dbb33 Privacy Policy — How We Handle Your Data

This Privacy Policy ("Policy") explains how dbb33 ("we", "us", "our") collects, uses, stores, shares and protects the personal data of users ("you", "your") who access or use the dbb33 online betting and casino platform at https://dbb33.bet and any associated mobile or web interfaces (collectively, the "Platform").

By registering an account or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue your use of the Platform. This Policy should be read in conjunction with our Terms and Conditions, which are incorporated by reference.

dbb33 collects personal data through several channels, including information you provide directly during registration and account use, data generated automatically by your use of the Platform, and information received from payment processing partners. The categories of personal data we collect include:

• Identity and contact information: your mobile number, full name (where provided), date of birth, and any identity documents submitted during KYC verification (such as a national ID card or passport).
• Financial and payment data: payment wallet identifiers (bKash, Nagad, Rocket, Upay numbers), transaction amounts, deposit and withdrawal history, and any associated bank account details provided for transfer purposes.
• Account activity data: login timestamps, IP addresses, device identifiers, browser type, operating system, betting history, game play history, bonus usage, and session duration records.
• Communications data: records of any communications between you and dbb33 support, including messages, emails, and support ticket content.
• Technical and usage data: cookies, pixel data, clickstream data, and platform interaction logs that help us understand how users navigate the Platform and to optimise the user experience.

dbb33 does not knowingly collect sensitive personal data beyond what is required for identity verification and financial compliance. We do not collect data on ethnicity, religion, political opinion, health status or biometric identifiers beyond what is present in submitted identity documents.

dbb33 uses the personal data it collects for the following specific purposes, each of which has a clear legal basis:

• Account creation, administration and maintenance: to register your account, verify your identity, maintain accurate account records, and process deposits and withdrawals via your registered payment wallets.
• Platform services and personalisation: to deliver betting, casino and crash game services; to personalise the content and promotions shown to you based on your activity and preferences; and to notify you of promotions relevant to your betting interests such as BPL cricket odds or live casino events.
• Fraud prevention and security: to detect, investigate and prevent fraud, money laundering, account abuse, collusion, and other prohibited activities; to monitor account activity for unusual patterns indicative of security risks; and to verify the integrity of transactions.
• Regulatory and legal compliance: to meet our obligations under applicable anti-money laundering (AML) regulations, KYC requirements, and any other legal or regulatory obligations that apply to the operation of the dbb33 Platform.
• Customer support: to respond to your enquiries, complaints and support requests; to resolve account issues and disputes; and to improve the quality of our support services based on customer feedback.
• Platform improvement and analytics: to analyse aggregate usage data (in anonymised or pseudonymised form) to understand how the Platform is used, to identify technical issues, and to develop new features and improve existing ones.

dbb33 processes personal data on the following legal bases, depending on the purpose of processing:

• Contractual necessity: processing that is required to perform the contract between you and dbb33 — for example, operating your account, processing deposits and withdrawals, and settling bets.
• Legal obligation: processing required to comply with applicable law, including AML/KYC regulations, tax reporting obligations, and any order or request from a competent regulatory or law enforcement authority.
• Legitimate interests: processing for fraud detection, platform security, service improvement and analytics, where our legitimate interests in operating a safe and reliable platform are not overridden by your privacy rights.
• Consent: processing for direct marketing and personalised promotional communications, where we have obtained your explicit consent to receive such communications. You may withdraw this consent at any time by contacting dbb33 support.

dbb33 does not sell, rent or otherwise transfer your personal data to third parties for their own commercial use. However, we share personal data with a limited set of trusted third parties where necessary to operate the Platform and meet our legal obligations:

• Payment processors and mobile wallet operators (bKash, Nagad, Rocket, Upay and associated banking partners): solely for the purpose of processing your deposits and withdrawals and verifying the ownership of your payment wallet.
• Game technology providers (such as Evolution Gaming, Pragmatic Play, Spribe and other certified studios): for the purpose of delivering game content and verifying the fairness and integrity of game outcomes. These providers operate under their own licences and data processing agreements.
• Identity verification and KYC service providers: to verify the authenticity of identity documents and confirm your eligibility to use the Platform in accordance with our age verification and AML obligations.
• Competent regulatory, tax or law enforcement authorities: where disclosure is required by applicable law, court order, or mandatory regulatory request. dbb33 will notify you of such disclosures where it is legally permitted to do so.

All third parties with whom dbb33 shares personal data are required to maintain appropriate technical and organisational security measures and to use personal data only for the specified purpose for which it was shared. dbb33 does not share data with advertising networks or data brokers.

dbb33 handles payment data with the highest level of care. Mobile wallet identifiers (such as your bKash or Nagad number) are stored in encrypted form and are used exclusively to process deposits and withdrawals to and from your account. dbb33 does not store full payment card numbers, CVV codes or banking passwords. All financial transactions on the Platform are denominated in Bangladeshi Taka (BDT) and processed in real time.

Transaction records — including deposit amounts, withdrawal amounts, timestamps and wallet references — are retained for a minimum period as required by applicable financial regulations and AML compliance obligations. Players may request a copy of their transaction history at any time by contacting dbb33 support.

dbb33 uses cookies and similar tracking technologies to operate the Platform, remember your session preferences, maintain your login state, and collect aggregated analytics data. Cookies are small text files placed on your device by your browser when you visit the Platform. The cookies dbb33 uses fall into three categories: strictly necessary cookies (required for the Platform to function and cannot be disabled), functional cookies (which remember your preferences such as language setting), and analytics cookies (which help us understand how users interact with the Platform in aggregate, anonymised form).

You may control or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. dbb33 does not use cookies to track your activity on third-party websites or to serve you targeted advertising on external platforms.

dbb33 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting and reporting obligations. The specific retention periods applicable to different categories of personal data are as follows: account data and identity verification documents are retained for the duration of the account relationship and for a minimum of five years following account closure, in accordance with AML record-keeping requirements; transaction records are retained for a minimum of five years from the date of the transaction; communications and support records are retained for two years from the date of the communication.

When personal data is no longer required, dbb33 will securely delete or anonymise it in accordance with industry-standard data destruction practices. Where data has been anonymised such that it can no longer be attributed to any individual, it falls outside the scope of this Policy and may be retained indefinitely for aggregate analytics purposes.

dbb33 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, destruction or alteration. These measures include SSL/TLS encryption of all data in transit between your device and our servers; encryption of sensitive data at rest on our database infrastructure; access controls that restrict access to personal data to authorised personnel only, on a need-to-know basis; regular security audits and vulnerability assessments of our platform infrastructure; and two-factor authentication options for account access.

While dbb33 takes all reasonable steps to protect your personal data, no data transmission over the internet or storage system can be guaranteed to be 100% secure. In the event of a data security incident that is likely to result in a risk to your rights and freedoms, dbb33 will notify affected users as soon as reasonably practicable and will take immediate steps to contain the incident and mitigate any harm.

As a user of the dbb33 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact dbb33 support using the email address provided at the end of this Policy. We will respond to all requests within a reasonable timeframe and in any event within 30 days of receipt:

• Right of access: you have the right to request a copy of the personal data dbb33 holds about you, together with information about how it is being processed.
• Right to rectification: you have the right to request that inaccurate or incomplete personal data held about you is corrected or completed without undue delay.
• Right to erasure: in certain circumstances, you have the right to request that personal data held about you is deleted — for example, where the data is no longer necessary for the purpose for which it was collected and there is no overriding legal obligation to retain it.
• Right to restrict processing: you have the right in certain circumstances to request that dbb33 suspends the processing of your personal data — for example, while the accuracy of data you have contested is being verified.
• Right to withdraw consent: where processing is based on your consent (for example, for direct marketing), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Please note that certain rights are subject to limitations where dbb33 has a legal obligation to retain or process data — for example, where transaction records must be kept to comply with AML regulations. In such cases, dbb33 will explain the applicable limitation when responding to your request.

dbb33 strictly prohibits access to and use of the Platform by persons under the age of 21. The Platform is not directed at minors and dbb33 does not knowingly collect personal data from persons under 21 years of age. If dbb33 becomes aware that personal data has been collected from a person under the age of 21 without appropriate age verification, it will take immediate steps to delete that data and suspend the associated account. If you are a parent or guardian and believe your child has registered on dbb33, please contact our support team immediately at [email protected] so that we can take appropriate action.

The dbb33 Platform may contain references to third-party game providers, payment services and technology partners. Where the Platform integrates third-party game content (for example, live casino tables provided by Evolution Gaming or slot games from Pragmatic Play), those games operate under the third party's own technology infrastructure and privacy practices. dbb33 is not responsible for the privacy practices of third-party game providers or payment processors, and encourages users to review the privacy policies of any third-party services they interact with. This Policy applies solely to data processed by dbb33 in connection with the operation of the Platform.

dbb33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will update the "Last Updated" date at the top of this page. Where practicable and where required by applicable law, we will notify registered users of significant changes via their registered contact details.

Your continued use of the dbb33 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the changes. We recommend that you review this Policy periodically to stay informed of how we protect your personal data. If you do not accept the revised Policy, you should discontinue your use of the Platform and may request account closure by contacting support.

If you have any questions, concerns or requests relating to this Privacy Policy or the way dbb33 handles your personal data, please contact our support team at: [email protected]