to use those services.