dbd22 Privacy Policy

dbd22 collects personal data through three main channels: information you provide to us directly, information generated automatically when you use the platform, and information received from regulated third-party service providers where necessary to deliver our services.

Information You Provide Directly

• Registration data: your mobile phone number, chosen username, and password (stored in hashed form — we never store your raw password).
• KYC verification documents: government-issued photo identity document (National ID card or passport), as required before your first withdrawal is processed.
• Payment information: your registered bKash, Nagad, Rocket, or Upay mobile wallet number, used to process deposits and withdrawals. We do not store full payment credentials on our own servers.
• Support communications: any messages, queries, or complaints you submit to the dbd22 support team via live chat or other available channels.

Information Collected Automatically

• Device and connection data: your device type, operating system version, browser type, mobile network operator (e.g. Grameenphone, Robi, Banglalink, Teletalk), and IP address at the time of each session.
• Usage data: pages visited, games played, bets placed, session duration, deposit and withdrawal activity, and interactions with promotional content.
• Cookie and session data: technical identifiers stored on your browser or device that allow the platform to recognise you between sessions and maintain your logged-in state. See Section 4 for full cookie details.

Information from Third Parties

• Identity verification partners: where we use a regulated third-party KYC service to verify the identity documents you have submitted, that provider may share a verification result (confirmed / not confirmed) with us. We do not receive raw document images from these providers once verification is complete.
• Payment processors: when you make a deposit or withdrawal, our payment processing partners (bKash, Nagad, Rocket, Upay) confirm the transaction result to dbd22. We receive only the transaction reference and amount — not your full wallet credentials or PIN.

dbd22 does not sell, rent, or trade your personal data to third parties. We may share your information only in the following limited circumstances, and only to the minimum extent necessary:

• Payment service providers: bKash, Nagad, Rocket, and Upay receive transaction-level data (amount, reference, wallet number) solely for the purpose of executing your deposit or withdrawal. These providers have their own privacy policies and are independent data controllers for data they process on their own systems.
• Identity verification services: regulated third-party KYC providers receive the identity documents you submit and return a verification result to dbd22. These providers are contractually bound to handle your documents securely and to use them only for the verification purpose.
• Legal and regulatory authorities: dbd22 may disclose personal data to law enforcement agencies, government bodies, or other competent authorities where required to do so by applicable law, court order, or regulatory obligation.
• Platform infrastructure providers: technical service providers (such as server hosting and cloud infrastructure partners) may process your data solely as data processors acting on dbd22's instructions. They have no independent right to use your data for their own purposes.

In all cases where data is shared with third-party processors or service providers, dbd22 ensures that appropriate data processing agreements are in place. These agreements require the third party to protect your data to a standard equivalent to that applied by dbd22 itself.

dbd22 retains your personal data only for as long as is necessary for the purposes set out in this Policy, or as required by applicable legal and regulatory obligations. In practice, this means the following retention periods apply: account data (registration details, transaction history, KYC records) is retained for the duration of your account and for a period of at least five years following account closure, to satisfy anti-money laundering record-keeping requirements. Support communication records are retained for up to three years from the date of each interaction.

When the applicable retention period expires, dbd22 will securely delete or anonymise your personal data so that it can no longer be linked to you as an individual. Where deletion is not immediately possible (for example, because your data is stored in backup archives), dbd22 will isolate the data from further processing until deletion is feasible.

As a dbd22 player, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, please contact dbd22 support via live chat. We will respond to all verifiable requests within a reasonable timeframe.

• 👁️
  Right of AccessYou may request a copy of the personal data dbd22 holds about you, including your registration details, transaction history, and any KYC records on file.
• ✏️
  Right to RectificationIf any personal data dbd22 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For account details such as your registered mobile number, please contact support to initiate a verified update.
• 🗑️
  Right to ErasureYou may request deletion of your personal data. This right is subject to dbd22's legal obligations — where applicable law requires us to retain certain records (for example, transaction records for anti-money laundering compliance), we cannot delete that data until the mandatory retention period has expired.
• 📤
  Right to Data PortabilityYou may request a structured, machine-readable copy of the personal data you have provided to dbd22, so that you can transfer it to another service if you choose to do so.
• 🚫
  Right to ObjectYou may object to dbd22 processing your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of dbd22's legitimate interests, though this right is subject to our overriding legitimate grounds for that processing.

To exercise any of the above rights, contact dbd22 support via live chat. You will be asked to verify your identity before any request is actioned. dbd22 will respond within 30 days of receiving a verifiable request. Where a request is complex or numerous, this period may be extended by up to a further 30 days, and you will be notified of the extension.

The dbd22 platform may reference third-party payment services (bKash, Nagad, Rocket, Upay) and game content providers (such as Pragmatic Play, Evolution Gaming, Spribe). These third parties operate their own platforms under their own privacy policies. dbd22 is not responsible for the privacy practices of these third parties and has no control over how they collect or use data on their own platforms. We encourage you to read the privacy policies of any third-party service you use in connection with your dbd22 gaming activity.