db89 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1. Who We Are

This Privacy Policy is issued by db89 (hereinafter referred to as "db89", "we", "us", or "the Platform"), the operator of the online betting and casino platform accessible at https://db89.io. db89 is operated for the English-speaking Bangladeshi gambling market and serves players located across Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

For any privacy-related enquiries, complaints, or data subject requests, you may contact us at: [email protected] (plain text — not a clickable link).

2. Data We Collect

db89 collects the following categories of personal data in connection with the operation of its platform and the provision of services to registered players:

2.1 Identity and Contact Data

• Full legal name;
• Date of birth (for age verification purposes);
• Residential address;
• Email address;
• Mobile phone number (Bangladesh registered).

2.2 Identity Verification (KYC) Data

• National Identity Card (NID) number and copy;
• Passport number and copy (where provided);
• Driver's licence (where provided as alternative identification);
• Utility bill or bank statement (as proof of address, where requested);
• Selfie or facial image (where biometric verification is required).

2.3 Financial and Transaction Data

• Mobile financial account reference numbers associated with bKash, Nagad, Rocket, or Upay transactions;
• Transaction amounts, timestamps, and reference identifiers;
• Account balance and bonus balance history;
• Deposit and withdrawal records.

db89 does not store full mobile banking PINs, OTP codes, or any other credentials that would allow access to a player's external financial account.

2.4 Account and Activity Data

• db89 username and account identifier;
• Login history, including date, time, and IP address;
• Betting history, game session history, and wagering records;
• Bonus claims and wagering progress;
• Support correspondence and complaint records;
• Responsible gaming tool settings (deposit limits, self-exclusion status, etc.).

2.5 Technical and Device Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser version;
• Screen resolution and device identifier;
• Session duration and navigation data within the db89 platform;
• Cookie identifiers and similar tracking data (see Section 7).

2.6 Communications Data

• Content of customer support interactions (live chat, email);
• Survey responses and feedback submissions;
• Marketing preference records (opt-in and opt-out history).

The following table summarises the primary data categories and their principal uses:

3. How We Collect Data

db89 collects personal data through the following channels:

• Directly from you: when you register an account, complete identity verification, make a deposit or withdrawal, contact support, respond to a survey, or update your account profile;
• Automatically: when you visit or interact with the db89 platform, through cookies, log files, session tracking, and device fingerprinting technologies (see Section 7);
• From payment partners: transaction confirmation data from bKash, Nagad, Rocket, Upay, and other supported payment providers when you initiate a deposit or request a withdrawal;
• From fraud and security partners: risk-scoring data and flagged activity reports from third-party fraud-detection service providers contracted by db89;
• From publicly available sources: information from public records or databases where necessary to verify identity or detect fraud.

4. How We Use Your Data

db89 uses the personal data it collects for the following purposes:

• Account management: creating and maintaining your player account, verifying your identity, processing login requests, and managing account security;
• Service delivery: enabling access to betting markets, casino games, slots, live casino, Lucky Bingo, and all other db89 products;
• Payment processing: processing deposits and withdrawals via supported Bangladeshi payment methods, reconciling transactions, and maintaining financial records;
• Bonus and promotion administration: tracking bonus eligibility, wagering progress, and promotion participation;
• Identity verification and KYC: fulfilling our obligations to verify the age and identity of all players and prevent the use of the platform by ineligible individuals;
• Fraud prevention and security: detecting, investigating, and preventing fraudulent activity, money laundering, collusion, bonus abuse, and other prohibited conduct;
• Responsible gaming: monitoring betting patterns for signs of problem gambling, administering self-exclusion and deposit limit tools, and fulfilling our duty of care obligations;
• Customer support: responding to enquiries, resolving complaints, and maintaining records of support interactions;
• Legal compliance: fulfilling obligations under applicable law, responding to lawful requests from authorities, and maintaining records as required by law;
• Platform improvement: analysing usage patterns, identifying technical issues, and improving the performance and content of the db89 platform;
• Marketing communications: sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications.

5. Legal Bases for Processing

db89 processes your personal data on the following legal grounds:

• Contractual necessity: processing required to perform our obligations under the player account agreement — including account creation, payment processing, game access, and customer support;
• Legal obligation: processing required to comply with applicable law, including age verification, anti-money laundering obligations, and record-keeping requirements;
• Legitimate interests: processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where those interests are not overridden by your rights;
• Consent: processing for optional marketing communications, where you have explicitly opted in. You may withdraw this consent at any time without affecting processing carried out on other grounds.

6. Data Sharing and Disclosure

db89 does not sell or rent personal data. We may share your data in the following limited circumstances:

6.1 Payment Service Providers

To process your deposits and withdrawals, db89 shares necessary transaction data with your chosen payment provider (bKash, Nagad, Rocket, Upay). These providers receive only the data required to process the specific transaction and are not authorised to use it for any other purpose.

6.2 Identity Verification Partners

Where automated or manual KYC verification is required, db89 may share identity document copies and associated data with contracted verification service providers. These providers operate under strict data processing agreements and are prohibited from retaining or using your data beyond their contracted scope.

6.3 Fraud Prevention and Security

db89 may share account and activity data with contracted fraud-detection partners to identify and prevent abuse of the platform. Such partners receive only anonymised or pseudonymised data where possible, and are bound by confidentiality obligations.

6.4 Legal and Regulatory Disclosure

db89 may disclose personal data to law enforcement authorities, regulatory bodies, or courts when required to do so by applicable law, a valid legal order, or where we reasonably believe disclosure is necessary to prevent serious harm or criminal activity. Where permitted by law, db89 will attempt to notify you of such disclosure requests before complying.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of db89's business, personal data held by db89 may be transferred to the successor entity. Players will be notified of any such transfer and the successor's privacy practices before the transfer takes effect.

6.6 No Other Third-Party Sharing

Beyond the categories listed above, db89 does not share personal data with any third party — including advertisers, data brokers, social media platforms, or analytics companies — without your explicit prior consent.

7. Cookies and Tracking Technologies

db89 uses cookies and similar technologies to operate and improve the platform. A cookie is a small data file placed on your device when you visit the db89 website. We use the following categories of cookies:

• Strictly necessary cookies: essential for the platform to function — including session authentication, security tokens, and load-balancing. These cannot be disabled without disrupting core platform functionality;
• Functional cookies: used to remember your preferences (such as language settings and login state) to improve your experience;
• Analytics cookies: used to understand how players interact with the db89 platform, which pages are visited most frequently, and where technical errors occur. Data collected through analytics cookies is aggregated and anonymised where possible;
• Security cookies: used to detect and prevent fraud, bot activity, and account takeover attempts.

db89 does not use advertising or cross-site tracking cookies. You may manage cookie preferences through your browser settings. Note that disabling certain cookies may impair the functionality of the db89 platform.

8. Data Retention

db89 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Specific retention periods are set out in the table in Section 2 above. The key principles governing our retention approach are:

• Account data is retained for the duration of the active player account plus a minimum post-closure period of five (5) years, to satisfy legal, regulatory, and dispute-resolution obligations;
• Financial transaction data is retained for a minimum of seven (7) years from the date of the transaction, in accordance with standard financial record-keeping obligations;
• Technical and device data (including log files and IP records) is retained for a maximum of thirteen (13) months from the date of collection, unless required for an active security investigation;
• When data is no longer required, it is securely deleted or anonymised so that it can no longer be linked to an individual.

9. Data Security

db89 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and db89 servers;
• Encrypted storage of sensitive data fields (passwords are stored as salted cryptographic hashes — plaintext passwords are never stored);
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular security audits and vulnerability assessments of the db89 platform;
• Intrusion detection and monitoring systems operating continuously;
• Two-factor authentication options for player accounts;
• Formal data breach response procedures, including player notification obligations where legally required.

While db89 takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials. If you suspect your account has been compromised, please contact [email protected] immediately.

10. Your Rights

As a db89 player, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with your full name, registered email address, and a description of your request. We will respond within a reasonable timeframe, and in any case within thirty (30) days of receiving a verifiable request.

Please note that certain rights may be limited where db89 is required to retain or process data to fulfil legal obligations, prevent fraud, or enforce contractual rights. We will always inform you of the specific reason if we are unable to fulfil a data rights request in full.

11. Children and Minors

db89 is strictly an adults-only platform. The db89 service is not directed at, and must not be used by, any individual under the age of 21 years. db89 does not knowingly collect personal data from individuals under 21. If we become aware that we have inadvertently collected data from a minor, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor in your care has registered a db89 account or provided personal data to db89, please contact us immediately at [email protected] so that we may investigate and take appropriate action.

12. Changes to This Privacy Policy

db89 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. Material changes will be communicated to registered players by email and via a prominent notice on the db89 platform at least seven (7) days before the revised Policy takes effect, except where immediate changes are required for legal compliance or security purposes.

The "Last Updated" date at the top of this document reflects the most recent revision. Your continued use of the db89 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must discontinue use of the db89 service and close your account before the effective date.

13. Contact and Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way db89 handles your personal data, please contact us through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week
• Response Target: Within 30 days for formal data subject requests; within 24 hours for general privacy enquiries
• Language: English

If you are not satisfied with our response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. db89 is committed to resolving all privacy complaints fairly, transparently, and in a timely manner.