dbg99 Privacy Policy — How We Handle Your Data

Introduction and Scope

This Privacy Policy ("Policy") describes how dbg99 ("we", "us", "our", "the Platform") collects, processes, stores, and protects the personal data of users ("you", "your", "User") who register for and use the dbg99 online casino and sports betting platform at dbg99.vip. This Policy forms part of the dbg99 Terms and Conditions and should be read alongside them.

By registering an account with dbg99 or using any part of the Platform, you acknowledge that you have read and understood this Policy, and that you consent to the collection and processing of your personal data as described herein. If you do not consent to the terms of this Policy, you must not use the Platform.

Personal Data We Collect

dbg99 collects personal data in the categories set out below. We collect only what is necessary for the purposes described in this Policy — we do not collect personal data speculatively or beyond what is required to operate the Platform and fulfil our legal obligations.

How We Use Your Personal Data

dbg99 uses the personal data we collect for the following purposes. We do not use your personal data for any purpose that is incompatible with the purposes listed below.

• 3.1Account creation and management: to register your account, verify your identity, and maintain your account in good standing throughout your relationship with dbg99.
• 3.2Payment processing: to facilitate deposits to your dbg99 account via bKash, Nagad, Rocket, and Upay, and to process withdrawal requests to your registered payment method.
• 3.3Legal compliance: to fulfil our obligations under applicable law, including identity verification (KYC), anti-money laundering (AML) checks, age verification (21+), and regulatory reporting requirements.
• 3.4Fraud prevention and platform security: to detect, investigate, and prevent fraudulent activity, bonus abuse, multi-accounting, and other prohibited conduct on the Platform.
• 3.5Customer support: to respond to your support queries, resolve complaints, and communicate with you about your account, transactions, and any Platform-related matters.
• 3.6Responsible gaming: to monitor account activity for signs of problematic gambling behaviour, to apply responsible gaming tools (deposit limits, session limits, self-exclusion) where requested, and to provide appropriate support resources.

Our Five Privacy Commitments to You

These are the core privacy commitments dbg99 makes to every user of the Platform. They are not aspirational statements — they describe operational practices that are in effect today.

Legal Basis for Processing Your Data

dbg99 processes your personal data under one or more of the following legal bases, depending on the specific processing activity involved.

• 5.1Contractual necessity: processing your identity data, account data, and payment data is necessary to perform the contract between you and dbg99 (i.e., to provide you with access to the Platform, process your deposits, and pay out your winnings).
• 5.2Legal obligation: processing data for KYC, AML, age verification, and regulatory reporting is required by applicable law. dbg99 cannot waive these processing obligations regardless of user consent preferences.
• 5.3Legitimate interests: processing technical data for fraud prevention, platform security monitoring, and responsible gaming oversight is carried out on the basis of dbg99's legitimate interests in operating a safe and secure platform.
• 5.4Consent: where we send you optional marketing communications or promotional offers by SMS or email, we do so on the basis of your explicit consent. You may withdraw this consent at any time by contacting dbg99 support.

Sharing Your Personal Data

dbg99 does not share your personal data with third parties except in the limited circumstances described below. In every case where sharing occurs, we ensure that appropriate contractual safeguards are in place.

• 6.1Payment processing partners: your mobile wallet number (bKash, Nagad, Rocket, Upay) is shared with the relevant payment processor solely to facilitate your deposit or withdrawal transaction. Payment processors are bound by their own privacy and security obligations.
• 6.2Game studio providers: certain technical session data (e.g., game round IDs, bet amounts, outcomes) is shared with licensed game studio providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and Spribe for the purpose of game integrity verification and dispute resolution.
• 6.3Legal and regulatory authorities: dbg99 may be required to disclose your personal data to law enforcement agencies, financial intelligence units, or other regulatory authorities in response to a lawful request, court order, or applicable legal obligation. dbg99 will disclose only what is legally required.
• 6.4Business transfers: in the event of a merger, acquisition, or sale of all or part of dbg99's business, your personal data may be transferred to the acquiring entity as part of that transaction, subject to the same privacy protections described in this Policy.

Cookies and Tracking Technologies

The dbg99 Platform uses cookies and similar tracking technologies to provide a functional and personalised experience. The following types of cookies may be used on the Platform.

• 7.1Strictly necessary cookies: these are essential to the operation of the Platform and cannot be disabled. They include session authentication cookies (which keep you logged in during your session), security tokens, and load-balancing cookies. No consent is required for strictly necessary cookies.
• 7.2Functional cookies: these remember your account preferences (e.g., language setting, game lobby display preferences) to provide a more personalised experience on return visits. You may disable functional cookies in your browser settings, but doing so may affect Platform functionality.
• 7.3Analytics cookies: dbg99 uses anonymised analytics data to understand how users navigate the Platform, which pages are visited most frequently, and where users encounter difficulties. This data is aggregated and cannot be used to identify individual users.

Data Retention

dbg99 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply.

• 8.1Active account data: retained for the duration of your account relationship with dbg99, plus a minimum post-closure period of 5 years to satisfy anti-money laundering record-keeping requirements under applicable financial regulations.
• 8.2KYC and identity verification documents: retained for a minimum of 5 years following account closure, as required by applicable AML and KYC regulations. Originals are securely destroyed after verification; only verified status and document metadata are retained.
• 8.3Technical logs (IP addresses, session timestamps): retained for a maximum of 12 months for fraud prevention and security monitoring purposes, after which they are automatically purged from our systems.

Your Privacy Rights

As a user of the dbg99 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the dbg99 support team.

• 9.1Right of access: you may request a copy of the personal data dbg99 holds about you. We will provide this within a reasonable timeframe and at no charge for standard requests.
• 9.2Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. We aim to action rectification requests within 5 business days.
• 9.3Right to erasure: you may request deletion of your personal data. We will action erasure requests subject to our legal data retention obligations — data that we are required by law to retain cannot be deleted on request.
• 9.4Right to restrict processing: in certain circumstances (e.g., where you contest the accuracy of data we hold), you may request that we restrict our processing of your data while the matter is investigated.
• 9.5Right to withdraw consent: where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

How We Protect Your Data

dbg99 implements a layered approach to data security. We apply technical, administrative, and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure.

Technical measures include 256-bit SSL encryption for all data in transit, hashed credential storage, role-based access controls restricting internal data access to authorised personnel only, and automated anomaly detection on account and transaction activity. Administrative measures include staff data-handling training, a formal data breach response procedure, and regular security reviews.

Payment Data and Financial Privacy

Given the financial nature of the dbg99 Platform, payment-related personal data is subject to additional protections described in this section.

• 11.1Mobile wallet numbers (bKash, Nagad, Rocket, Upay) registered to your account are stored in encrypted form. They are used solely to route deposit and withdrawal transactions and are never displayed in full on the Platform interface — only the last four digits are shown for identification purposes.
• 11.2Transaction records (deposit amounts, withdrawal amounts, dates, and payment method identifiers) are retained as part of your account record for the periods described in Section 8, primarily to satisfy AML record-keeping requirements and to enable dispute resolution.
• 11.3dbg99 does not process card payments and does not collect credit card or debit card numbers under any circumstances. All transactions on the Platform are conducted through Bangladesh mobile financial services (bKash, Nagad, Rocket, Upay) in BDT only.

Children's Privacy and Age Restriction

The dbg99 Platform is strictly for persons aged 21 and above. We do not knowingly collect personal data from persons under the age of 21. If dbg99 becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a person under 21 in your care has registered an account on dbg99 or submitted personal data to the Platform, please contact the dbg99 support team immediately at [email protected]. We will investigate and take appropriate action without delay.

Changes to This Privacy Policy

dbg99 reserves the right to update or amend this Privacy Policy at any time. Where changes are material, we will use reasonable efforts to notify registered users via their registered mobile number or by displaying a prominent notice on the Platform prior to the revised Policy taking effect.

Your continued use of the Platform following any update to this Policy constitutes your acceptance of the revised Policy. The effective date at the top of this Policy will be updated whenever material changes are made. We recommend reviewing this Policy periodically to stay informed of how dbg99 protects your personal data.

Contact Us About Your Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or the way dbg99 processes your personal data, please contact our support team. We take all privacy enquiries seriously and will respond within a reasonable timeframe.