Privacy Policy

1. Introduction

dbwin ("we," "us," "our," or "the Company") operates an online betting and casino platform accessible at dbwin.io and related domains. We are committed to protecting and respecting your privacy in accordance with international data protection laws and best practices. This Privacy Policy describes how we handle personal information collected from users ("you," "your," or "the User") in Bangladesh and other jurisdictions where our services are available.

By creating an account, accessing our website, or using our services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with our privacy practices, you must not use our platform or services. This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy, which collectively govern your relationship with dbwin.

2. Information We Collect

2.1 Personal Information Provided by You

When you register for a dbwin account, we collect personal information that you voluntarily provide, including but not limited to:

• Identity Information: Full legal name, date of birth, gender, and nationality as shown on government-issued identification documents.
• Contact Information: Email address, mobile phone number, residential address including street, city, postal code, and country.
• Account Credentials: Username, password (stored in encrypted format), and security questions for account recovery purposes.
• Financial Information: Payment method details including bKash/Nagad/Rocket account numbers, bank account information, transaction history, deposit and withdrawal records.
• Verification Documents: Copies of government-issued ID (National ID card, passport, driver's license), proof of address (utility bills, bank statements), and payment method ownership verification documents.
• Communication Records: Customer support chat transcripts, emails, phone call recordings, and any other correspondence with our team.

2.2 Information Collected Automatically

When you use our platform, we automatically collect certain technical and usage information through cookies, web beacons, and similar tracking technologies:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers, mobile network information.
• Connection Data: IP address, internet service provider, approximate geographic location based on IP, connection timestamps.
• Usage Data: Pages visited, features accessed, betting history, game preferences, session duration, referral sources, click patterns, search queries.
• Performance Data: Application performance metrics, error logs, crash reports, and diagnostic data to improve service quality.

2.3 Information from Third Parties

We may receive additional information about you from third-party sources including payment processors (bKash, Nagad, Rocket, banking partners), identity verification services, fraud prevention agencies, marketing partners, and regulatory compliance databases. This information is used to verify your identity, prevent fraud, comply with legal obligations, and enhance our services.

3. How We Use Your Data

dbwin processes your personal information for the following legitimate purposes:

• Account Management: Creating and maintaining your user account, authenticating your identity, processing login requests, managing account settings and preferences.
• Service Delivery: Processing bets and wagers, facilitating casino gameplay, calculating winnings, managing your account balance, processing deposits and withdrawals.
• Customer Support: Responding to inquiries, resolving disputes, providing technical assistance, investigating and addressing complaints.
• Compliance and Verification: Verifying your age and identity, conducting know-your-customer (KYC) checks, complying with anti-money laundering (AML) regulations, meeting legal and regulatory obligations.
• Fraud Prevention: Detecting and preventing fraudulent activities, identifying suspicious transaction patterns, protecting against account takeover attempts, monitoring for bonus abuse and collusion.
• Marketing and Communications: Sending promotional offers, bonuses, and special event notifications (with your consent), providing service updates and important announcements, conducting customer satisfaction surveys.
• Analytics and Improvement: Analyzing usage patterns to improve user experience, developing new features and games, optimizing platform performance, conducting market research.
• Responsible Gaming: Monitoring betting behavior for signs of problem gambling, enforcing deposit limits and self-exclusion requests, providing intervention when concerning patterns are detected.
• Legal Obligations: Responding to legal process and regulatory requests, cooperating with law enforcement investigations, maintaining records as required by applicable laws.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contractual Necessity: Processing necessary to fulfill our contractual obligations to you when you use our betting and gaming services.
• Legal Compliance: Processing required to comply with legal obligations including age verification, AML/KYC requirements, tax reporting, and regulatory compliance.
• Legitimate Interests: Processing necessary for our legitimate business interests such as fraud prevention, network security, business analytics, and service improvement, provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your explicit consent for marketing communications, optional data collection for enhanced features, and cookies beyond those strictly necessary for service operation.

5. Data Sharing and Disclosure

dbwin does not sell your personal information to third parties. We may share your data with the following categories of recipients for the purposes outlined in this Privacy Policy:

5.1 Service Providers and Business Partners

• Payment Processors: bKash, Nagad, Rocket, banking institutions, and other payment service providers to facilitate deposits and withdrawals.
• Gaming Providers: Software suppliers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe who provide casino games and live dealer tables on our platform.
• Identity Verification Services: Third-party KYC and AML compliance providers who verify identity documents and screen for fraud risks.
• Technology Partners: Cloud hosting providers, content delivery networks, cybersecurity firms, and IT support contractors.
• Customer Support Tools: Live chat providers, ticketing systems, and CRM platforms used to manage customer inquiries.
• Marketing and Analytics: Email marketing platforms, analytics services, and advertising networks (only with your consent for marketing purposes).

5.2 Legal and Regulatory Disclosures

We may disclose your personal information when required by law or when we believe in good faith that such disclosure is necessary to:

• Comply with legal processes such as court orders, subpoenas , or government requests.
• Enforce our Terms & Conditions and other agreements with users.
• Protect the rights, property, or safety of dbwin, our users, or the public.
• Investigate and prevent fraud, security breaches, or illegal activities.
• Respond to regulatory inquiries from gaming authorities or financial regulators.

5.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity or successor company. We will notify you of any such change in ownership or control of your personal data.

6. Security Measures

dbwin employs industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security infrastructure includes:

• Encryption: All data transmission between your device and our servers is protected using SSL/TLS encryption protocols. Sensitive data including passwords and payment information is encrypted at rest using advanced encryption standards (AES-256).
• Access Controls: Strict internal access controls ensure that only authorized personnel with a legitimate business need can access personal data. All access is logged and monitored for suspicious activity.
• Secure Infrastructure: Our platform is hosted on secure cloud infrastructure with regular security audits, penetration testing, and vulnerability assessments conducted by independent security experts.
• Fraud Detection: Advanced fraud detection systems continuously monitor transactions and account activity for suspicious patterns, with automated alerts for potential security incidents.
• Regular Updates: We maintain up-to-date software and security patches across all systems to protect against known vulnerabilities and emerging threats.
• Employee Training: All employees undergo regular data protection and security awareness training to ensure they understand their responsibilities in safeguarding user information.

While we implement robust security measures, no system is completely impervious to attack. You are responsible for maintaining the confidentiality of your account credentials and should immediately notify us if you suspect unauthorized access to your account.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Active Accounts: Personal data is retained for the duration of your active account and for 7 years after account closure to comply with legal obligations including tax reporting, AML regulations, and dispute resolution requirements.
• Transaction Records: Betting history, deposits, withdrawals, and financial transactions are retained for 7 years from the transaction date for audit, accounting, and regulatory compliance purposes.
• Verification Documents: Copies of identity documents and KYC records are retained for 7 years after relationship termination as required by AML regulations.
• Marketing Data: Marketing communications and consent records are retained until you withdraw consent or for 3 years from your last interaction with marketing materials, whichever is earlier.
• Customer Support Records: Chat transcripts, emails, and support tickets are retained for 3 years to maintain quality standards and resolve potential disputes.

After the applicable retention period expires, we securely delete or anonymize your personal information in accordance with our data deletion procedures.

8. Cookies and Tracking Technologies

dbwin uses cookies, web beacons, and similar tracking technologies to enhance your experience, analyze usage patterns, and deliver personalized content. Cookies are small text files stored on your device that enable us to recognize you and remember your preferences.

8.1 Types of Cookies We Use

• Essential Cookies: Necessary for platform functionality including user authentication, session management, security features, and load balancing. These cannot be disabled without affecting core services.
• Performance Cookies: Collect anonymous data about how you use our site, including pages visited, time spent, and features accessed, helping us improve platform performance.
• Functional Cookies: Remember your preferences such as language settings, display options, and recently viewed games to provide a personalized experience.
• Marketing Cookies: Track your browsing activity to deliver relevant advertisements and promotional offers (only with your consent).

8.2 Managing Cookie Preferences

You can control cookie settings through your browser preferences. Most browsers allow you to refuse cookies, delete existing cookies, or receive alerts when cookies are being set. Note that disabling essential cookies may impair your ability to use certain features of our platform. You can manage your cookie preferences at any time through your account settings.

9. Your Privacy Rights

Subject to applicable law, you have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal data we hold about you, including details about how we process your information.
• Right to Rectification: Correct inaccurate or incomplete personal information in your account profile.
• Right to Erasure: Request deletion of your personal data in certain circumstances, subject to legal retention requirements.
• Right to Restrict Processing: Request that we limit the processing of your data in specific situations, such as while verifying accuracy or resolving a dispute.
• Right to Data Portability: Receive your personal data in a structured, commonly used format and transmit it to another service provider where technically feasible.
• Right to Object: Object to processing based on legitimate interests, including for direct marketing purposes.
• Right to Withdraw Consent: Withdraw previously given consent for data processing activities that rely on consent as the legal basis.
• Right to Lodge a Complaint: File a complaint with a supervisory data protection authority if you believe your privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with your request. We will respond to verified requests within 30 days. Some requests may require additional verification to protect your account security.

10. International Data Transfers

dbwin operates internationally and may transfer your personal data to countries outside Bangladesh for processing and storage. Some of these countries may have data protection laws that differ from those in Bangladesh. When we transfer data internationally, we implement appropriate safeguards to ensure your information receives adequate protection, including:

• Using standard contractual clauses approved by data protection authorities.
• Ensuring service providers maintain appropriate technical and organizational security measures.
• Conducting due diligence on the data protection practices of recipient countries and organizations.
• Implementing additional security measures when transferring data to jurisdictions with lower protection standards.

11. Children's Privacy

If we become aware that we have inadvertently collected personal data from a person under 21 years old, we will take immediate steps to delete such information and terminate the associated account. Parents or guardians who believe their child has provided personal information to dbwin should contact us immediately at [email protected]. We employ age verification measures during registration and may request additional documentation to confirm users meet our minimum age requirement.

12. Changes to This Privacy Policy

dbwin reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. The "Last Updated" date at the top of this document indicates when the policy was most recently revised. Material changes that significantly affect your rights will be communicated through email notification or prominent notice on our platform at least 30 days before taking effect.

Your continued use of dbwin services after the effective date of any changes constitutes acceptance of the updated Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information. If you do not agree with any modifications, you must cease using our services and may request account closure.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us:

We are committed to addressing your privacy concerns promptly and transparently. All inquiries will receive a response within 5 business days.