dbt99 Privacy Policy
At dbt99, your privacy is a core responsibility. This Privacy Policy explains exactly what personal data we collect when you use our platform, why we collect it, how we use and protect it, and what rights you hold over your own information. We are committed to full transparency in every aspect of our data practices.
Data Security First
All personal data stored on dbt99 servers is protected by industry-standard encryption at rest and in transit. We use SSL/TLS protocols on every page and API endpoint of the platform.
No Unnecessary Sharing
dbt99 does not sell, rent, or trade your personal data to third-party marketers. Your information is shared only where strictly required for platform operation, payment processing, or legal compliance.
Your Rights, Respected
You have the right to access, correct, and request deletion of your personal data at any time. Submit a request through our support team and we will respond within 30 days.
Last Updated: Jan 2026
This Privacy Policy was last reviewed and updated on 1 January 2026. We commit to reviewing this policy at least once every twelve months and notifying registered users of any material changes.
Section 1
Data We Collect
dbt99 collects personal data through several channels: directly from you when you register, make a deposit, contact support, or use platform features; automatically through your device and browser when you access the platform; and from third-party service providers involved in identity verification, payment processing, and fraud prevention. The categories of data we collect are set out below.
| Data Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, national ID number, passport number | Registration form, KYC document upload |
| Contact Data | Email address, mobile number, residential address, city (e.g., Dhaka, Chittagong, Sylhet) | Registration form, account settings |
| Financial Data | bKash/Nagad/Rocket mobile wallet numbers, bank account details, transaction history, deposit and withdrawal amounts in ৳ | Payment forms, payment provider APIs |
| Verification Data | Copies of government-issued ID, passport photo page, utility bills, bank statements | KYC document upload portal |
| Technical Data | IP address, device fingerprint, browser type, operating system, screen resolution, time zone (BST UTC+6) | Automatic collection via cookies and server logs |
| Usage Data | Pages visited, games played, bet amounts, session duration, click patterns, search queries within the platform | Platform analytics tools |
| Communications Data | Live chat transcripts, support ticket content, email correspondence with the dbt99 team | Customer support channels |
| Marketing Preferences | Opt-in/opt-out status for promotional emails, SMS notifications, and platform announcements | Account settings, consent prompts |
dbt99 does not knowingly collect personal data from individuals under the age of 18. If we become aware that a minor has submitted personal data to our platform, that data will be deleted and the associated account closed immediately. If you believe a minor has registered on dbt99, please contact [email protected] at once.
Where dbt99 collects special category data — for example, information about a player's financial circumstances provided in the context of a responsible gaming request — such data is collected only with your explicit consent and is handled with an elevated level of care and restricted access within the dbt99 compliance team.
Minimum Data Principle
dbt99 adheres to a data minimisation approach. We collect only the personal data that is strictly necessary for the specific purpose for which it is collected. We do not collect data speculatively or for undefined future uses. Every data field in our registration form and KYC process exists because it serves a clearly defined operational, compliance, or legal purpose.
Mobile Wallet Data
When you deposit or withdraw via bKash, Nagad, Rocket, or Upay, dbt99 receives a transaction confirmation reference and your registered mobile wallet number from the payment provider. dbt99 does not store your mobile banking PIN or full payment credentials — only the minimum reference data needed to match the transaction to your account.
Section 2
How We Use Your Data
dbt99 uses personal data for the following defined purposes. Each purpose is supported by a lawful basis — either the performance of our contract with you, compliance with a legal obligation, our legitimate interests as a platform operator, or your explicit consent where required.
- Account Registration and Management: We use your identity and contact data to create and maintain your dbt99 account, verify your age and identity, and communicate important account-related notifications such as deposit confirmations, withdrawal updates, and security alerts.
- Payment Processing: We use your financial data and payment provider transaction references to credit deposits to your dbt99 wallet, process withdrawal requests to your registered mobile wallet or bank account, and maintain accurate financial records of all transactions in your account history.
- Identity Verification and KYC Compliance: We use identity and verification documents to confirm that you meet the 18+ age requirement, that your identity is genuine, and that your payment instruments are registered in your own name. This is a legal and operational obligation that cannot be waived.
- Fraud Prevention and Platform Security: We use technical data, usage data, and financial data to detect and prevent fraudulent activity, unauthorised account access, money laundering, collusion, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions. This processing is based on our legitimate interests in maintaining a secure and fair platform for all players.
- Responsible Gaming: We use usage data — including session duration, betting frequency, deposit patterns, and self-declared responsible gaming preferences — to monitor for indicators of problem gambling and to implement any deposit limits, cooling-off periods, or self-exclusion orders you have requested or that our responsible gaming team has applied proactively. Visit our Responsible Gaming page for full details.
- Customer Support: We use your identity, contact, and communications data to respond to your support queries, process complaints, and maintain a record of your support interactions. These records help us provide consistent support and investigate disputes accurately.
- Platform Improvement: We use aggregated and anonymised usage data to analyse how players interact with the dbt99 platform, identify areas for improvement, test new features, and optimise the overall player experience. Aggregated analytics data does not identify individual players.
- Marketing and Promotions: With your explicit consent, we use your contact data and marketing preferences to send you information about dbt99 promotions, bonus offers, seasonal campaigns (such as BPL, Eid, or Pohela Boishakh specials), and platform news. You may withdraw consent and unsubscribe from marketing communications at any time via your account settings or by contacting support.
- Legal and Regulatory Compliance: We may process and disclose your personal data where required to do so by law, court order, or at the request of a competent regulatory or law enforcement authority. dbt99 will not disclose your data to authorities beyond what is strictly required by the applicable legal obligation.
- Contract: Account creation, payment processing, support
- Legal Obligation: KYC, AML, age verification, regulatory reporting
- Legitimate Interests: Fraud prevention, platform security, analytics
- Consent: Marketing emails, SMS promotions, optional cookies
Marketing Opt-Out
dbt99 will not send you promotional messages without your prior consent. If you have previously opted in and wish to stop receiving marketing communications, you can update your preferences in your account dashboard at any time or contact [email protected]. Opt-out requests are processed within 5 business days.
Analytics & Improvements
Platform analytics data used for improvement purposes is aggregated and stripped of personal identifiers before analysis. Individual player behaviour data is not shared with third parties for analytics purposes. Our internal analytics help us build a better, faster, and fairer platform for all dbt99 players across Bangladesh.
Section 4
Data Sharing & Third Parties
dbt99 does not sell your personal data. We share personal data with third parties only where it is strictly necessary to operate the platform, comply with legal obligations, or protect the security and integrity of the service. All third-party service providers who handle personal data on behalf of dbt99 are bound by data processing agreements that require them to handle your data securely, use it only for the specified purpose, and not to share it further without authorisation.
Categories of Third-Party Recipients
- Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, and Mastercard receive the minimum financial data required to process your deposit and withdrawal transactions. These providers operate under their own privacy policies and are regulated financial institutions.
- Identity Verification Providers: dbt99 may use third-party KYC and identity verification service providers to validate the documents you submit during the verification process. These providers receive your identity documents solely for verification purposes and are contractually prohibited from retaining or repurposing your data.
- Game Content Providers: Certified game studios including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming may receive a pseudonymous player identifier (not your name or contact details) to deliver game sessions, record game history, and calculate RTP statistics. These providers do not receive your personally identifiable information.
- Fraud Prevention and Security Partners: dbt99 works with specialist security and fraud detection technology providers. These partners may receive technical data such as IP addresses and device fingerprints to assist in identifying suspicious activity. All such providers are bound by strict data processing agreements.
- Legal and Regulatory Authorities: dbt99 will disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by a valid legal obligation, court order, or regulatory instruction. dbt99 will disclose only the minimum data required to satisfy the legal request.
- Internal Group Entities: Where dbt99 operates as part of a corporate group, personal data may be shared with affiliated entities within the group for the purposes of platform management, consolidated compliance reporting, and centralised customer support operations. All group entities are subject to the same privacy standards as dbt99 itself.
dbt99 does not transfer personal data to countries or territories with inadequate data protection standards without first implementing appropriate safeguards such as contractual data transfer agreements. Where data is processed outside of Bangladesh, dbt99 ensures that equivalent protections to those described in this Privacy Policy are in place.
Payment Provider Privacy
When you transact via bKash, Nagad, Rocket, or Upay, your transaction is also subject to the respective payment provider's own privacy policy. dbt99 recommends that you review the privacy documentation of any payment provider you use, as their data practices are independent of dbt99's.
Data Processing Agreements
Every third-party service provider that handles personal data on behalf of dbt99 is required to sign a Data Processing Agreement (DPA) before being granted access to any player data. These agreements specify the permitted purposes, data handling standards, security requirements, and deletion obligations applicable to that provider.
Section 5
Data Retention & Security
Data Retention
dbt99 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve any disputes or enforce our agreements. The following retention periods apply as a general guide:
| Data Type | Retention Period |
|---|---|
| Account registration and identity data | Duration of account + 5 years after closure |
| KYC / identity verification documents | Duration of account + 5 years after closure |
| Transaction and financial records | Duration of account + 7 years after closure (financial compliance) |
| Customer support communications | 3 years from the date of each interaction |
| Game session and betting history | Duration of account + 5 years after closure |
| Technical / server log data | 12 months from collection date |
| Marketing consent records | Until consent is withdrawn + 2 years thereafter |
Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised or aggregated data — which cannot identify you — may be retained for statistical and analytical purposes indefinitely.
Data Security
dbt99 implements a layered security architecture to protect personal data against unauthorised access, loss, alteration, or disclosure. Our security measures include:
- TLS/SSL encryption on all data transmissions between your device and the dbt99 platform
- Encryption of sensitive data fields at rest using AES-256 standard encryption
- One-way cryptographic hashing of account passwords — dbt99 staff cannot view your password in plain text
- Role-based access controls ensuring that dbt99 staff can access player data only where their role requires it
- Regular independent security audits and penetration testing of the dbt99 platform and infrastructure
- Intrusion detection systems and 24/7 monitoring of platform infrastructure for anomalous activity
- Mandatory security training for all dbt99 staff who handle personal data
- Strict data breach response procedures, including notification protocols in the event of a significant breach
While dbt99 takes all reasonable technical and organisational precautions to protect your data, no internet-connected platform can guarantee absolute security. You play an important role in data security by keeping your account credentials confidential and notifying us immediately if you suspect any unauthorised access to your dbt99 account.
Secure Infrastructure
dbt99 servers are hosted in secure data centres with physical access controls, redundant power supplies, and hardware-level encryption. Server access is restricted to authorised infrastructure personnel only, and all access events are logged and audited.
Secure Deletion
When personal data reaches the end of its retention period, dbt99 follows a secure deletion protocol that renders the data irrecoverable. For digital data, this involves cryptographic erasure or multi-pass overwriting. For any physical documents held, secure shredding procedures are followed in accordance with our data destruction policy.
Section 6
Your Privacy Rights
dbt99 respects your rights over your personal data. The following rights are available to all registered players. To exercise any of these rights, contact the dbt99 support team at [email protected] with your request. dbt99 will respond within 30 days of receipt and will request sufficient identification to verify that the request is coming from the account holder before processing it.
- Right of Access: You have the right to request a copy of the personal data dbt99 holds about you. This includes your registration data, transaction history, KYC records, and support interaction history. dbt99 will provide this information in a structured, readable format upon verified request.
- Right to Rectification: If any personal data dbt99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic contact information directly through your account settings. For identity or KYC data corrections, contact the support team with the updated documentation.
- Right to Erasure: You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw the consent on which processing was based. Please note that dbt99 may be required by law or legitimate compliance obligation to retain certain data (such as financial transaction records) even after an erasure request, in which case we will inform you of the data that must be retained and for how long.
- Right to Restrict Processing: You have the right to request that dbt99 restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved, or where you have objected to processing and we are assessing whether our legitimate interests override your rights.
- Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transfer it to another service provider.
- Right to Object: You have the right to object to the processing of your personal data where that processing is based on dbt99's legitimate interests. You also have an absolute right to object to your data being used for direct marketing purposes at any time, with no need to provide justification.
- Right to Withdraw Consent: Where dbt99 processes your personal data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.
- Right Not to Be Subject to Automated Decision-Making: dbt99 uses automated systems for fraud detection and responsible gaming monitoring. Where a significant decision affecting your account (such as an account suspension) is made through an automated process, you have the right to request human review of that decision.
All privacy rights requests must be submitted in writing to [email protected]. dbt99 will acknowledge receipt of your request within 5 business days and provide a substantive response within 30 calendar days. In cases of complexity or volume, this period may be extended by a further 30 days, in which case dbt99 will notify you of the extension and the reason for it.
How to Submit a Request
Send your privacy rights request to [email protected] with the subject line "Privacy Rights Request – [Your Account Username]". Include your full registered name, account email address, and a clear description of the right you wish to exercise. dbt99 will verify your identity before processing the request.
Response Timelines
dbt99 aims to acknowledge all privacy requests within 5 business days and provide a full response within 30 calendar days. Where a request is particularly complex or involves a large volume of data, the response period may be extended by up to an additional 30 days. You will be notified promptly if an extension is required.
Section 7
Policy Updates & Contact
Updates to This Privacy Policy
dbt99 reviews this Privacy Policy at least once every twelve months and whenever there is a material change to our data practices, the services we offer, or the legal and regulatory environment in which we operate. When we make changes to this policy, we will update the effective date shown at the top of this page and, where the changes are material, notify registered players by email to their registered address at least 14 days before the changes take effect.
Your continued use of the dbt99 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to this policy, you should stop using the platform and may request account closure by contacting the support team.
Previous versions of this Privacy Policy are available on request by contacting [email protected]. dbt99 maintains an internal archive of all previous policy versions with their respective effective dates.
Contact the dbt99 Privacy Team
If you have any questions, concerns, or feedback about this Privacy Policy or about how dbt99 handles your personal data, please contact us. The dbt99 privacy and compliance team is available to address all privacy-related enquiries in English.
- Email: [email protected] — use subject line "Privacy Enquiry"
- Response Time: Privacy enquiries are acknowledged within 5 business days and substantively responded to within 30 calendar days
- Support Hours: 24/7 live chat support available on the dbt99 platform; email responses during Bangladesh Standard Time (BST, UTC+6) business hours
- Postal Contact: Written correspondence regarding privacy matters may be submitted via the dbt99 support ticket system, referencing "Privacy Policy – Written Request"
Complaints
If you are not satisfied with dbt99's response to a privacy concern or rights request, you have the right to escalate your complaint through dbt99's formal complaints procedure. Details of the complaints process are available from the support team on request. dbt99 is committed to resolving all privacy complaints fairly and promptly, and we take every complaint seriously as an opportunity to improve our data practices.
dbt99 encourages players to contact us directly in the first instance so that we have the opportunity to address your concern before any formal escalation. Our support team aims to resolve complaints at the first point of contact wherever possible.
Policy Change Notifications
When dbt99 makes material changes to this Privacy Policy, registered players will receive an email notification at their registered address at least 14 days before the changes take effect. The notification will summarise the key changes and link to the updated full policy. Non-material changes such as minor corrections or clarifications may be made without advance notice.
24/7 Privacy Support
The dbt99 support team is available around the clock via live chat on the platform and by email at [email protected]. For privacy-specific enquiries, include "Privacy Enquiry" in your subject line or chat opening message so that your query is routed directly to the privacy and compliance team.
Our Commitment
Privacy at the Core of dbt99
From Dhaka to Chittagong, Sylhet to Khulna, every dbt99 player across Bangladesh deserves a platform that handles their personal data with care, transparency, and genuine respect. These are the principles that guide every data decision we make.
Full Transparency
dbt99 publishes a complete and plain-English Privacy Policy that clearly explains every category of data we collect, every purpose for which we use it, and every type of third party we share it with. There are no hidden data practices at dbt99.
SSL Encryption
Every page, every login, every deposit, and every withdrawal on the dbt99 platform is protected by SSL/TLS encryption. Your data travels securely between your device and our servers at all times, with no plain-text transmission of sensitive information.
Player Data Control
dbt99 gives you meaningful control over your personal data. Access it, correct it, restrict its use, or request its deletion — all through a single contact point. Your rights are not buried in legal jargon; they are clearly set out in Section 6 of this policy.
Secure Payments
dbt99 processes all bKash, Nagad, Rocket, and Upay transactions through regulated payment APIs. Your mobile wallet credentials are never stored on dbt99 servers. Only the minimum transaction reference data needed to match a payment to your account is retained.
No Data Selling
dbt99 does not sell, rent, or trade your personal data to any third party for commercial gain. Your data is your data — it exists on our platform to provide you with a secure gambling service, not to generate advertising revenue for dbt99 or any partner.
Regular Policy Reviews
dbt99 reviews this Privacy Policy at least annually and updates it whenever our data practices change or the regulatory environment requires it. Material updates are notified to all registered players by email at least 14 days before they take effect.
Have Questions About Your Privacy?
Our 24/7 English support team is here to help. You can also review our Terms & Conditions, explore Responsible Gaming tools, or head to the dbt99 Casino to start playing securely.