Privacy Policy

Introduction

This Privacy Policy applies to all personal data collected by dbok ("dbok", "we", "us", "our") through the dbok website at https://dbok.bio, its subdomains, its mobile-optimised interfaces, and any associated platforms, applications, or communication channels through which dbok provides services to players and visitors (collectively, the "Platform").

dbok operates as an online casino and sports betting platform serving players in Bangladesh and other eligible markets. As part of delivering our services — including cricket betting, live casino games, slots, fishing games, and payment processing in Bangladeshi Taka (BDT) — we necessarily collect and process personal information about you. This Privacy Policy explains what that information is, how it is used, how long it is kept, and what rights you hold with respect to your personal data.

By registering for a dbok account, accessing the Platform, or otherwise engaging with our services, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy. If you do not agree to these practices, you must not use the dbok Platform.

This Privacy Policy should be read alongside dbok's Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference and form part of your overall agreement with dbok.

Data We Collect

dbok collects several categories of personal data in connection with your use of the Platform. The specific data collected depends on the nature of your interaction with dbok, including whether you are a registered player, a visitor browsing the site, or a person contacting our support team.

dbok does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information. If any such data is inadvertently shared with us through support communications, it will be deleted as promptly as practicable.

How We Collect Your Data

dbok collects personal data through the following primary channels:

• Direct Submission: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, respond to a promotion, or otherwise directly enter information into the Platform.
• Automated Technologies: When you browse the Platform, our servers automatically collect technical and usage data including your IP address, device identifiers, browser information, and behavioural data through cookies, web beacons, and server logs. See Section 7 for detailed cookie information.
• Third-Party Payment Providers: When you transact via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank, we receive transaction confirmation data and the payment method identifier associated with your transaction. We do not receive your full payment credentials from these providers.
• Identity Verification Partners: Where dbok uses third-party KYC or identity verification services to assist with document verification, those services may return verification status and identity match scores to dbok.
• Fraud Prevention Services: dbok works with third-party fraud detection and anti-money laundering (AML) services that may provide risk signals based on publicly available data, device fingerprinting, and behavioural analysis.
• Game Software Providers: Providers such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe may return session data, game outcomes, and RNG logs to dbok for record-keeping and dispute resolution purposes.

Legal Basis for Processing

dbok processes your personal data only where a valid legal basis exists for doing so. The legal bases on which dbok relies are as follows:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and dbok (i.e., the Terms & Conditions). This covers registration, account management, transaction processing, game delivery, and customer support.
• Legal Obligation: Processing is necessary for dbok to comply with applicable legal obligations, including KYC requirements, anti-money laundering (AML) regulations, and fraud prevention duties.
• Legitimate Interests: dbok processes certain data on the basis of legitimate interests, including improving the Platform, detecting and preventing fraud, conducting responsible gaming monitoring, and sending service-related communications. Where we rely on legitimate interests, we have assessed that our interests do not override your fundamental rights and freedoms.
• Consent: Where dbok relies on your consent — for example, to send you promotional communications — you may withdraw that consent at any time by contacting support at [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

How We Use Your Data

dbok uses the personal data it collects for the following purposes:

• Account Management: Creating, verifying, and managing your dbok player account, including processing login credentials, account preferences, and account security settings.
• KYC & Identity Verification: Verifying that you meet the minimum age requirement of 18 years, confirming your identity to comply with applicable regulatory obligations, and preventing the use of the Platform by ineligible or prohibited persons.
• Transaction Processing: Processing deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and partner banks, maintaining accurate transaction records, and resolving payment disputes.
• Game and Betting Services: Delivering cricket betting, live casino, slots, fishing games, and other gaming products, including logging bet history, game session data, and RNG outcomes for audit and dispute purposes.
• Bonus and Promotions Administration: Determining eligibility for welcome bonuses, deposit match offers, cashback promotions, and seasonal promotions (e.g., Pohela Boishakh, Eid, IPL season promotions), and monitoring compliance with wagering requirements.
• Fraud Prevention and Security: Detecting and investigating suspicious account activity, preventing multi-account abuse, monitoring for money laundering indicators, and protecting the integrity of the Platform.
• Responsible Gaming: Monitoring player behaviour for indicators of problem gambling, applying deposit limits and self-exclusion orders requested by players, and fulfilling dbok's responsible gaming obligations. See our Responsible Gaming page for further details.
• Customer Support: Responding to support enquiries, resolving account disputes, processing complaints, and maintaining records of support interactions.
• Platform Improvement: Analysing usage data and player behaviour to improve the functionality, content, and performance of the dbok Platform.
• Marketing Communications: Where you have provided consent, sending promotional emails, SMS notifications, or in-platform messages about bonuses, new games, and upcoming events. You may opt out at any time.
• Legal Compliance: Maintaining records as required by applicable law, responding to lawful requests from regulatory authorities or law enforcement agencies, and enforcing dbok's legal rights.

Sharing Your Data

dbok may share your personal data with the following categories of recipients where necessary and permitted under applicable law:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other payment partners to the extent necessary to process your deposits and withdrawals. These providers receive only the minimum data required to complete the transaction.
• Game Software Providers: Providers including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe receive session identifiers and anonymised player IDs to deliver game services. These providers are bound by strict data processing agreements with dbok.
• KYC and Identity Verification Services: Third-party identity verification partners that assist dbok in conducting document checks and age verification as part of the KYC process.
• Fraud Detection and AML Services: Third-party risk management and anti-money laundering service providers that assist dbok in meeting its compliance obligations.
• Analytics Providers: Providers of web analytics services that help dbok understand Platform usage patterns. Where analytics tools set cookies or collect technical data, this is described further in Section 7.
• Legal and Regulatory Authorities: Law enforcement agencies, regulatory bodies, or courts where dbok is legally required to disclose information in response to a lawful request, order, or subpoena. dbok will notify you of such disclosure where legally permitted to do so.
• Professional Advisers: Lawyers, accountants, auditors, and insurers engaged by dbok in connection with the operation of its business, subject to professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of dbok's assets, personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any material change to this Privacy Policy that results from it.

All third parties with whom dbok shares personal data are required to process that data in accordance with applicable data protection law and are prohibited from using it for any purpose other than the specific purpose for which it was shared.

Cookies & Tracking Technologies

dbok uses cookies and similar tracking technologies on the Platform to provide core functionality, remember your preferences, measure Platform performance, and support fraud prevention. A cookie is a small text file placed on your device when you visit a website. The following categories of cookies are used on the dbok Platform:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function and cannot be switched off. They include session authentication cookies that keep you logged in to your account, security cookies that protect against cross-site request forgery, and cookies that remember items in any in-Platform queue. No consent is required for strictly necessary cookies.
• Performance and Analytics Cookies: These cookies collect information about how visitors use the Platform, such as which pages are most visited and whether users encounter error messages. The data collected is aggregated and anonymised where possible. These cookies help dbok improve the Platform experience.
• Functional Cookies: These cookies allow the Platform to remember choices you have made, such as your preferred language, display settings, or notification preferences, and provide enhanced, more personalised features.
• Targeting and Retargeting Cookies: Where you have consented to marketing communications, dbok may use cookies to record that you have visited the Platform and to support personalised promotional content. These cookies do not store directly identifiable information but work by uniquely identifying your browser and device.

In addition to cookies, dbok may use web beacons (also known as pixel tags or clear GIFs) in emails and on the Platform to measure the effectiveness of communications and to understand user behaviour. Web beacons do not store data on your device.

Data Retention

dbok retains personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory, and audit obligations. The following retention principles apply:

• Active Account Data: Personal data associated with an active dbok account is retained for the full duration of the account's existence and for a defined period following account closure.
• KYC and Identity Documents: Copies of identity verification documents are retained for the period required under applicable anti-money laundering regulations, which may extend for a number of years following account closure or the last transaction date.
• Financial Transaction Records: Deposit, withdrawal, and betting transaction records are retained for a minimum period in accordance with applicable financial record-keeping obligations.
• Support Communications: Customer support tickets and correspondence are retained for a period sufficient to resolve disputes and to maintain a complaint resolution record.
• Closed Accounts — Fraud or AML Cases: Where an account is closed due to confirmed or suspected fraud, money laundering, or other serious misconduct, associated data may be retained for an extended period as required by law or for the purpose of ongoing investigation.
• Marketing Data: Where you have consented to marketing communications and subsequently withdraw consent or request deletion of marketing-related data, dbok will suppress your contact details from marketing lists within a reasonable period.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identified or identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

Data Security

dbok implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the dbok Platform is encrypted using industry-standard SSL/TLS protocols. You can verify this by the padlock icon in your browser's address bar when visiting dbok.bio.
• Encrypted Data Storage: Sensitive personal data, including passwords and financial identifiers, is stored using strong encryption algorithms. Passwords are hashed and salted and are never stored in plaintext.
• Access Controls: Access to personal data within dbok's systems is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate operational need may access player data, and all access is logged and audited.
• Firewall and Intrusion Detection: The dbok Platform is protected by enterprise-grade firewall systems and continuous intrusion detection and prevention services.
• Two-Factor Authentication (Internal): dbok staff who access player data are required to authenticate using multi-factor authentication.
• Regular Security Reviews: dbok conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities in the Platform.

Your Rights

dbok respects your rights in relation to your personal data. Depending on applicable law, you may be entitled to exercise the following rights:

• Right of Access: You have the right to request a copy of the personal data dbok holds about you. dbok will provide this information within a reasonable period of your verified request.
• Right to Rectification: If any personal data held by dbok is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account information directly through your account settings panel; for other corrections, contact support.
• Right to Erasure: In certain circumstances, you have the right to request that dbok delete your personal data. This right is not absolute — dbok may be required to retain certain data to comply with legal obligations or to defend legal claims even after an account is closed.
• Right to Restriction of Processing: In certain circumstances, you have the right to request that dbok restrict the processing of your personal data rather than deleting it.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you have the right to receive personal data you have provided to dbok in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to dbok's processing of your personal data where that processing is based on legitimate interests or is carried out for direct marketing purposes. Where you object to direct marketing, dbok will cease marketing processing without requiring justification.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of the above rights, please contact dbok's privacy team at [email protected] with the subject line "Privacy Rights Request" and include your registered username and a description of the right you wish to exercise. dbok will verify your identity before processing any request and will respond within a reasonable timeframe.

Children's Privacy

The dbok Platform is strictly intended for adults aged 18 years and above. dbok does not knowingly collect personal data from persons under the age of 18. The Platform employs age verification measures as part of the KYC process to enforce this restriction.

If dbok becomes aware that personal data has been collected from a person under the age of 18, that data will be deleted immediately and the associated account will be permanently closed. Any funds held in an underage account may be forfeited in accordance with dbok's Terms & Conditions.

If you are a parent or guardian and believe that your child may have created a dbok account or provided personal data to dbok, please contact us immediately at [email protected]. dbok will investigate and take appropriate action without delay.

Third-Party Links

The dbok Platform does not contain links to third-party websites as a general practice. Where any third-party service provider's interface is accessed through the Platform (for example, a payment gateway for bKash or Nagad transactions), that provider's own privacy policy governs the data they collect and process in connection with that interaction. dbok is not responsible for the data practices of third-party service providers beyond the contractual data processing obligations imposed on them by dbok.

dbok recommends that players review the privacy policies of any third-party payment service providers they use in connection with their dbok account, including bKash, Nagad, Rocket, Upay, and partner banks.

Updates to This Privacy Policy

dbok reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, dbok will notify registered players by displaying a notice on the Platform or by sending a notification to the email address associated with the player's account. The "Last Updated" date at the top of this page will always reflect the most recent revision.

Your continued use of the dbok Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Privacy Policy, you must discontinue use of the Platform and may request account closure as described in dbok's Terms & Conditions. dbok recommends that players review this Privacy Policy periodically to remain informed of any changes.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by dbok, please contact our privacy team using the details below:

When contacting the dbok privacy team, please include your registered username and a clear description of your enquiry or request. Do not include your full password or one-time authentication codes in any correspondence with dbok. Identity verification may be required before dbok can process certain privacy rights requests.