Privacy Policy — db222

1 Introduction

This Privacy Policy ("Policy") describes how db222 ("db222", "we", "us", "our") collects, uses, stores, discloses, and protects personal data provided by or generated about users ("Player", "you", "your") when they access or use the db222 website and all associated services, including online casino games, sports betting, and financial transaction features.

db222 is committed to handling your personal data with integrity, transparency, and care. We recognise that the personal information you share with us — whether during registration, during KYC verification, or as a result of your activity on the platform — deserves the highest standards of protection, and this Policy explains precisely how we meet that obligation.

By creating an account on db222, accessing the platform, or continuing to use our services after any update to this Policy, you acknowledge that you have read and understood the terms set out here and consent to the collection and use of your data as described. If you do not agree with any part of this Policy, please do not use the db222 platform.

This Policy should be read together with the db222 Terms and Conditions and the Responsible Gaming Policy, which together form the complete agreement governing your relationship with db222.

2 Data Controller

For the purposes of applicable data protection law, db222 acts as the data controller in respect of personal data collected through the db222 platform. As data controller, db222 determines the purposes for which and the means by which personal data is processed.

Where db222 engages third-party service providers to process data on its behalf — for example, payment processors, KYC verification providers, or game content providers — those parties act as data processors under written agreements that require them to process your data only on db222's documented instructions and to implement appropriate security measures.

3 Data We Collect

db222 collects personal data across several categories depending on the nature of your interaction with the platform. The table below provides a structured overview of the data categories, specific data points, and the primary reason each is collected.

db222 does not knowingly collect sensitive personal data beyond what is strictly required for identity verification and regulatory compliance. We do not collect biometric data, racial or ethnic origin data, political opinions, religious beliefs, or health data except where expressly required by applicable law and disclosed to you at the point of collection.

4 How We Collect Data

db222 collects personal data through the following channels:

4.1 Directly From You

The majority of data db222 holds about you is provided directly by you during the following interactions:

• Account registration — when you create a db222 account and provide your name, date of birth, contact details, and preferred payment method
• KYC verification — when you submit identity documents, proof of address, and payment method ownership confirmation
• Deposit and withdrawal requests — when you initiate financial transactions via bKash, Nagad, Rocket, Upay, or bank transfer
• Customer support interactions — when you contact db222 via email or the support portal
• Promotion participation — when you opt in to a bonus or promotional offer and provide the information requested
• Responsible gaming self-disclosures — when you set deposit limits, request cooling-off periods, or submit self-exclusion requests

4.2 Automatically From Your Device

When you access the db222 platform, certain technical and usage data is collected automatically through server logs, cookies, and similar tracking technologies. This includes your IP address, device identifiers, browser type, the pages and games you access, session start and end times, and the referring URL.

4.3 From Third Parties

In limited circumstances, db222 may receive personal data from third parties, including:

• Payment service providers (e.g., bKash, Nagad) confirming transaction completion or returning transaction reference numbers
• Third-party KYC and identity verification services that validate the authenticity of documents you have submitted
• Fraud prevention databases that flag IP addresses or device fingerprints associated with known fraudulent activity

5 Purposes & Legal Basis for Processing

db222 processes your personal data only where it has a valid legal basis to do so. The table below maps each processing purpose to its applicable legal basis.

Where db222 relies on your consent as the legal basis for processing — most notably for promotional communications — you have the right to withdraw that consent at any time by contacting support at [email protected] or updating your communication preferences in your account dashboard. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

Where db222 relies on legitimate interests as the legal basis, we have assessed that those interests are not overridden by your interests, rights, or freedoms. If you wish to obtain further detail about any such assessment, please contact our support team.

6 Sharing Your Data

db222 does not sell your personal data. We share personal data with third parties only in the following circumstances, and only to the minimum extent necessary:

6.1 Payment Processors

To complete deposit and withdrawal transactions, db222 shares relevant transaction data (account reference, amount, timestamp) with supported payment providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank Bangladesh, and Sonali Bank. These providers process your data under their own privacy policies and applicable financial regulation.

6.2 KYC and Identity Verification Providers

To fulfil its Know Your Customer obligations, db222 may transmit identity documents and related data to authorised third-party verification services. These providers are contractually bound to use your data solely for the verification purpose and to implement appropriate security controls.

6.3 Game Content Providers

db222 hosts games from third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game, technical session data (player session token, game round identifier, bet and outcome data) is transmitted to the relevant provider to render the game. These providers do not receive your name, contact details, or financial data from db222.

6.4 Legal and Regulatory Authorities

db222 may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other competent authorities where required to do so by applicable law, lawful order, or legal process. In such cases, db222 will disclose only the data required by the specific request and will, where legally permissible, inform you of the disclosure.

6.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of db222's assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified prior to any such transfer, and the acquiring entity will be required to honour the terms of this Privacy Policy.

7 Cookies & Tracking Technologies

db222 uses cookies and similar client-side tracking technologies to operate and improve the platform. Cookies are small text files placed on your device that allow the platform to recognise your browser across sessions and to store your preferences.

The following categories of cookies are used on db222:

db222 does not use third-party advertising cookies or behavioural targeting cookies. We do not share cookie-derived data with advertising networks or social media platforms.

You may manage or delete cookies through your browser settings at any time. Disabling strictly necessary or security cookies will impair your ability to log in and use core platform features.

8 Data Retention

db222 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or accounting obligations. The following indicative retention periods apply:

• Active account data (identity, contact, financial, account data): Retained for the lifetime of your account and for a minimum of five (5) years following account closure, in line with anti-money laundering record-keeping requirements.
• KYC documents (identity documents, proof of address): Retained for a minimum of five (5) years from the date of submission, or five (5) years from the end of the business relationship, whichever is later.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications: Retained for three (3) years from the date of the last interaction, to support dispute resolution.
• Technical and usage logs: Retained for twelve (12) months on a rolling basis, unless retained for longer in connection with a security investigation.
• Marketing consent records: Retained for three (3) years from the date consent was last confirmed or for the lifetime of the account, whichever is shorter.

On expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical analysis and service improvement purposes.

9 Security Measures

db222 implements a multi-layered information security programme to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Key measures include:

• Transport-layer security: All data transmitted between your browser or app and db222 servers is encrypted using TLS 1.2 or higher.
• Password security: Passwords are stored as salted hashes using a strong one-way hashing algorithm. db222 staff do not have access to your plain-text password at any time.
• Access controls: Internally, access to personal data is restricted to staff members who require it for their specific job function, under a principle of least privilege. All internal access is logged and periodically reviewed.
• Payment tokenisation: db222 does not store full payment account credentials. Payment references (e.g., a bKash wallet number) are stored in tokenised form and used only for transaction matching and withdrawal routing.
• Infrastructure security: db222 servers are hosted in secured data centre environments with physical access controls, network firewalls, intrusion detection systems, and automated vulnerability scanning.
• Incident response: db222 maintains a documented data breach response procedure. In the event of a confirmed breach affecting your personal data, affected players will be notified without undue delay.

While db222 takes all reasonable steps to protect your data, no internet-based system is entirely immune to risk. You are responsible for maintaining the security of your own account credentials and for logging out of shared devices after each session. If you believe your account has been compromised, contact support at [email protected] immediately.

10 Your Rights

As a data subject, you hold the following rights with respect to your personal data held by db222. You may exercise any of these rights by contacting our support team at [email protected] with the subject line "Data Rights Request" and a clear description of the right you wish to exercise.

db222 will require you to verify your identity before processing any data rights request, to prevent unauthorised third parties from accessing or modifying your account data. If your request is complex or you have submitted multiple requests simultaneously, db222 may extend the response period by up to an additional 30 days, in which case you will be notified promptly.

db222 will not charge a fee for handling straightforward data rights requests. Requests that are manifestly unfounded, excessive, or repetitive may be subject to a reasonable administrative fee or, in exceptional cases, declined — in which case you will be informed of the reason and any available alternative remedies.

11 Minors

db222 does not knowingly collect personal data from individuals under the age of 21. The db222 platform is strictly for adults aged 21 and above. Age verification is a mandatory step in the account registration and KYC process.

If db222 becomes aware that it has inadvertently collected personal data from a person under the age of 21, that data will be deleted immediately and the associated account will be permanently closed. Any balance held in such an account will be handled in accordance with db222's Terms and Conditions and applicable legal requirements.

Parents and guardians are strongly encouraged to use parental control software to prevent minors from accessing online gambling platforms, including db222. If you believe a minor has registered on db222 using false information, please contact us immediately at [email protected].

12 International Data Transfers

db222 is an internationally operated platform and some of the personal data we collect may be stored on or processed by servers and service providers located outside Bangladesh. Where such transfers occur, db222 takes reasonable steps to ensure that your personal data receives a level of protection consistent with the standards described in this Policy.

Specifically, international data transfers by db222 are governed by one or more of the following safeguards:

• Written data processing agreements with receiving entities that include obligations equivalent to those described in this Policy
• Transfer to jurisdictions that maintain data protection standards recognised as adequate by relevant international standards
• Contractual clauses that bind the receiving party to appropriate data protection obligations

If you wish to obtain further information about the safeguards applicable to a specific international transfer of your data, please contact support at [email protected].

13 Third-Party Links

The db222 platform may contain references to third-party game providers, payment services, and informational resources. db222 does not control these third-party services and is not responsible for their privacy practices. This Privacy Policy applies solely to data collected through the db222 platform itself.

When you interact directly with a third-party payment provider (such as bKash, Nagad, or Rocket) through their own interface or app in connection with a deposit or withdrawal, that interaction is governed by the respective provider's own privacy policy. db222 encourages you to review the privacy policies of any third-party service you use in connection with the db222 platform.

14 Changes to This Policy

db222 reserves the right to update or amend this Privacy Policy at any time. Changes will be reflected on this page with a revised effective date. Where changes are material — for example, where a new category of data is collected, a new sharing arrangement is introduced, or your rights are affected — db222 will provide advance notice by posting a prominent notice on the platform or by notifying you via your registered contact details.

Your continued use of db222 following the posting of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept any revised Privacy Policy, you must stop using the db222 platform and may request account closure by contacting support at [email protected].

We recommend that you review this Privacy Policy periodically to stay informed about how db222 protects your data. The current version will always be accessible at https://db222.ws/privacy-policy.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or db222's handling of your personal data, please contact our support team using the details below. All correspondence will be acknowledged promptly and handled in strict confidence.

When submitting a data rights request, please include your registered username, the email address associated with your db222 account, and a clear description of the right you wish to exercise or the concern you wish to raise. This allows us to verify your identity and process your request as efficiently as possible.

db222 is committed to resolving all privacy-related concerns directly and transparently. If you are not satisfied with the outcome of your enquiry, you retain the right to escalate the matter to the appropriate regulatory or supervisory authority in your jurisdiction.