dbje Privacy Policy

This Privacy Policy is issued by dbje ("we", "us", "our"), the operator of the online betting and casino platform accessible at dbje.io. dbje is a platform serving players in Bangladesh and provides services including sports betting (with a primary focus on cricket), live dealer casino games, and slot games.

For the purposes of this Privacy Policy, dbje acts as the data controller in respect of personal data collected from players and website visitors. As data controller, dbje is responsible for determining the purposes and means of processing your personal information, and for ensuring that processing is conducted lawfully, fairly, and transparently.

This Privacy Policy applies to all personal data collected through the dbje.io website, any associated mobile-optimised web interface, and all communication channels operated by dbje including email and live chat support.

dbje collects the following categories of personal data from players and, in some cases, from website visitors who have not yet registered an account:

dbje does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is strictly required for identity verification purposes.

dbje collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing identity verification, making deposits or withdrawals, setting responsible gaming preferences, or contacting our support team.
• Automated technical collection: As you navigate and interact with the dbje platform, certain technical and usage data is collected automatically through cookies, server logs, and similar tracking technologies. See Section 6 for details.
• Third-party payment providers: When you deposit or withdraw funds via bKash, Nagad, Rocket, or Upay, those providers may share transaction confirmation data with dbje to reconcile your account balance. dbje does not receive your full payment credentials from these providers.
• Fraud and security partners: dbje may receive information from third-party fraud-detection services that help identify suspicious or prohibited activity on the platform.
• Identity verification services: Where KYC (Know Your Customer) checks are required, dbje may use a third-party verification service to confirm the authenticity of documents you submit.

Every instance of personal data processing at dbje is conducted on a recognised legal basis. The primary legal bases on which we rely are as follows:

• Contractual necessity: Processing that is necessary to perform the contract between you and dbje — specifically, operating your account, processing deposits and withdrawals, settling bets, and delivering the game services you have requested.
• Legal obligation: Processing required to comply with applicable laws, including anti-money-laundering (AML) obligations, identity verification requirements, and financial record-keeping mandates.
• Legitimate interests: Processing that serves dbje's legitimate business interests in operating a secure, fair, and commercially viable platform — including fraud detection, security monitoring, abuse prevention, and platform analytics — provided that such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we seek to send you optional marketing communications or to deploy non-essential cookies, we will obtain your prior, freely given, and informed consent. You may withdraw consent at any time without detriment to your account.

dbje uses your personal data for the following purposes, each of which is underpinned by one of the legal bases described in Section 4:

• Creating, maintaining, and administering your dbje player account.
• Processing deposits, withdrawals, and transaction records in BDT via bKash, Nagad, Rocket, and Upay.
• Verifying your identity and age (21+) in compliance with our responsible gaming and AML obligations.
• Detecting and preventing fraudulent activity, account abuse, bonus misuse, and collusion.
• Delivering customer support services, including responding to queries and resolving disputes.
• Providing and improving the dbje platform, including game availability, website performance, and user experience optimisation.
• Enforcing our Terms and Conditions and other applicable policies.
• Administering responsible gaming tools including deposit limits, cool-off periods, and self-exclusion requests.
• Sending you essential transactional communications, including deposit confirmations, withdrawal updates, and security alerts.
• Where you have given consent, sending optional promotional communications about bonuses, new games, or seasonal offers relevant to players in Bangladesh.

dbje does not use automated decision-making processes (including profiling) that produce legal or similarly significant effects on players, without human review being available.

dbje uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device when you visit dbje.io. We use the following categories of cookies:

• Strictly necessary cookies: Essential to the operation of the platform. These include session cookies that maintain your logged-in state and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: Allow the platform to remember your preferences, such as your preferred language settings and responsible gaming configurations, so that you do not need to reconfigure them on each visit.
• Analytics cookies: Used to understand how players navigate and use the dbje platform. Analytics data is aggregated and anonymised where possible. This helps us identify underperforming pages, improve load times, and optimise the betting and gaming experience.
• Marketing cookies: Only placed with your prior consent. These cookies track interactions with any promotional content to help dbje assess the effectiveness of campaigns targeting players in Dhaka, Chittagong, Sylhet, and other cities across Bangladesh.

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the dbje platform. For analytics and marketing cookies, you may opt out at any time by adjusting your preferences on the platform's cookie management interface.

dbje does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Personal data is shared externally only in the following limited and controlled circumstances:

• Payment processing partners: bKash, Nagad, Rocket, and Upay receive the minimum data necessary to process your financial transactions. These providers operate under their own privacy policies and applicable payment industry standards.
• Identity verification providers: Where KYC checks are required, we share identity documents with a certified third-party verification service. All such providers are contractually bound to process data solely for verification purposes and to maintain equivalent data security standards to those applied by dbje.
• Fraud prevention services: Anonymised or pseudonymised transaction and behavioural data may be shared with fraud-detection partners to help identify industry-wide patterns of abuse.
• Game technology providers: Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe may receive session and gameplay data necessary to deliver their games within the dbje environment. These providers do not receive your identity or financial data.
• Legal and regulatory authorities: dbje will disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by applicable law, or where disclosure is necessary to protect the rights, property, or safety of dbje, its players, or the public.

All third parties with whom dbje shares personal data are required to maintain appropriate technical and organisational security measures and to process data only for the specific purposes for which it has been shared.

The dbje platform serves players primarily located in Bangladesh. Some of the third-party service providers we work with may process personal data in countries outside Bangladesh. Where such international transfers occur, dbje takes the following steps to ensure that your data remains protected:

• We only transfer personal data to countries or organisations that implement data protection standards that are substantially equivalent to those applied by dbje.
• Where transfers occur to providers in jurisdictions without equivalent data protection laws, we implement appropriate safeguards such as standard contractual clauses requiring those providers to protect your data to the same standard as if it remained within Bangladesh.
• We conduct due diligence on all third-party data processors before entering into data processing agreements with them, including assessment of their security certifications and privacy practices.

dbje retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the lifetime of your dbje account and for a period of five (5) years following permanent account closure, to meet anti-money-laundering record-keeping obligations.
• Transaction records: Financial transaction logs are retained for a minimum of seven (7) years from the date of the transaction, in line with financial record-keeping requirements.
• Identity verification documents: Retained for five (5) years from the date of verification or from the date of account closure, whichever is later.
• Support communications: Customer support chat logs and email correspondence are retained for three (3) years from the date of the interaction, unless the correspondence relates to an active dispute, in which case it is retained until the dispute is fully resolved.
• Marketing consent records: Retained for three (3) years from the date consent was given or withdrawn, to demonstrate compliance.
• Analytics and usage data: Aggregated, anonymised analytics data may be retained indefinitely as it no longer constitutes personal data once anonymisation is applied.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. dbje does not retain data beyond the periods set out above unless required to do so by a binding legal obligation or ongoing regulatory investigation.

As a player and data subject, you hold the following rights in relation to your personal data held by dbje. To exercise any of these rights, contact us at [email protected] with your account username and a description of your request. We aim to respond to all data rights requests within 30 days.

• Right of access: You have the right to request a copy of the personal data dbje holds about you, together with information about how it is processed and shared.
• Right to rectification: If any personal data held by dbje is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to erasure: In certain circumstances, you have the right to request that dbje delete your personal data. This right is subject to exceptions where retention is required by law or for the establishment, exercise, or defence of legal claims.
• Right to restrict processing: You may request that dbje limits its processing of your personal data in certain situations, for example while the accuracy of data you have contested is being verified.
• Right to data portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request that we provide your personal data in a structured, machine-readable format.
• Right to object: You have the right to object to processing of your personal data where that processing is based on dbje's legitimate interests. dbje will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.

The dbje platform is strictly intended for adults aged 21 years and above. dbje does not knowingly collect personal data from individuals under the age of 21. Our registration process requires players to confirm their date of birth, and we conduct age verification checks on accounts where eligibility is in doubt.

If dbje becomes aware that personal data has been collected from a person under the age of 21 without parental or guardian consent, that data will be deleted immediately and the associated account will be permanently closed. Any funds associated with such an account will be handled in accordance with our Terms and Conditions.

If you are a parent or guardian and you believe that a minor in your household has registered on the dbje platform, please contact us immediately at [email protected] so that we can take appropriate action.

dbje implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures in place include:

• SSL/TLS encryption: All data transmitted between your device and the dbje platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Any attempt to intercept data in transit will yield only unreadable, encrypted content.
• Access controls: Personal data is accessible internally only to dbje staff and systems that have a legitimate operational need. Access is governed by role-based permissions and is subject to regular review.
• Password security: Account passwords are stored using one-way cryptographic hashing. dbje staff cannot retrieve or read your password — only you know it.
• Fraud monitoring: dbje operates continuous automated monitoring systems that flag unusual account activity, login anomalies, and suspicious transaction patterns for human review.
• Regular security assessments: dbje conducts periodic internal security reviews and vulnerability assessments to identify and address potential weaknesses in the platform infrastructure.
• Incident response: In the event of a data security incident that is likely to result in a high risk to your rights and freedoms, dbje will notify affected players without undue delay and will take immediate remedial action.

While dbje applies robust security measures, no online platform can guarantee absolute security against all possible threats. You also play a role in protecting your account — use a strong, unique password for dbje, do not share your credentials, and notify us immediately at [email protected] if you suspect unauthorised access to your account.

dbje reserves the right to update and amend this Privacy Policy at any time, to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made, we will publish the updated Privacy Policy at dbje.io/privacy-policy and update the "Effective Date" shown at the top of this document.

Where changes are significant and affect the way in which we process your personal data, we will endeavour to notify registered players via the platform or by email prior to the changes taking effect. Your continued use of the dbje platform following publication of any revised Privacy Policy constitutes acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically to stay informed about how dbje protects your information. The most current version will always be accessible at dbje.io/privacy-policy.

If you have any questions, concerns, or complaints about this Privacy Policy or about the way in which dbje handles your personal data, please contact us using the details below. We take all privacy concerns seriously and are committed to resolving them promptly and fairly.

Data Enquiries & Privacy Requests:
[email protected]

Please include your dbje account username and a clear description of your enquiry or request. We aim to acknowledge all privacy-related communications within 2 business days and to provide a substantive response within 30 calendar days. For complex requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

If you are not satisfied with our response to your privacy complaint, or if you believe that dbje's processing of your personal data is unlawful, you have the right to escalate your complaint to the competent data protection authority or regulatory body applicable in your jurisdiction. dbje will cooperate fully with any such authority in the investigation of complaints.