Your Privacy Matters at dbd22

1. Who We Are

dbd22 is an online sports betting and casino platform operated at dbd22.io, serving players throughout Bangladesh including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur and Mymensingh. In the context of this Privacy Policy, references to "dbd22", "we", "us" or "our" refer to the operator of the dbd22 Platform.

dbd22 acts as the data controller in respect of the personal data you provide when registering an Account or using our services. As data controller, dbd22 determines the purposes and means of processing your personal data and bears responsibility for ensuring that processing is carried out lawfully, fairly and transparently.

If you have any questions about how dbd22 handles your personal data, please contact our support team at [email protected] (plain text — not a clickable link). Our support team operates 24 hours a day, 365 days a year, in the Bangladesh Standard Time zone (BST, UTC+6).

2. Data We Collect

2.1 Registration Data

When you create a dbd22 Account, we collect the following information:

• Full legal name as it appears on your Bangladesh National Identity Card (NID)
• Date of birth (used to verify that you are aged 21 or above)
• Registered Bangladeshi mobile phone number
• Email address
• Chosen username and encrypted password
• Preferred language (English)

2.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) obligations and to process withdrawal requests, dbd22 may collect:

• A clear photographic copy of your Bangladesh NID (front and back)
• A selfie photograph or video for liveness verification
• Proof of residential address (utility bill, bank statement, or equivalent document)
• Source of funds documentation where required by our risk assessment procedures

2.3 Financial & Transaction Data

When you deposit or withdraw funds on dbd22, we collect transaction records including:

• Deposit and withdrawal amounts in BDT (৳)
• Payment method used (bKash, Nagad, Rocket, Upay, bank transfer)
• Mobile wallet number or bank account name associated with the transaction
• Transaction timestamps in Bangladesh Standard Time
• Transaction reference numbers generated by the payment provider

dbd22 does not store full mobile banking PINs, one-time passwords (OTPs), or full bank account numbers. Payment credentials are handled directly by the respective payment service provider under their own security standards.

2.4 Betting & Gaming Activity Data

dbd22 automatically logs all betting and gaming activity associated with your Account, including:

• Sports bets placed — event, selection, odds, stake and outcome
• Casino game sessions — game title, provider, session duration, bets and results
• Bonus activations, wagering progress and bonus expiry events
• Game session start and end times in BST

2.5 Technical & Device Data

When you access the dbd22 Platform, our servers automatically collect certain technical data:

2.6 Communications Data

If you contact dbd22 via live chat or email, we retain a record of that correspondence including the content of messages, the date and time of contact, and the resolution of any support request. This data is used to maintain service quality and to assist with any future queries you raise.

3. How We Use Your Data

dbd22 uses your personal data for the following specific purposes:

• Account creation and management: To register your Account, authenticate your identity at login, and maintain accurate Account records.
• Age and identity verification: To confirm that you are aged 21 or above and that you are who you say you are, in compliance with our KYC procedures.
• Payment processing: To process deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay and Bangladeshi bank accounts, and to maintain financial records.
• Fraud and security monitoring: To detect, investigate and prevent fraudulent activity, money laundering, multi-accounting and other prohibited conduct as defined in the dbd22 Terms & Conditions.
• Responsible gaming: To monitor gambling behaviour patterns and to provide responsible gaming interventions — including session alerts, deposit limit reminders and self-exclusion enforcement — where we identify potential signs of problem gambling.
• Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance through our 24/7 support team.
• Platform improvement: To analyse usage patterns, identify technical issues, and make improvements to the dbd22 Platform that benefit all Bangladesh players.
• Legal compliance: To meet record-keeping, reporting and cooperation obligations that may apply to dbd22's operations.
• Marketing communications: To send promotional offers, bonus notifications and seasonal promotions — but only to players who have given explicit marketing consent during registration or via Account preferences.

4. Legal Basis for Processing

dbd22 processes your personal data on the following legal bases depending on the specific processing activity:

• Contractual necessity: Processing that is required to perform the contract between you and dbd22 — that is, to provide you with betting, casino and payment services as set out in the dbd22 Terms & Conditions. This covers Account registration, transaction processing and bet settlement.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including identity verification, financial record-keeping and cooperation with lawful requests from competent authorities.
• Legitimate interests: Processing carried out for dbd22's legitimate business interests where those interests are not overridden by your privacy rights. This includes fraud prevention, security monitoring, platform improvement and internal analytics.
• Consent: Where we rely on your consent — specifically for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Sharing Your Data

5.1 Payment Service Providers

To process deposits and withdrawals, dbd22 shares necessary transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank and BRAC Bank. These providers receive only the data required to complete the transaction and are contractually required to protect it.

5.2 Identity Verification Partners

dbd22 may use third-party KYC service providers to assist with identity and age verification. These providers process the identity documents you submit solely for the purpose of verifying your identity and do not use your data for any other purpose. All such providers are vetted for data security standards before engagement.

5.3 Game Content Providers

dbd22 integrates games from third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe and Ezugi. These providers may receive pseudonymous session data (such as a player identifier and session token) in order to serve game content. They do not receive your full name, NID details, or payment information.

5.4 Legal and Regulatory Disclosure

dbd22 may disclose your personal data to competent authorities, law enforcement bodies or courts where required to do so by applicable law, court order, or legal process. In such cases, dbd22 will share only the minimum data necessary to comply with the lawful request.

5.5 No Commercial Data Sales

dbd22 does not sell, rent, license or otherwise commercially transfer your personal data to any third party for advertising, profiling or marketing purposes. Your data is an asset held in trust — it is not a product.

6. Cookies & Tracking

6.1 Types of Cookies Used

dbd22 uses the following categories of cookies when you visit the Platform:

• Essential cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in as you navigate between pages, and security cookies that help detect and prevent fraudulent access. Essential cookies cannot be disabled without impairing Platform functionality.
• Functional cookies: Used to remember your preferences such as language settings and responsible gaming tool configurations. These cookies improve your experience but are not strictly necessary.
• Analytics cookies: Used to understand aggregate usage patterns on the Platform — for example, which game categories are most popular among Bangladesh players and where technical errors are occurring. Analytics data is collected in pseudonymised form and is not linked back to your identity.

6.2 Cookie Management

You may manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that blocking essential cookies will prevent you from logging in to your dbd22 Account. Deleting functional cookies will reset your saved preferences. dbd22 does not use third-party advertising cookies or cross-site tracking pixels.

7. Data Retention

dbd22 retains personal data for the following periods:

After the applicable retention period expires, personal data is securely deleted or irreversibly anonymised within 30 days. Anonymised aggregated data (from which you cannot be identified) may be retained indefinitely for statistical analysis.

8. Data Security

dbd22 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure:

• Transport security: All data transmitted between your device and dbd22 servers is encrypted using TLS 1.2 or higher. HTTPS is enforced on every page of the Platform.
• Storage encryption: Sensitive personal data fields — including NID document images and payment references — are encrypted at rest in dbd22's database infrastructure.
• Access controls: Access to personal data within dbd22 is restricted to staff who require it to perform their specific role. All staff with data access are subject to confidentiality obligations.
• Two-factor authentication: dbd22 offers 2FA for all Player Accounts and enforces 2FA for all internal staff accounts with access to player data systems.
• Intrusion detection: dbd22 operates 24/7 automated monitoring for suspicious access patterns, unusual data export activity and potential security breaches across all Platform systems.
• Incident response: In the event of a confirmed personal data breach that poses a risk to your rights, dbd22 will notify affected players without undue delay and take immediate remedial action.

9. Your Rights

As a dbd22 player, you hold the following rights in relation to your personal data. You may exercise any of these rights at any time by contacting us at [email protected]:

• Right of access: You may request a copy of all personal data dbd22 holds about you. We will provide this within 30 days of receiving a verified request.
• Right to rectification: If any personal data dbd22 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Name corrections require NID documentation as supporting evidence.
• Right to erasure: You may request that dbd22 delete your personal data. This right is subject to our legal retention obligations — we cannot delete data that we are required by law to retain. Where erasure is not possible in full, we will explain why and erase as much data as legally permissible.
• Right to restrict processing: You may request that dbd22 restrict processing of your data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing pending verification of our legitimate interests.
• Right to data portability: You may request that dbd22 provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, and the absolute right to object to processing for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

dbd22 will respond to all data rights requests within 30 days. In complex cases, this may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it.

10. Children's Privacy

The dbd22 Platform is strictly for adults aged 21 years and above. dbd22 does not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you must not register an Account or use the Platform under any circumstances.

If dbd22 discovers or is notified that personal data has been collected from an individual under the age of 21, that Account will be immediately closed, all data associated with it will be deleted as promptly as our legal retention obligations permit, and any deposits held will be returned to the payment source. If you believe a minor may have registered a dbd22 Account, please contact us immediately at [email protected].

11. Marketing Communications

11.1 Consent-Based Marketing

dbd22 may send you promotional emails and SMS notifications about new games, deposit bonuses, seasonal offers (such as Eid promotions, Pohela Boishakh specials and BPL cricket season promotions) and platform updates — but only if you have explicitly opted in to receive marketing communications during registration or via your Account settings.

11.2 Transactional Notifications

Certain communications are not marketing and are sent regardless of your marketing preferences. These include: deposit and withdrawal confirmations, Account security alerts (such as new device login notifications), responsible gaming reminders triggered by your usage patterns, KYC request notifications, and changes to these Terms or this Privacy Policy that materially affect your rights.

11.3 Opting Out

You may withdraw your marketing consent at any time by logging in to your dbd22 Account and updating your notification preferences, or by contacting support at [email protected] and requesting removal from marketing communications. Opt-out requests are processed within 5 business days. Opting out of marketing does not affect your ability to use the Platform.

12. Changes to This Policy

dbd22 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations or Platform features. When material changes are made, we will notify you via your registered email address at least 7 days before the changes take effect. The "Last Updated" date at the top of this document will always reflect the date of the most recent revision.

We encourage you to review this Privacy Policy periodically to stay informed about how dbd22 protects your personal data. Continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy.

13. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise a data right, or want to raise a complaint about how dbd22 has handled your personal data, please contact us through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly from the dbd22 Platform
• Response Time: Email responses within 4 hours; live chat average under 3 minutes
• Support Hours: 24 hours a day, 365 days a year, including Bangladeshi public holidays
• Time Zone: Bangladesh Standard Time (BST, UTC+6)

dbd22 takes all privacy complaints seriously. Upon receiving a complaint, we will acknowledge it within 24 hours, investigate thoroughly, and provide a substantive response within 30 days. If you remain dissatisfied with our response, you are entitled to escalate the matter through appropriate legal channels available in your jurisdiction.