1. Data We Collect
1.1 dgb99 collects personal data through several channels: directly from you when you register an account, make a deposit, place a bet, contact support, or interact with promotional features; automatically through your use of the platform; and, in limited circumstances, from third-party payment processors and identity verification providers.
1a. Account & Identity Data
1.2 When you register a dgb99 account, we collect: your full legal name as it appears on a government-issued ID; date of birth (to verify the 18+ age requirement); email address; Bangladesh mobile number; and the password you choose (stored in hashed, non-reversible form — we never store your plain-text password).
1.3 For identity verification (KYC), we may collect copies of: your Bangladesh National Identity Card (NID) or passport; proof of address (utility bill or bank statement dated within 90 days); and proof of payment method (a screenshot or statement for your bKash, Nagad, Rocket, or bank account used on dgb99).
1b. Transaction & Financial Data
1.4 We record all deposit and withdrawal transactions, including the payment method used (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard), transaction amounts in Bangladeshi Taka (BDT), timestamps (Bangladesh Standard Time, UTC+6), and transaction reference numbers. We do not store full payment card numbers or full mobile wallet PINs — these are handled directly by the respective payment processors.
1c. Betting & Gaming Activity Data
1.5 We collect a complete record of your betting and gaming activity on dgb99. This includes: sports markets wagered on (e.g., BPL, IPL, T20 World Cup, EPL); bet amounts and outcomes; casino game sessions (e.g., live dealer tables, slot titles, virtual games); session durations; and any responsible gaming limits or self-exclusion periods you have set.
1d. Technical & Device Data
1.6 When you access dgb99, our servers automatically log: your IP address; device type (desktop, mobile, tablet); operating system and browser version; referral URL; pages visited within dgb99; and session timestamps. This technical data is used for security monitoring, fraud prevention, and platform performance optimisation.
2. How We Use Your Data
2.1 dgb99 processes personal data only for clearly defined, legitimate purposes. The table below summarises the primary purposes for which we use your data and the legal basis for each type of processing.
| Purpose | Data Used | Basis |
|---|---|---|
| Account creation & authentication | Name, email, mobile, password hash | Contract performance |
| Age & identity verification (KYC) | NID / passport, date of birth | Legal obligation, fair play |
| Processing deposits & withdrawals | Payment method, transaction records | Contract performance |
| Bet settlement & game history | Betting & gaming activity data | Contract performance |
| Fraud prevention & security | IP address, device data, activity patterns | Legitimate interest |
| Responsible gaming monitoring | Betting patterns, session data, limits set | Legal obligation, legitimate interest |
| Customer support communications | Email, mobile, account history | Contract performance |
| Promotional & bonus communications | Email, betting preferences | Consent (opt-in) |
| Platform analytics & improvement | Aggregated, anonymised usage data | Legitimate interest |
2.2 dgb99 will never use your personal data for purposes that are incompatible with those listed above without first obtaining your explicit consent or being required to do so by applicable law.
2.3 Where we rely on your consent as the legal basis for processing (e.g., for marketing emails about BPL promotions, Eid bonuses, or Pohela Boishakh offers), you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
3. Data Sharing & Disclosure
3.1 dgb99 does not sell, rent, or trade your personal information to any third party. We share data only in the specific, limited circumstances described in this section.
Payment Processors
3.2 To process your deposits and withdrawals, dgb99 shares the minimum necessary transaction data with your chosen payment provider — for example, your registered mobile number with bKash or Nagad, or your card details with Visa or Mastercard processors. Each payment partner operates under its own privacy policy and is contractually bound to use your data only for processing the specific transaction.
Identity Verification Partners
3.3 For KYC verification purposes, dgb99 may share identity documents (NID, passport, proof of address) with trusted third-party identity verification service providers. These providers are contractually obligated to process your data solely for identity verification and to maintain security standards consistent with our own.
Game Technology Providers
3.4 dgb99's casino and slots platform is powered by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised or pseudonymised session data necessary to deliver and certify their games. They do not receive your full name, NID, or payment details.
Legal & Compliance Disclosure
3.5 dgb99 may disclose your personal data to law enforcement agencies, regulatory bodies, or other authorised parties where we are legally compelled to do so, or where disclosure is necessary to prevent fraud, money laundering, or other serious criminal activity. We will notify you of such a disclosure where legally permitted to do so.
3.6 In the event that dgb99 undergoes a business transfer, merger, or acquisition, your personal data may be transferred to the successor entity as part of that transaction. You will be notified via the email address registered to your account before your data becomes subject to a different privacy policy.
4. Cookies & Tracking Technologies
4.1 dgb99 uses cookies and similar browser-based technologies to operate and improve the platform. A cookie is a small text file stored on your device by your browser when you visit dgb99. Cookies allow us to recognise your browser, maintain your session, and remember your preferences.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential | Session management, login authentication, security tokens, CSRF protection | Session / 24 hours |
| Functional | Language preference, odds format setting, responsible gaming limit display | 30 days |
| Performance | Anonymised page-load analytics, error logging, uptime monitoring | 90 days |
4.2 dgb99 does not use advertising cookies, social media tracking pixels, or cross-site behavioural profiling cookies. The cookies deployed on dgb99 are strictly limited to those necessary for the platform to function securely and efficiently.
4.3 You can control cookie behaviour through your browser settings. Note that disabling essential cookies will prevent you from logging in and using core platform features. Disabling functional or performance cookies will not prevent access but may affect your experience. Consult your browser's help documentation for instructions on managing cookies.
5. Data Retention
5.1 dgb99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and compliance obligations. The following standard retention periods apply:
- Active account data (name, email, mobile, betting history): retained for the lifetime of the account plus 5 years after account closure.
- KYC and identity documents (NID, passport, proof of address): retained for 5 years after account closure in line with standard anti-money-laundering record-keeping practices.
- Transaction records (deposit and withdrawal history): retained for 7 years from the date of each transaction.
- Customer support communications (live chat transcripts, emails): retained for 3 years from the date of the last interaction.
- Technical logs (IP address, device data, access logs): retained for 12 months from the date of collection, then automatically purged.
- Marketing consent records: retained until consent is withdrawn, plus 1 year thereafter as evidence of the consent record.
5.2 When a retention period expires, dgb99 either permanently deletes the data or anonymises it such that it can no longer be linked to any individual. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.
5.3 If you request deletion of your account and personal data under Section 7 (Your Privacy Rights), dgb99 will action the deletion within 30 days, subject to any overriding legal retention obligations described in clause 5.1 above. Where data must be retained for legal reasons, we will inform you of the specific obligation and the applicable retention period.
6. Security Measures
6.1 dgb99 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our key security controls include:
- Transport encryption: All data in transit between your device and dgb99 servers is protected by TLS 1.2 or higher (SSL encryption). Our HTTPS connection is indicated by the padlock symbol in your browser's address bar.
- Data-at-rest encryption: Sensitive personal data stored in dgb99 databases — including identity documents and payment references — is encrypted using AES-256 at rest.
- Password hashing: Account passwords are hashed using a one-way cryptographic algorithm (bcrypt). Even dgb99 staff cannot view your plain-text password.
- Two-factor authentication (2FA): Optional but strongly recommended. 2FA adds a second layer of protection via SMS OTP to your registered Bangladesh mobile number. Enable 2FA in your account security settings.
- Access controls: Access to personal data within dgb99 is restricted to authorised staff on a need-to-know basis. All staff with data access are subject to confidentiality obligations and periodic security training.
- Fraud monitoring: dgb99 operates 24/7 automated systems to detect unusual login patterns, suspicious transaction activity, and potential account takeover attempts.
- Penetration testing: The dgb99 platform undergoes regular security assessments to identify and remediate vulnerabilities before they can be exploited.
6.2 Security incident notification: In the event of a personal data breach that poses a risk to your rights and freedoms, dgb99 will notify affected players via the registered account email within 72 hours of becoming aware of the breach, where technically feasible to do so.
6.3 While dgb99 takes every reasonable precaution, no online system can be guaranteed to be 100% secure. You also play a role in keeping your account safe: never share your dgb99 password or OTP code with anyone, including individuals claiming to be dgb99 staff. dgb99 will never ask for your password via email, live chat, or phone.
7. Your Privacy Rights
7.1 As a dgb99 account holder, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at with your full name, registered email address, and a description of your request. We will respond within 10 business days.
Right of Access
7.2 You have the right to request a copy of all personal data that dgb99 holds about you. This is sometimes called a Subject Access Request (SAR). We will provide this information in a structured, commonly used electronic format (e.g., PDF or CSV) at no charge, unless the request is manifestly unfounded or excessive.
Right to Rectification
7.3 If any personal data we hold about you is inaccurate or incomplete, you have the right to request its correction. You can update basic account details (email address, mobile number) directly in your dgb99 account settings. For corrections to KYC documents or legal name, please contact support.
Right to Erasure
7.4 You have the right to request the deletion of your personal data where: (a) the data is no longer necessary for the purposes for which it was collected; (b) you withdraw consent and no other legal basis applies; or (c) the data has been unlawfully processed. This right is subject to overriding legal retention obligations described in Section 5.
Right to Restrict Processing
7.5 You may request that dgb99 restrict the processing of your data in specific circumstances — for example, while a dispute about the accuracy of your data is being resolved, or where you have objected to processing and we are assessing whether our legitimate interests override your objection.
Right to Data Portability
7.6 Where processing is based on your consent or a contract with you, and is carried out by automated means, you have the right to receive your personal data in a portable electronic format that allows you to transfer it to another service provider.
Right to Object
7.7 You have the right to object to dgb99 processing your data for direct marketing purposes at any time. You also have the right to object to processing based on our legitimate interests, in which case we will cease processing unless we can demonstrate compelling grounds that override your interests.
8. Policy Updates & Contact
8.1 dgb99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal requirements. Material changes will be communicated to registered players via the email address associated with their dgb99 account at least 7 days before the updated policy takes effect.
8.2 The most current version of this Privacy Policy is always available at dgb99.app/privacy-policy. The effective date at the top of this page indicates when the current version was last updated. Continued use of the dgb99 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms.
8.3 If you have any questions, concerns, or complaints regarding this Privacy Policy or the way dgb99 handles your personal data, please contact our support team:
- Email: (plain text — not a clickable link)
- Live Chat: Available 24/7 inside the dgb99 platform
- Response Time: Within 4 hours during Bangladesh Standard Time (UTC+6) business hours; within 24 hours at all other times
8.4 This Privacy Policy was last updated on 1 January 2026 and applies to all personal data processed by dgb99 in connection with the services available at dgb99.app. It supersedes all previous versions of the dgb99 Privacy Policy.