dbpk Privacy Policy
Your privacy matters to us. This Privacy Policy explains exactly what personal data dbpk collects, why we collect it, how it is stored and protected, who it may be shared with, and what rights you have over your own information. We encourage you to read it in full before creating or using your account.
Overview
Our Commitment to Your Privacy
dbpk ("we", "us", "our", "Platform") is committed to safeguarding the privacy of every person who visits, registers on, or transacts through the dbpk website at dbpk.net. This Privacy Policy ("Policy") sets out in plain English how we handle personal data, and what steps we take to ensure that your information remains secure, accurate, and used only for the purposes described below.
By accessing the dbpk Platform and creating an account, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact our support team to request account closure.
This Policy applies to all data collected through the dbpk website, mobile interfaces, customer support channels, and any promotional communications sent by dbpk. It does not apply to third-party websites or services that may be linked from our Platform — those services operate under their own privacy policies, and dbpk is not responsible for their data practices.
If you have any questions about this Policy or wish to exercise any of your privacy rights, please contact our support team through the live chat channel available within your account dashboard. You may also reach us by email at [email protected] — please note this address is provided for informational reference only and is displayed as plain text, not a clickable link.
SSL Encryption on Every Connection
All data transmitted between your device and the dbpk Platform is protected by industry-standard TLS/SSL encryption. Your personal details and financial information are never sent over an unencrypted connection.
No Sale of Personal Data
dbpk does not sell, rent, or trade your personal data to third-party advertisers or data brokers under any circumstances. Your information is used solely to operate and improve the Platform and to comply with legal obligations.
Player-Controlled Privacy Settings
You can review and update your personal information, manage marketing communication preferences, and submit data access or erasure requests at any time through your account dashboard or by contacting support.
Section 1
Data We Collect
dbpk collects personal data only to the extent necessary to provide a safe, compliant, and functional betting and gaming service. The categories of data we collect, and the circumstances in which we collect them, are set out in the table below.
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, national ID or passport number | At registration and during KYC verification |
| Contact Data | Bangladesh mobile number, email address, residential address in Dhaka, Chittagong, Sylhet, or elsewhere in Bangladesh | At registration and when contact details are updated |
| Financial Data | bKash wallet number, Nagad number, Rocket number, Upay number, bank account details for Dutch-Bangla Bank, City Bank, BRAC Bank, or Islami Bank | When a payment method is added or a deposit/withdrawal is initiated |
| Transaction Data | Deposit amounts in BDT (৳), withdrawal amounts, bet history, game history, bonus transactions, account balance records | Automatically recorded with each transaction on the Platform |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, session duration, referring URL | Automatically collected on each Platform visit via server logs and cookies |
| Behavioural Data | Games played, betting patterns, login frequency, session start and end times (BST), features accessed, search queries within the Platform | Continuously recorded during authenticated Platform sessions |
| Communication Data | Live chat transcripts, support ticket content, email correspondence, SMS verification logs | Whenever you contact dbpk support or respond to a dbpk communication |
| KYC Documents | Scanned or photographed copies of National ID Card, Passport, Birth Certificate, proof of payment method ownership (e.g., bKash account screenshot) | Before the first approved withdrawal or when a compliance review is initiated |
Section 2
How We Use Your Data
dbpk processes personal data only where there is a lawful basis for doing so. The primary lawful bases we rely on are: (a) performance of a contract — processing necessary to open, manage, and close your account and to settle your bets and transactions; (b) compliance with a legal obligation — processing required to meet anti-money laundering, KYC, and responsible gaming regulatory requirements; and (c) legitimate interests — processing that is necessary to protect the security of the Platform, prevent fraud, and improve the quality of our service, where those interests are not overridden by your rights.
Account Administration
We use your identity and contact data to create and manage your dbpk account, verify your identity during KYC, authenticate your logins via SMS verification, reset your password, and send essential account notifications. This processing is necessary to fulfil our contract with you and cannot be opted out of while your account remains open.
Payments and Transactions
Financial data and transaction data are used exclusively to process your deposits via bKash, Nagad, Rocket, Upay, and supported banks; to settle your withdrawal requests; to maintain your accurate BDT (৳) account balance; and to provide you with a full transaction history within your account dashboard. We do not store complete financial credentials beyond the reference identifiers required for transaction matching.
Fraud Prevention and Security
Technical and behavioural data are used continuously to detect and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and unauthorised account access. Our security systems flag anomalous patterns — such as logins from unrecognised devices, unusual withdrawal velocity, or deposit-and-withdrawal cycles inconsistent with normal gaming behaviour — for manual review.
Responsible Gaming
Behavioural and transaction data are used to monitor your gaming patterns for indicators of problem gambling. Where our systems identify patterns consistent with at-risk behaviour — including extended session durations, rapid escalation of bet sizes, or chase-betting patterns — our responsible gaming team may reach out to offer support tools including deposit limits, session limits, and self-exclusion. You can also access these tools proactively at any time. For more details, visit our Responsible Gaming page.
Marketing Communications
With your consent, we may use your contact data to send you information about dbpk promotions, bonuses, seasonal offers tied to events such as BPL, Eid, Pohela Boishakh, and Victory Day, and new game launches. You may withdraw marketing consent at any time by updating your communication preferences in your account settings or by contacting support. Withdrawal of marketing consent does not affect the lawfulness of processing based on consent before its withdrawal.
Platform Improvement and Analytics
Aggregated and anonymised behavioural data is used internally to improve the dbpk user interface, optimise game loading performance, assess the popularity of different product categories (cricket betting, live casino, slots), and prioritise future feature development. This analytics processing does not involve data that can be traced back to individual players after anonymisation.
Legal Bases at a Glance
-
Contractual Necessity Account management, payment processing, bet settlement
-
Legal Obligation KYC verification, AML monitoring, regulatory compliance
-
Legitimate Interests Fraud detection, security monitoring, platform analytics
-
Consent Marketing emails, promotional SMS, personalised offers
Marketing Opt-Out
You can stop receiving dbpk marketing messages at any time. Update your preferences in account settings or send an opt-out request via live chat support. Opt-outs are processed within 5 business days.
Responsible Gaming Monitoring
Behavioural data analysis helps dbpk identify players who may need support. This processing is carried out in your interest and in fulfilment of our responsible gaming obligations.
Section 4
Data Sharing & Disclosure
dbpk does not sell your personal data. We share personal data with third parties only where it is strictly necessary to operate the Platform, comply with a legal obligation, or protect the security and integrity of our service. All third parties with whom we share data are contractually required to process it only for the specified purpose and to maintain appropriate security standards.
Payment Service Providers
To process your deposits and withdrawals, we share the minimum necessary financial reference data with your chosen payment service provider — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, or Islami Bank. We share only the transaction reference, amount in BDT, and account identifier required to complete or verify the transaction. We do not share your full gaming history or identity documents with payment providers.
Game Content Providers
When you launch a live casino game or slot game supplied by Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, or another integrated provider, a session token and an anonymised player identifier are passed to the provider's platform to authenticate your game session and to record the outcome for bet settlement purposes. Game providers do not receive your name, contact data, or financial data.
Identity Verification Partners
To complete your KYC verification, dbpk may engage a specialist identity verification service. Your submitted documents (National ID, Passport, proof of payment method) may be processed by this partner solely for the purpose of identity verification. The partner is bound by strict data processing agreements and may not use your documents for any other purpose.
Fraud Prevention and AML Networks
Where dbpk identifies or suspects fraudulent conduct, multi-accounting, bonus abuse, or financial crime, we may share relevant account information with industry fraud prevention networks and, where legally required, with law enforcement authorities. Such disclosures are made only to the extent required and are logged internally for compliance audit purposes.
Legal and Regulatory Disclosure
dbpk may disclose personal data to courts, regulators, law enforcement agencies, or other competent authorities where we are legally compelled to do so by a valid court order, statutory requirement, or regulatory direction. In such cases, dbpk will disclose only the data specifically required by the applicable legal instrument and will, where legally permissible, notify the affected player of the disclosure.
Who We Share Data With
- Payment providers (bKash, Nagad, Rocket, Upay, banks)
- Game providers (session tokens only, no personal data)
- KYC / identity verification partners
- Fraud prevention networks (where misconduct is identified)
- Law enforcement / regulators (when legally required)
Section 5
Data Retention
dbpk retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any longer retention period required by applicable legal, regulatory, or compliance obligations. The retention periods below represent our standard data management schedule.
Active Account Data
While your dbpk account remains open and active, all categories of personal data collected during registration, KYC, transactions, and Platform usage are retained in full. This is necessary to fulfil the ongoing contractual relationship between you and dbpk, to maintain your transaction history, and to apply your responsible gaming settings consistently across sessions.
Post-Closure Retention
Following voluntary or enforced account closure, dbpk retains your identity data, KYC documents, and financial transaction records for a minimum period of five (5) years from the date of closure. This retention period is maintained to comply with anti-money laundering record-keeping obligations and to support any dispute resolution, regulatory inquiry, or fraud investigation that may arise after closure.
Communication Records
Live chat transcripts, support ticket records, and email correspondence are retained for three (3) years following the date of the communication. This period allows dbpk to reference the communication in connection with any subsequent dispute, complaint, or regulatory review.
Technical and Behavioural Data
Server logs containing IP addresses, device identifiers, and session records are retained for twelve (12) months from the date of collection, after which they are automatically purged or fully anonymised. Anonymised aggregate behavioural analytics data (not attributable to individual players) may be retained indefinitely for platform improvement purposes.
Marketing Consent Records
Records of your marketing consent or opt-out decisions are retained for the duration of your account relationship plus three (3) years after account closure, to demonstrate compliance with consent management obligations. The actual marketing communications sent to you are retained for the same period as communication records (three years).
Section 6
Security Measures
dbpk implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, and alteration. Our security programme is reviewed and updated continuously to address emerging threats and to incorporate industry best practices for online gaming platform security.
TLS/SSL Encryption in Transit
All communications between your browser and the dbpk Platform are encrypted using TLS 1.2 or higher. This ensures that your login credentials, payment details, and personal data cannot be intercepted in transit by third parties.
Encryption at Rest
Sensitive data stored in dbpk databases — including identity documents, financial references, and KYC records — is encrypted at rest using AES-256 encryption. Encryption keys are stored separately from the encrypted data using a hardware security module.
Two-Factor Authentication
dbpk uses SMS-based two-factor authentication for account login and for high-value withdrawal authorisation. Your Bangladesh mobile number serves as the second authentication factor, adding a critical layer of protection beyond your password.
Access Controls & Role Separation
Internal access to player data is restricted on a strict need-to-know basis. dbpk staff roles are segmented so that no single employee has unrestricted access to all data categories. Access logs are maintained and reviewed regularly for anomalies.
Continuous Threat Monitoring
Our security team operates real-time monitoring systems that detect and respond to suspicious activity patterns — including brute-force login attempts, unusual withdrawal sequences, and IP-based anomalies — around the clock, seven days a week.
Regular Security Audits
dbpk conducts periodic internal security reviews and engages third-party assessors to perform vulnerability assessments of the Platform infrastructure. Findings are remediated according to a risk-prioritised schedule to maintain a strong security posture.
Section 7
Your Privacy Rights
dbpk respects your rights over your own personal data. The following rights are available to all dbpk account holders. To exercise any of these rights, contact our support team via the live chat channel in your account dashboard. We will respond to all verifiable requests within thirty (30) calendar days of receipt. In complex cases we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reason for it.
You may request a copy of all personal data dbpk holds about you. We will provide this in a structured, readable format within the response window, at no charge for the first request in any twelve-month period.
If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Identity corrections may require re-submission of KYC documents to verify the updated information.
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected. This right is subject to overriding legal retention obligations — we will inform you if a legal hold prevents immediate deletion.
In certain circumstances — such as where you contest the accuracy of your data or have objected to processing — you may request that we restrict the processing of your data while the matter is resolved.
Where processing is based on your consent or on a contract, and is carried out by automated means, you may request that we provide your data in a machine-readable format suitable for transfer to another service provider.
You may object to processing based on our legitimate interests — including profiling for responsible gaming monitoring and internal analytics — where your individual circumstances justify the objection. We will assess each objection on its merits.
Where processing is based on consent — specifically marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing that took place before the withdrawal.
You have the right not to be subject to a decision based solely on automated processing that produces a significant legal or similarly significant effect on you. Where dbpk uses automated systems in account reviews, human oversight is applied before any final decision is taken.
Section 8
Policy Updates & Contact
Changes to This Policy
dbpk reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or improvements to our Platform. When we make material changes to this Policy, we will notify registered account holders by email or in-Platform notification at least fourteen (14) days before the changes take effect. The updated Policy will also be published on this page with a revised Effective Date shown at the top.
Your continued use of the dbpk Platform after the effective date of any amended Policy constitutes your acceptance of the revised terms. If you do not agree with a material amendment, you should discontinue use of the Platform and contact support to close your account before the amendment takes effect.
We encourage you to review this page periodically — even when you have not received a change notification — to stay informed about how your data is being protected. The current Effective Date displayed in the hero section above indicates when this version of the Policy was last updated.
Minor and Non-Material Changes
Corrections of typographical errors, clarifications that do not change the substantive meaning of any provision, and updates to reflect new game providers or payment methods that do not alter our data practices may be made without prior notice. Such changes will be reflected in an updated Effective Date on this page.
How to Contact Us About Privacy
If you have any question about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how your personal data has been handled, please contact the dbpk privacy support team through the live chat channel available within your account dashboard. Our support team operates 24 hours a day, 7 days a week in English and will acknowledge your enquiry within 48 hours. For written correspondence, you may also email us at [email protected] — this address is displayed as plain text only.
Children and Age Restriction
dbpk is strictly an 18+ platform. We do not knowingly collect personal data from any person under 18 years of age. If you are under 18, you must not register for or use the dbpk Platform. If dbpk discovers or is notified that a registered account belongs to a person under 18, the account will be immediately suspended, all data associated with it will be reviewed, and the account will be permanently closed in accordance with our age verification policy. If you believe a person under 18 has registered on the Platform, please notify us immediately via live chat support.
Quick Reference
-
Effective Date 1 January 2026
-
Response Time Rights requests answered within 30 days
-
Support Language English — 24 / 7 live chat
-
Age Requirement 18+ only — strictly enforced
-
Market Bangladesh (BST, UTC+6)
24/7 Live Chat Support
For all privacy enquiries, data rights requests, and policy questions, reach the dbpk team via live chat inside your account dashboard. We operate around the clock in English and will acknowledge your message within 48 hours.
Related Policies
This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming page, which together form the full framework governing your use of the dbpk Platform.
Continue Exploring dbpk
Your Privacy is Protected — Now Play with Confidence
You have reviewed how dbpk handles your data. Head back to the Platform, explore our cricket betting markets, live casino tables, and slots — knowing your information is in safe hands.