Privacy Policy

1 Introduction

dbt222 ("we", "our", "us") operates the online casino and sports betting platform accessible at dbt222.biz (the "Platform"). We are committed to protecting the personal data of every player, visitor, and user who interacts with dbt222. This Privacy Policy sets out, in formal and transparent terms, the principles and practices that govern how dbt222 collects, processes, stores, shares, and ultimately deletes personal data in connection with the operation of the Platform.

This Privacy Policy applies to all personal data collected through the dbt222 Platform, including data provided during account registration, during the Know Your Customer (KYC) identity verification process, during financial transactions, and through your ordinary use of the Platform's casino games, live dealer tables, slot titles, and sports betting markets.

By creating a dbt222 account or by continuing to use the Platform following any update to this Policy, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not accept any part of this Privacy Policy, you should discontinue use of the Platform and contact support at [email protected] to request Account closure.

2 Personal Data We Collect

dbt222 collects the following categories of personal data in connection with the provision of its services:

dbt222 does not collect special categories of sensitive personal data (such as health data, religious beliefs, or political opinions) except where such data is voluntarily provided by a player in connection with a responsible gaming self-declaration or a support request related to problem gambling.

3 How We Collect Your Data

dbt222 collects personal data through the following means:

• Direct submission: Data you actively provide when registering an account, completing KYC verification, submitting a support request, or updating your account profile.
• Automated technical collection: Data collected automatically as you browse and interact with the Platform, including IP addresses, device identifiers, session logs, and cookie-based tracking data.
• Payment processing: Transaction reference data received from payment service providers — including bKash, Nagad, Rocket, Upay, and card networks — when you initiate a deposit or withdrawal.
• Identity verification partners: Where dbt222 engages third-party KYC verification services to authenticate identity documents, those services may return verified data attributes to dbt222 for account validation purposes.
• Fraud and security tools: Data derived from anti-fraud and security monitoring systems that analyse behavioural patterns to detect suspicious activity, account sharing, or automated wagering behaviour.

4 Purpose of Processing

dbt222 processes personal data only for specific, clearly defined purposes. The table below sets out each processing purpose alongside the data categories used and the corresponding legal basis:

• Account creation and management: To register your account, maintain your account profile, and provide access to the Platform's services.
• Identity and age verification (KYC): To confirm that players are aged 18 or above and to verify the authenticity of identity documents in accordance with responsible gaming obligations.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to maintain accurate transaction records.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, multiple account creation, collusion, and other prohibited conduct.
• Responsible gaming monitoring: To monitor player activity for signs of problem gambling behaviour and to apply player-requested responsible gaming tools such as deposit limits, cool-off periods, and self-exclusion.
• Customer support: To respond to enquiries, resolve disputes, process complaints, and provide technical assistance.
• Platform improvement: To analyse usage patterns, identify technical issues, and improve the overall player experience on the Platform.
• Legal and regulatory compliance: To comply with applicable legal obligations, respond to lawful requests from competent authorities, and maintain records required by law.
• Marketing communications: To send promotional offers, bonus notifications, and platform updates to players who have provided explicit consent to receive such communications. Players may withdraw this consent at any time by contacting support.

5 Legal Basis for Processing

dbt222 processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is necessary to perform the contract between dbt222 and the player — specifically, the dbt222 Terms & Conditions — including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable legal obligations, including anti-money laundering requirements, age verification duties, and responses to lawful authority requests.
• Legitimate interests: Processing carried out to pursue dbt222's legitimate business interests, including fraud detection, security monitoring, and platform improvement, provided that such interests are not overridden by the player's fundamental rights and freedoms.
• Consent: Processing activities — particularly marketing communications — that are conducted on the basis of the player's freely given, specific, informed, and unambiguous consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6 Data Sharing & Disclosure

dbt222 does not sell, rent, or trade personal data to any third party for that party's own commercial purposes. Personal data is shared with third parties only in the limited circumstances described below:

• Payment service providers: Transaction data is shared with payment processing partners — including bKash, Nagad, Rocket, Upay, and card networks such as Visa and Mastercard — strictly to the extent necessary to process deposits and withdrawals.
• KYC and identity verification providers: Identity document data is shared with vetted third-party verification services solely to complete the KYC process. These providers are bound by strict data processing agreements.
• Game software providers: Technical session data and game-round identifiers may be shared with game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to ensure accurate game-round delivery and to resolve technical disputes.
• Fraud prevention and security partners: Anonymised or pseudonymised technical data may be shared with specialist fraud detection platforms to identify and prevent prohibited platform activity.
• Legal and regulatory authorities: Personal data may be disclosed to competent law enforcement agencies, regulatory bodies, or courts where dbt222 is legally required to do so under applicable law, or where disclosure is necessary to protect the safety or rights of dbt222 or other platform users.
• Corporate transactions: In the event of a merger, acquisition, or asset transfer involving dbt222, player data may be transferred to the acquiring entity, provided that the acquiring entity agrees to protect such data in a manner consistent with this Privacy Policy.

7 Cookies & Tracking Technologies

The dbt222 Platform uses cookies and similar tracking technologies to provide a functional, secure, and personalised experience. Cookies are small text files stored on your device by your browser when you visit the Platform. The following categories of cookies are used by dbt222:

• Strictly necessary cookies: These cookies are essential for the Platform to function correctly. They enable core features such as secure login sessions, account authentication, and the maintenance of your active game session. These cookies cannot be disabled.
• Functional cookies: These cookies remember your preferences — such as preferred language settings and display options — to provide a more personalised experience during your Platform sessions.
• Analytics cookies: These cookies collect anonymised data about how players navigate and use the Platform, including pages visited, features accessed, and session duration. This data is used solely for internal Platform improvement purposes.
• Security cookies: These cookies assist in detecting and preventing fraudulent access attempts, bot activity, and other security threats targeting player accounts.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the Platform and may prevent you from accessing your account or placing wagers.

8 Data Security

dbt222 implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the dbt222 Platform.
• Encryption at rest for sensitive data categories, including identity documents and financial information, stored within dbt222's secure server infrastructure.
• Role-based access controls that restrict internal staff access to personal data on a strict need-to-know basis.
• Regular penetration testing and vulnerability assessments conducted on Platform infrastructure.
• Continuous security monitoring and automated intrusion detection systems covering all Platform access points.
• Secure, audited data processing agreements with all third-party processors who handle personal data on behalf of dbt222.

In the event of a personal data breach that poses a material risk to player rights and freedoms, dbt222 will notify affected players without undue delay and will take all appropriate remedial actions as promptly as possible.

9 Data Retention

dbt222 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The following general retention principles apply:

• Active account data: Personal data associated with an active account is retained for the duration of the account's active status on the Platform.
• Closed account data: Following account closure, dbt222 retains identity, financial, and transaction data for a minimum period of five (5) years from the date of closure to satisfy anti-money laundering record-keeping requirements and to resolve any post-closure disputes.
• KYC documents: Copies of identity verification documents are retained for the period required by applicable legal obligations, typically five (5) years from the date of verification or account closure, whichever is later.
• Customer support communications: Support chat transcripts and email correspondence are retained for three (3) years from the date of the relevant interaction.
• Marketing consent records: Records of marketing consent are retained for five (5) years from the date on which consent was given or withdrawn.
• Technical and usage logs: Session logs and technical data are retained for up to twelve (12) months, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with dbt222's data disposal procedures.

10 Your Data Rights

As a dbt222 player, you hold the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request". dbt222 will respond to all valid requests within thirty (30) calendar days of receipt.

• Right of access: You have the right to request a copy of the personal data that dbt222 holds about you, together with information about how it is being processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data held by dbt222 about you.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to dbt222's legal retention obligations. Note that erasure requests cannot override mandatory legal retention periods.
• Right to restrict processing: You have the right to request that dbt222 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing pending verification of legitimate interests.
• Right to data portability: You have the right to receive a copy of personal data that you have provided to dbt222 in a structured, commonly used, machine-readable format, where technically feasible.
• Right to object: You have the right to object to the processing of your personal data where such processing is based on dbt222's legitimate interests. You also have an unconditional right to object to the use of your data for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

11 Children's Privacy

The dbt222 Platform is strictly intended for adults aged 18 years and above. dbt222 does not knowingly collect, process, or retain personal data from any individual who is under the age of 18. The Platform's registration process includes mandatory age declaration and is supported by KYC-based age verification procedures.

If dbt222 discovers or has reasonable grounds to believe that personal data has been collected from an individual under the age of 18, it will immediately suspend the associated account, void any associated balance in accordance with the dbt222 Terms & Conditions, and securely delete the underage individual's personal data as promptly as practicable, subject to any applicable legal retention obligations.

12 Third-Party Links

The dbt222 Platform may, on occasion, contain references to third-party services such as payment providers and game studios. dbt222 is not responsible for the privacy practices, data collection activities, or content of any third-party platform or service. Players who access third-party platforms via references on the dbt222 Platform do so at their own risk and are advised to review the relevant third party's own privacy policy before providing any personal data.

This Privacy Policy applies solely to personal data collected and processed by dbt222 in connection with the dbt222 Platform. It does not extend to any third-party website, application, or service, regardless of how a player arrives at such a third-party platform.

13 Updates to This Privacy Policy

dbt222 reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, dbt222 will publish the revised Policy on this page with an updated "Last Updated" date. Where changes are of particular significance to players' rights, dbt222 may additionally notify active players by email to the address registered on their account.

Your continued use of the dbt222 Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. Players who do not accept a revised Privacy Policy should cease using the Platform and contact support to arrange Account closure before the revised Policy's effective date.

We encourage all players to review this Privacy Policy periodically to remain informed about how dbt222 protects their personal data. The most current version of this Policy will always be accessible at dbt222.biz/privacy-policy.

14 Contact Us

For any questions, concerns, or formal requests relating to this Privacy Policy or dbt222's data protection practices, please contact the dbt222 Data Protection team using the following details:

• Email: [email protected] — subject line: "Privacy Enquiry"
• WhatsApp: +880 1700 000 222
• Live Chat: Available 24/7 via the dbt222 Platform, including Bangladesh public holidays.
• Response time: dbt222 aims to acknowledge all data-related enquiries within one (1) business day and to provide a substantive response within thirty (30) calendar days for formal data rights requests.