dbt1 Privacy Policy
Your privacy matters to us. This Privacy Policy explains exactly what personal information dbt1 collects from players across Bangladesh, how it is used, how it is protected, and what rights you hold over your own data.
256-bit SSL Encryption
Every data transmission between your device and the dbt1 platform is protected by industry-standard 256-bit SSL encryption at all times.
No Data Selling
dbt1 never sells, rents, or trades your personal information to any third-party advertiser or marketing network, ever.
Your Data Rights
You have the right to access, correct, export, and request deletion of your personal data held by dbt1 at any time.
Secure Payments
Payment data processed via bKash, Nagad, Rocket, and Upay is handled exclusively by our certified payment partners and never stored on dbt1 servers.
Cookie Transparency
We use cookies only for session management, security, and platform performance. No third-party tracking or advertising cookies are deployed.
Defined Retention
dbt1 retains your personal data only for as long as necessary to fulfil legal, regulatory, and operational obligations — never indefinitely.
1 Overview
dbt1 is committed to protecting the privacy and personal data of every player who uses our platform. This Privacy Policy sets out in clear, plain English the types of personal data we collect, the purposes for which we use it, the conditions under which we may share it with third parties, the safeguards we apply to keep it secure, how long we keep it, and the rights you have over your own information.
This Privacy Policy applies to all data collected through the dbt1 website at dbt1.io, any associated mobile-optimised interfaces, our customer support channels (email and live chat), and any other means by which you interact with dbt1. It applies to all players registered in Bangladesh, including players located in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh.
This Privacy Policy should be read alongside dbt1's Terms & Conditions and Responsible Gaming Policy, both of which are available on this website. In the event of any inconsistency between this Privacy Policy and a more specific data-processing notice provided to you at the time of collection, the more specific notice shall take precedence in respect of that data processing activity.
2 Data We Collect
dbt1 collects personal data from you in several ways: directly when you register an account or contact support, automatically when you use the platform, and from third parties such as payment processors and identity verification providers. The categories of personal data we collect are set out in the table below.
| Category | Examples of Data Collected | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, National ID (NID) number, passport number, photo ID scan | Provided by you at registration or during KYC verification |
| Contact Data | Mobile phone number (Bangladesh), email address, city of residence | Provided by you at registration or when contacting support |
| Financial Data | bKash/Nagad/Rocket/Upay mobile number, transaction reference IDs, deposit and withdrawal amounts in BDT (৳) | Collected during payment processing; full payment credentials are handled by payment partners |
| Account & Activity Data | Username, account balance, betting history, game session logs, bonus claims, login timestamps | Generated automatically through your use of the platform |
| Technical Data | IP address, device type, operating system, browser type and version, session duration, pages visited | Collected automatically via server logs and first-party analytics |
| Communications Data | Support ticket content, live chat transcripts, email correspondence with dbt1 | Collected when you contact our customer support team |
| Responsible Gaming Data | Deposit limits set, self-exclusion requests, session time limits, reality check configurations | Collected when you use responsible gaming tools on the platform |
dbt1 does not collect special categories of sensitive personal data (such as health data, religious beliefs, or political opinions) unless this is strictly necessary and you have provided explicit consent in advance. Where age verification requires us to process your date of birth and identity document, this is carried out solely for the purpose of confirming that you meet the minimum age requirement of 21 years.
3 How We Use Your Data
dbt1 uses your personal data only for the purposes described in this Privacy Policy. We do not use your data for any purpose that is incompatible with the purposes listed below. Our primary uses of your personal data are as follows:
- Account Management: To create, maintain, and manage your dbt1 player account, including processing your registration, verifying your identity, and administering your account balance in BDT (৳).
- Service Delivery: To process your bets and wagers, credit winnings to your account, process deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to deliver the full range of dbt1 betting and casino services.
- Identity & Age Verification (KYC): To verify that you are who you say you are and that you meet the minimum age requirement of 21 years, in compliance with our anti-money laundering and know-your-customer obligations.
- Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, money laundering, account takeover attempts, bonus abuse, and other prohibited activities on the platform.
- Responsible Gaming: To monitor your betting patterns and account activity for signs of problem gambling, to enforce deposit limits and self-exclusion periods you have set, and to send responsible gaming communications where warranted.
- Customer Support: To respond to your support enquiries, resolve disputes, and maintain records of communications for quality assurance and dispute resolution purposes.
- Legal & Regulatory Compliance: To comply with applicable laws, regulations, court orders, and lawful requests from competent authorities, including record-keeping and reporting obligations.
- Platform Improvement: To analyse aggregate usage data (in anonymised or pseudonymised form) for the purpose of improving the performance, functionality, and user experience of the dbt1 platform.
- Marketing Communications: To send you promotional offers, bonus notifications, and tournament alerts via email or SMS, where you have given your consent to receive marketing communications. You may withdraw this consent at any time by contacting support at [email protected].
4 Legal Basis for Processing
dbt1 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:
- Contractual Necessity: Processing is necessary to perform the contract between you and dbt1 — specifically, to operate your account, process bets, and handle financial transactions.
- Legal Obligation: Processing is necessary for dbt1 to comply with applicable legal requirements, including KYC/AML obligations, tax record-keeping, and responses to lawful authority requests.
- Legitimate Interests: Processing is necessary for dbt1's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and internal analytics — provided these interests are not overridden by your rights and interests.
- Consent: For optional processing activities such as marketing communications and certain non-essential cookies, processing is based on your explicit consent, which you may withdraw at any time.
6 Data Retention
dbt1 retains your personal data for only as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. The retention periods applicable to the main categories of data we hold are as follows:
| Data Category | Retention Period | Reason |
|---|---|---|
| Identity & KYC Data | 5 years after account closure | AML / KYC regulatory obligations |
| Financial Transaction Records | 7 years after transaction date | Tax and financial record-keeping requirements |
| Betting & Game History | 5 years after account closure | Dispute resolution and regulatory compliance |
| Customer Support Records | 3 years after case closure | Quality assurance and dispute resolution |
| Marketing Consent Records | Until consent is withdrawn + 3 years | Proof of consent for regulatory purposes |
| Technical / Server Logs | 12 months on a rolling basis | Security monitoring and fraud detection |
| Self-Exclusion Records | Permanent (or duration of exclusion + 5 years) | Responsible gaming enforcement |
At the end of the applicable retention period, dbt1 will securely delete or anonymise your personal data so that it can no longer be associated with you. Where complete deletion is not immediately possible due to technical constraints (for example, data held in backup archives), the data will be isolated, protected from further active processing, and deleted at the earliest practicable opportunity.
7 Data Security
dbt1 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, disclosure, or misuse. Our key security safeguards include:
- 256-bit SSL/TLS Encryption: All data transmitted between your device and dbt1 servers is encrypted using 256-bit SSL/TLS technology, the same standard used by leading financial institutions.
- Password Security: Account passwords are hashed using industry-standard cryptographic algorithms (bcrypt). Passwords are never stored in plain text and are not accessible to dbt1 staff.
- Access Controls: Access to personal data is restricted on a strict need-to-know basis. dbt1 staff are granted access only to the data necessary to perform their specific job function. All staff access to player data is logged and audited.
- Network Security: dbt1 servers are protected by enterprise-grade firewalls, intrusion detection systems, and regular vulnerability scanning and penetration testing.
- Two-Factor Authentication: dbt1 supports two-factor authentication (2FA) for player accounts to provide an additional layer of protection against unauthorised access.
- Incident Response: dbt1 maintains a formal data breach response procedure. In the event of a data breach that affects your personal data and creates a significant risk to your rights, dbt1 will notify you as soon as practicably possible.
9 Your Data Rights
As a player on the dbt1 platform, you have the following rights in respect of your personal data. To exercise any of these rights, please contact our support team at [email protected]. We will respond to all verified rights requests within 30 days.
Right of Access
Request a copy of all personal data dbt1 holds about you, including how it is used and with whom it is shared.
Right to Rectification
Request correction of any inaccurate or incomplete personal data we hold about you.
Right to Erasure
Request deletion of your personal data where it is no longer needed for the purpose it was collected, subject to our legal retention obligations.
Right to Restriction
Request that dbt1 restricts the processing of your personal data in certain circumstances while a dispute or concern is being resolved.
Right to Portability
Request a structured, machine-readable export of personal data you provided to dbt1 for transfer to another service provider.
Right to Object
Object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests.
Please note that some rights are subject to limitations under applicable law. For example, dbt1 may be unable to delete your personal data if we are required to retain it for legal or regulatory compliance purposes (see Section 6 — Data Retention). Where a right cannot be fulfilled in full, we will explain the reason for any limitation in our response to your request.
10 Minors
dbt1 strictly prohibits the use of its platform by individuals under the age of 21. We do not knowingly collect or process personal data from anyone under the age of 21. Age verification is a mandatory step in the dbt1 account registration process, and we reserve the right to request documentary proof of age from any player at any time.
If dbt1 discovers that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data, close the associated account, and return any deposits made (minus any losses incurred through wagering activity, which will be voided). Any bonus winnings generated by an underage player will not be paid out under any circumstances.
11 Third-Party Links
The dbt1 platform may contain references to or integrations with third-party services, including licensed game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, Habanero) and payment partners (bKash, Nagad, Rocket, Upay). When you interact with any third-party service through the dbt1 platform, that service may collect data about you independently of dbt1 in accordance with its own privacy policy.
dbt1 is not responsible for the privacy practices or the content of any third-party service. We encourage you to review the privacy policies of any third-party service provider with whom you interact. This Privacy Policy applies solely to data collected and processed directly by dbt1.
12 Changes to This Policy
dbt1 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or business operations. Any material changes — particularly those that affect your rights or the way we handle your personal data — will be communicated to you via the email address associated with your dbt1 account at least seven (7) days before the changes take effect.
The "Last Updated" and "Effective" dates at the top of this document and in the Document Info panel on this page will be updated to reflect any revision. The version number will also be incremented accordingly. Your continued use of the dbt1 platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you should contact support to request account closure and the return of any real-money balance.
We recommend reviewing this Privacy Policy periodically to stay informed about how dbt1 protects your personal data. All previous versions of this Privacy Policy are archived and available upon request by contacting our support team.
13 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way dbt1 processes your personal data, please contact our Data Protection team using the details below. We are committed to resolving all privacy-related enquiries promptly and transparently.
- Email: [email protected] (plain text — not a clickable link)
- Support Hours: 24 hours a day, 7 days a week — English & Bengali
- Response Time: We aim to respond to all privacy-related requests within 5 business days and no later than 30 days from receipt of a verified request.
- Postal Enquiries: dbt1, Customer Privacy Team, Bangladesh Operations
When submitting a rights request (see Section 9), please include your registered username, the email address associated with your dbt1 account, a description of your request, and a copy of a valid identity document so that we can verify your identity before processing the request. This verification step is required to protect your data from unauthorised access requests.
Ready to Explore dbt1?
Now that you understand how dbt1 protects your data, discover our full range of cricket betting markets, live casino tables, and 500+ slot games — all secured by 256-bit SSL encryption.