Privacy Policy — How db66 Collects, Uses, and Protects Your Data

1.1  db66 is committed to safeguarding the privacy of all individuals who interact with our platform. We recognise that members trust us with sensitive personal and financial information, and we take that responsibility seriously. This Policy sets out the standards we apply to the collection and processing of personal data.

1.2  This Policy applies to all personal data processed by db66 in connection with the operation of the db66.io platform, including data collected through the website, mobile-optimised site, customer support channels, promotional communications, and any other digital touchpoint operated by db66.

1.3  We review and update this Policy periodically to reflect changes in our services, applicable law, and best practices. The "last updated" date at the head of this document indicates when the most recent revision was made. We encourage you to revisit this page periodically.

2.1  Registration data. When you create a db66 account, we collect your full name, date of birth, residential address, mobile phone number, and email address. This information is necessary to establish your identity and to comply with age-verification requirements (21+ only).

2.2  Identity verification (KYC) data. To comply with anti-money-laundering obligations and to process withdrawals above applicable thresholds, we may collect copies of your National Identity Card, passport, or driver's licence, along with a selfie or liveness check image. We may also request proof of your payment method (e.g., a screenshot of your bKash wallet showing your registered number).

2.3  Financial and transaction data. We record all deposit and withdrawal transactions, including the payment method used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, Mastercard, etc.), transaction amounts in BDT (৳), timestamps, and transaction reference numbers. We do not store full payment card numbers or mobile banking PINs.

2.4  Usage and behavioural data. We automatically collect data about how you use the platform, including pages visited, games played, bet history, session durations, search queries, in-platform navigation patterns, and interactions with promotional content.

2.5  Device and technical data. We collect your IP address, device type, operating system, browser type and version, screen resolution, time zone setting, and referring URL. This data is used for security monitoring, fraud prevention, and platform optimisation.

2.6  Communications data. If you contact our support team via live chat or email, we retain records of those communications, including the content of messages, timestamps, and any attachments or screenshots shared.

2.7  Marketing preference data. We record your preferences regarding promotional communications, including whether you have opted in to or out of receiving email offers, SMS notifications, or push alerts.

3.1  db66 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and db66, including operating your account, processing transactions, and resolving disputes.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money-laundering rules, age-verification requirements, and fraud-prevention obligations.
• Legitimate interests: Processing necessary for db66's legitimate business interests, including platform security, fraud detection, service improvement, and direct marketing to existing members — where those interests are not overridden by your privacy rights.
• Consent: Where we rely on your freely given, specific, and informed consent — for example, for certain categories of marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

4.1  db66 uses the personal data we collect for the following purposes:

• Creating and managing your db66 member account.
• Processing deposits and withdrawals through your chosen payment method (bKash, Nagad, Rocket, Upay, bank transfer, card).
• Verifying your identity and age to comply with our 21+ age restriction and KYC requirements.
• Detecting, investigating, and preventing fraudulent transactions, multi-accounting, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Personalising your platform experience, including recommending games, sports events, and promotions that may be relevant to your preferences.
• Sending you service communications, such as transaction confirmations, security alerts, account notifications, and updates to our terms or policies.
• Sending promotional communications (subject to your opt-in consent), including bonus offers, tournament announcements, and seasonal promotions tied to events such as IPL, BPL, Eid, and Pohela Boishakh.
• Monitoring platform usage to identify technical issues, measure performance, and plan improvements.
• Complying with any legal obligation to retain or disclose data as required by applicable law or a lawful authority.

4.2  db66 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human oversight, except where such processing is permitted by law and appropriate safeguards are in place.

5.1  db66 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the circumstances described below.

5.2  Payment processors. We share the minimum necessary data with payment service providers — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, and Mastercard — to facilitate the processing of your deposits and withdrawals. These providers operate under their own privacy frameworks and are contractually prohibited from using your data for any purpose beyond payment processing.

5.3  Game technology providers. Certified game studios such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe may receive anonymised session tokens or player identifiers necessary to load and operate their games within the db66 environment. No directly identifiable personal data (name, NID, phone number) is shared with game providers.

5.4  Fraud prevention and compliance partners. We may share data with third-party fraud-detection services and identity-verification providers where necessary to protect the integrity of the platform and comply with legal obligations.

5.5  Legal disclosure. db66 may disclose personal data to courts, regulators, law enforcement agencies, or other governmental authorities where we are required to do so by law, court order, or binding regulatory direction.

5.6  Corporate transactions. In the event of a merger, acquisition, or sale of substantially all of db66's assets, member data may be transferred to the acquiring entity. We will notify affected members in advance where practicable.

6.1  The data you provide to db66 may be stored or processed on servers located outside Bangladesh. Where such transfers occur, db66 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that which applies within Bangladesh.

6.2  These safeguards may include standard contractual clauses, binding corporate rules, or reliance on the adequacy decisions of relevant data protection authorities. By using db66, you consent to the transfer of your data to jurisdictions that may not provide the same level of data protection as Bangladesh, subject to the safeguards described herein.

7.1  db66 retains personal data for as long as your account is active and for such additional period as is required by law or necessary for the purposes described in this Policy. Specific retention periods are as follows:

• Account and registration data: Retained for the lifetime of the account and for a minimum of 5 years after account closure, to comply with anti-money-laundering record-keeping obligations.
• KYC and identity documents: Retained for a minimum of 5 years from the date of the last transaction on the account.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Support communications: Retained for 2 years from the date of the last communication, unless a longer period is required in connection with a dispute or investigation.
• Marketing preference data: Retained until you withdraw consent or close your account.
• Technical and usage logs: Retained for 12 months on a rolling basis, unless retained for longer in connection with a security investigation.

7.2  Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction.

8.1  db66 implements technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• 256-bit TLS/SSL encryption on all data transmitted between your device and our servers.
• Encrypted storage for sensitive data fields, including identity document scans and financial records.
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis.
• Multi-factor authentication for all internal administrative access to data systems.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Intrusion detection systems monitoring for anomalous access patterns in real time.
• Incident response procedures ensuring that any data breach is contained, assessed, and reported within 72 hours of discovery.

8.2  While db66 takes all reasonable precautions to protect your data, no system is completely immune to attack. You are responsible for maintaining the security of your own login credentials and for notifying us immediately if you suspect unauthorised access to your account.

9.1  db66 uses cookies and similar tracking technologies to provide, maintain, and improve the platform. Cookies are small text files placed on your device when you visit db66.io. The categories of cookies we use are as follows:

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens that keep you logged in during a visit. These cookies cannot be disabled without impairing platform functionality.
• Preference cookies: Store your display preferences, such as language selection and notification settings, so that your choices persist between sessions.
• Analytics cookies: Collect anonymised data about how users navigate the platform, which pages are most visited, and where users exit. This data is used in aggregate form only to improve platform design and performance.
• Security cookies: Used to detect and prevent fraudulent activity, including identifying unusual login patterns or multiple accounts from the same device.

9.2  You may configure your browser to refuse or delete cookies. However, disabling strictly necessary cookies will prevent you from logging in and using the db66 platform. Analytics and preference cookies can be disabled without affecting your ability to place bets or play games.

10.1  Subject to applicable law, you have the following rights in respect of your personal data held by db66:

• Right of access: You may request a copy of the personal data db66 holds about you. We will respond within 30 days of a valid request.
• Right of rectification: You may request correction of any personal data that is inaccurate or incomplete.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations (see Section 7).
• Right to restrict processing: You may request that we restrict the processing of your data while a rectification or objection request is under review.
• Right to data portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format for transmission to another service provider.
• Right to object: You may object to processing based on legitimate interests, including profiling for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

10.2  To exercise any of the above rights, please contact our data team at [email protected] with the subject line "Data Rights Request". We may ask you to verify your identity before processing the request. We will acknowledge your request within 5 business days and provide a substantive response within 30 days.

11.1  db66 is strictly an adult platform. Registration is prohibited for any individual under 21 years of age. We do not knowingly collect personal data from individuals under 21. If we become aware that a minor has registered an account, we will immediately close the account, void any activity, and securely delete the associated personal data.

11.2  If you believe that a person under 21 has registered or is using a db66 account, please notify us immediately at [email protected]. We take child safety seriously and will investigate all such reports promptly.

11.3  Parents and guardians are encouraged to use parental control software to prevent minors from accessing gambling websites, including db66.io.

12.1  The db66 platform may contain references to third-party game providers or payment services. While these services are integrated within the db66 environment, they operate under their own privacy frameworks. db66 is not responsible for the privacy practices of third-party operators and we encourage you to review the relevant privacy policies of any third-party service you interact with.

12.2  Any data you transmit directly to a third-party service provider — for example, by entering your bKash PIN within the bKash payment gateway — is governed by that provider's own privacy policy and is not within db66's control.

13.1  db66 reserves the right to update this Privacy Policy at any time. When we make changes, we will update the "last updated" date at the head of this document. For material changes that significantly affect your rights or our data practices, we will provide notice via the email address registered to your account at least 14 days before the change takes effect.

13.2  Your continued use of the db66 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the changes. If you do not agree to a revised Policy, you must discontinue use of the platform and may request closure of your account.

14.1  If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to raise a complaint about how db66 has handled your personal data, please contact us using the details below:

• Support email: [email protected] (plain text — not a clickable link)
• Subject line for data queries: "Privacy Policy Enquiry" or "Data Rights Request"
• Live chat: Available at db66.io after logging in — available 24 hours a day, 7 days a week
• Response time: Within 2 minutes via live chat; within 5 business days for formal written requests

14.2  If you are not satisfied with our response to your complaint, you have the right to escalate your concern to the relevant data protection authority in your jurisdiction.

14.3  This Privacy Policy was last reviewed and updated in January 2026. We thank all db66 members for trusting us with their personal information and for taking the time to read this Policy in full.