dbt66 Privacy Policy

Our Data Practices at a Glance

2. How We Use Your Information

dbt66 uses personal data only for the purposes described in this Policy. We do not use data for purposes incompatible with those listed below without first obtaining your consent or as otherwise required by law.

• 2.1Account management: to create, maintain, and administer your dbt66 account, verify your identity, and authenticate your login sessions securely.
• 2.2Payment processing: to process deposits, withdrawals, and refunds via bKash, Nagad, Rocket, Upay, and bank transfer, and to maintain accurate financial records for each account.
• 2.3Regulatory compliance: to fulfil KYC, anti-money laundering (AML), and responsible gaming obligations imposed by applicable law, which may require retaining records of identity, transactions, and gaming activity.
• 2.4Platform security and fraud prevention: to monitor account activity for suspicious behaviour, detect and prevent fraudulent transactions, identify unauthorised access attempts, and protect the integrity of the platform for all users.
• 2.5Customer support: to respond to your enquiries, process account-related requests, investigate complaints, and resolve disputes in a timely and documented manner.
• 2.6Service improvement and responsible gaming: to analyse aggregated usage patterns for platform optimisation, and to identify and assist users who may be exhibiting signs of problematic gambling behaviour through responsible gaming monitoring.

4. Payment Data and Financial Information

Financial data is among the most sensitive personal data that dbt66 handles. We apply heightened security measures to the storage and transmission of all payment-related information and restrict access to this data on a strict need-to-know basis.

• 4.1Mobile wallet numbers (bKash, Nagad, Rocket, Upay) are stored in encrypted form and are used solely to process transactions initiated by the registered account holder. They are never displayed in full on the platform interface.
• 4.2All financial transaction records are retained for a minimum of 5 years in accordance with standard financial record-keeping requirements. These records may be accessed in the course of regulatory audits or legal proceedings.
• 4.3dbt66 does not store full card numbers or CVV codes. Where bank card payments are facilitated through a third-party payment gateway, the gateway handles and stores card data in compliance with applicable payment security standards. dbt66 receives only a transaction confirmation token.

6. Data Security

dbt66 implements technical and organisational security measures proportionate to the sensitivity of the personal data we process. While no online platform can guarantee absolute security, we take the following measures to protect your data against unauthorised access, loss, or disclosure.

• 6.1All data transmitted between your device and dbt66 servers is protected by SSL/TLS encryption. Payment data and identity documents are stored using encryption at rest. Access to personal data is restricted to authorised personnel on a strict need-to-know basis.
• 6.2dbt66 employs automated monitoring systems to detect anomalous login behaviour, unusual transaction patterns, and suspected account takeover activity. Suspicious activity triggers an immediate security review and, where appropriate, temporary account restriction pending investigation.
• 6.3In the event of a data breach that poses a material risk to your rights, dbt66 will notify affected users without undue delay and will take immediate steps to contain and remediate the breach. We will document all breaches internally and cooperate fully with any regulatory investigation.

8. Your Data Rights

As a user of dbt66, you have specific rights in relation to your personal data. To exercise any of the rights described below, please contact [email protected] with your full name and registered mobile number. We will respond within 14 business days.

• Right of Access You may request a copy of the personal data dbt66 holds about you, including information on how it is used and with whom it has been shared.
• Right to Rectification If you believe that personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Certain changes (e.g. name changes) may require supporting documentation.
• Right to Erasure You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected. This right is subject to legal retention obligations — data required by law to be retained (e.g. transaction records) cannot be deleted on request.
• Right to Restriction You may request that processing of your personal data be restricted in certain circumstances — for example, while you dispute the accuracy of data we hold, or while a deletion request is under review.
• Right to Object You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests and you believe your individual rights outweigh those interests.

10. Policy Changes and How to Contact Us

dbt66 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform services. The date of the most recent revision is displayed at the top of this page. Your continued use of the platform following any revision constitutes acceptance of the updated Policy. Where changes are material, we will make reasonable efforts to notify registered users via their registered contact details.

For all privacy-related enquiries, data subject access requests, or complaints about how your personal data is handled, please contact the dbt66 support team. All enquiries are treated confidentially and handled in Bangladesh Standard Time (BST, UTC+6). We aim to acknowledge all privacy requests within 3 business days and to provide a substantive response within 14 business days.