db98 Privacy Policy

db98 (referred to as "db98", "we", "us", or "our" throughout this policy) operates the online gaming and sports betting platform accessible at https://db98.bet. This Privacy Policy applies to all users of the db98 platform, including registered account holders, visitors who browse the site without registering, and former account holders whose data we retain in accordance with our retention obligations. By accessing or using the db98 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal information as described herein.

This policy covers all personal data processed in connection with your use of the db98 platform, including data collected through the website, mobile-optimised site, in-platform communications, customer support interactions, and payment processing. It does not apply to third-party websites, payment providers, or services that you access independently, even if they are referenced or linked from within the db98 platform.

db98 collects personal information that is necessary for the operation of a regulated online gaming platform. We collect only what is reasonably required to deliver our services, meet our legal and compliance obligations, and maintain the security and integrity of the platform. The categories of information we collect are as follows:

The table below summarises the primary categories of personal data we collect and typical examples within each category:

We do not collect or process sensitive personal data such as biometric data, health records, racial or ethnic origin, political opinions, religious beliefs, or criminal records, except where required by applicable law for age and identity verification purposes.

db98 processes your personal information for specific, legitimate purposes only. We do not use your data for any purpose other than those listed below without obtaining your explicit consent first. Our lawful purposes for processing your personal data include:

• Account creation, registration, and ongoing management: processing the information you provide at sign-up and during any subsequent account updates to maintain your db98 account in good standing.
• Identity and age verification (KYC): confirming that you meet the minimum age requirement of 21 years and that your identity matches the information on file, in compliance with our legal obligations.
• Transaction processing: facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, and card payment, including communicating with payment service providers to complete transactions securely.
• Platform service delivery: operating the sports betting markets, live casino tables, slots, and crash games you access; recording bet outcomes and crediting winnings accurately to your account balance.
• Fraud prevention and security: analysing account behaviour patterns to detect and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming compliance: monitoring betting and deposit patterns to identify players who may be showing signs of problem gambling; applying responsible gaming tools where required, including deposit limits, cooling-off periods, and self-exclusion.
• Customer support: responding to your enquiries, resolving disputes, and addressing complaints submitted via the platform support channel or by email to [email protected].

Platform analytics and improvement: using aggregated, anonymised usage data to understand how the platform is used, identify technical issues, and improve the overall user experience. Aggregated analytics data does not identify you as an individual.

db98 processes your personal information only where a clear and lawful basis exists for doing so. The legal grounds on which we rely to process your personal data are:

• Contractual necessity: most processing is required to perform the contract between you and db98 — specifically, to operate your account, process transactions, and deliver the betting and gaming services you have requested.
• Legal obligation: processing required to meet our obligations under anti-money laundering regulations, age verification requirements, know-your-customer (KYC) obligations, and any other applicable regulatory requirements.
• Legitimate interests: processing for fraud detection, security monitoring, platform analytics, and responsible gaming compliance, where these interests are not overridden by your privacy rights and we have assessed that processing is proportionate and necessary.
• Consent: where we send you optional marketing communications, promotional offers, or personalised recommendations, we do so only with your prior consent. You may withdraw consent at any time by contacting [email protected] or using the opt-out mechanism provided in any marketing communication.

db98 does not sell, rent, or trade your personal information to any third party. We may share your personal data with carefully selected third parties only in the following limited circumstances, and only to the extent strictly necessary for each stated purpose:

• Payment service providers: we share necessary transaction data with payment processors (including bKash, Nagad, Rocket, and Upay) solely to facilitate the processing of deposits and withdrawals. Payment providers operate under their own privacy policies and are bound by their own data protection obligations.
• Identity verification services: we may share identity documents and personal information with third-party KYC verification providers engaged to confirm the identity and age of account holders as required by our compliance obligations.
• Regulatory and law enforcement authorities: where required by applicable law, court order, or regulatory directive, we may disclose personal data to relevant Bangladeshi authorities, financial intelligence units, or law enforcement agencies. db98 cooperates fully with lawful requests from competent authorities.
• Game and platform technology providers: we may share technical and behavioural data (never financial data or full identity documents) with game providers and technology partners — such as Pragmatic Play, Evolution Gaming, or Spribe — to operate games correctly and detect technical anomalies. This sharing is strictly limited to data necessary for game operation.

All third parties with whom db98 shares personal data are required to process that data lawfully, maintain appropriate security standards, and use it only for the specific purpose for which it was disclosed. db98 does not permit third parties to use your data for their own independent marketing, profiling, or commercial purposes.

All financial transactions on the db98 platform are processed through regulated payment service providers. db98 does not store complete payment card numbers, CVV codes, or full mobile banking PINs on its own servers. Payment credentials are tokenised at the point of entry and handled exclusively by the relevant payment processor in accordance with applicable financial security standards.

db98 retains transaction records — including deposit amounts, withdrawal amounts, dates, and the last four digits of any payment identifier — for a minimum of five years from the date of each transaction. This retention period is required by anti-money laundering regulations and financial record-keeping obligations applicable to online gaming platforms operating in the Bangladesh market.

If you believe that an unauthorised financial transaction has been processed on your account, you must notify db98 immediately at [email protected]. db98 will investigate all reported unauthorised transaction claims and will cooperate with the relevant payment provider to resolve verified disputes in accordance with the payment provider's dispute resolution process.

db98 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard data retention periods are as follows:

• Account data (identity, contact, KYC documents): retained for the duration of the account's active life, plus a minimum of five years from the date of account closure. This period reflects anti-money laundering compliance requirements.
• Transaction records (deposits, withdrawals, bet history): retained for a minimum of five years from the date of each transaction, as required by financial record-keeping obligations.
• Customer support records (emails, chat logs, dispute correspondence): retained for a minimum of three years from the date of the most recent communication in each case, to support dispute resolution and compliance audits.

When the applicable retention period expires, db98 will securely delete or anonymise your personal data so that it can no longer be associated with you. Where anonymisation is not technically feasible, data will be securely destroyed. You may request early deletion of your data by submitting a request to [email protected], subject to any overriding legal obligation that requires us to retain it.

As a registered user of db98, you hold a number of rights in relation to the personal data we hold about you. These rights are subject to applicable law and to verification of your identity before we action any request. Your rights include:

• Right of access: you may request a copy of the personal data db98 holds about you, including a summary of how it is being used and with whom it has been shared.
• Right of rectification: if any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to erasure: you may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to any overriding legal obligation to retain data.
• Right to restrict processing: in certain circumstances (such as where you contest the accuracy of data or where processing is unlawful but you do not want erasure), you may ask us to restrict how we use your data while the issue is resolved.
• Right to data portability: where processing is based on your consent or on a contract and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: you may object at any time to processing based on our legitimate interests, including direct marketing. Where you object to marketing, we will stop processing your data for that purpose immediately.

To exercise any of these rights, please contact db98 support in writing at [email protected] with the subject line "Data Rights Request". Please include your registered email address, your account username, and a clear description of your request. db98 will acknowledge your request within 48 hours and respond in full within 30 calendar days.

db98 uses cookies and similar tracking technologies to operate the platform, maintain session state, and understand how users interact with the site. A cookie is a small text file placed on your device by our web server. Cookies used by db98 fall into the following categories:

• Essential cookies: required for the platform to function correctly. These include session authentication cookies that keep you logged in during your session, security tokens, and cookies that remember your language preference. These cookies cannot be disabled without impairing basic platform functionality.
• Analytics cookies: used to collect aggregated, anonymised data about how visitors use the platform — including pages visited, time spent on each page, and navigation paths. This data helps us identify areas for improvement. Analytics cookies do not collect personally identifiable information.
• Functional cookies: used to remember your preferences across sessions, such as your chosen language setting, responsible gaming tool settings, and display preferences. Disabling functional cookies may mean that your preferences are not saved between visits.
• Security cookies: short-lived cookies used to support fraud detection and account security functions, including CSRF protection tokens and bot-detection signals. These are classified as essential and cannot be disabled.

You can manage cookie settings through your browser. Most browsers allow you to block, delete, or be notified before cookies are set. Please note that disabling certain cookies may affect the functionality of the db98 platform. For more information about managing cookies, refer to your browser's help documentation. db98 does not use cross-site tracking cookies or sell cookie data to advertising networks.

db98 takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your information from unauthorised access, disclosure, alteration, or destruction. Our key security measures include:

• SSL/TLS encryption: all data transmitted between your device and the db98 platform is encrypted in transit using 256-bit SSL/TLS encryption. This applies to all platform pages, including login, account management, deposit, and withdrawal pages.
• Encrypted data storage: personal data held on db98's servers is stored with encryption at rest. Access to stored personal data is restricted to authorised personnel only, using role-based access controls and multi-factor authentication for administrative systems.
• Regular security testing: db98's platform and infrastructure undergo regular security assessments, including vulnerability scanning and penetration testing. Any identified vulnerabilities are addressed on a priority basis according to their severity rating.
• Incident response: db98 maintains a data breach response procedure. In the event of a confirmed personal data breach that is likely to result in a risk to your rights or freedoms, db98 will notify affected users without undue delay and take all reasonable steps to contain and remediate the breach.

Despite our security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for taking appropriate steps to secure your own device and internet connection when accessing db98. If you suspect that your account security has been compromised, contact [email protected] immediately.

The db98 platform may reference or display content relating to third-party game providers, payment partners, and sports data feed providers. These third parties operate their own platforms, websites, and services independently of db98. If you access a third-party service in connection with your use of db98 — for example, by navigating to a payment provider's own app to complete a mobile wallet transaction — your interaction with that third-party service is governed by the third party's own privacy policy and terms of service, not by this Privacy Policy.

db98 is not responsible for the privacy practices of any third-party service provider and makes no representations about the privacy or security standards of third-party platforms. We recommend that you review the privacy policy of any third-party service before providing them with your personal information.

The db98 platform is strictly intended for adults aged 21 and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. If, following age verification checks, we determine that a registered account holder is under 21 years of age, we will immediately suspend the account, void any associated winnings, and delete the account holder's personal data in accordance with our retention obligations, retaining only what is required by law. Parents and guardians who believe that a minor may have accessed the db98 platform should contact [email protected] immediately so that we can take appropriate action.

db98 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, regulatory requirements, or platform functionality. Where changes are material — meaning they meaningfully alter how we use your data or the rights available to you — we will provide notice via in-platform notification or email before the updated policy takes effect. The effective date shown at the top of this policy reflects the date of the most recent revision.

Your continued use of the db98 platform following the effective date of any update to this Privacy Policy constitutes your acceptance of the revised policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. The current version is always accessible at https://db98.bet/privacy-policy.

If you have any questions, concerns, or complaints about this Privacy Policy or about how db98 handles your personal data, please contact our support team. We are available 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6) and will respond to all privacy-related enquiries within 48 hours.

Email: [email protected]