db333 Privacy Policy

1 Introduction & Scope

This Privacy Policy ("Policy") is issued by db333 ("db333", "we", "us", "our") and applies to all personal data collected from individuals ("you", "Player", "User") who access, register for, or use the db333 online betting and casino platform at https://db333.im and any associated subdomains or mobile browser interfaces. This Policy describes in full detail what personal information we collect, the purposes for which it is processed, the legal basis for that processing, how long it is retained, with whom it may be shared, and the rights you are entitled to exercise in relation to your data.

This Policy forms part of the db333 Terms and Conditions and should be read alongside them. By creating an account on db333, making a deposit, or otherwise using the platform, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the db333 platform.

2 Data Controller Information

db333 operates as an internationally incorporated offshore entity. For the purposes of this Privacy Policy, db333 acts as the data controller in respect of all personal data collected through the db333 platform. As data controller, db333 determines the purposes and means by which your personal data is processed.

All data protection queries, subject access requests, and privacy-related complaints should be directed to the db333 compliance team at the contact details provided in Section 14 of this Policy. db333 is committed to responding to all data-related enquiries promptly and in accordance with applicable data protection principles.

3 Information We Collect

db333 collects personal data through several channels: directly from you during account registration and subsequent interactions with the platform; automatically through your use of the website via cookies and tracking technologies; and from third-party identity verification and payment processing partners where this is required for compliance purposes. The categories of personal data we collect include the following:

3.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (used to verify that you are aged 21 or above)
• Residential address in Bangladesh (or your jurisdiction of residence)
• Email address (used for account communications, verification, and marketing where consented)
• Mobile phone number (used for account verification, transaction alerts, and optional SMS marketing)
• Username and encrypted password hash (never stored in plain text)

3.2 KYC Verification Documents

• Government-issued photo identification (National ID card, passport, or driving licence)
• Proof of address documentation (utility bill, bank statement, or official correspondence)
• Proof of payment method ownership (bKash, Nagad, Rocket, Upay, or card account statements)
• Selfie photograph with identification document, where requested by the compliance team

3.3 Financial & Transaction Data

• Deposit amounts, timestamps, and transaction reference numbers
• Withdrawal requests, amounts, and processing status
• Payment method identifiers (bKash wallet number, Nagad account reference, card last-four digits)
• Account balance history and bonus credit/debit records

3.4 Betting & Gaming Activity Data

• Sports bets placed, including market, selection, stake, odds, and outcome
• Casino and slot game sessions, including game title, session duration, bets placed, and results
• Bonus offers claimed and wagering progress
• Responsible gaming tool settings (deposit limits, loss limits, self-exclusion records)

3.5 Technical & Device Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser version
• Session timestamps, login history, and duration of platform visits
• Pages visited, features accessed, and clickstream data
• Cookie identifiers and analytics tracking tokens (see Section 7)

4 How We Use Your Data

db333 uses the personal data we collect for the following specific, documented purposes. Each purpose is linked to a legal basis for processing as described in Section 5:

5 Legal Basis for Processing

db333 processes your personal data only where a valid legal basis exists for doing so. The legal bases we rely upon are as follows:

• Contract Performance: Processing is necessary to enter into and perform the contractual agreement between you and db333, as set out in the Terms and Conditions. This includes creating your account, processing payments, and delivering gaming services.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) laws, Know Your Customer (KYC) requirements, and responsible gaming regulations. db333 must retain certain records for defined periods under these obligations regardless of any individual's request for deletion.
• Legitimate Interest: Processing is necessary for db333's legitimate business interests, provided those interests are not overridden by your rights and freedoms. This includes fraud prevention, platform security monitoring, product analytics, and improving the quality of our services.
• Consent: Where processing is based on your consent — specifically in relation to direct marketing communications via email and SMS — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing. Consent may be withdrawn via your account settings or by contacting [email protected].

6 Data Sharing & Third Parties

db333 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. However, in order to deliver the services available on the db333 platform, we are required to share certain data with trusted third-party service providers who act as data processors on our behalf. These providers are contractually bound to process data only in accordance with db333's instructions and applicable data protection standards.

The categories of third parties with whom db333 may share your personal data include:

• Payment Processors: bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay (United Commercial Bank), Visa, and Mastercard — for the purpose of processing deposits and withdrawals on your account. Each processor receives only the data required to execute the specific transaction.
• Identity Verification Providers: Third-party KYC and AML screening services that assist db333 in verifying your identity, confirming your age (21+), and screening against sanctions and watchlists as required by law.
• Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Play'n GO, Spribe, Ezugi, and other certified game studios whose content is available on the db333 platform. Session data may be passed to game providers to facilitate game delivery and fairness auditing.
• Analytics Providers: Web analytics platforms used to understand aggregate usage patterns, improve platform performance, and detect anomalous activity. Analytics data is processed in aggregated, pseudonymised form where possible.
• Legal & Regulatory Authorities: db333 may disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where required to do so by applicable law, court order, or in connection with the investigation of fraud, money laundering, or other criminal activity.
• Professional Advisers: Legal counsel, auditors, and compliance consultants who provide professional services to db333 and are bound by confidentiality obligations.

7 Cookies & Tracking Technologies

The db333 website uses cookies and similar tracking technologies to deliver a functional, personalised, and secure browsing experience. A cookie is a small text file placed on your device by a website when you visit it. The cookies used by db333 fall into the following categories:

• Strictly Necessary Cookies: These cookies are essential for the db333 platform to function correctly. They enable core features such as session authentication, account security, and navigation. These cookies cannot be disabled without severely impairing your ability to use the platform.
• Performance & Analytics Cookies: These cookies collect anonymised or pseudonymised information about how players interact with the db333 platform — such as which pages are visited most frequently and whether users encounter error messages. This data is used to improve the platform experience.
• Functional Cookies: These cookies allow db333 to remember your preferences — such as your preferred language, display settings, and last-visited game categories — so that you do not need to reconfigure them each time you visit.
• Marketing & Targeting Cookies: Where you have given your consent, these cookies may be used to deliver personalised promotional content relevant to your gaming activity. You may withdraw your consent to marketing cookies at any time via your browser settings.

You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will affect the functionality of the db333 platform and may prevent you from accessing certain features, including your account.

8 Data Retention

db333 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of data we hold:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with db333's internal data disposal procedures. Where data must be retained beyond your account closure for legal compliance reasons, it will be held in a restricted access archive and will not be used for any operational or marketing purpose.

9 Your Data Rights

As a db333 player, you are entitled to exercise the following rights in respect of your personal data. All rights requests should be submitted in writing to [email protected] with the subject line "Data Rights Request". db333 will respond within 30 days of receiving a valid request.

10 Children & Minors

The db333 platform is strictly for adults aged 21 years and above. db333 does not knowingly collect personal data from any individual under the age of 21. If you are under 21, you must not attempt to register an account, access the platform, or provide any personal data to db333 through any channel.

Where db333 has reasonable grounds to believe that personal data has been submitted by a person under the age of 21 — whether discovered during KYC verification, responsible gaming monitoring, or through a third-party report — the relevant account will be immediately suspended, all data associated with that account will be reviewed, and any funds deposited will be returned to the originating payment method following verification of ownership.

Parents and guardians who believe that a minor in their care has accessed the db333 platform or submitted personal data without their knowledge are encouraged to contact db333 support immediately at [email protected]. db333 will investigate and take appropriate action within 24 hours of notification.

11 Data Security Measures

db333 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmissions between your browser or mobile device and the db333 platform are encrypted using industry-standard 256-bit Secure Sockets Layer (SSL) / Transport Layer Security (TLS) protocols. This prevents interception of your data in transit.
• Encrypted Data Storage: Sensitive personal data — including identity documents, payment method details, and account credentials — is stored using strong encryption at rest. Passwords are hashed using a one-way cryptographic algorithm and are never stored in plain text.
• Access Controls: Access to systems that process personal data is restricted on a need-to-know basis. All db333 staff with access to player data undergo background checks and receive mandatory data protection training.
• Two-Factor Authentication (2FA): db333 supports two-factor authentication for player accounts to provide an additional layer of protection against unauthorised login attempts.
• Regular Security Audits: db333's infrastructure and data handling processes are subject to regular independent security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident Response: db333 maintains a documented data breach response procedure. In the event of a security incident that poses a risk to your personal data, db333 will notify affected players at the registered email address within 72 hours of becoming aware of the breach, where feasible.

12 International Data Transfers

db333 is an internationally operated offshore platform. In the course of delivering our services, your personal data may be transferred to and processed in countries other than Bangladesh, including the jurisdiction in which db333 is incorporated and the countries in which our third-party service providers (including game providers and payment processors) operate.

Where personal data is transferred internationally, db333 takes steps to ensure that appropriate safeguards are in place to protect the data in a manner consistent with this Privacy Policy. These safeguards may include contractual data protection clauses incorporated into agreements with third-party processors, ensuring that recipients of your data are bound by obligations equivalent to those described in this Policy.

By using the db333 platform and agreeing to this Privacy Policy, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Bangladesh as described in this section. If you have questions about the specific countries to which your data may be transferred, please contact us at [email protected].

13 Changes to This Policy

db333 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made to this Policy, db333 will notify registered players via the email address associated with their account at least 7 days before the changes take effect.

The updated Policy will also be published on this page with a revised effective date. Your continued use of the db333 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the changes. We encourage you to review this page periodically to stay informed about how db333 protects your personal data.

If you do not agree with the terms of any revised Privacy Policy, you must stop using the db333 platform and may request account closure by contacting our support team at [email protected]. Where account closure is requested solely on the basis of a Policy change, any eligible account balance will be refunded to your registered payment method following standard withdrawal verification.

14 Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which db333 processes your personal data, please contact our compliance and data protection team using the details below. db333 is committed to resolving all privacy-related enquiries promptly, fairly, and transparently.

Data Protection Enquiries

Email: [email protected]
Subject line: Privacy Policy Enquiry
Response time: Within 5 business days for general enquiries; within 30 days for formal data rights requests.

Subject Access Requests

To submit a Subject Access Request (SAR) and receive a copy of all personal data db333 holds about you, email [email protected] with the subject line "Subject Access Request". Please include your registered username, the email address associated with your db333 account, and a brief description of the data you are requesting. db333 will acknowledge your SAR within 5 business days and provide a full response within 30 days.

Data Erasure Requests

To request deletion of your personal data, email [email protected] with the subject line "Data Erasure Request". Please note that certain data categories must be retained for legal compliance purposes as described in Section 8. db333 will inform you of any data that cannot be erased and the specific legal reason for its retention.

Complaints

If you are dissatisfied with how db333 has handled your personal data or responded to a data rights request, you may escalate your complaint by emailing [email protected] with the subject line "Privacy Complaint — Escalation". db333 will review all escalated complaints at senior compliance level and provide a written final response within 14 business days.