db99 Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how db99 ("db99", "we", "us", "our") collects, uses, stores, discloses, and protects the personal data of individuals ("you", "your", "Player", "User") who access or use the db99 website, mobile platform, and associated betting and gaming services.

db99 is committed to handling your personal data transparently, securely, and in a manner consistent with applicable data protection principles. By registering an account, making a deposit, or otherwise using the db99 platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein.

This Policy forms part of the db99 Terms & Conditions, which are incorporated by reference. If you do not agree with this Policy, you must stop using the db99 platform immediately.

Data Controller

For the purposes of this Policy, db99 acts as the data controller in respect of the personal data it collects from players accessing the platform from Bangladesh and other permitted jurisdictions. The data controller is responsible for determining the purposes and means by which personal data is processed.

All data protection queries, requests to exercise data subject rights, and privacy-related complaints should be directed to the db99 support team using the contact details set out in Section 14 of this Policy. We will endeavour to respond to all data-related enquiries within 30 calendar days of receipt.

Data We Collect

db99 collects personal data that is necessary to provide our betting and gaming services, verify player identity, process financial transactions, and maintain a safe and compliant platform. The categories of personal data we collect include, but are not limited to, the following:

Identity Data

• Full legal name as it appears on an official government-issued identity document
• Date of birth (used for mandatory age verification — players must be 21 or older)
• Nationality and country of residence
• Copies of identity documents where required for verification purposes (e.g., National ID card, passport, driver's licence)

Contact Data

• Email address (primary communication channel for account notifications and support)
• Mobile phone number (used for account verification, one-time passcodes, and support communications)
• Residential address including district, city, and postal code (e.g., Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh, Cox's Bazar)

Financial Data

• Payment method details including bKash account number, Nagad number, Rocket number, Upay credentials, bank account references, and card information (partial numbers only — db99 does not store full card numbers)
• Transaction history including deposit amounts, withdrawal requests, and transaction reference identifiers
• Source of funds documentation where requested for anti-money laundering compliance purposes

Account & Activity Data

• db99 username and encrypted password credentials
• Betting and gaming history including markets wagered, stake amounts, odds accepted, and settlement outcomes
• Session data including login timestamps, session duration, and logout events
• Responsible gaming preferences including any deposit limits, cooling-off periods, or self-exclusion instructions you have applied to your account
• Bonus and promotion participation records

Technical Data

• IP address and approximate geographic location at the time of access
• Device type, operating system, and browser information
• Referring URL and on-site navigation path data
• Cookie identifiers and session tokens (see Section 9 for full details on cookie use)

Communications Data

• Records of correspondence between you and db99 customer support, including chat transcripts, email threads, and any attachments submitted
• Survey responses and feedback submissions where voluntarily provided

How We Collect Your Data

db99 collects personal data through the following channels:

Direct Interactions

The majority of the personal data we hold about you is provided directly by you during the account registration process, when completing identity verification steps, when making deposits or requesting withdrawals, when contacting our customer support team, and when responding to surveys or promotional campaigns.

Automated Technologies

As you interact with the db99 platform, we automatically collect certain technical data about your device, browser, and browsing behaviour through the use of cookies, server logs, pixel tags, and similar tracking technologies. This data is collected to ensure the security of your session, to detect and prevent fraudulent activity, and to improve platform performance. Please refer to Section 9 for a full explanation of our cookie practices.

Third-Party Sources

In certain circumstances, db99 may receive or verify personal data about you from third-party sources, including:

• Payment processors and financial institutions (e.g., bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank) for the purpose of confirming the status of financial transactions
• Identity verification and anti-fraud service providers used to validate identity documents and screen against sanctions lists
• Regulatory or law enforcement authorities where db99 is legally required to obtain or disclose information

Purpose & Legal Basis for Processing

db99 processes your personal data only for specific, clearly defined purposes. For each processing activity, we rely on one of the following legal bases: (a) the performance of a contract with you; (b) compliance with a legal obligation; (c) our legitimate interests, where these do not override your rights; or (d) your explicit consent.

Contract Performance

• Creating and managing your db99 player account
• Processing deposits and withdrawals via bKash, Nagad, Rocket, and other supported payment methods
• Settling sports bets and casino game rounds and crediting winnings to your account balance
• Providing customer support and resolving account disputes
• Administering bonuses, promotions, and loyalty programmes in which you have enrolled

Legal Compliance

• Verifying your age and identity in accordance with our 21+ age policy
• Conducting anti-money laundering checks and screening transactions against applicable sanctions lists
• Retaining financial and transactional records for the minimum periods required by applicable law
• Responding to lawful requests from regulatory or law enforcement authorities

Legitimate Interests

• Detecting, investigating, and preventing fraud, cheating, collusion, and other prohibited conduct on the platform
• Monitoring platform security and protecting the integrity of games and betting markets
• Analysing aggregate usage data to improve the db99 platform, product offerings, and user experience
• Managing responsible gaming risks and identifying players who may be experiencing gambling-related harm

Consent

• Sending you personalised promotional communications, offers, and bonus notifications where you have opted in to receive such communications
• Placing non-essential cookies on your device for analytics and performance measurement purposes (see Section 9)

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of any processing carried out prior to the withdrawal.

Data Sharing & Disclosure

db99 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We may, however, share your data with the following categories of recipients where necessary and proportionate to the purpose:

Payment Service Providers

We share the financial data necessary to process your deposit and withdrawal requests with our payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These providers process your payment data solely for the purpose of completing your transactions and are contractually required to maintain the confidentiality and security of your data.

Game Studios & Technology Providers

Certain technical data (such as session tokens and player identifiers) is shared with our game studio partners — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe — for the purpose of delivering live casino and slot content within the db99 platform. These studios do not receive your name, payment details, or contact information.

Identity Verification Providers

Where required for account verification purposes, we may share identity documents and biographic data with third-party KYC (Know Your Customer) service providers. These providers process your data under strict contractual data protection obligations and use it only for the identity verification services they supply to db99.

Fraud Prevention & Security Services

Technical and account activity data may be shared with fraud prevention services, cyber-security providers, and responsible gaming monitoring tools to protect the integrity of the db99 platform and the safety of all players.

Regulatory & Law Enforcement Authorities

db99 may be required by law to disclose personal data to governmental bodies, regulatory authorities, courts, or law enforcement agencies. In such cases, we will disclose only the minimum data necessary to comply with the legal obligation and will, where legally permitted to do so, notify you of the disclosure.

Data Retention

db99 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any applicable legal, regulatory, accounting, or reporting requirements.

Active Account Data

While your db99 account remains active, we retain all account, identity, financial, and activity data associated with your account. You may request closure of your account at any time; however, certain categories of data must be retained beyond account closure as described below.

Post-Closure Retention

Following account closure — whether initiated by you or by db99 — we are required to retain financial transaction records and identity verification data for a minimum period of five years to comply with anti-money laundering obligations and general financial record-keeping requirements. After this retention period has elapsed, data will be securely deleted or anonymised.

Self-Exclusion Records

Records of self-exclusion requests are retained for the full duration of the self-exclusion period and for a minimum period of five years thereafter, to prevent the re-registration of previously self-excluded players and to comply with responsible gaming obligations.

Marketing Communications

If you have consented to receive marketing communications from db99, we will retain your contact preferences and communications history for as long as you remain subscribed. Upon unsubscribing, your data will be removed from active marketing lists within 30 days, though a record of your opt-out will be retained to honour your preference.

Security Measures

db99 takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure.

Encryption

All data transmitted between your browser or device and the db99 platform is protected using SSL (Secure Socket Layer) / TLS (Transport Layer Security) encryption. This ensures that your personal and financial data cannot be intercepted by third parties during transmission.

Access Controls

Access to personal data within the db99 organisation is strictly limited to personnel who require that access to perform their job functions. All staff with access to personal data are bound by confidentiality obligations and receive regular data security training.

Password Security

db99 stores account passwords in hashed and salted form using industry-standard cryptographic algorithms. We do not store passwords in plain text and will never ask you to provide your password via email or any channel other than the secure db99 login page.

Fraud Monitoring

db99 employs automated monitoring systems to detect unusual account activity, suspicious login attempts, and potentially fraudulent transactions in real time. Anomalous activity triggers security alerts and may result in temporary account suspension pending investigation.

Third-Party Security

All third-party providers who process personal data on behalf of db99 are required to implement and maintain security standards at least equivalent to those applied by db99 itself. Data processing agreements are in place with all such providers.

Cookies & Tracking Technologies

db99 uses cookies and similar tracking technologies to operate the platform, enhance your experience, and gather analytics data that helps us understand how players use our services. This section explains the types of cookies we use and how you can manage your preferences.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites function correctly, to remember your preferences, and to provide information to the site owner about how users interact with the site. Cookies cannot execute programmes or deliver viruses to your device.

Types of Cookies Used by db99

• Strictly Necessary Cookies: These cookies are essential for the db99 platform to operate. They enable core functions such as user authentication, session management, and security. These cookies cannot be disabled without severely impairing the functionality of the platform.
• Performance & Analytics Cookies: These cookies collect aggregated, anonymised data about how players navigate the db99 platform, which pages are visited most frequently, and whether error messages are encountered. This information is used to improve platform performance and user experience.
• Functionality Cookies: These cookies remember your preferences — such as language settings and display preferences — to provide a more personalised experience on return visits.
• Marketing & Targeting Cookies: Where you have consented, these cookies track your browsing activity across the db99 platform to enable us to deliver promotional content and bonus offers that are relevant to your interests and activity history. These cookies are only placed with your explicit consent.

Managing Cookie Preferences

You may control and manage cookies through your browser settings. Most browsers allow you to view, delete, and block cookies from specific websites. Please note that blocking strictly necessary cookies will impair your ability to use the db99 platform. Detailed guidance on managing cookies is available through the help pages of your browser provider.

Your Data Rights

As a db99 player, you have a number of rights in respect of the personal data we hold about you. We are committed to honouring these rights and will respond to all valid requests within 30 calendar days of receipt.

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how and why we process it.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or supplement it without undue delay.
• Right to Erasure: In certain circumstances you have the right to request the deletion of your personal data. This right is subject to exceptions where retention is required by law or for the establishment, exercise, or defence of legal claims.
• Right to Restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on our legitimate interests. You also have an absolute right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that took place before the withdrawal.

To exercise any of these rights, please contact the db99 support team at [email protected]. We may require you to verify your identity before processing your request to ensure that personal data is not disclosed to an unauthorised party.

Minors & Age Restriction

The db99 platform is strictly intended for use by adults aged 21 years and above. db99 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the db99 account registration process, and additional documentary verification may be requested at any point during the customer relationship.

If db99 becomes aware that personal data has been collected from a person under the age of 21 — whether through a misrepresentation made during registration or otherwise — we will take immediate steps to close the account, delete the associated personal data (subject to any mandatory legal retention obligations), and return any deposited funds to the payment source used. In cases of deliberate misrepresentation of age, db99 reserves the right to retain data for the purpose of preventing future registration attempts.

Parents or guardians who have reason to believe that a minor has registered on db99 are encouraged to contact our support team immediately at [email protected].

Third-Party Links & Services

The db99 platform may contain references to third-party game studios, payment service providers, and technology partners. While db99 carefully selects its third-party partners, we do not control the privacy practices of third-party websites or services that may be linked to or from our platform.

This Privacy Policy applies solely to the db99 platform and does not extend to any third-party website or service. Players are encouraged to review the privacy policies of any third-party providers they interact with — including payment platforms such as bKash and Nagad — as these providers operate under their own terms and data handling practices independently of db99.

Changes to This Privacy Policy

db99 reserves the right to update and revise this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or platform features. The "Last updated" date displayed at the top of this page will be revised whenever a material change is made to the Policy.

Where changes are material — that is, where they significantly affect how we process your personal data or the rights available to you — db99 will take reasonable steps to notify you in advance. This may include displaying a notice on the db99 platform or sending a notification to the email address registered on your account.

Your continued use of the db99 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any revision to this Policy, you should cease using the platform and may request account closure as described in the db99 Terms & Conditions.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way db99 handles your personal data, please contact our dedicated data protection support team using the details below:

• Email: [email protected]
• Subject Line: Please include "Privacy Policy Query" or "Data Rights Request" in your subject line to ensure your message is routed correctly
• Support Hours: 24 hours a day, 7 days a week, 365 days a year
• Languages: English and Bengali speaking agents available
• Response Time: db99 aims to acknowledge all privacy-related enquiries within 5 business days and to provide a full response within 30 calendar days

Where you are not satisfied with our response to a privacy concern, you may have the right to lodge a complaint with a relevant data protection supervisory authority in your jurisdiction.