db88 Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") applies to all personal data processed by db88 in connection with the operation of its online betting and casino platform available at https://db88.vu and any associated mobile or web applications (collectively, the "Platform"). It applies to all registered members, prospective members, and visitors to the Platform, regardless of their location.

db88 operates as an offshore betting platform serving the Bangladesh market. When we refer to "db88", "we", "us", or "our" in this Policy, we mean the db88 platform operator responsible for collecting and processing your personal data. When we refer to "you" or "your", we mean any individual who accesses or uses the Platform, whether as a registered member or as a visitor.

This Policy should be read alongside the db88 Terms & Conditions and the Responsible Gaming Policy. By using the Platform, you agree to the collection and use of your personal data in accordance with this Policy. If you do not agree, you must not use the db88 Platform.

2. Personal Data We Collect

db88 collects personal data that falls into the following categories. The specific data points collected may vary depending on the services you access and the verification requirements applicable to your account.

2.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identity document
• Date of birth (used to verify that you meet the 21+ age requirement)
• Email address (primary channel for account communications and notifications)
• Mobile phone number registered in Bangladesh (used for account verification and support)
• Residential address, including division, district, and postal code
• Nationality and country of residence

2.2 Identity Verification (KYC) Documents

• Scanned or photographed copies of government-issued identity documents (National ID Card, passport, driving licence)
• Proof of address documents (utility bills, bank statements) issued within the past three months
• Payment method ownership verification documents where required
• Selfie photographs or liveness check images where enhanced verification is required

2.3 Financial & Transaction Data

• bKash, Nagad, Rocket, or Upay mobile wallet numbers used for deposits and withdrawals
• Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or Sonali Bank account details where applicable
• Full transaction history including deposits, withdrawals, bonuses, and adjustments
• Betting and gaming activity records including stakes, outcomes, and session data

2.4 Technical & Usage Data

• IP address at the time of registration and each subsequent login session
• Device type, operating system version, and browser type
• Geolocation data (country and region level) derived from your IP address
• Session duration, pages visited, and features accessed within the Platform
• Referral source (how you arrived at the db88 Platform)
• Crash reports and error logs generated during Platform use

2.5 Communications Data

• Records of all communications between you and the db88 customer support team, including live chat transcripts, email correspondence, and WhatsApp messages
• Survey responses and feedback submitted voluntarily
• Records of any complaints or disputes raised and their resolution

3. How We Collect Your Data

db88 collects personal data through the following means:

• Direct collection: Data you provide when completing the db88 registration form, submitting KYC documents, making a deposit or withdrawal, contacting customer support, or responding to a survey.
• Automated collection: Technical and usage data collected automatically when you access the Platform, via server logs, cookies, and similar tracking technologies (see Section 7 — Cookies & Tracking).
• Third-party sources: Identity verification data from KYC service providers; fraud screening data from payment fraud prevention partners; geolocation data derived from IP address lookup services; responsible gaming data from self-exclusion registers where applicable.

4. Legal Basis for Processing Personal Data

db88 processes your personal data on the following legal bases:

Legal Basis	Examples of Processing Activities
Contractual Necessity	Processing your registration data to create and maintain your account; processing payment data to execute deposits and withdrawals; processing betting data to settle wagers.
Legal Obligation	Conducting KYC identity verification; retaining transaction records for anti-money laundering compliance; responding to lawful requests from regulatory or law enforcement authorities.
Legitimate Interests	Fraud detection and prevention; platform security monitoring; responsible gaming monitoring and intervention; improving Platform features based on usage analytics.
Consent	Sending promotional emails, SMS, or WhatsApp messages about bonuses and offers (you may withdraw consent at any time by contacting support or using the unsubscribe mechanism in marketing messages).

5. How We Use Your Personal Data

db88 uses the personal data we collect for the following purposes:

• Account management: Creating, verifying, maintaining, and securing your db88 member account.
• Service delivery: Processing bets, settling wagers, crediting winnings, and managing bonuses and promotions.
• Payment processing: Executing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfers; verifying payment method ownership to prevent fraud.
• Identity & age verification: Confirming that you meet the 21+ age requirement and that you are the legitimate owner of the account and the payment methods used.
• Responsible gaming: Monitoring account activity to identify patterns associated with problem gambling; applying deposit limits, loss limits, and self-exclusion measures; proactively contacting members who may be at risk.
• Fraud & security: Detecting and investigating suspicious activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct.
• Customer support: Responding to your inquiries, resolving disputes, and maintaining records of communications for quality assurance.
• Legal & regulatory compliance: Retaining records as required by applicable offshore gaming regulations and anti-money laundering obligations.
• Platform improvement: Analysing aggregated, anonymised usage data to improve Platform features, performance, and the overall member experience.
• Marketing communications: Sending you information about db88 promotions, BPL and IPL betting offers, seasonal bonuses (Eid, Pohela Boishakh), and new game launches — where you have provided consent.

6. Data Sharing & Disclosure

db88 may share your personal data with the following categories of third parties:

6.1 Payment Service Providers

bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank receive transaction data necessary to execute your deposit and withdrawal requests. These providers act as independent data controllers for the transactions they process and are governed by their own privacy policies.

6.2 KYC & Identity Verification Providers

db88 works with third-party KYC verification service providers to authenticate identity documents and conduct age verification checks. Your identity document images and personal details may be transmitted to these providers solely for the purpose of verification. All KYC providers are bound by confidentiality obligations.

6.3 Game Technology Providers

Game providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe receive your member session token and anonymised player identifier to deliver their games within the db88 Platform. These providers do not receive your full name, contact details, or financial information unless specifically required for dispute resolution.

6.4 Fraud Prevention & Security Partners

db88 uses third-party fraud detection and IP screening services that receive technical data (IP address, device fingerprint, session metadata) to assess transaction risk. This data is processed solely for fraud prevention purposes.

6.5 Legal & Regulatory Disclosure

db88 may disclose personal data to law enforcement agencies, courts, regulatory bodies, or other governmental authorities where required to do so by applicable law, court order, or legal process. db88 will notify the affected member of any such request where it is legally permitted to do so.

6.6 Business Transfers

In the event that db88 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, member personal data may be transferred to the acquiring entity as part of that transaction. Members will be notified of any such transfer and of any resulting change to this Privacy Policy prior to the transfer taking effect.

7. Cookies & Tracking Technologies

db88 uses cookies and similar tracking technologies to operate the Platform effectively, remember your session preferences, and analyse usage patterns. Cookies are small text files placed on your device when you visit the Platform. The following categories of cookies are used:

Cookie Type	Purpose	Retention
Strictly Necessary	Session management, login authentication, fraud prevention, load balancing. Cannot be disabled as they are essential to Platform operation.	Session / up to 24 hours
Functional	Remembering your language preference, odds format preference, and game lobby layout settings.	Up to 30 days
Analytics	Aggregated, anonymised data about page visits, feature usage, and session duration to help db88 improve the Platform. No individual tracking.	Up to 12 months
Marketing	Tracking whether you arrived via a specific promotional campaign, used only where you have provided consent for marketing communications.	Up to 90 days

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the Platform. Disabling functional or analytics cookies will not prevent you from using core Platform features.

8. Data Security

db88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security framework includes the following controls:

• TLS/SSL Encryption: All data transmitted between your device and the db88 Platform is encrypted using TLS 1.2 or higher. Our SSL certificate status can be verified in your browser's address bar.
• Encryption at Rest: Sensitive personal data — including identity documents, payment details, and KYC records — is stored in encrypted form in our databases. Encryption keys are managed separately from the encrypted data.
• Access Controls: Access to member personal data within db88's operations is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and undergo security awareness training.
• Two-Factor Authentication (2FA): db88 offers 2FA to all registered members. Internal administrative access to member data systems requires multi-factor authentication.
• Security Monitoring: db88 operates continuous security monitoring of its Platform infrastructure. Automated systems detect and alert on anomalous access patterns, login attempts, and data access events.
• Penetration Testing: db88 conducts periodic security assessments including vulnerability scanning and penetration testing of its Platform infrastructure.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, db88 will notify affected members promptly and take immediate steps to contain the breach and mitigate its impact.

9. Data Retention

db88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal obligations, and to resolve disputes or enforce our agreements. The following retention periods apply as a general guide:

Data Category	Retention Period	Basis
Account registration & identity data	Duration of membership + 5 years after account closure	AML compliance, dispute resolution
KYC verification documents	Duration of membership + 5 years after account closure	Legal obligation, regulatory compliance
Transaction & betting history	Duration of membership + 5 years after account closure	Financial record-keeping, AML
Customer support communications	3 years from the date of last communication	Dispute resolution, quality assurance
Technical logs (IP, session data)	Up to 12 months from collection	Security monitoring, fraud prevention
Marketing consent records	Until consent is withdrawn + 1 year	Evidence of consent
Self-exclusion records	Duration of exclusion + 5 years	Responsible gaming obligation

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised aggregate data may be retained indefinitely for statistical and analytical purposes, as it can no longer be used to identify any individual.

10. Your Rights Over Your Personal Data

As a db88 member, you have the following rights in relation to your personal data. To exercise any of these rights, contact the db88 support team at [email protected]. db88 will respond to all valid requests within a reasonable timeframe, typically within 30 days. Identity verification may be required before processing any data rights request.

• Right of Access: You have the right to request a copy of the personal data db88 holds about you, together with information about how it is being used. This is sometimes called a Subject Access Request (SAR).
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data held by db88 be corrected. You may update certain account details directly within your account dashboard; for others, contact support.
• Right to Erasure: You have the right to request that db88 delete your personal data where it is no longer necessary for the purposes it was collected, where you have withdrawn consent, or where the data has been unlawfully processed. This right is subject to our legal obligations to retain certain data (see Section 9).
• Right to Restrict Processing: You have the right to request that db88 restrict how it processes your personal data in certain circumstances, for example while the accuracy of data is being verified or while a complaint is being investigated.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to db88 in a structured, commonly used, machine-readable format, and to request that this data be transmitted to another platform where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where db88 is relying on legitimate interests as the legal basis. You may also object at any time to the use of your data for direct marketing purposes, with immediate effect.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

11. Children & Minors

If db88 discovers or is notified that personal data has been collected from a person under the age of 21, db88 will immediately close the relevant account, void all transactions, and permanently delete the associated personal data. If you believe that a minor may have registered a db88 account, please contact the support team at [email protected] immediately.

db88 employs age verification checks during the registration process and reserves the right to request documentary proof of age from any member at any time. Failure to provide satisfactory age verification documentation will result in account suspension and withdrawal restrictions.

12. International Data Transfers

db88 operates as an offshore platform and its data processing infrastructure may be located in jurisdictions outside Bangladesh. When personal data is transferred internationally — for example, to game technology providers or KYC service providers based in other countries — db88 ensures that appropriate safeguards are in place to protect your data to a standard consistent with this Privacy Policy.

Safeguards for international data transfers include: binding contractual data processing agreements with all third-party service providers; restricting transfers to providers whose data protection standards are deemed adequate; and applying encryption to all data in transit. db88 does not transfer your personal data to any jurisdiction without ensuring that adequate protections are in place.

13. Third-Party Links & Services

The db88 Platform does not contain links to external third-party websites for general browsing purposes. However, certain integrated services — such as live casino game interfaces provided by Evolution Gaming, Pragmatic Play, and other game studios — are delivered via embedded third-party technology. These third-party game environments operate under the respective provider's own data processing practices.

db88 is not responsible for the privacy practices of third-party game providers operating within embedded game sessions. We encourage you to review the privacy policies of individual game providers if you have concerns about how your data is handled within their game environments. db88 limits the data transmitted to game providers to the minimum necessary to deliver a functional gaming session.

14. Amendments to This Privacy Policy

db88 reserves the right to update or amend this Privacy Policy at any time. When material changes are made — such as changes to the categories of data collected, the purposes for which data is used, or the third parties with whom data is shared — db88 will notify registered members by email and display a prominent notice on the Platform for a minimum of 14 days following the change.

The effective date at the top of this Policy is updated with every revision. The most recent version of the Privacy Policy is always the governing version. If you disagree with any changes made to this Policy, you should cease using the Platform and request account closure by contacting support. Your continued use of the db88 Platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms.

15. Contact & Privacy Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a privacy concern, please contact the db88 support team through the following channels:

• Email: [email protected] — use subject line "Privacy Request" for fastest routing
• Live Chat: Available 24/7 directly within the db88 Platform
• WhatsApp: Available 24/7 — contact details provided upon account registration

All privacy requests are handled by db88's dedicated support team with strict confidentiality. For Subject Access Requests or requests to delete personal data, db88 will verify your identity before processing the request. db88 aims to acknowledge all privacy requests within 2 business days and to fully resolve them within 30 calendar days.

Document Reference: db88 Privacy Policy — Version 2.4 — Effective 1 January 2026. This document supersedes all previous versions of the db 88 Privacy Policy.