dbt333 Privacy Policy

This Policy applies to all personal data collected by dbt333 in connection with the dbt333 platform, including data collected via the website at dbt333.ws, mobile browser access, customer support interactions, payment processing, and account management communications. It applies to all registered players and to visitors who browse the platform without a registered account.

This Policy should be read alongside the dbt333 Terms & Conditions and the Responsible Gaming Policy, which together govern the full relationship between dbt333 and its users. In the event of any conflict between this Policy and any other document, this Policy governs data protection matters specifically.

dbt333 may update this Policy from time to time in response to changes in applicable law, regulatory guidance, or our own internal data practices. The effective date at the top of this page indicates the version currently in force. We will notify registered users of material changes via their registered contact details or by prominent on-site notice prior to the change taking effect.

dbt333 collects personal data in the following categories, depending on how you interact with the platform:

dbt333 collects personal data through the following means:

• Directly from you: when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or update your account profile.
• Automatically: when you browse or use the dbt333 platform, our servers and analytics tools automatically record technical and usage data including your IP address, session activity, and device characteristics.
• From payment partners: when you transact via bKash, Nagad, Rocket, Upay, or card payment processors, we receive confirmation and reference data from those providers to reconcile your transaction.
• From identity verification providers: during KYC checks, we may use third-party identity verification services that return a verification status and flag any discrepancies to us.
• From fraud prevention services: we receive risk signals from anti-fraud and anti-money laundering (AML) screening tools to help us protect the integrity of the platform.

The dbt333 platform uses cookies and similar tracking technologies (such as local storage tokens and session identifiers) to operate the platform correctly, maintain your login session, remember your preferences, and collect analytics data that helps us improve the site experience for Bangladesh players.

The categories of cookies we use include:

• Strictly Necessary Cookies: Required for the platform to function. These cannot be disabled. They include session authentication tokens and security cookies.
• Analytics Cookies: Used to measure how users interact with the platform — which pages are visited most, how long sessions last, and where users encounter difficulties. This data is aggregated and anonymised.
• Preference Cookies: Used to remember your settings such as display preferences and notification choices.

You may manage non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the dbt333 platform, including your ability to remain logged in between sessions.

dbt333 processes your personal data only where we have a lawful basis to do so. The primary purposes for which we use your data are set out below:

• Account Management: To create, verify, maintain, and administer your dbt333 account, including KYC verification and account security.
• Service Delivery: To provide access to cricket betting, live casino, slots, fish shooting games, and all other platform features that you have registered to use.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and card payment channels, and to maintain accurate financial records of all transactions.
• Fraud Prevention and AML Compliance: To detect, investigate, and prevent fraudulent activity, money laundering, identity theft, and other financial crime. This is a legal obligation as well as a contractual necessity.
• Responsible Gaming: To monitor account activity for patterns that may indicate problem gambling behaviour, and to apply responsible gaming tools such as deposit limits and self-exclusion where requested or where required.
• Customer Support: To respond to your enquiries, complaints, and support requests in a timely and effective manner.
• Regulatory Compliance: To meet our obligations under applicable laws and to respond to lawful requests from competent authorities.
• Platform Improvement: To analyse usage patterns and performance data to improve the quality, reliability, and relevance of the dbt333 platform for our Bangladesh player base.
• Marketing Communications (with consent): To send you promotional offers, seasonal promotions (such as Eid and BPL season bonuses), and dbt333 news where you have provided explicit consent. You may withdraw marketing consent at any time by contacting [email protected].

dbt333 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by law or where you have provided explicit consent.

dbt333 does not sell, rent, or trade your personal data to third-party marketers. We share personal data with third parties only in the following limited circumstances:

• Payment Service Providers: We share transaction reference data with bKash, Nagad, Rocket, Upay, Visa, and Mastercard solely to process your deposits and withdrawals.
• KYC and Identity Verification Partners: We share identity document data with certified KYC verification providers to confirm your eligibility to use the platform.
• Fraud Prevention and AML Screening Services: We share relevant account and transaction data with anti-fraud and AML compliance tools as required by our risk management obligations.
• Game Content Providers: Providers such as Pragmatic Play, Evolution Gaming, Microgaming, Spribe, and Ezugi may receive session and wager data relevant to the games you play, solely for game delivery and dispute resolution purposes. These providers operate under their own certified data protection frameworks.
• Regulatory and Law Enforcement Authorities: We will disclose personal data to competent authorities where required to do so by a valid court order, subpoena, or statutory obligation. We will notify you of such disclosure where legally permitted to do so.
• Professional Advisors: We may share data with our legal, financial, or security advisors under strict confidentiality obligations where necessary to protect dbt333's legal rights or comply with professional obligations.
• Business Transfers: In the event of a merger, acquisition, or transfer of substantially all of dbt333's assets, player data may be transferred to the acquiring entity as part of that transaction. You will be notified of such a transfer and given the opportunity to close your account before the transfer completes if you do not consent.

All third-party data processors engaged by dbt333 are required to handle your personal data in accordance with standards equivalent to those set out in this Policy and to use your data only for the specific purpose for which it was shared.

dbt333 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligations. Our standard retention periods are as follows:

• Account and Identity Data: Retained for the duration of the account's active life and for a minimum of five (5) years following permanent account closure, in compliance with AML and financial record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later.
• Transaction and Financial Records: Retained for a minimum of five (5) years from the date of each transaction.
• Communications and Support Records: Retained for three (3) years from the date of the last communication, or for the duration of any ongoing dispute resolution process, whichever is longer.
• Technical and Usage Data: Retained for up to twenty-four (24) months from collection, after which it is anonymised or deleted.
• Marketing Consent Records: Retained until consent is withdrawn and for a reasonable period thereafter to demonstrate compliance.

Where data is no longer required for any active purpose or legal obligation, dbt333 will securely delete or anonymise it in accordance with our internal data destruction procedures.

dbt333 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the dbt333 platform is encrypted using industry-standard SSL/TLS protocols.
• Encrypted Data Storage: Sensitive personal data, including identity documents and financial records, is stored in encrypted form on access-controlled servers.
• Role-Based Access Controls: Access to personal data within dbt333 is restricted to staff members who require it to perform their specific job functions. Access is logged and reviewed regularly.
• Two-Factor Authentication: Administrative access to systems holding personal data requires multi-factor authentication.
• Regular Security Audits: The dbt333 platform and its underlying infrastructure are subject to periodic security assessments to identify and remediate vulnerabilities.
• Incident Response: dbt333 maintains a data breach response procedure. In the event of a breach affecting your personal data, we will notify you and the relevant authorities within the timeframes required by applicable law.

While dbt333 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You also play a role in keeping your data safe — please maintain a strong, unique password for your dbt333 account and never share your login credentials with anyone.

Subject to applicable law and to certain exemptions that may apply in specific circumstances, you have the following rights in relation to your personal data held by dbt333:

• Right of Access: You may request a copy of the personal data that dbt333 holds about you, along with information about how it is being used.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. For identity data, correction requires submission of supporting documentation.
• Right to Erasure: You may request that dbt333 delete your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where the processing was unlawful. Note that this right does not override our legal obligations to retain certain data under AML and financial record-keeping regulations.
• Right to Restriction: You may request that we restrict the processing of your data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: You may request that we provide your personal data to you in a structured, commonly used, machine-readable format, where technically feasible.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests, in which case we will cease processing unless we can demonstrate compelling grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, receiving marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

dbt333 will not charge a fee for exercising any of the rights listed above unless the request is manifestly unfounded or excessive. In such cases, we reserve the right to charge a reasonable administrative fee or to decline the request, and we will explain our reasons for doing so.

The dbt333 platform is strictly for adults aged 21 and above. dbt333 does not knowingly collect or process personal data belonging to individuals under the age of 21. Our KYC verification procedures are specifically designed to detect and reject registration attempts by underage individuals.

If dbt333 becomes aware that personal data has been collected from a person under 21 without appropriate verification, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has successfully registered on the dbt333 platform, please contact us immediately at [email protected] so that we can investigate and act accordingly.

If you have any questions, concerns, or complaints about this Privacy Policy or about how dbt333 handles your personal data, please contact our data protection team at:

Email: [email protected]
Subject Line: Privacy Policy Enquiry

We aim to respond to all privacy-related enquiries within 30 calendar days. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.

For responsible gaming concerns, please visit the Responsible Gaming page, or contact our dedicated support team using the email address above with the subject line "Responsible Gaming Support".