Your Privacy Matters
to dbdaje

When you register for, access, or use the dbdaje platform, we collect certain categories of personal information. This section describes each category, explains how it is gathered, and states the lawful basis on which dbdaje processes it. We are committed to collecting only what we genuinely need.

1.1 Registration and Identity Information

When you create a dbdaje account, we collect the following information directly from you:

• Full legal name (as it appears on your official identity document);
• Date of birth (used to verify that you meet the 18+ age requirement);
• Residential address, including city, district, and postcode;
• Email address (used for account communications and security alerts);
• Mobile phone number (used for two-factor authentication and account recovery);
• Chosen username and encrypted password hash (we never store passwords in plain text).

1.2 Identity Verification (KYC) Documents

To comply with our anti-money laundering obligations and to confirm that all players are aged 18 or above, dbdaje may request copies of official identity documents. Accepted documents include a Bangladesh National Identity Card (NID), passport, or driving licence. We may also request proof of address such as a recent utility bill or bank statement issued within the preceding three months. These documents are processed by our secure KYC verification system and are retained only for the minimum period required by applicable law.

1.3 Financial and Transaction Information

To process deposits and withdrawals via payment methods including bKash, Nagad, Rocket, Upay, and bank transfer, dbdaje collects transaction-related information including the payment method used, the account identifier associated with that payment method (e.g., your registered bKash number), transaction amounts in BDT, transaction timestamps, and transaction reference numbers. dbdaje does not store full bank account numbers, card numbers, or mobile wallet PINs. Payment credentials are handled directly by the respective payment service providers under their own security protocols.

1.4 Platform Usage and Behavioural Data

When you interact with the dbdaje platform, our systems automatically collect technical and behavioural data including:

• IP address and approximate geographic location derived from it;
• Device type, operating system, and browser version;
• Pages visited, features accessed, time spent on each section;
• Game sessions played, including game type, bet amounts, and session duration;
• Sports betting activity, including markets viewed, bets placed, and odds at time of bet placement;
• Login timestamps, session durations, and logout events.

This data is used for platform optimisation, responsible gaming monitoring, fraud detection, and improving the overall quality of the dbdaje experience.

1.5 Communications Data

If you contact the dbdaje support team via email, live chat, or any other channel, we retain a record of that communication including the content of messages, timestamps, and any attachments you provide. This information is used to resolve your query and to maintain a record of customer service interactions for quality assurance purposes.

dbdaje does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. However, in order to operate the platform effectively and comply with our legal obligations, we do share certain categories of data with a limited set of trusted third parties. All third-party data sharing is governed by contractual data processing agreements that require recipients to maintain appropriate security standards and to use your data only for the specified purpose.

Categories of third parties with whom dbdaje may share your data:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, and banking partners receive transaction data necessary to process your deposits and withdrawals. Each provider processes this data under their own privacy policy and is independently responsible for the security of payment credentials within their systems.
• KYC and Identity Verification Partners: dbdaje works with specialist identity verification service providers to validate identity documents and confirm age eligibility. These partners receive only the document images and data necessary to perform verification and are contractually prohibited from using this data for any other purpose.
• Game Software Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session data necessary to deliver their games within the dbdaje platform. This may include a pseudonymous player identifier, game session data, and bet history. These providers do not receive your name, address, or payment information.
• Analytics and Security Providers: dbdaje uses third-party analytics and fraud detection services that process anonymised or pseudonymised usage data to help us improve platform performance and identify suspicious activity. These providers are not permitted to de-anonymise this data or use it for independent commercial purposes.
• Legal and Regulatory Authorities: dbdaje may be required by applicable law, court order, or regulatory directive to disclose personal data to law enforcement agencies or financial intelligence units. In all such cases, dbdaje will disclose only the minimum data required and, where legally permitted, will notify the affected player of the disclosure.

International Data Transfers: Some of dbdaje's technology partners and service providers may be based outside Bangladesh. Where personal data is transferred internationally, dbdaje ensures that appropriate safeguards are in place, including data processing agreements that incorporate recognised data protection standards. If you have specific questions about international transfers relating to your data, please contact [email protected].

Protecting your personal data from unauthorised access, disclosure, alteration, or destruction is one of dbdaje's foremost operational priorities. We employ a layered security architecture that combines technical, organisational, and procedural safeguards to maintain the integrity and confidentiality of all data we hold.

Technical Safeguards:

• TLS/SSL Encryption in Transit: All data transmitted between your device and dbdaje servers is encrypted using TLS 1.2 or higher. Our SSL certificate is maintained and renewed on a strict schedule to ensure continuous protection.
• Encryption at Rest: Sensitive personal data, including identity document images and KYC data, is encrypted at rest using AES-256 encryption within our secure data storage infrastructure.
• Password Security: User passwords are never stored in plain text. dbdaje uses industry-standard cryptographic hashing with salting to protect password data. Even in the event of a data breach, stored password hashes cannot be reversed to reveal plain-text passwords.
• Two-Factor Authentication (2FA): dbdaje strongly recommends that all players enable 2FA on their accounts. 2FA adds a critical second layer of verification to the login process, significantly reducing the risk of unauthorised account access.
• Intrusion Detection and Monitoring: Our infrastructure is monitored around the clock for signs of unauthorised access, unusual traffic patterns, and potential security incidents. Automated alerting systems notify our security team of anomalies in real time.

Organisational Safeguards:

• Access to personal data is restricted to dbdaje personnel and contractors who need it to perform their job functions, on a strict need-to-know basis;
• All personnel with access to personal data are trained on data protection obligations and bound by confidentiality agreements;
• Third-party service providers who process personal data on behalf of dbdaje are subject to due diligence assessments and are required to maintain security standards equivalent to our own.

Data Breach Response: In the event of a personal data breach that is likely to result in a risk to your rights, dbdaje will notify affected players without undue delay. Our breach response plan includes immediate containment, forensic investigation, and notification procedures. Players are encouraged to contact [email protected] immediately if they suspect their account has been compromised.