dbc333 Privacy Policy

1 Introduction & Scope

This Privacy Policy ("Policy") describes how dbc333 ("dbc333", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at https://dbc333.app, collects, uses, stores, discloses, and otherwise processes personal data relating to individuals who access or use the dbc333 platform ("you", "your", "Player").

This Policy applies to all personal data collected through the dbc333 website, mobile-optimised interface, account registration and verification processes, payment transactions, customer support interactions, and any other touchpoint through which you engage with dbc333.

By registering an account with dbc333, making a deposit, placing a bet, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with the terms of this Policy, you should not use the dbc333 Platform.

2 Data Controller

For the purposes of applicable data protection legislation, dbc333 acts as the data controller in respect of the personal data it processes about Players. This means dbc333 determines the purposes for which personal data is collected and the means by which it is processed.

For all data protection enquiries, access requests, correction requests, deletion requests, or complaints relating to the handling of your personal data, please contact us using the details provided in Section 15 of this Policy.

3 Data We Collect

dbc333 collects personal data in the following categories, depending on your level of engagement with the Platform:

3.1 Registration Data

• Full name as it appears on your government-issued identity document
• Date of birth (used for 18+ age verification)
• Username (chosen by you at registration)
• Contact details: email address and/or mobile phone number
• Country and city of residence
• Preferred currency (BDT or USDT)

3.2 Identity Verification (KYC) Data

• Scanned or photographed copy of National Identity Card (NID), passport, or birth registration certificate
• Proof of address documentation (utility bill, bank statement, or government-issued letter)
• Proof of payment method ownership (e.g., screenshot of bKash or Nagad account showing registered name)
• Selfie or live photograph where requested for liveness verification

3.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and payment method identifiers (e.g., bKash account number, Nagad account number, USDT wallet address)
• Transaction reference numbers
• Account wallet balance history
• Bonus and promotional credit history

3.4 Gaming & Betting Activity Data

• Game session history, bet amounts, game outcomes, and wagering records
• Sports betting selections, stake amounts, and settlement records
• Responsible gaming tool settings (deposit limits, loss limits, self-exclusion status)

3.5 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, browser type and version
• Session timestamps, login history, and session duration
• Pages visited, features accessed, and click-stream data within the Platform

3.6 Communications Data

• Records of support chat conversations, email correspondence, and any complaints or feedback submitted to dbc333
• Content of messages sent via the Platform's internal messaging or support ticket system

4 How We Use Your Data

dbc333 uses the personal data it collects for the following purposes:

• Account Management: Creating, maintaining, and managing your dbc333 Account, including processing your registration, authenticating your identity at login, and managing your account preferences and settings.
• Age & Identity Verification: Confirming that you meet the minimum age requirement of 18 years and that your identity matches your registration details, as required for responsible gaming compliance.
• Payment Processing: Processing your deposit and withdrawal requests through bKash, Nagad, Rocket, Upay, USDT, and other supported payment methods. Verifying payment method ownership to prevent fraud and unauthorised transactions.
• Service Delivery: Providing access to casino games, sports betting markets, promotions, bonuses, and all other features of the dbc333 Platform.
• Responsible Gaming: Monitoring account activity to identify patterns consistent with problem gambling and applying responsible gaming tools at your request or as required by our internal policies.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, multi-accounting, money laundering, and other prohibited conduct as defined in the dbc333 Terms & Conditions.
• Legal & Regulatory Compliance: Meeting applicable anti-money laundering (AML), know-your-customer (KYC), and data retention obligations under applicable law.
• Customer Support: Responding to your support enquiries, complaints, and feedback in a timely and effective manner.
• Platform Improvement: Analysing aggregated, anonymised usage data to understand how players interact with the Platform and to improve features, performance, and user experience.
• Communications: Sending you account-related notifications such as deposit confirmations, withdrawal approvals, KYC status updates, security alerts, and updates to our Terms & Conditions or this Privacy Policy. We do not send unsolicited marketing communications without your explicit consent.

5 Legal Bases for Processing

dbc333 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between dbc333 and the Player — including account creation, payment processing, game access, and withdrawal handling — is carried out on the basis that it is necessary for the performance of that contract.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including AML requirements, KYC verification, and mandatory data retention periods, is carried out on the basis of legal obligation.
• Legitimate Interests: Processing undertaken for fraud prevention, platform security, responsible gaming monitoring, and service improvement is carried out on the basis of dbc333's legitimate interests, provided those interests are not overridden by your rights and freedoms.
• Consent: Where dbc333 relies on your consent for a specific processing activity (such as sending promotional communications), that consent will be explicitly requested and may be withdrawn by you at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Data Sharing & Disclosure

dbc333 does not sell your personal data. We may share your personal data with the following categories of recipients only where necessary and proportionate:

• Payment Processors: bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, and cryptocurrency network providers receive transaction data necessary to process your deposits and withdrawals. These providers act as independent data controllers for their own payment services.
• KYC & Identity Verification Partners: Third-party identity verification service providers may receive copies of your KYC documents to perform automated or manual identity and age verification. These partners are bound by strict data processing agreements and may only use your data for the verification purpose.
• Game Content Providers: Providers such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe may receive your player session identifiers and game-relevant data necessary to deliver their games within the Platform. These providers do not receive your full identity data unless required for their own regulatory compliance.
• Regulatory & Law Enforcement Authorities: dbc333 will disclose personal data to competent authorities, courts, or law enforcement agencies where required by a lawful order, warrant, or regulatory direction, or where disclosure is necessary to prevent or report suspected criminal activity including fraud, money laundering, or match-fixing.
• Professional Advisers: Legal counsel, auditors, and compliance consultants engaged by dbc333 may access personal data on a strictly need-to-know basis, subject to professional confidentiality obligations.

7 Cookies & Tracking

dbc333 uses cookies and similar technologies on the Platform for the following purposes:

• Essential / Session Cookies: These cookies are strictly necessary for the Platform to function. They maintain your login session, preserve your account preferences during a session, and protect against cross-site request forgery (CSRF). These cookies cannot be disabled without impairing your ability to use the Platform.
• Analytics Cookies: dbc333 uses first-party analytics tools to collect aggregated, anonymised data about how players navigate the Platform — including which pages are visited most frequently, session duration, and common navigation paths. This data is used exclusively to improve Platform performance and user experience. dbc333 does not use Google Analytics or other third-party analytics platforms that transfer data to external servers.
• Security Cookies: Short-lived cookies used to detect suspicious login activity, enforce rate limits, and protect against automated credential-stuffing attacks.

dbc333 does not use advertising cookies, retargeting pixels, or any third-party tracking technology designed to follow your activity across websites other than dbc333.app.

Most web browsers allow you to control cookies through their settings. Disabling essential cookies will impair the functionality of the Platform; disabling analytics cookies will not affect your ability to use the Platform.

8 Data Security

dbc333 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS Encryption in Transit: All data transmitted between your browser or device and dbc333's servers is encrypted using TLS 1.2 or higher. The Platform enforces HTTPS across all pages and does not permit unencrypted HTTP connections.
• Password Hashing: Account passwords are processed using a one-way cryptographic hashing algorithm with per-user salting. dbc333 staff cannot view or retrieve your password in plain text under any circumstances.
• Access Controls: Access to personal data within dbc333's internal systems is restricted on a role-based, need-to-know basis. Staff members are granted access only to the data categories required for their specific job functions.
• Secure KYC Document Storage: Identity documents submitted during KYC verification are stored in encrypted, access-controlled storage environments. Documents are deleted once the verification purpose has been fulfilled and the mandatory retention period has expired.
• Incident Response: dbc333 maintains an internal security incident response procedure. In the event of a data breach that poses a risk to your rights, dbc333 will notify affected Players and take all reasonable remediation steps as promptly as technically possible.

9 Data Retention

dbc333 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention guidelines apply:

• Active Account Data: Personal data associated with an active dbc333 Account is retained for the duration of the account's active status and for a period of five (5) years following account closure, to meet AML and financial record-keeping obligations.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years following the date of verification or account closure, whichever is later, in compliance with applicable regulatory requirements.
• Transaction Records: Deposit, withdrawal, and betting transaction records are retained for a minimum of five (5) years from the date of each transaction.
• Support Communications: Records of support interactions are retained for three (3) years from the date of the interaction, or longer if the interaction relates to an unresolved dispute, legal proceeding, or regulatory investigation.
• Technical / Log Data: Server logs and device data are retained for up to twelve (12) months from the date of collection, after which they are securely deleted or anonymised.

When retention periods expire, personal data is securely deleted using industry-standard data destruction procedures, or anonymised in a manner that permanently prevents re-identification.

10 Your Rights as a Data Subject

Subject to applicable law and certain exceptions that may apply in the context of regulated gaming operations, you hold the following rights in respect of the personal data dbc333 processes about you:

To exercise any of these rights, please contact dbc333 support at [email protected] with the subject line "Data Subject Rights Request". dbc333 will acknowledge your request within 5 business days and respond substantively within 30 calendar days. Complex requests may require additional time; if so, dbc333 will notify you of the expected extended timeframe within the initial 30-day window.

dbc333 will require identity verification before processing any rights request to prevent unauthorised disclosure of another person's data. Identity verification for rights requests is carried out using the information already on file for your Account and does not require you to submit additional documents in most cases.

11 Children's Privacy

The dbc333 Platform is strictly intended for adults aged 18 years and above. dbc333 does not knowingly collect, process, or retain personal data from individuals under the age of 18.

If dbc333 discovers or is informed that it has collected personal data from a person under 18, it will immediately close the associated Account, delete or securely destroy the personal data, and, where applicable, refund any funds deposited less any applicable withdrawal processing costs.

If you are a parent or guardian and believe that a minor has created a dbc333 Account or submitted personal data to the Platform, please contact us immediately at [email protected]. We will take prompt action to investigate and, where confirmed, delete the data and close the Account.

12 Third-Party Links

The dbc333 Platform does not include links to third-party websites as part of its standard navigation. However, game providers operating within the Platform may display their own branding, which is presented under licence from those providers.

dbc333 has no control over the data practices of third-party game providers operating under licence agreements. Where a game is provided by a third-party studio such as Pragmatic Play, Evolution Gaming, or Spribe, that provider's own privacy practices govern the processing of any data collected directly by their game software. dbc333 recommends reviewing the privacy policies of game providers if you have concerns about their specific data handling practices.

Payment service providers — bKash, Nagad, Rocket, Upay — operate their own independent services with their own privacy policies. dbc333 is not responsible for the data practices of these providers and encourages you to review their respective privacy documentation.

13 International Data Transfers

dbc333 primarily serves players based in Bangladesh. Where personal data is transferred to or accessed from locations outside Bangladesh — for example, in connection with cloud infrastructure providers or KYC verification partners — dbc333 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within Bangladesh.

Such safeguards may include contractual data processing agreements containing standard data protection clauses, technical security measures equivalent to those described in Section 8 of this Policy, and access restrictions limiting who can view or process transferred data.

dbc333 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate contractual and technical safeguards.

14 Changes to This Policy

dbc333 reserves the right to update or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or Platform features. The effective date at the top of this Policy will be updated with each revision.

Where a change to this Policy is material — meaning it significantly affects your rights or how your data is processed — dbc333 will provide notice via a prominent banner on the Platform or by direct communication to your registered contact address at least seven (7) days before the change takes effect.

Your continued use of the dbc333 Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you must cease using the Platform and may request Account closure by contacting support.

15 Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the personal data dbc333 holds about you, please contact us using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Include "Privacy Policy Enquiry" or "Data Subject Rights Request" as appropriate
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)
• Response Time: Acknowledgement within 5 business days; substantive response within 30 calendar days

If you are not satisfied with how dbc333 has handled a privacy concern or data subject rights request, you have the right to raise a complaint with the relevant data protection authority in your jurisdiction. dbc333 encourages Players to contact us directly in the first instance so we have the opportunity to resolve the concern before a formal complaint is lodged.