db22 Privacy Policy

This Privacy Policy ("Policy") describes how db22 ("db22", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "your", "Player", "User") who access or use the db22 website at https://db22.io and all associated services (collectively, the "Platform").

db22 is committed to protecting your privacy and handling your personal data responsibly, transparently, and in accordance with recognised data protection principles. We collect and process only the personal data that is genuinely necessary to deliver the Platform's services, comply with applicable legal obligations, and continually improve the player experience for our community of users in Bangladesh.

By registering an account on db22, making a deposit, or otherwise using the Platform, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue your use of the Platform.

For the purposes of this Privacy Policy, db22 acts as the data controller in respect of all personal data collected through the Platform. As data controller, db22 determines the purposes for which and the means by which personal data is processed.

All enquiries relating to the collection, use, or storage of your personal data, including requests to exercise any of the rights described in Section 10 of this Policy, should be directed to the db22 data privacy team via the contact details set out in Section 14 of this Policy.

Where db22 engages third-party service providers to process personal data on its behalf (for example, payment processors or game software providers), those third parties act as data processors under instruction from db22 and are required to handle your data only in accordance with db22's documented instructions and applicable data protection requirements.

db22 collects personal data from you through several means: directly from information you provide during registration and account management, automatically through your use of the Platform, and in limited circumstances from third-party verification services. The categories of personal data we collect are set out below.

db22 does not intentionally collect any special categories of sensitive personal data (such as health information, racial or ethnic origin, political opinions, or religious beliefs) unless you voluntarily disclose such information when contacting our responsible gaming support team. Any such information shared with responsible gaming support is handled with the highest level of confidentiality and used only to provide the welfare support you have requested.

db22 uses your personal data only for the specific, documented purposes listed below. We do not use your data for any purpose that is incompatible with the purposes for which it was originally collected without first notifying you and, where required, obtaining your consent.

• Account Creation and Management: To register your db22 Account, verify your identity, and maintain your account profile throughout the life of your membership on the Platform.
• Payment Processing: To process deposits and withdrawal requests in BDT via bKash, Nagad, Rocket, Upay, and selected bank transfer services, and to maintain accurate financial transaction records.
• Identity Verification (KYC): To comply with our obligations under anti-money-laundering best practices by verifying that you are who you claim to be before processing large withdrawals or activating certain account features.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance via live chat and email, including responsible gaming support where requested.
• Platform Security: To detect, investigate, and prevent fraudulent activity, account takeovers, money laundering, and other prohibited conduct as described in the db22 Terms & Conditions.
• Service Improvement: To analyse aggregate usage patterns, improve game offerings, optimise the Platform experience for players in Bangladesh, and resolve technical issues.
• Responsible Gaming: To monitor gameplay patterns that may indicate problematic gambling behaviour and, where appropriate, proactively offer responsible gaming tools or support resources.
• Marketing Communications: Where you have provided explicit consent, to send you promotional offers, bonus notifications, and updates about events such as BPL, IPL, T20 World Cup, and seasonal promotions relevant to Bangladesh. You may withdraw this consent at any time via your account settings or by contacting support.
• Legal Compliance: To fulfil db22's obligations under applicable laws, including responding to lawful requests from regulatory or law enforcement authorities.

db22 processes your personal data on the following legal bases, depending on the specific purpose for which the data is being used:

• Contractual Necessity: Processing that is necessary to perform our contract with you — primarily the creation and management of your db22 Account, and the execution of deposit and withdrawal transactions.
• Legal Obligation: Processing that db22 is required to carry out in order to comply with applicable legal obligations, including identity verification and financial record-keeping requirements.
• Legitimate Interests: Processing that is necessary for db22's legitimate business interests, including Platform security, fraud prevention, and service improvement, provided those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — in particular, the sending of direct marketing communications. Where consent is the legal basis, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

db22 does not sell, rent, or trade your personal data to any third party. We share your personal data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

• Payment Processors: Your financial data (mobile wallet number, transaction amount) is shared with payment service providers such as bKash, Nagad, Rocket, and Upay solely for the purpose of processing your deposit or withdrawal request. These providers operate under their own privacy policies and are independent data controllers in respect of their own services.
• Game Software Providers: Certain technical and gameplay data may be shared with our licensed game software partners — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to the extent necessary for game delivery, RNG certification, and fair play monitoring. These providers are bound by data processing agreements with db22.
• Identity Verification Services: Where db22 uses third-party KYC verification technology to validate identity documents, the relevant verification data will be processed by that service provider under strict confidentiality and data protection obligations.
• Legal and Regulatory Authorities: db22 may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of db22, its players, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of db22's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to this Privacy Policy that may result from it.

The db22 Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to remember your preferences, and to gather aggregate analytical data about how the Platform is used. The categories of cookies used by db22 are as follows:

• Strictly Necessary Cookies: These cookies are essential for the Platform to operate and cannot be disabled. They include session cookies that maintain your login state, security tokens that protect against cross-site request forgery, and cookies that store your language and currency preferences.
• Analytical Cookies: These cookies collect anonymous, aggregated data about how players navigate and use the Platform — including which pages are most visited and where users exit the Platform. This data helps db22 identify areas for improvement. These cookies do not identify you personally.
• Functional Cookies: These cookies remember choices you make on the Platform (such as your preferred game categories or responsible gaming settings) to provide a more personalised experience during your session.
• Marketing Cookies: Where you have provided consent to receive marketing communications, db22 may use cookies to track whether you have opened or interacted with promotional messages, enabling us to refine the relevance of future communications. You may withdraw this consent at any time.

You may control the use of non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the db22 Platform, including your ability to remain logged in during a session.

db22 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and financial record-keeping obligations. The following retention periods apply as general guidelines:

Following the expiry of the applicable retention period, db22 will securely delete or anonymise your personal data in a manner that prevents its reconstruction. Where anonymisation is applied, the resulting data may be retained and used for aggregate statistical analysis without restriction, as it no longer constitutes personal data.

db22 takes the security of your personal data seriously and maintains a comprehensive set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, disclosure, alteration, or destruction.

• Encryption in Transit: All data transmitted between your device and the db22 Platform is encrypted using TLS (Transport Layer Security) protocols. Our SSL certificate ensures that your login credentials, payment details, and personal information are protected during transmission.
• Encryption at Rest: Sensitive personal data stored in db22's databases — including financial records and identity verification data — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within db22's internal systems is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• OTP Verification: db22 uses one-time password (OTP) verification sent to your registered Bangladeshi mobile number as an additional layer of authentication to protect your account from unauthorised access.
• Intrusion Detection: db22 maintains automated intrusion detection systems that monitor the Platform for anomalous access patterns, potential security breaches, and suspicious activity in real time.
• Security Reviews: db22 conducts periodic internal and third-party security assessments to identify and remediate vulnerabilities in our systems and data handling processes.

While db22 employs robust security measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, db22 will notify affected Players without undue delay and take all reasonable steps to contain and remediate the breach.

As a player on the db22 Platform, you have the following rights in respect of the personal data we hold about you. To exercise any of these rights, please contact the db22 support team using the details provided in Section 14. db22 will respond to all valid rights requests within a reasonable timeframe.

• Right of Access: You have the right to request a copy of the personal data that db22 holds about you, together with information about how that data is processed, the purposes for which it is held, and how long it will be retained.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update certain account information directly through your db22 account settings.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and consent is the sole legal basis), or where you object to processing and db22 has no overriding legitimate grounds. Please note that this right is subject to legal retention obligations — db22 may be required to retain certain data even following an erasure request.
• Right to Restriction of Processing: You have the right to request that db22 restricts the processing of your personal data in certain circumstances, such as while the accuracy of the data is being contested or while an objection to processing is under consideration.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on db22's legitimate interests. db22 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where db22 processes your personal data on the basis of your consent (for example, for direct marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.

The db22 Platform is strictly intended for adults aged 21 years and above. db22 does not knowingly collect, process, or retain personal data from any individual under the age of 21. Registration on the Platform is prohibited for minors, and db22 takes active steps to verify the age of all registered players as part of its KYC process.

If db22 becomes aware or has reason to believe that personal data has been collected from an individual under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe a minor may be accessing the db22 Platform via your device, we strongly recommend implementing parental control software to restrict access to gambling platforms.

If you are a parent or guardian and believe that your child has registered an account on db22, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action without delay.

The db22 Platform may from time to time contain references to third-party services, payment providers (such as bKash, Nagad, Rocket, and Upay), or game software providers. If you navigate to any third-party website or service from the db22 Platform, please note that those third parties operate under their own privacy policies and terms of service, for which db22 accepts no responsibility.

db22 encourages you to review the privacy policies of any third-party service providers you interact with in connection with your use of the Platform. The presence of a reference to a third-party service on the db22 Platform does not constitute an endorsement of that third party's privacy practices.

db22 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, operational requirements, or applicable legal obligations. When material changes are made to this Policy, db22 will publish the updated version on this page with a revised effective date, and will notify registered Players via their registered mobile number or email address where the changes are significant enough to warrant direct notification.

Your continued use of the db22 Platform following the publication of an updated Privacy Policy constitutes your acknowledgment of the revised terms. We encourage you to review this Policy periodically to stay informed about how db22 protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which db22 processes your personal data, please contact our privacy and support team through the following channels:

• Privacy Support Email: [email protected] (plain text only — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week, via the live chat feature accessible after logging in to your db22 Account.
• Response Time: db22 aims to acknowledge all privacy-related enquiries within 24 hours Bangladesh Standard Time (BST, UTC+6), and to provide a full response within 30 calendar days of receipt.

When contacting us about a privacy matter, please include your full registered name, your registered Bangladeshi mobile number, and a clear description of your enquiry or the right you wish to exercise. This will help us locate your account records and respond efficiently.