dbt77 Privacy Policy

dbt77 ("we", "us", "our", "the Platform") is the data controller responsible for the personal information collected from players who access and use the dbt77 website at https://dbt77.app. As data controller, dbt77 determines the purposes for which your personal data is processed and the means by which that processing is carried out.

This Privacy Policy applies to all personal data collected from individuals who:

• Register a player account on the dbt77 platform.
• Browse the dbt77 website without registering.
• Contact dbt77 support via email at [email protected].
• Participate in dbt77 promotions, tournaments, or seasonal bonus campaigns.
• Use dbt77's live casino, sports betting, slots, or crash game features after completing dbt77 login.

This Policy does not apply to third-party websites or services that may be referenced or linked from within the dbt77 platform. dbt77 is not responsible for the privacy practices of game studios, payment processors, or other third-party services whose interfaces may be presented within the dbt77 ecosystem. We encourage you to review the privacy policies of any third-party providers you interact with independently of dbt77.

dbt77 collects personal data through several channels: directly from you during registration and account management, automatically through your use of the platform, and from trusted third-party sources such as payment providers during transaction processing. Below is a detailed breakdown of the categories of personal data dbt77 collects and the context in which each category is gathered.

2.1 Registration & Account Data

When you create a dbt77 account, we collect the following information:

• Full legal name (as it appears on your National Identity Card or passport).
• Date of birth (used to verify that you are 18 years of age or older). 18+
• Email address (used for account communication, promotional offers if opted in, and password recovery).
• Mobile phone number (used for account verification and security alerts).
• Preferred currency (Bangladeshi Taka — BDT).
• Username and encrypted password hash (we never store your password in plain text).

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process — which is mandatory before processing withdrawals above specified thresholds — dbt77 may collect:

• A scanned copy or photograph of your National Identity Card (NID), passport, or other government-issued photo ID.
• A selfie photograph holding your NID or passport, used for liveness verification.
• Proof of address documentation (e.g., a recent utility bill or bank statement issued within the last 90 days).
• Proof of payment method ownership (e.g., a screenshot of your bKash or Nagad account confirmation screen showing your registered name and number).

2.3 Financial & Transaction Data

When you make a deposit or withdrawal on dbt77, we collect transaction-related data including:

• The payment method used (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank).
• The mobile wallet number or partial card number associated with the transaction.
• Deposit and withdrawal amounts in BDT.
• Transaction timestamps and reference numbers.
• Transaction status (pending, confirmed, failed, reversed).

dbt77 does not store full card numbers or bKash/Nagad PINs. Full payment credential data is handled exclusively by the respective payment processor under their own security standards.

2.4 Gameplay & Betting Activity Data

dbt77 maintains a full log of player activity on the platform for security, fairness, and responsible gaming purposes. This includes:

Data Type	Purpose	Retention
game_sessions	Record of all casino game sessions, stakes, and outcomes	5 years
bet_history	Full sports betting history including markets, odds, and results	5 years
login_events	Login timestamps, IP addresses, and device identifiers	2 years
bonus_activity	Bonus claims, wagering progress, and expiry events	3 years
support_tickets	All support correspondence between player and dbt77 team	3 years
rg_interventions	Responsible gaming tool usage, self-exclusion requests, deposit limits	7 years

2.5 Technical & Device Data

When you access dbt77, our servers automatically receive and log certain technical information from your device and browser:

• IP address and approximate geographic location (country and city level).
• Browser type and version (e.g., Chrome, Firefox, Samsung Internet).
• Operating system and device type (desktop, Android mobile, iOS).
• Referring URL (the page you visited before arriving at dbt77).
• Pages visited on dbt77, time spent on each page, and click-path data.
• Screen resolution and language settings.

This technical data is used for platform performance optimisation, fraud detection, and security monitoring. It is not used to identify individual players in isolation unless combined with account data during an active security investigation.

dbt77 processes your personal data only where there is a legitimate and lawful basis for doing so. The following table sets out the primary purposes for which dbt77 uses your personal information, together with the lawful basis that justifies each processing activity.

Processing Purpose	Data Used	Lawful Basis
Creating and managing your player account	Registration data, contact details	Contractual necessity
Processing deposits and withdrawals	Transaction data, payment method details	Contractual necessity
Age and identity verification (KYC)	KYC documents, date of birth	Legal obligation
Anti-money laundering (AML) monitoring	Transaction data, gameplay activity	Legal obligation
Responsible gaming monitoring and intervention	Gameplay activity, login frequency, deposit patterns	Legitimate interest & legal obligation
Fraud prevention and account security	Device data, IP address, login events	Legitimate interest
Customer support and complaint handling	Support tickets, account data	Contractual necessity
Sending service notifications (security alerts, account updates)	Email address, mobile number	Contractual necessity
Sending marketing communications (opt-in only)	Email address, mobile number, game preferences	Consent
Platform analytics and performance improvement	Technical & device data, click-path data	Legitimate interest

dbt77 does not use automated decision-making (including profiling) in a way that produces legal or similarly significant effects on players, with the exception of automated fraud detection systems that may temporarily suspend an account pending human review. In all such cases, a human member of the dbt77 compliance team reviews the flagged case before any permanent action is taken.

dbt77 uses cookies and similar tracking technologies to operate the platform, remember your session after dbt77 login, personalise your experience, and analyse how the site is used. This section explains what types of cookies dbt77 uses and how you can manage your preferences.

A cookie is a small text file placed on your device by a website you visit. Cookies are widely used to make websites work efficiently, to provide analytics to site operators, and to deliver relevant content to visitors. dbt77 uses both first-party cookies (set directly by dbt77) and a limited set of third-party cookies (set by trusted service providers operating on dbt77's behalf).

4.1 Types of Cookies Used by dbt77

Cookie Category	Purpose	Can Be Disabled?
Strictly Necessary	Maintain your dbt77 login session, prevent cross-site request forgery (CSRF), load-balance requests across servers	No — required for platform function
Functional	Remember your preferred language, game lobby layout, and notification preferences	Yes — disabling may affect UX
Analytics	Count page visits, measure session durations, identify which pages and games are most popular	Yes
Security	Detect suspicious login activity, identify known fraudulent device fingerprints, rate-limit automated requests	No — required for account security
Responsible Gaming	Track session duration to support time-limit features; surface responsible gaming prompts at configured intervals	No — required for RG compliance

4.2 Managing Your Cookie Preferences

You can control non-essential cookies through your browser settings. The following browsers allow you to manage cookie preferences:

• Google Chrome: Settings → Privacy and Security → Cookies and other site data.
• Mozilla Firefox: Options → Privacy & Security → Cookies and Site Data.
• Samsung Internet (Android): Settings → Privacy → Block cookies.
• Safari (iOS): Settings → Safari → Privacy & Security → Block All Cookies.

Please note that disabling strictly necessary or security cookies will impair the functionality of the dbt77 platform and may prevent you from logging in or completing transactions. dbt77 recommends that players keep all cookie categories enabled for the best and most secure experience.

dbt77 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. However, in order to operate the dbt77 platform effectively and in compliance with applicable legal obligations, we share certain categories of personal data with the following categories of trusted third-party recipients. In each case, we have contractual data processing agreements in place that require these parties to handle your data securely and only for the specified purpose.

5.1 Payment Service Providers

When you make a deposit or withdrawal on dbt77, we share the minimum necessary transaction data with the relevant payment processor (such as bKash, Nagad, Rocket, Upay, or card scheme networks) to execute and confirm the transaction. Payment processors receive your transaction amount, your registered payment account reference, and a unique dbt77 transaction ID. They do not receive your full dbt77 account history or gameplay data.

5.2 Game Technology Providers

dbt77 integrates games from third-party game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game from these providers within the dbt77 platform, a session token and an anonymised player identifier are shared with the relevant studio's game server to load and authenticate your game session. Full personal details (such as your name, email, or payment information) are not shared with game studios.

5.3 Identity Verification Partners

For KYC processing, dbt77 may use the services of a trusted identity verification provider to assist with document authentication. Any KYC documents shared with a verification partner are processed solely for the purpose of confirming your identity and are subject to strict data processing agreements. Verified status is returned to dbt77 as a simple pass/fail outcome; detailed document data is not retained by the verification partner beyond the verification window.

5.4 Legal & Regulatory Disclosure

dbt77 may disclose your personal data to law enforcement agencies, regulatory authorities, or courts of competent jurisdiction where required to do so by applicable law — for example, in connection with an anti-money laundering investigation, a court order, or a formal regulatory inquiry. In such cases, dbt77 will disclose only the minimum data required to comply with the legal obligation and will notify you of any such disclosure where permitted to do so by law.

dbt77 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, disclosure, alteration, or destruction. Key security measures in place on the dbt77 platform include:

• TLS/SSL Encryption in Transit: All data transmitted between your browser or mobile device and the dbt77 servers is encrypted using Transport Layer Security (TLS 1.2 or higher). This means your login credentials, payment data, and personal information cannot be read by any party intercepting the network connection.
• Encryption at Rest: Sensitive data fields — including password hashes, KYC document files, and payment references — are encrypted at rest in dbt77's database systems using AES-256 encryption.
• Access Controls: Access to dbt77's player database is restricted to authorised personnel on a strict need-to-know basis. All internal access events are logged and audited. No single employee has unrestricted access to the full player dataset.
• Two-Factor Authentication (2FA): All dbt77 administrative accounts that can access player data require two-factor authentication. Players are also encouraged to enable 2FA on their own dbt77 accounts for enhanced login security.
• Penetration Testing: dbt77's platform undergoes regular security assessments by independent security professionals to identify and remediate vulnerabilities before they can be exploited.
• Incident Response Plan: dbt77 maintains a documented data breach response plan. In the event of a confirmed data breach that affects player personal information, affected players will be notified promptly with details of what was affected and what steps they should take.

6.1 Data Retention Periods

dbt77 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. General retention guidelines are as follows:

• Active account data is retained for the lifetime of your account plus a minimum of 5 years following account closure.
• Financial transaction records are retained for a minimum of 5 years to comply with financial record-keeping obligations.
• KYC and identity verification documents are retained for 5 years following the last transaction on the account, or 5 years following account closure, whichever is later.
• Responsible gaming records (self-exclusion periods, deposit limit history, RG tool usage) are retained for 7 years to support any future regulatory review or audit.
• Marketing preference records (including opt-in and opt-out timestamps) are retained for 3 years from the date of the last interaction.

After the applicable retention period expires, dbt77 will securely delete or anonymise your personal data in accordance with our data destruction procedures. Anonymised aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

As a player on the dbt77 platform, you have a number of rights with respect to the personal data dbt77 holds about you. dbt77 is committed to honouring these rights in a timely and transparent manner. To exercise any of the rights described below, please submit a written request to [email protected] with the subject line "Data Rights Request" and include your registered account email address for identity verification purposes.

7.1 Right of Access

You have the right to request a copy of all personal data that dbt77 holds about you. Upon receiving a valid access request, dbt77 will provide a structured summary of your personal data within 30 days. This includes your registration data, transaction history, gameplay logs, and support correspondence. This is sometimes called a Subject Access Request (SAR).

7.2 Right to Rectification

If you believe that any personal data dbt77 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update many basic account details (such as email address and contact number) directly through your account settings after dbt77 login. For changes to your registered legal name or date of birth, you will need to submit supporting documentation for verification.

7.3 Right to Erasure

You may request the deletion of your personal data from dbt77's systems. However, this right is subject to important limitations — dbt77 is legally required to retain certain categories of data (particularly financial transaction records and KYC documents) for mandatory retention periods as described in Section 6. Where full erasure is not possible due to legal obligations, dbt77 will delete all data that can lawfully be removed and inform you of the categories of data that must be retained and why.

7.4 Right to Restrict Processing

You have the right to request that dbt77 restrict the processing of your personal data in certain circumstances — for example, if you dispute the accuracy of the data while we verify it, or if you have objected to processing and a decision is pending. During a restriction period, dbt77 will continue to store your data but will not actively process it for any purpose other than storage and compliance.

7.5 Right to Data Portability

Where processing is based on your consent or on the performance of a contract, you have the right to receive a copy of the personal data you have provided to dbt77 in a structured, commonly used, and machine-readable format (e.g., CSV or JSON). You may also request that this data be transmitted directly to another data controller where technically feasible.

7.6 Right to Withdraw Consent

Where dbt77 processes your personal data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of the processing that took place before withdrawal. To withdraw marketing consent, update your notification preferences in your account settings after dbt77 login, or contact [email protected].

7.7 Children's Privacy

The dbt77 platform is strictly for adults aged 18 and above. 18+ dbt77 does not knowingly collect personal data from individuals under the age of 18. If you are a parent or guardian and believe your child has registered on dbt77 without your consent, please contact us immediately at [email protected]. We will promptly investigate, close the underage account, delete all associated personal data, and refund any deposits made.

If you have any questions, concerns, or complaints about the way dbt77 handles your personal data — or if you wish to exercise any of the data rights described in Section 7 — please contact the dbt77 data team using the details below. All communications must be in English.

• Email: [email protected] (subject line: "Privacy Enquiry" or "Data Rights Request")
• Response Time: dbt77 aims to provide an initial response to all privacy enquiries within 3 business days (Bangladesh Standard Time, UTC+6), and a full resolution within 30 days.
• Formal Complaints: If you are not satisfied with dbt77's response to a privacy complaint, you have the right to escalate your complaint in writing. dbt77 will assign a senior compliance officer to review all escalated complaints and issue a final decision within 14 days of escalation.

Policy Updates

dbt77 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the introduction of new platform features. The date of the most recent revision is displayed at the top of this document. For material changes — those that significantly affect how your data is used — dbt77 will notify registered players via the email address associated with their account at least 14 days before the change takes effect. Your continued use of the dbt77 platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy.

We encourage all dbt77 players to review this Privacy Policy periodically, particularly before making a deposit, claiming a bonus, or submitting KYC documentation for the first time. Staying informed about how your personal data is handled is an important part of playing safely on dbt77.