dbji Privacy Policy — How We Handle Your Personal Data

dbji ("we", "us", "our", or "the Platform") is committed to protecting and respecting the privacy of all players who use the dbji platform at dbji.bet. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read this Policy carefully before using the dbji platform or submitting any personal information to us.

By registering for an account on the dbji platform, or by continuing to use the platform after this Policy has been made available to you, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the dbji platform.

Privacy at a Glance

Six core principles govern how dbji handles your personal data. These do not replace the full Policy — please read the complete document below.

1. Information We Collect

dbji collects personal data from players in three main ways: information you provide directly during registration and use of the platform, information collected automatically through your use of the platform, and information obtained from third parties as part of our verification and payment processes. The categories of data we collect are detailed below.

Information You Provide Directly

• Identity information: full name, date of birth, nationality, and copies of government-issued identity documents submitted as part of the KYC verification process (such as a National ID card, passport, or driving licence).
• Contact information: email address, mobile phone number (used for OTP-based login verification), and residential address as provided during registration or KYC verification.
• Financial information: the mobile wallet phone numbers associated with your bKash, Nagad, Rocket, or Upay accounts used for deposits and withdrawals. dbji does not store your wallet PIN, passwords, or full card numbers. Payment credentials are processed exclusively through the wallet providers' own secure APIs.
• Communications: the content of messages you send to dbji through customer support channels, including live chat, email, and any feedback or complaint forms. These records are retained for quality assurance and dispute resolution purposes.

Information Collected Automatically

• Device and technical data: IP address, device type (make and model), operating system version, browser type and version, screen resolution, and mobile network operator. This information is collected automatically when you access the platform.
• Usage data: pages visited on the platform, time and duration of each session, games accessed, bets placed, amounts wagered, game results, and navigation paths within the platform. This data is used for platform optimisation, fraud detection, and responsible gaming monitoring.
• Transaction records: a complete log of all deposits, withdrawals, bonus credits, bonus debits, and balance adjustments on your account. Transaction records are retained for a minimum of five years in accordance with applicable financial record-keeping requirements.
• Cookies and similar tracking technologies: see Section 9 (Cookies and Tracking Technologies) for full details of the cookies we use, their purpose, and how to manage your cookie preferences.

Information from Third Parties

• Identity verification services: where dbji uses third-party identity verification providers to conduct KYC checks, those providers may supply us with verification outcomes, risk scores, and document authentication results associated with your submitted identity documents.
• Payment providers: where your bKash, Nagad, Rocket, or Upay wallet provider confirms a transaction to dbji, we receive a transaction reference number, timestamp, amount, and the sender's wallet phone number. We do not receive your full wallet account credentials or transaction history from these providers.
• Fraud and AML screening services: dbji may use third-party screening services to check account activity against sanctions lists, politically exposed person (PEP) databases, and fraud intelligence databases, as part of our anti-money laundering (AML) compliance obligations.

2. How We Use Your Information

dbji uses the personal data we collect only for the purposes set out in this section. We do not use your data for purposes that are incompatible with those listed here without first obtaining your consent.

• Account management and service delivery: to create and maintain your dbji account, verify your identity, process deposits and withdrawals, credit bonuses and promotions, and deliver the games and betting services you access through the platform.
• Fraud prevention and security: to detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, and other illegal or prohibited activities on the platform, using both automated and manual review processes.
• Regulatory compliance: to comply with applicable anti-money laundering (AML) laws, know-your-customer (KYC) requirements, and other regulatory obligations. This includes retaining transaction records and identity documents for the minimum periods required by law.
• Platform improvement and analytics: to analyse usage patterns across the platform, identify technical issues, improve game performance and loading speed, personalise the experience for Bangladeshi players, and develop new features and services.
• Responsible gaming: to monitor account activity for signs of problem gambling behaviour, apply responsible gaming tools set by the player (such as deposit limits and session reminders), and fulfil our obligations in relation to player protection.
• Marketing and promotions: to send you information about bonuses, promotions, and seasonal offers relevant to your account and playing history, subject to your marketing preferences. You may opt out of promotional communications at any time by updating your account preferences or contacting customer support.

3. Legal Basis for Processing

dbji processes your personal data on the following legal bases. Where more than one basis applies to a particular processing activity, the most appropriate basis is noted below.

• Contract performance: processing that is necessary to fulfil our contractual obligations to you as a platform member — including account creation, game access, payment processing, and dispute resolution.
• Legal obligation: processing that is required by law, including AML record-keeping, KYC verification, and compliance with applicable regulatory requirements in the jurisdictions in which dbji operates.
• Legitimate interests: processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where those interests are not overridden by your data protection rights.
• Consent: where processing is based on your consent (for example, receiving marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.

4. Sharing Your Information

dbji does not sell, rent, or trade your personal data. We share personal data only in the limited circumstances described below, and only to the extent necessary for the relevant purpose.

• Service providers and processors: dbji engages third-party service providers to perform functions on our behalf, including identity verification services, payment processing intermediaries, fraud detection providers, and cloud infrastructure providers. These providers are contractually required to process personal data only on dbji's instructions and to maintain appropriate security measures.
• Regulatory and law enforcement authorities: where required by applicable law or a valid legal order, dbji will disclose personal data to regulatory bodies, law enforcement agencies, tax authorities, or courts. dbji will notify the affected account holder where legally permitted to do so.
• Business transfers: in the event of a merger, acquisition, asset sale, or restructuring of the dbji business, personal data held by dbji may be transferred to a successor entity as part of that transaction. Affected players will be notified of any such transfer and of any material changes to their data rights that result from it.
• Other players (in limited circumstances): certain gameplay data (such as tournament leaderboard positions or hand histories in games with a social component) may be visible to other players as part of the game format. dbji minimises cross-player data visibility and does not share identity, financial, or contact data between players.

5. Cookies and Tracking Technologies

The dbji platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, to keep your session secure, and to collect anonymised analytics data that helps us improve the platform experience for Bangladeshi players. The following categories of cookies are used.

• Strictly necessary cookies: these cookies are essential for the platform to function and cannot be switched off. They are set in response to actions you take such as logging in, making a deposit, or setting your language preference. They do not store personally identifiable information beyond what is necessary for the session.
• Analytics cookies: these cookies collect anonymised information about how players interact with the platform, which pages are visited most frequently, and where errors occur. The data is aggregated and cannot be used to identify individual players. dbji uses this data solely to improve platform performance and user experience.
• Functional cookies: these cookies allow the platform to remember choices you have made (such as your preferred language) and to provide enhanced, personalised features. They may be set by dbji or by third-party providers whose services dbji has added to the platform.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the dbji platform, and some features may not work as intended if cookies are switched off.

6. Data Security

dbji takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. These measures include 256-bit SSL/TLS encryption for all data in transit between your device and our servers, encrypted storage of sensitive account data at rest, strict access controls limiting data access to authorised personnel only, regular security audits and penetration testing of the platform infrastructure, and monitoring systems that detect and alert on unusual access patterns or suspicious account activity.

Despite these measures, no method of transmission over the internet or method of electronic storage is completely secure. While dbji takes all reasonable precautions to protect your personal data, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, dbji will notify affected players as required by applicable law.

7. Data Retention

dbji retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply.

• Account data and identity documents: retained for the duration of the active account relationship plus a minimum of five years after account closure, in accordance with AML and KYC record-keeping obligations. Where a regulatory investigation is ongoing at the time of account closure, data will be retained until the investigation is concluded.
• Transaction records: retained for a minimum of five years from the date of each transaction, in accordance with applicable financial regulation. Transaction logs that are subject to a dispute or investigation will be retained until the matter is resolved, regardless of the standard retention period.
• Marketing data: retained until you withdraw your consent to receive marketing communications or request deletion of your marketing profile. Withdrawal of marketing consent does not affect the retention of data held for other purposes such as KYC or transaction record-keeping.

8. Your Data Protection Rights

As a player on the dbji platform, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact dbji customer support with your request. We will respond within five business days of receiving a valid request.

• 👁️
  Right of Access

  You have the right to request a copy of the personal data dbji holds about you, along with information about how it is used, stored, and shared. This is sometimes called a Subject Access Request (SAR). We will provide the requested information in a structured, commonly used, and machine-readable format.
• ✏️
  Right of Rectification

  If any personal data we hold about you is inaccurate, incomplete, or out of date, you have the right to request that we correct or update it. You can update basic account information (such as your contact number or email address) directly through your account settings panel.
• 🗑️
  Right to Erasure

  You may request that dbji delete the personal data we hold about you. This right is subject to limitations where retention is required by law (for example, AML transaction records must be kept for five years). Where deletion is not possible in full, dbji will inform you of the data that must be retained and the legal basis for retaining it.
• ⛔
  Right to Object

  You have the right to object to processing of your personal data where that processing is based on dbji's legitimate interests. You also have the right to opt out of receiving direct marketing communications from dbji at any time, without providing a reason.
• 📦
  Right to Data Portability

  Where processing is based on your consent or on a contract between you and dbji, and the processing is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another controller.

To exercise any of the above rights, contact the dbji support team at [email protected] with the subject line "Data Rights Request" and your registered account details. We will verify your identity before processing any request, to ensure that personal data is not disclosed to unauthorised parties.

9. Children's Privacy

The dbji platform is strictly for adults aged 21 and above. dbji does not knowingly collect, use, or retain personal data from any person under the age of 21. If dbji becomes aware that personal data has been collected from a person under 21 without appropriate verification, we will take immediate steps to delete that data and close the associated account. If you believe that a person under 21 has registered on the dbji platform, please contact us immediately at [email protected].

10. Third-Party Links and Services

The dbji platform may contain references to third-party payment providers (such as bKash, Nagad, and Rocket) whose own websites and services are governed by their own privacy policies. dbji is not responsible for the privacy practices of these third-party providers. When you interact with a third-party wallet or payment service to complete a deposit or withdrawal, you are subject to that provider's terms and privacy policy in addition to dbji's own. We encourage you to read the privacy policies of any third-party service you use in connection with your dbji account.

11. Changes to This Privacy Policy

dbji reserves the right to update or revise this Privacy Policy at any time. When material changes are made, we will post a prominent notice on the platform and, where practicable, notify registered account holders by sending a message to their registered contact details. The date at the top of this Policy indicates when it was last updated.

Your continued use of the dbji platform after any update to this Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with the changes, you should stop using the platform and may request account closure in accordance with the account closure procedure described in our Terms and Conditions.

12. Contact and Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data dbji holds about you, please contact the dbji customer support team. All privacy-related enquiries are handled by our dedicated support staff, available 24 hours a day, seven days a week.