dbpk Privacy Policy

Who We Are

This Privacy Policy is published by dbpk ("we", "us", "our"), the operator of the online betting and casino platform accessible at dbpk.io and all associated subdomains and mobile interfaces. dbpk provides cricket betting, live casino, slots, and other gaming services to eligible players across Bangladesh, including in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh.

For the purposes of data privacy, dbpk is the data controller — meaning we determine the purposes and means by which your personal data is processed. Where we engage third-party service providers to process data on our behalf, those providers act as data processors and are bound by contractual data processing agreements that restrict how they may use your information.

This Privacy Policy applies to all personal data collected through the dbpk website, mobile-optimised platform, customer support channels, and any other point at which you interact with dbpk. By registering an account or using any part of the platform, you acknowledge that you have read and understood this policy.

Data We Collect

dbpk collects personal data from you in three main ways: data you provide directly, data generated automatically through your use of the platform, and data received from third parties in connection with identity verification and payment processing.

Data You Provide Directly

• Registration data: Your full legal name, date of birth, residential address, mobile number, and email address provided when creating your account.
• Identity verification (KYC) documents: National ID card (NID), passport, birth registration certificate, or other government-issued identity documents submitted to verify your eligibility and age.
• Payment data: Your bKash account number, Nagad number, Rocket number, Upay number, bank account details, or card information (last four digits and card type only — full card numbers are processed exclusively by our certified payment partners and are not stored by dbpk).
• Support communications: Content of messages, emails, and live chat conversations you send to the dbpk support team, including any attachments or account references shared during those interactions.
• Responsible gaming submissions: Self-exclusion requests, deposit limit settings, cooling-off period requests, and any other responsible gaming tool activations you submit through your account settings.

Data Collected Automatically

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Session and activity data: Pages visited, time spent on each page, navigation paths, search queries within the platform, bet placement activity, game sessions played, deposit and withdrawal transaction records, and login timestamps.
• Location data: Country and approximate regional location inferred from your IP address. dbpk does not request or use precise GPS location data.
• Cookie and tracking data: As described in Section 6 of this policy.

Data Received from Third Parties

• Payment verification data: Transaction status confirmations from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and card network processors (Visa, Mastercard).
• Identity verification data: Results from third-party KYC and fraud screening services used to validate the authenticity of identity documents submitted by players.
• Fraud and risk data: Risk signals and device reputation data from third-party fraud prevention providers used to protect the platform and its players from financial crime.

Summary of Data Categories

How We Use Your Data

dbpk uses the personal data it collects solely for the following defined purposes. We do not use your data for purposes that are incompatible with those listed below without first obtaining your explicit consent or where we are otherwise required to do so by law.

Account Operations

We use your identity and contact data to create and manage your player account, authenticate your logins, communicate important account notifications (such as deposit confirmations, withdrawal updates, and security alerts), and respond to your customer support requests.

Identity Verification & Age Checks

dbpk is legally and ethically required to verify that all players are aged 21 or above and are not on any self-exclusion register before allowing access to real-money betting and gaming services. Your KYC documents and identity data are used exclusively for this verification purpose.

Payment Processing

Your financial data is used to process deposits from and withdrawals to your registered bKash, Nagad, Rocket, Upay, or bank account. All payment data is processed in Bangladeshi Taka (BDT) and handled in compliance with applicable financial regulations.

Fraud Prevention & Platform Security

Technical data, usage data, and financial data are analysed by dbpk's security systems to detect fraudulent account activity, money laundering, bonus abuse, unauthorised access attempts, and other prohibited conduct as defined in the dbpk Terms and Conditions. This processing is essential to protecting the integrity of the platform and the security of all players' accounts.

Responsible Gaming

Usage data and account activity are monitored to identify behavioural patterns that may indicate problem gambling. Where such patterns are detected, dbpk's responsible gaming team may proactively reach out to the player to offer support, apply voluntary limits, or recommend self-exclusion. This processing is carried out in the player's best interest and in accordance with dbpk's Responsible Gaming Policy.

Platform Improvement & Analytics

Anonymised and aggregated usage data is analysed to understand how players navigate the dbpk platform, which products and markets are most popular, where technical issues occur, and how the overall user experience can be improved. This analysis does not involve identifying individual players.

Marketing Communications

Where you have given explicit consent at registration or through your account settings, dbpk may send you promotional communications about bonuses, new game releases, seasonal promotions (for example, Eid or Pohela Boishakh special offers), and BPL cricket betting events. You may withdraw marketing consent at any time by contacting support or adjusting your account notification preferences.

Legal Basis for Processing

dbpk processes your personal data under one or more of the following legal bases, depending on the specific purpose of the processing:

• Contractual Necessity: Processing required to perform the contract between you and dbpk — i.e., to operate your player account, process your deposits and withdrawals, settle your bets, and deliver the gaming services you have signed up for.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, know-your-customer (KYC) obligations, and financial record-keeping duties.
• Legitimate Interests: Processing carried out for dbpk's legitimate business interests, provided those interests are not overridden by your fundamental rights. This includes fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics. We carry out a balancing assessment before relying on this basis.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent — principally for marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Data Sharing & Disclosure

dbpk does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only in the following defined circumstances, and only to the minimum extent necessary for each purpose:

Payment Service Providers

To process your deposits and withdrawals, we share relevant financial data with our certified payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and international card processors (Visa, Mastercard). These providers act as data processors and are contractually prohibited from using your data for any purpose other than completing the specific transaction for which it was shared.

Identity Verification Partners

To conduct KYC checks and verify the authenticity of identity documents, we work with certified third-party identity verification providers. These providers process your identity data under strict data processing agreements and do not retain your documents beyond the period required to complete the verification check.

Game Studio Technology Providers

Game studios that power casino and slot content on the dbpk platform — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive anonymised session data (such as game round IDs and stake amounts) to ensure game round integrity and correct RTP reporting. These providers do not receive your name, contact details, or payment information.

Fraud Prevention & Security Providers

Technical and device data may be shared with fraud prevention service providers to assess risk signals and protect the platform against account takeover, identity fraud, and financial crime. All such providers operate under data processing agreements with dbpk.

Legal & Regulatory Disclosure

dbpk may disclose your personal data to law enforcement agencies, financial intelligence units, regulatory bodies, or courts where required to do so by applicable law, valid legal process (such as a court order or official investigation notice), or where disclosure is necessary to protect the rights, property, or safety of dbpk, its players, or the public. Where legally permissible, dbpk will notify you of any such disclosure request before complying.

Business Transfers

In the event that dbpk undergoes a corporate restructuring, merger, acquisition, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to the way your data is processed that result from it.

Cookies & Tracking Technologies

dbpk uses cookies and similar tracking technologies on its platform. Cookies are small text files placed on your device that help the platform function correctly, remember your preferences, and provide anonymised analytical data. The following categories of cookies are used:

dbpk does not use advertising cookies, cross-site tracking pixels, retargeting scripts, or social media tracking tags. You can manage and delete cookies at any time through your browser's privacy settings. Note that disabling strictly necessary cookies will prevent you from accessing your account.

Data Retention

dbpk retains your personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to the minimum retention periods required by applicable law. The following retention schedule applies:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Secure deletion procedures are applied to both digital records and any physical copies of identity documents.

Your Data Rights

As a dbpk account holder, you hold the following rights in relation to your personal data. These rights may be exercised at any time by contacting the dbpk support team at the details provided in Section 13:

• Right of Access: You may request a copy of the personal data dbpk holds about you. We will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as a misspelled address) can often be made directly through your account settings.
• Right to Erasure: In certain circumstances — for example, where data is no longer necessary for the purpose for which it was collected and no legal retention obligation applies — you may request that your personal data be deleted. Note that where a legal retention obligation exists (such as AML record-keeping), dbpk is required to retain the relevant data despite an erasure request.
• Right to Restrict Processing: You may request that dbpk suspends the active processing of your data in certain circumstances, for example while a rectification request is being assessed.
• Right to Data Portability: Where data is processed on the basis of your consent or contractual necessity, and the processing is carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of dbpk's legitimate interests, including direct marketing. Where you object to marketing processing, we will stop immediately. Objections to other legitimate-interest processing will be assessed on a case-by-case basis.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

Data Security

dbpk takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• SSL/TLS Encryption: All data transmitted between your browser or device and dbpk's servers is encrypted using industry-standard SSL/TLS protocols. You can verify the presence of an active SSL certificate via the padlock icon in your browser's address bar when visiting dbpk.io.
• Encrypted Data Storage: Personal data — particularly sensitive data categories such as identity documents and payment records — is stored in encrypted form on access-controlled servers. Encryption keys are managed separately from the encrypted data.
• Access Controls: Access to personal data within dbpk's systems is restricted on a strict need-to-know basis. Staff members who require access to personal data to perform their role are granted the minimum level of access necessary, and all access events are logged and auditable.
• Fraud Detection Systems: Automated systems monitor account activity in real time to detect anomalous behaviour patterns that may indicate account compromise or fraudulent access. Suspicious activity triggers automated alerts and may result in temporary account holds pending investigation.
• Third-Party Security Standards: All third-party data processors engaged by dbpk are required to demonstrate and maintain security standards consistent with the sensitivity of the data they process on our behalf.

Despite these measures, no online platform can guarantee absolute security. If you become aware of any unauthorised access to your dbpk account or suspect that your login credentials have been compromised, you must contact the support team immediately so that your account can be secured.

Children & Minors

dbpk's services are strictly restricted to adults aged 21 years and above. We do not knowingly collect, use, or retain personal data from any person under the age of 21. All registration attempts are subject to automated and manual age verification processes designed to detect and prevent underage access.

If dbpk discovers that personal data has been collected from a person under the age of 21 — whether through a fraudulent registration or any other means — that account will be immediately closed, all data will be securely deleted, any funds held in the account will be handled in accordance with dbpk's underage gambling policy, and the matter may be referred to relevant authorities.

Parents and guardians who believe a minor may have accessed dbpk's platform should contact the support team at [email protected] immediately so that the account can be identified and closed without delay.

International Data Transfers

dbpk's primary operations and player data are managed with Bangladesh-based players in mind. However, some of the third-party service providers we engage — particularly certified game studio technology providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — operate infrastructure in multiple countries, which may result in certain data being processed outside of Bangladesh.

Where personal data is transferred to third-party processors located outside Bangladesh, dbpk ensures that adequate safeguards are in place to protect your data to a standard at least equivalent to the protections described in this Privacy Policy. These safeguards take the form of contractual data processing agreements that impose binding data protection obligations on the receiving party.

Personal data is never transferred internationally for the purpose of making it available to third-party commercial organisations or marketing networks. International transfers are limited strictly to what is necessary to deliver the core platform services described in this policy.

Changes to This Privacy Policy

dbpk reviews this Privacy Policy periodically and updates it when necessary to reflect changes in our data practices, the services we offer, or applicable legal requirements. The "Effective Date" shown at the top of this document reflects the date on which the current version came into force.

Where changes to this policy are material — for example, where we introduce a new category of data processing or share data with a new category of third party — we will notify registered players via the email address on file and via an in-platform notification, no fewer than 14 days before the changes take effect. For minor clarifications or non-material updates, we may update the policy without individual notification, though the updated version will always be accessible at dbpk.io/privacy-policy.

Your continued use of the dbpk platform following the effective date of any update constitutes your acknowledgement of and agreement to the revised Privacy Policy. If you do not accept the revised policy, you must stop using the platform and may request account closure via the support team.

Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights as described in Section 8, or want to raise a complaint about the way dbpk has handled your personal data, please contact us using the details below :

Support Email: [email protected]

Response Time: We aim to respond to all privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6). Data subject rights requests (such as access or erasure requests) will be responded to within 30 calendar days of receiving a valid, verified request.

When contacting us regarding a privacy matter, please include your full name, your registered dbpk username, and a clear description of your request or concern. If your request relates to a specific data category (for example, a request to access your transaction records or to delete your KYC documents), please specify this in your message so that we can direct your request to the appropriate team.

Complaints Process

If you are not satisfied with dbpk's response to a privacy complaint, you have the right to escalate the matter through the formal complaints process. To initiate a formal complaint, email [email protected] with the subject line "Formal Privacy Complaint" and include a summary of the issue, the steps already taken, and the outcome you are seeking. A senior member of the dbpk compliance team will review your complaint and provide a written response within 20 business days.