dtb22 Privacy Policy — Your Data, Your Rights

This Privacy Policy ("Policy") describes how dtb22 ("we", "us", "our", "Platform") collects, processes, stores, and protects the personal data of players and visitors ("you", "your") who access or use the dtb22 website at dtb22.org and all associated services, games, sports betting markets, and promotional features made available through the platform.

By registering an account or using the dtb22 platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with the terms of this Policy, you should not use the dtb22 platform. This Policy should be read in conjunction with our Terms and Conditions, which govern the overall use of the platform.

dtb22 collects personal data through two primary means: information you provide directly when registering and using the platform, and information collected automatically as you interact with our services. The categories of personal data we may collect include:

• Identity and contact information: full name, date of birth, gender, Bangladeshi mobile phone number, and email address provided during account registration.
• Account credentials: your chosen username and encrypted password. dtb22 stores passwords in hashed form and never stores them in plain text.
• Financial information: records of deposits and withdrawals, payment method types used (bKash, Nagad, Rocket, Upay, Visa, Mastercard), transaction amounts in BDT, and transaction timestamps. We do not store full mobile wallet PINs or full card numbers.
• Gaming activity: records of bets placed, games played, wager amounts, wins and losses, session durations, and responsible gaming tool usage (deposit limits, time-outs, self-exclusion requests).
• Technical and device data: IP address, device type, operating system, mobile browser type and version, screen resolution, session start and end times, referring URLs, and approximate geographic location derived from IP address.

We may also collect information you voluntarily provide when contacting our support team, submitting a complaint, responding to a survey, or participating in any dtb22 promotion or event. All data collection is limited to what is necessary for the purposes described in this Policy.

dtb22 uses personal data collected from Bangladesh players for the following legitimate purposes:

• Account registration and management: to create and maintain your dtb22 account, verify your identity, process your KYC documentation, and manage your account settings and preferences.
• Payment processing: to process deposits and withdrawals through bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other supported payment methods; to maintain accurate financial records; and to comply with anti-money laundering obligations.
• Platform improvement and personalisation: to analyse gameplay patterns, session data, and feature usage in order to improve platform performance, identify bugs, develop new features, and personalise your gaming experience where you have consented to this.
• Responsible gaming compliance: to monitor gaming behaviour for signs of problem gambling, enforce deposit limits and self-exclusion requests, verify player age eligibility, and apply responsible gaming interventions where required.
• Fraud prevention and security: to detect, investigate, and prevent fraud, unauthorised account access, money laundering, and other prohibited activities; to protect the security and integrity of the dtb22 platform and its player community.
• Customer support: to respond to your queries, complaints, and support requests; to maintain records of your communications with the dtb22 support team for quality assurance and dispute resolution purposes.

dtb22 processes your personal data only where there is a valid legal basis to do so. The applicable legal bases for our data processing activities are:

• Contractual necessity: processing required to fulfil our contract with you as a registered dtb22 player, including account management, payment processing, and game service delivery.
• Legal obligation: processing necessary to comply with applicable legal and regulatory requirements, including anti-money laundering checks, age verification obligations, and responding to lawful requests from competent authorities.
• Legitimate interests: processing carried out for our legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and analysis of aggregate usage data to improve our services — provided those interests are not overridden by your privacy rights.
• Consent: where you have given explicit consent to a specific processing activity, such as receiving promotional communications from dtb22. You may withdraw consent at any time by contacting [email protected].

dtb22 does not sell or rent your personal data to third parties. We may share your information only in the following limited and controlled circumstances:

• Payment service providers: we share the minimum necessary financial data with our payment partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard processors) strictly for the purpose of processing your deposit and withdrawal transactions.
• Game technology providers: game studios such as Pragmatic Play, Evolution Gaming, Ezugi, Spribe, and NetEnt may receive session-level technical data (device type, browser, session identifiers) necessary to deliver their games on the dtb22 platform. These providers operate under their own data protection obligations.
• Regulatory and law enforcement authorities: we may disclose your personal data to competent authorities when required to do so by law, court order, or regulatory obligation. This includes mandatory reporting of suspicious financial activity under applicable anti-money laundering regulations.
• Business transfers: in the event of a merger, acquisition, or sale of all or part of dtb22's business, player data may be transferred to the acquiring entity as part of the transaction, subject to equivalent data protection commitments.

dtb22 takes the security of payment and financial data with particular seriousness. When you make a deposit or request a withdrawal using bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the transaction is processed through encrypted connections. dtb22 retains records of transaction amounts, dates, payment method types, and transaction identifiers for accounting, dispute resolution, and anti-money laundering compliance purposes. Full mobile wallet PINs, full card numbers, and card security codes (CVV/CVC) are never stored on dtb22 systems.

For deposits and withdrawals via bKash and Nagad, the transaction is completed through the respective mobile wallet provider's own secure interface. dtb22 does not handle or store your bKash PIN, Nagad PIN, or mobile banking password at any stage of the transaction. Payment data shared with our payment processors is governed by those processors' own privacy policies and security certifications.

dtb22 uses cookies and similar lightweight tracking technologies to ensure the platform functions correctly and to improve your experience. The cookies we use fall into three categories:

• Essential cookies: strictly necessary for the operation of the dtb22 platform. These include session cookies that keep you logged in during your visit and security cookies that help prevent cross-site request forgery. Without these cookies the platform cannot function. They cannot be disabled without breaking core functionality.
• Functional cookies: used to remember your preferences and settings, such as your chosen language, device settings, and responsible gaming configurations. These cookies improve convenience but are not essential for basic platform access.
• Analytics cookies: we use aggregated, anonymised analytics data to understand how players navigate the dtb22 platform, which features are most used, and where technical issues occur. This data is processed in aggregate form and cannot be used to identify individual players.

You may manage cookie preferences through your mobile browser settings. Please note that disabling essential cookies will affect your ability to log in and use core platform features. dtb22 does not use third-party advertising cookies or cross-site behavioural tracking cookies.

dtb22 retains personal data only for as long as is necessary for the purposes described in this Policy, or as required by applicable legal and regulatory obligations. The following general retention periods apply: active account data is retained for the duration of your registered account; financial transaction records are retained for a minimum of five years from the date of each transaction in compliance with anti-money laundering regulations; customer support communications are retained for up to three years from the date of the interaction; technical and device log data is retained for up to 12 months and then anonymised or deleted.

When your account is closed — whether at your request or due to a breach of our Terms and Conditions — your personal data will be retained for the applicable regulatory retention period and then securely deleted or anonymised. You will not be able to reopen a closed account after data deletion has been completed. If you have a query about the specific retention period applicable to your data, please contact [email protected].

dtb22 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include SSL/TLS encryption for all data in transit between your device and our servers; bcrypt or equivalent hashing for all stored passwords; role-based access controls ensuring that only authorised dtb22 personnel can access personal data on a need-to-know basis; regular security assessments and vulnerability scanning of platform infrastructure; and secure data centre environments with physical access controls.

While dtb22 takes data security seriously and applies industry-standard protections, no online platform can guarantee absolute security against all possible threats. You play an important role in keeping your account secure: use a strong, unique password for your dtb22 account, do not share your login credentials with anyone, and notify us immediately at [email protected] if you suspect any unauthorised access to your account.

As a dtb22 player based in Bangladesh, you have a number of rights with respect to the personal data we hold about you. You may exercise these rights at any time by contacting us at [email protected]. We will respond to all valid requests within a reasonable timeframe, typically within 14 business days. The rights available to you include:

• Right of access: you have the right to request a copy of the personal data dtb22 holds about you. We will provide a summary of your data in a readable format within a reasonable timeframe of receiving your verified request.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update certain account details directly from within your dtb22 account settings.
• Right to erasure: in certain circumstances — for example where the data is no longer necessary for the purpose it was collected, or where you withdraw consent and no other legal basis applies — you may request that dtb22 delete your personal data. Note that regulatory retention obligations may prevent immediate deletion of certain categories of data such as financial transaction records.
• Right to restriction: you may request that dtb22 restrict the processing of your personal data in certain circumstances, for example while a complaint or rectification request is being investigated.
• Right to object: where we process your personal data on the basis of our legitimate interests, you have the right to object to that processing. We will cease the processing unless we can demonstrate compelling legitimate grounds that override your interests.

To exercise any of the above rights, please email [email protected] with the subject line "Privacy Request" and include your registered mobile number or username so we can verify your identity before processing the request. We do not charge a fee for handling privacy rights requests in ordinary circumstances.

The dtb22 platform is strictly intended for adults aged 21 and above. dtb22 does not knowingly collect or process personal data from individuals under the age of 21. Age verification is conducted during the registration process and may be requested again at any point during your use of the platform. If dtb22 becomes aware that personal data has been collected from a person under the age of 21 without appropriate consent, that data will be deleted promptly and the associated account will be closed. If you believe that a minor may have registered on the dtb22 platform, please contact us immediately at [email protected].

dtb22 reserves the right to update or amend this Privacy Policy at any time. When we make material changes to this Policy, we will update the "Last Updated" date shown at the top of this page. We may also notify registered players of significant changes via the contact details held on their account. We encourage you to review this Policy periodically to stay informed about how we protect your personal data.

Your continued use of the dtb22 platform following the posting of any changes to this Policy constitutes your acceptance of those changes. If you do not agree with any update to this Policy, you should discontinue use of the platform and may request account closure by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way dtb22 handles your personal data, our support team is available 24 hours a day, 7 days a week. Response times for privacy-specific requests may be up to 14 business days depending on the complexity of the request.

Privacy contact email: [email protected]