Privacy Policy — How dbe222 Collects, Uses, and Protects Your Personal Data

Privacy at a Glance

A quick overview of our core data protection commitments. The full policy follows below.

Full Privacy Policy

01 Information We Collect

dbe222 collects personal data through several channels in order to operate a safe, compliant, and enjoyable gaming platform. The categories of data we collect are as follows:

Identity and Contact Data

• Full legal name, date of birth, and nationality as provided during account registration.
• Email address and mobile phone number used for account communication and two-factor authentication.
• Residential address, city, and postcode (required for KYC verification and withdrawal processing).
• Government-issued identification documents submitted during the KYC process, such as National ID (NID), passport, or driving licence.

Financial and Transaction Data

• Deposit and withdrawal transaction records including amounts, timestamps, and payment method references.
• Mobile financial service account identifiers (e.g., bKash, Nagad, Rocket, Upay registered numbers) used for processing payments. We do not store full MFS PINs or passwords.
• Bank account details where bank transfer is used as a payment method.
• Bonus and promotion history associated with your account.

Technical and Usage Data

• IP address, device type, operating system, and browser type collected automatically when you access the platform.
• Session logs including login timestamps, pages visited, game sessions initiated, and duration of platform use.
• Cookies and similar tracking technologies as described in the Cookies section below.
• Geolocation data at the country or city level, derived from your IP address, used for compliance screening and fraud prevention.

Communications Data

• Records of support interactions between you and the dbe222 customer support team, including live chat transcripts, email correspondence, and complaint records.
• Survey responses and feedback submitted voluntarily through the platform.

02 How We Use Your Data

dbe222 processes personal data only for specific, defined purposes and will not use your data in a manner incompatible with those purposes without first notifying you. The primary purposes for which we use your data are:

• Account management: To create, maintain, and manage your registered account on the dbe222 platform, including identity verification and authentication.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and other supported payment channels.
• Legal compliance: To fulfil our obligations under applicable anti-money laundering (AML), Know Your Customer (KYC), and counter-terrorism financing (CTF) regulations.
• Fraud and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, and other security threats to the platform and its users.
• Customer support: To respond to your queries, complaints, and requests through our support channels.
• Platform improvement: To analyse aggregate usage patterns and technical performance data to improve the functionality and user experience of the dbe222 platform.
• Responsible gaming: To monitor gaming behaviour and identify patterns that may indicate problem gambling, in order to fulfil our responsible gaming obligations.
• Marketing communications: Where you have provided explicit consent, to send you relevant promotions, bonus offers, and news about new games or features on dbe222. You may withdraw this consent at any time by contacting support.

03 Legal Basis for Processing

dbe222 processes your personal data on the following legal grounds, depending on the nature of the processing activity:

• Contractual necessity: Processing your identity, contact, and financial data is necessary to provide the services described in our Terms & Conditions and to fulfil the agreement between you and dbe222.
• Legal obligation: We are required by applicable law to collect and retain certain categories of data, including KYC documentation and transaction records, for AML/CTF compliance purposes.
• Legitimate interests: We process technical and usage data to operate and improve the platform, prevent fraud, and ensure the security of our systems and other users, where these interests are not overridden by your own rights.
• Consent: Where we send you marketing communications, we do so only on the basis of your explicit prior consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

04 Cookies and Tracking Technologies

dbe222 uses cookies and similar browser-based tracking technologies to operate certain platform functions, measure performance, and improve your experience. The types of cookies we use are as follows:

• Essential cookies: These are strictly necessary for the platform to function. They include session authentication tokens, CSRF protection cookies, and preference settings. You cannot opt out of essential cookies without ceasing to use the platform.
• Analytics cookies: We use anonymised analytics to understand how users interact with the platform — which pages are visited, how long sessions last, and where users navigate from. This data is processed in aggregate form and is not linked to any individually identified user.
• Functional cookies: These remember your settings and preferences, such as preferred language display, notification preferences, and game layout choices.

You can manage your cookie preferences through your browser settings at any time. Blocking essential cookies will affect platform functionality. Please note that disabling analytics or functional cookies will not affect your ability to play games or access your account, though some personalisation features may not function as expected.

05 Data Sharing and Third-Party Disclosure

dbe222 does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. We may share your personal data with carefully selected third-party service providers who assist us in operating the platform, under the following conditions:

• Payment processors: We share the minimum necessary financial data with payment partners such as bKash, Nagad, Rocket, Upay, and partner banks to process your transactions. These partners are subject to their own privacy obligations.
• Identity verification providers: KYC documentation may be processed by vetted third-party identity verification services operating under strict data processing agreements with dbe222.
• Game providers: When you play games hosted by third-party providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, or Ezugi, limited session data (e.g., player ID, game result) is exchanged with those providers to facilitate gameplay and result settlement.
• Legal and regulatory bodies: We may disclose personal data to competent legal authorities where required by law, court order, or regulatory demand, without prior notice to you where legally required.
• Fraud prevention services: We may share data with third-party fraud detection systems to protect our platform and our players from fraudulent activity and money laundering.

All third-party processors engaged by dbe222 are contractually bound to process data only for the purposes specified by dbe222, to implement appropriate security measures, and to refrain from any further processing of your data for their own purposes.

06 Data Retention

dbe222 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention schedules are as follows:

• Account and identity data: Retained for the duration of your active account plus five years following permanent account closure, in order to comply with AML/KYC record-keeping requirements.
• Transaction records: Retained for a minimum of five years from the date of the transaction, in accordance with financial compliance obligations.
• Support communications: Retained for three years from the date of the interaction, unless the communication relates to an ongoing dispute or investigation, in which case it will be retained until resolution.
• Technical and usage logs: Retained for up to twelve months in identifiable form, after which they are anonymised or deleted.
• Marketing consent records: Retained for the duration of the active consent plus a reasonable period thereafter to demonstrate compliance with consent requirements.

When personal data is no longer required under these retention schedules, dbe222 will securely delete or irreversibly anonymise it using industry-standard data destruction methods.

07 Data Security

dbe222 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security (TLS 1.3) encryption for all data transmitted between your device and our servers.
• AES-256 encryption for sensitive personal data stored at rest in our databases.
• Role-based access controls ensuring that personal data is accessible only to dbe222 staff with a legitimate operational need.
• Multi-factor authentication required for all administrative access to systems containing personal data.
• Regular penetration testing and vulnerability assessments conducted by qualified security professionals.
• Automated intrusion detection systems monitoring platform infrastructure around the clock.
• Strict data minimisation practices limiting the volume of personal data held in any single system.

While dbe222 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security against all possible threats. In the event of a personal data breach that is likely to result in a risk to your rights, dbe222 will notify affected users promptly and take all necessary steps to contain and remediate the breach.

08 Your Data Rights

As a data subject, you hold the following rights in relation to your personal data held by dbe222. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Request", including your registered account details for identification purposes.

09 Children and Minors

dbe222 operates a strict 21+ age policy. The platform is not directed at, and does not knowingly collect personal data from, individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the platform, please contact us immediately at [email protected].

10 Links to Third-Party Services

The dbe222 platform may reference or display content from third-party game providers and payment partners. These third parties operate their own systems and are governed by their own privacy policies. dbe222 is not responsible for the privacy practices of third-party providers and encourages you to review the relevant privacy notices of any third-party service you use in connection with the platform.

11 Changes to This Privacy Policy

dbe222 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or operational requirements. When we make material changes, we will notify registered users via their registered email address or through an in-platform notification prior to the changes taking effect. The date of the most recent revision is displayed at the top of this page. Continued use of the platform after the effective date of any update constitutes your acceptance of the revised Policy.

12 Contact and Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which dbe222 handles your personal data, please contact us in writing at [email protected] with the subject line "Privacy Request". We aim to acknowledge all privacy-related correspondence within two business days and to provide a substantive response within 30 calendar days.

If you are dissatisfied with our response to a privacy complaint, you may have the right to escalate the matter to the relevant data protection authority or seek other legal remedies available under applicable law in your jurisdiction.