dbt66 Privacy Policy

1. Data We Collect

1.1 Data You Provide Directly

When you register an account, complete identity verification, make a deposit, or contact customer support, dbt66 may collect the following categories of personal data:

Category	Examples	Purpose
Identity Data	Full name, date of birth, National Identity Card (NID) number, passport copy, driving licence	Account registration, KYC verification, age verification
Contact Data	Email address, mobile number, residential address (Dhaka, Chittagong, Sylhet, etc.)	Account communications, transaction alerts, support responses
Financial Data	bKash / Nagad / Rocket / Upay mobile wallet numbers, bank account references, transaction history in BDT	Deposit and withdrawal processing, fraud prevention, AML compliance
KYC Documents	Scanned government-issued photo ID, proof of address, payment method ownership proof	Identity verification, compliance with financial regulations
Support Communications	Chat transcripts, email correspondence, complaint records	Customer service, dispute resolution, service improvement

1.2 Data Collected Automatically

When you visit dbt66.app, our servers and analytics tools automatically collect certain technical data that does not on its own identify you personally, but which may be combined with other data to do so:

• Device data: Device type, operating system version, browser type and version, screen resolution, and language settings.
• Usage data: Pages visited, games launched, betting markets viewed, session duration, click-stream data, and navigation paths within dbt66.app.
• Network data: IP address, approximate geographic location derived from IP (region or city level — not GPS), internet service provider, and connection type.
• Transaction data: Timestamps of deposits and withdrawals, amounts in BDT, payment method used, and transaction outcome (success, failure, pending).

1.3 Data from Third Parties

dbt66 may receive personal data about you from trusted third-party sources in limited circumstances, including:

• Identity verification partners who confirm the authenticity of your NID or passport against government databases.
• Payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank) who confirm transaction status and wallet ownership.
• Fraud prevention and anti-money laundering (AML) screening services that flag accounts associated with known fraudulent activity.
• Publicly available sources such as sanctions lists and politically exposed persons (PEP) databases, which dbt66 checks as part of its compliance obligations.

2. How We Use Your Data

dbt66 processes your personal data only where we have a valid legal basis to do so. The table below sets out our primary processing purposes and the legal basis for each:

Processing Purpose	Legal Basis
Creating and maintaining your dbt66 account	Performance of contract
Processing BDT deposits and withdrawals via bKash, Nagad, Rocket, and bank transfer	Performance of contract
Verifying your age (18+) and identity (KYC)	Legal obligation; performance of contract
Detecting and preventing fraud, money laundering, and bonus abuse	Legitimate interests; legal obligation
Providing customer support and resolving disputes	Performance of contract; legitimate interests
Sending transactional communications (deposit confirmations, withdrawal alerts)	Performance of contract
Sending promotional communications about dbt66 bonuses and offers	Consent (you may opt out at any time)
Analysing site usage to improve platform performance	Legitimate interests
Responsible gaming monitoring (detecting problem gambling patterns)	Legitimate interests; legal obligation
Retaining financial and identity records to comply with regulatory obligations	Legal obligation

2.1 Marketing Communications

If you have consented to receive marketing communications from dbt66, we may contact you by email or SMS with information about new games, bonus offers, promotions, and platform updates. You may withdraw your consent and opt out of marketing communications at any time by updating your notification preferences in your account settings panel or by emailing [email protected] with the subject line "Unsubscribe". Opting out of marketing communications does not affect the delivery of transactional messages related to your account activity.

2.2 Responsible Gaming Monitoring

dbt66 uses automated tools to monitor player behaviour for indicators of problem gambling, including unusual increases in deposit frequency, session duration patterns, and self-reported distress signals via support channels. Where such indicators are detected, dbt66 may proactively contact the player to offer responsible gaming support tools, including deposit limits, cooling-off periods, and self-exclusion. This monitoring is carried out in the interests of player welfare and is a core part of dbt66's commitment to responsible gaming. For more information, please visit our Responsible Gaming page.

3. Data Sharing & Third Parties

dbt66 does not sell, rent, or trade your personal data. We share your data with third parties only in the following limited and controlled circumstances:

3.1 Payment Service Providers

To process your deposits and withdrawals in BDT, dbt66 must share relevant transaction data with your chosen payment provider (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, or BRAC Bank). The data shared is limited to what is strictly necessary to execute the transaction. Each payment provider operates under its own privacy policy and data protection obligations.

3.2 Identity Verification Partners

To comply with our age verification and KYC obligations, dbt66 uses trusted third-party identity verification services. These partners receive the personal data you submit during KYC (name, date of birth, ID document images) solely for the purpose of verification. They are contractually prohibited from using this data for any other purpose.

3.3 Game Software Providers

The casino games and sportsbook on dbt66 are powered by third-party game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session and gameplay data (such as game round IDs and wager amounts) for the purpose of game integrity verification, RNG auditing, and dispute resolution. They do not receive your name, contact details, or payment information.

3.4 Analytics Providers

dbt66 uses third-party web analytics tools to understand how players use the platform and to improve the user experience. Analytics data is aggregated and anonymised wherever possible. Our analytics partners are contractually prohibited from using any dbt66 player data for their own commercial purposes.

3.5 Law Enforcement and Regulatory Authorities

dbt66 may disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities when required to do so by applicable law, or where dbt66 determines in good faith that disclosure is necessary to protect the rights, property, or safety of dbt66, its players, or the public. Where legally permitted, dbt66 will notify the affected player before making such a disclosure.

3.6 Business Transfers

In the event that dbt66 undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, dbt66 will ensure that appropriate data protection safeguards are in place before any transfer takes place, and registered players will be notified of any change in data controller via the email address on file.

4. Cookies & Tracking

dbt66 uses cookies and similar technologies (local storage, session tokens, pixel tags) to operate the platform and improve your experience. The following categories of cookies are used on dbt66.app:

Cookie Type	Purpose	Can Be Disabled?
Strictly Necessary	Maintain your login session, keep your game state active, prevent cross-site request forgery (CSRF). These are essential for dbt66.app to function.	No — disabling these will break core site functionality
Functional	Remember your language preference, display settings, and last-visited game category so you don't need to re-select them on each visit.	Yes — via browser settings; some features may be affected
Analytics	Collect anonymised data on page views, session duration, and navigation paths to help dbt66 understand how players use the platform and identify technical issues.	Yes — via browser settings or opt-out tools
Fraud Prevention	Identify suspicious login patterns, detect bot activity, and flag unusual betting behaviour by comparing session fingerprints against known fraud patterns.	No — these are necessary for platform security and player protection

You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary or fraud prevention cookies may prevent you from accessing core features of dbt66.app, including logging in and placing wagers. dbt66 does not use cookies to serve targeted advertising or build third-party advertising profiles.

5. Data Retention

dbt66 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable financial, regulatory, or legal obligations. Our standard retention periods are as follows:

• Account and identity data: Retained for a minimum of 5 years following the date of account closure, in accordance with financial record-keeping regulations.
• Transaction records (deposits, withdrawals, wager history): Retained for a minimum of 5 years following the date of each transaction.
• KYC documents (NID scans, address proof): Retained for a minimum of 5 years following account closure.
• Customer support communications: Retained for 3 years from the date of the last communication, unless the matter relates to an ongoing dispute, in which case records are retained until final resolution.
• Marketing consent records: Retained for the duration of your account, plus 2 years following account closure or consent withdrawal.
• Analytics and usage data: Aggregated and anonymised data may be retained indefinitely; data capable of identifying an individual is deleted within 13 months of collection.

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not immediately possible (for example, because data is stored in backup archives), dbt66 will isolate the data from active processing until deletion is feasible.

6. Data Security

The specific security measures employed by dbt66 include, but are not limited to:

• 256-bit SSL/TLS encryption on all data in transit between your browser and dbt66.app.
• AES-256 encryption for sensitive data at rest, including KYC documents and payment references.
• One-way password hashing using industry-standard algorithms — your password is never stored in plain text and dbt66 staff cannot read it.
• Two-factor authentication (2FA) available to all players via the account security settings panel.
• Role-based access controls (RBAC) ensuring that dbt66 staff can only access the minimum data necessary for their specific job function.
• Regular penetration testing and security audits conducted by independent third-party security specialists.
• Intrusion detection systems (IDS) and real-time monitoring of all server infrastructure for anomalous activity.
• Automatic session timeout after a period of inactivity to protect accounts on shared devices.

6.1 Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, dbt66 will notify affected individuals without undue delay and in any case within 72 hours of becoming aware of the breach, where technically and legally feasible. Notification will be sent to the email address registered on the affected account and will describe the nature of the breach, the data involved, and the steps dbt66 is taking to address it.

7. Your Privacy Rights

As a dbt66 player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request". We will respond within 30 calendar days. Identity verification may be required before we can process your request.

• Right of Access: You may request a copy of all personal data that dbt66 holds about you, together with information about how it is being processed.
• Right to Rectification: If any personal data dbt66 holds about you is inaccurate or incomplete, you may request that it be corrected or updated. You may also update your contact details directly through your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where you object to processing. Note that dbt66 may be required to retain certain data for legal or regulatory reasons even after an erasure request is received.
• Right to Restrict Processing: You may request that dbt66 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of your data is being contested.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you may request a copy of your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) for transfer to another service provider.
• Right to Object: You may object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, though dbt66 may continue processing where it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Please be aware that exercising certain rights — particularly the right to erasure — may result in the closure of your dbt66 account, as we may be unable to operate your account without the personal data concerned. Account closure does not override dbt66's obligation to retain data for the minimum statutory periods described in Section 5.

8. Policy Updates & Contact

8.1 Updates to This Policy

dbt66 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or business operations. When material changes are made, we will update the "Last Updated" date at the top of this page and, where the change is significant, notify registered players via the email address on file. We recommend that you review this Privacy Policy periodically to stay informed about how dbt66 protects your data. Continued use of dbt66.app after a policy update constitutes acceptance of the revised policy.

8.2 Children's Privacy

dbt66 is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 18. If dbt66 becomes aware that personal data has been submitted by a person under 18, that account will be closed immediately, all associated data will be deleted or anonymised in accordance with applicable law, and any deposits will be returned to the original payment method used.

8.3 Links to Third-Party Sites

dbt66.app does not contain links to external third-party websites. In the event that any third-party content is made available through the platform (for example, within game interfaces supplied by game studios), dbt66 is not responsible for the privacy practices of those third parties. We encourage players to review the privacy policies of any third-party service with which they interact.

8.4 Contact Us About Privacy

If you have any questions, concerns, or requests related to this Privacy Policy or dbt66's handling of your personal data, please contact our Data Protection team: