dbwin Privacy Policy

Privacy Commitments at a Glance

1 Information We Collect

dbwin collects personal data only where it is necessary to provide the platform's services, comply with legal obligations, or protect the legitimate interests of the platform and its players. We do not collect data that has no clear operational or legal purpose. The categories of personal data we collect are described below.

1.1 Registration Data

When you create a dbwin account, we collect the information you provide during the registration process. This includes your full legal name, date of birth, gender, residential address, email address, and mobile phone number. This information is used to create and administer your account, to verify your identity, and to communicate with you regarding your account status and transactions.

1.2 Identity Verification (KYC) Data

In order to comply with our anti-money-laundering and responsible gaming obligations, dbwin requires players to complete identity verification before processing their first withdrawal. KYC documents collected may include a scanned or photographed copy of a government-issued photo identification document (such as a national identity card or passport), proof of residential address (such as a utility bill or bank statement), and proof of ownership of the payment method used for deposits. These documents are processed securely and retained in accordance with Section 5 of this policy.

1.3 Financial Transaction Data

dbwin records all financial transactions associated with your account, including deposit amounts and timestamps, withdrawal requests and processing status, bonus credits and wager activity, and the payment method identifiers used for each transaction (such as the registered mobile number associated with a bKash or Nagad account). Full payment account numbers are not stored by dbwin — we hold only the reference identifiers returned by the payment gateway after a transaction is authorised.

1.4 Gameplay and Betting Data

We collect detailed records of all bets placed, games played, results, and wagering history on your account. This data is used for account management, dispute resolution, bonus eligibility verification, and responsible gaming monitoring. Gameplay data may also be used in aggregated, anonymised form to improve the platform experience and to identify unusual patterns that may indicate problem gambling or fraudulent activity.

1.5 Technical and Device Data

When you visit the dbwin website or use the mobile platform, our servers automatically collect certain technical information. This includes your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, session duration, and click-path data. This information is collected through server logs and first-party cookies and is used for platform security, fraud detection, and performance optimisation.

1.6 Communications Data

If you contact our support team via live chat, email, or any other channel, we retain records of those communications. This includes the content of messages exchanged, the date and time of contact, the support agent involved, and the resolution outcome. Communication records are retained to ensure service quality, to resolve disputes, and for staff training purposes.

2 How We Use Your Data

dbwin processes your personal data on one or more of the following legal bases: performance of the contract between you and dbwin (i.e., providing the gaming and betting services you have registered for); compliance with a legal obligation applicable to dbwin; protection of the legitimate interests of dbwin or a third party; and, where applicable, your explicit consent (for example, for marketing communications).

The specific purposes for which dbwin uses your personal data are as follows:

• Account creation and management: To set up your player account, authenticate your identity at login, and manage your account settings, preferences, and balance.
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank partners, and to maintain accurate financial records for your account.
• Identity and age verification: To confirm that you meet the minimum age requirement of 18 years and that the identity you have registered with is accurate and belongs to you.
• Fraud and security monitoring: To detect and prevent fraudulent activity, unauthorised account access, bonus abuse, and any other conduct that violates our Terms & Conditions or applicable law.
• Responsible gaming compliance: To monitor your gambling activity for indicators of problem gambling behaviour and to apply responsible gaming tools (deposit limits, cool-off periods, self-exclusion) where appropriate.
• Customer support: To respond to your enquiries, resolve disputes, and provide assistance with account-related matters.
• Platform improvement: To analyse aggregated, anonymised usage data in order to improve the platform's design, performance, game offering, and overall user experience.
• Marketing communications: To send you promotional offers, bonus notifications, and platform news by email or SMS, where you have consented to receive such communications. You may withdraw this consent at any time.
• Legal and regulatory compliance: To comply with applicable anti-money-laundering regulations, to respond to lawful requests from competent authorities, and to enforce our contractual rights where necessary.

3 Data Sharing & Third Parties

dbwin does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. Personal data is shared with third parties only where it is strictly necessary to deliver the platform's services, fulfil a legal obligation, or protect the legitimate interests of dbwin and its players.

The categories of third parties with whom dbwin may share your data are described below:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank receive the transaction data necessary to process your deposits and withdrawals. Each provider operates under their own privacy policy and is bound by applicable financial services regulations.
• Game content providers: Software studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player identifier and session token to authenticate your game session. These providers do not receive your name, contact details, or financial data.
• Identity verification services: dbwin may use a third-party KYC verification provider to assist with document authentication. Such providers are contractually bound to process your identity documents solely for the purpose of verification and to delete them after the verification process is complete.
• IT infrastructure and hosting providers: The data centres and cloud infrastructure providers that host the dbwin platform have access to data only at a technical infrastructure level and are bound by strict data processing agreements that prohibit any use of data beyond infrastructure maintenance.
• Legal and regulatory authorities: dbwin will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by a lawful order or where disclosure is necessary to prevent fraud or protect the safety of individuals. dbwin will notify affected players of such disclosures where legally permitted to do so.

All third parties who process personal data on behalf of dbwin are required to implement appropriate technical and organisational security measures and are prohibited from using your data for any purpose other than that for which it was shared. Where third parties are located in countries outside your jurisdiction, dbwin takes steps to ensure that adequate data protection safeguards are in place.

4 Cookies & Tracking Technologies

dbwin uses cookies and similar tracking technologies to operate the platform, ensure security, and improve your experience. A cookie is a small text file placed on your device by the platform's server when you visit the website. Cookies allow the platform to recognise your browser across sessions and to remember your preferences and authentication status.

Types of Cookies Used

dbwin does not place third-party advertising cookies or retargeting pixels on your device. You can control cookie settings through your browser. Most browsers allow you to refuse new cookies, delete existing cookies, and be notified when new cookies are set. Please note that disabling strictly necessary cookies will affect your ability to log in and use core platform features.

5 Data Retention

dbwin retains personal data only for as long as it is necessary to fulfil the purposes for which it was collected or to comply with applicable legal, regulatory, or contractual obligations. The following retention periods apply to the main categories of data held by dbwin:

• Account and registration data: Retained for the duration of the active account relationship and for a period of 5 years following account closure. This is required for anti-fraud, dispute resolution, and regulatory audit purposes.
• KYC identity documents: Retained for a minimum of 5 years after account closure in accordance with anti-money-laundering record-keeping obligations. Documents are stored in encrypted, access-controlled storage and are not accessible to general support staff.
• Financial transaction records: Retained for 7 years following the date of each transaction. This period is determined by financial record-keeping obligations applicable to offshore gaming platforms.
• Gameplay and betting history: Retained for 5 years. May be anonymised and aggregated for statistical purposes after 2 years.
• Support communications: Retained for 3 years from the date of the most recent communication in a given support thread. Communications related to unresolved disputes are retained until the dispute is formally closed.
• Technical and device logs: Retained for 12 months from the date of collection. Aggregated, anonymised analytics data derived from these logs may be retained for longer periods.
• Marketing consent records: Retained for the duration of the account relationship and for 2 years after consent is withdrawn, for the purpose of demonstrating compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised using methods that render re-identification impossible. Where anonymisation is not technically feasible, data is deleted in full.

6 Security Measures

dbwin takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect it against unauthorised access, accidental loss, destruction, or disclosure. While no online platform can guarantee absolute security, the measures described below represent our ongoing commitment to protecting your data.

• Transport layer security: All data exchanged between your device and the dbwin platform is encrypted using 256-bit TLS (Transport Layer Security). Connections over unencrypted HTTP are automatically redirected to HTTPS.
• Password security: Player passwords are never stored in plain text. They are hashed using a one-way cryptographic algorithm (bcrypt) with an individual salt applied to each password hash. Even dbwin staff cannot retrieve your original password — only a reset is possible.
• Two-factor authentication: OTP (one-time password) verification via SMS is automatically triggered for logins from unrecognised devices or IP addresses. Players are encouraged to keep their registered mobile number current.
• Access controls: Internal access to player personal data is restricted to staff who require it to perform their job function. All internal access is authenticated, logged, and reviewed periodically by dbwin's compliance team.
• Intrusion detection: dbwin's infrastructure is monitored around the clock for signs of unauthorised access, unusual traffic patterns, or other indicators of a security incident.
• Vendor security assessments: Third-party service providers who process personal data on behalf of dbwin are required to complete a security assessment before onboarding and are subject to periodic review.

7 Your Data Rights

As a user of the dbwin platform, you hold a number of rights in relation to your personal data. dbwin is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days of receiving your request.

Please note that some rights are subject to conditions and limitations. For example, the right to erasure does not override dbwin's obligation to retain financial transaction records for the period required by applicable anti-money-laundering regulations. Where a request cannot be fulfilled in full, dbwin will explain the reasons in writing and indicate what partial relief, if any, is available.

8 Contact & Data Enquiries

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which dbwin processes your personal data, we encourage you to contact us in the first instance using the details below. Our support team is available around the clock and will escalate data-related enquiries to the appropriate internal team within one business day.

• General support and data rights requests: [email protected]
• Response time: We aim to acknowledge all data-related enquiries within 48 hours and to provide a substantive response within 30 calendar days.
• Subject line for data requests: Please use the subject line "Data Rights Request" or "Privacy Enquiry" to ensure your message is routed to the correct team promptly.

dbwin reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform. Where material changes are made, registered players will be notified by email to their registered address at least 14 days before the changes take effect. The most current version of this Privacy Policy is always available at dbwin.app/privacy-policy. Your continued use of the platform following notification of changes constitutes your acceptance of the revised policy.

This Privacy Policy was last reviewed and updated on 1 June 2026. It supersedes all previous versions of the dbwin Privacy Policy.