dbg99 Privacy Policy

01 Introduction

dbg99 ("we", "us", "our") is committed to protecting the privacy and personal data of every individual who visits, registers with, or interacts with the dbg99 platform at dbg99.io. This Privacy Policy describes how we collect, use, store, share, and protect your personal information in connection with the services we provide, including online casino games, sports betting, and related account and payment services.

This policy applies to all users of the dbg99 platform, including registered players based in Bangladesh and any other individuals who access the website in a read-only capacity. By creating a dbg99 account or by continuing to use the platform after this policy has been brought to your attention, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

If you have any questions about this policy or about how dbg99 handles your data, please contact the support team at [email protected]. We will respond to all privacy-related enquiries within five business days.

02 Data We Collect

dbg99 collects personal data in the following categories, depending on the nature of your interaction with the platform:

2.1 Registration Data

When you create a dbg99 account, we collect the information you provide during the registration process, including:

• Full legal name
• Date of birth (for age verification — players must be 21 or older)
• Residential address, including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or other)
• Email address
• Mobile phone number
• Chosen username and encrypted password

2.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) obligations, we may request and collect copies of identity documents, including:

• National Identity Card (NID) issued by the Bangladesh Election Commission
• Passport
• Driving licence
• Proof of residential address (utility bill, bank statement dated within 90 days)
• Selfie photograph for liveness verification where required

2.3 Financial Data

When you make deposits or withdrawals via bKash, Nagad, Rocket, Upay, or bank transfer, we collect transaction records including the payment method type, transaction reference numbers, transaction amounts in BDT, and timestamps. We do not store full mobile wallet PINs or card numbers.

2.4 Gaming Activity Data

We maintain records of your gameplay activity, including games played, bet amounts, session durations, win/loss records, bonus usage, and wagering history. This data is used for account management, responsible gaming monitoring, dispute resolution, and platform improvement.

2.5 Technical & Device Data

When you access dbg99, our systems automatically collect certain technical information, including:

• IP address and approximate geolocation derived from it
• Device type, operating system, and browser version
• Session timestamps and page interaction logs
• Cookie identifiers (see Section 7)

2.6 Communications Data

If you contact dbg99 support via email or any other channel, we retain records of that correspondence, including the content of messages and any attachments, for the purposes of resolving your enquiry, training, and quality assurance.

03 How We Use Your Data

dbg99 uses the personal data we collect for the following purposes:

We will not use your personal data for any purpose that is materially different from those listed above without first obtaining your explicit consent or notifying you in advance through an updated version of this Privacy Policy.

04 Legal Basis for Processing

dbg99 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the terms of your account agreement with dbg99, including account creation, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable legal obligations, including anti-money laundering regulations, identity verification requirements, and financial record-keeping obligations.
• Legitimate interests: Processing carried out to pursue the legitimate operational interests of dbg99, such as fraud prevention, platform security, and responsible gaming monitoring, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, such as the sending of promotional email communications. You may withdraw consent at any time by contacting [email protected] or by using the unsubscribe link in any marketing email.

05 Data Sharing & Disclosure

dbg99 does not sell your personal data. We may share your data with the following categories of third parties, strictly on a need-to-know basis:

5.1 Game Software Providers

To enable gameplay, limited account and session data is transmitted to certified game software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers process data solely to deliver the game service and are contractually bound to maintain data confidentiality.

5.2 Payment Processors

Transaction data is shared with payment processing partners including the operators of bKash, Nagad, Rocket, and Upay integrations for the sole purpose of completing financial transactions. dbg99 does not share more data than is necessary to authorise and confirm each individual transaction.

5.3 Identity Verification Services

Where automated identity verification tools are used, KYC documents and biometric data (such as a selfie for liveness verification) may be processed by a third-party verification provider. Such providers are contractually prohibited from using your data for any purpose other than completing the verification check requested by dbg99.

5.4 Legal and Regulatory Authorities

dbg99 will disclose personal data to law enforcement agencies, regulatory authorities, or other competent bodies when required to do so by applicable law, court order, or other legal process. We will notify you of any such disclosure to the extent we are legally permitted to do so.

5.5 Business Successors

In the event of a merger, acquisition, or sale of all or substantially all of the dbg99 business or its assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any material changes to data handling practices that result from it, with reasonable advance notice.

06 Payment Data

All financial transactions on dbg99 are conducted in Bangladesh Taka (BDT). When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, or bank transfer, the following data handling practices apply:

• dbg99 records the transaction amount, currency, timestamp, transaction reference number, and the type of payment method used. This record is retained for accounting and dispute resolution purposes.
• Your mobile wallet phone number is stored in association with your dbg99 account to facilitate withdrawals to the correct payment method. It is stored in encrypted form.
• Full mobile wallet PINs, passwords, or one-time passwords (OTPs) are never requested by dbg99 and are never stored on our systems under any circumstances.
• Payment data is transmitted over encrypted connections. All payment integrations used by dbg99 comply with industry-standard security frameworks applicable to mobile financial services.

If you suspect that your payment method credentials have been compromised in connection with your dbg99 account, contact [email protected] immediately. Do not share your bKash PIN, Nagad PIN, or any OTP with any person claiming to represent dbg99 — our team will never ask for these details.

07 Cookies & Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files placed on your device by a website you visit. They are widely used to make websites function more efficiently, to remember user preferences, and to provide analytical information to website operators.

7.2 How dbg99 Uses Cookies

dbg99 uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in to your dbg99 account and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional cookies: Used to remember your preferences, such as your preferred language settings or the games you access most frequently. Disabling these may limit the personalisation of your experience.
• Analytical cookies: Used to understand how users navigate the dbg99 platform, which pages are visited most frequently, and where users encounter difficulties. This data is collected in aggregated, anonymised form and is used solely to improve the platform.
• Responsible gaming cookies: Session-based cookies used to track the duration of your active gaming session for the purpose of displaying session time alerts where you have enabled this feature.

7.3 Managing Cookies

You may configure your browser to refuse or delete cookies at any time. Please note that disabling cookies other than strictly necessary ones may affect the functionality of certain dbg99 features. Instructions for managing cookies are available in the help documentation of your browser.

08 Data Retention

dbg99 retains personal data for the periods set out below, after which data is securely deleted or anonymised:

• Active account data: Retained for the duration of your account registration and for a period of five years following permanent account closure.
• KYC and identity verification documents: Retained for five years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Financial transaction records: Retained for seven years following the date of each transaction, in accordance with financial reporting obligations.
• Support correspondence: Retained for three years from the date of the last interaction in the relevant support case.
• Gaming activity logs: Retained for five years to support responsible gaming monitoring, dispute resolution, and regulatory compliance.
• Technical and device data: Retained for 12 months on a rolling basis for security monitoring purposes.
• Marketing consent records: Retained until consent is withdrawn, plus 12 months following withdrawal to maintain a suppression record.

Where data is retained beyond the periods above due to an ongoing legal dispute, regulatory investigation, or other exceptional circumstance, we will inform you of the extended retention period and the reason for it.

09 Your Rights

You have the following rights in relation to the personal data dbg99 holds about you. To exercise any of these rights, contact [email protected] with the subject line "Data Rights Request". We will acknowledge your request within two business days and respond in full within 30 days.

• Right of access: You have the right to request a copy of the personal data dbg99 holds about you, along with information about how it is being used.
• Right to rectification: You have the right to request correction of any personal data that is inaccurate or incomplete.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to any overriding legal retention obligations.
• Right to restrict processing: You have the right to request that we limit the processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
• Right to data portability: You have the right to receive a copy of personal data you have provided to dbg99 in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
• Right to object to marketing: You have the right to object to the use of your personal data for direct marketing purposes at any time. You may do so by contacting [email protected] or by using the unsubscribe link in any marketing communication.

10 Data Security

dbg99 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and dbg99 servers.
• Encryption of sensitive data at rest, including identity documents and payment method identifiers.
• Role-based access controls ensuring that personal data is accessible only to authorised personnel with a legitimate operational need.
• Regular security assessments and penetration testing of the dbg99 platform infrastructure.
• Secure data centre facilities with physical access restrictions and environmental monitoring.
• Incident response procedures that include notification processes in the event of a data breach affecting your personal data.

In the unlikely event of a data security incident that materially affects your personal data, dbg99 will notify you as soon as reasonably practicable via the email address registered on your account, along with details of the nature of the incident, the data affected, and the steps we are taking to address it.

While dbg99 takes data security seriously and implements robust technical controls, no internet-based service can guarantee absolute security. You are also responsible for maintaining the security of your own account credentials and device. Do not share your dbg99 password with anyone, and always log out from shared devices after each session.

11 Children's Privacy

The dbg99 platform is strictly intended for adults aged 21 years and above. dbg99 does not knowingly collect, store, or process personal data from individuals under the age of 21. Age verification is conducted at the point of account registration as a mandatory step.

If dbg99 becomes aware that personal data has been collected from an individual under the age of 21, that account will be closed immediately, all data associated with it will be deleted, and any deposits made will be returned to the source payment method used, net of any withdrawals already processed. If you believe that a minor may have accessed or registered on the dbg99 platform, please contact [email protected] immediately so that the matter can be investigated and resolved as a priority.

12 Third-Party Links

The dbg99 platform does not contain links to third-party websites for commercial or affiliate purposes. Any links present on the platform are limited to internal navigation (pages within dbg99.io) or to the payment provider interfaces required to complete financial transactions.

In the event that your use of a payment method such as bKash or Nagad redirects you to that provider's own interface or application to authorise a transaction, please be aware that you are subject to that provider's own privacy policy while interacting with their interface. dbg99 has no control over and accepts no responsibility for the privacy practices of third-party payment providers once you have left the dbg99 platform environment to complete an authorisation step.

13 Updates to This Policy

dbg99 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform and services. The version number and effective date displayed at the top of this document identify the currently applicable version.

When we make material changes to this Privacy Policy — meaning changes that significantly affect your rights or how your data is used — we will notify you by email to the address registered on your dbg99 account at least 14 days before the updated policy takes effect. For minor or administrative updates, we will update the version number and effective date on this page without separate notification.

Your continued use of the dbg99 platform after the effective date of any updated version of this Privacy Policy constitutes your acceptance of the changes. If you do not agree with any updated terms, you should cease using the platform and close your account by contacting [email protected] before the effective date of the changes.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data dbg99 holds about you, please contact us using the details below:

• Email: [email protected] (plain text — this is not a clickable link)
• Subject line for data rights requests: "Data Rights Request"
• Subject line for privacy concerns: "Privacy Enquiry"
• Response time: Acknowledgement within 2 business days; full response within 30 days
• Support hours: 24 hours a day, 7 days a week