db44 Privacy Policy
At db44, protecting your personal data is a fundamental part of how we operate. This Privacy Policy explains precisely what information we collect from players in Bangladesh and beyond, why we collect it, how it is used and stored, who it may be shared with, and what rights you hold over your own data. We are committed to full transparency — no hidden data practices, no unexplained third-party sharing.
Table of Contents
1 Introduction & Scope
This Privacy Policy ("Policy") is issued by db44 ("db44", "we", "us", "our") and governs the collection, processing, storage, and sharing of personal data in connection with the db44 online casino and sports betting platform accessible at db44.io (the "Platform"). This Policy applies to all registered account holders, prospective players, and any individual who visits or interacts with the Platform, regardless of their location.
db44 operates as an internationally licensed offshore betting platform. Our primary market is Bangladesh, and a significant proportion of our registered player base is located in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. We are therefore mindful of the privacy expectations and data protection standards relevant to players in Bangladesh as well as international best practice standards including the General Data Protection Regulation (GDPR) principles, which we apply as a baseline across all jurisdictions we serve.
By registering an account, making a deposit, or continuing to use the db44 Platform following any update to this Policy, you acknowledge that you have read, understood, and agreed to the data practices described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform and may request account closure in accordance with our Terms & Conditions.
This Policy should be read alongside our Terms & Conditions and Responsible Gaming policy, both of which contain additional provisions relevant to your relationship with db44.
2 Data We Collect
db44 collects only the personal data necessary to deliver, secure, and continuously improve the Platform and associated services. The categories of personal data we may hold about you are set out in the table below.
| Data Category | Specific Data Points | Mandatory? |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, National ID Card number, passport number or driving licence number (for KYC purposes) | Yes — for account verification |
| Contact Data | Email address, mobile phone number, residential address (street, city, district, postal code, country) | Yes — for account registration and communications |
| Financial Data | Payment method type (bKash, Nagad, Rocket, Upay, bank transfer), mobile wallet account numbers, bank account details provided for withdrawals, transaction history, deposit and withdrawal amounts in BDT | Yes — for payment processing |
| Account & Activity Data | Username, encrypted password hash, betting history, game session logs, bonus claim records, wagering activity, session timestamps, login history | Yes — generated automatically |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, time zone, referring URL, Platform navigation data | Yes — collected automatically |
| KYC Documentation | Scanned or photographed copies of government-issued identity documents and proof-of-address documents submitted during the verification process | Yes — required before withdrawals |
| Communications Data | Content of live chat sessions with support staff, email correspondence with [email protected], any feedback or complaint submissions | No — only where you contact us |
| Preference Data | Responsible gaming settings (deposit limits, session reminders, self-exclusion status), promotional opt-in preferences, language and display preferences | No — set by you optionally |
We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data (beyond identity document photographs required for KYC), or data concerning health — except where a player voluntarily discloses health-related information in the context of a responsible gaming self-exclusion request, in which case it is handled with the highest level of confidentiality and used solely to process that request.
3 How We Collect Data
db44 collects personal data through the following channels:
- Direct submission by you: When you register an account, complete KYC verification, make a deposit or withdrawal request, contact our support team, or update your account profile settings.
- Automated technical collection: When you visit or interact with the Platform, our servers automatically log technical data including IP address, device identifiers, browser type, session duration, and page interaction data via cookies and similar technologies (see Section 7).
- Payment service providers: When you initiate a financial transaction via bKash, Nagad, Rocket, Upay, or a bank transfer, we receive confirmation data from the relevant payment gateway including transaction reference numbers, payment amounts, and the sender account identifier. We do not receive or store your full mobile banking PIN or internet banking credentials.
- Identity verification partners: Where db44 uses third-party KYC or document verification services, those services may return structured identity data (name match results, document validity status) which is recorded against your account.
- Fraud and security monitoring tools: Automated systems continuously analyse account and transaction activity to detect patterns indicative of fraud, money laundering, bonus abuse, or unauthorised access. These systems generate internal risk scores and flags that form part of your account record.
- Game providers: Third-party game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) may provide db44 with aggregated game session data relevant to your account, including round identifiers and outcome logs, for dispute resolution purposes.
4 Purposes of Processing
db44 processes your personal data only for clearly defined, legitimate purposes. The table below maps each processing purpose to the data categories involved.
| Processing Purpose | Data Categories Used |
|---|---|
| Account registration and authentication | Identity, Contact, Technical |
| KYC / age and identity verification | Identity, KYC Documentation |
| Processing deposits and withdrawals | Financial, Identity |
| Anti-money laundering (AML) monitoring | Financial, Identity, Account & Activity |
| Fraud prevention and platform security | Technical, Financial, Account & Activity |
| Customer support and dispute resolution | Identity, Account & Activity, Communications |
| Responsible gaming tools and self-exclusion | Identity, Account & Activity, Preference |
| Bonus and promotional administration | Account & Activity, Financial, Preference |
| Platform analytics and service improvement | Technical, Account & Activity (aggregated/anonymised) |
| Marketing communications (where opted in) | Contact, Preference |
| Legal and regulatory compliance | All categories as required |
db44 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We do not use your betting history or financial data to build external commercial profiles for sale to data brokers or advertising networks.
5 Legal Basis for Processing
Where international data protection principles apply, db44 processes personal data under one or more of the following legal bases:
- Contractual necessity: Processing required to fulfil our contractual obligations to you as a registered player — including account management, payment processing, KYC verification, and providing access to games and betting markets.
- Legal obligation: Processing necessary to comply with applicable legal and regulatory requirements, including anti-money laundering obligations, know-your-customer requirements, and fraud reporting duties.
- Legitimate interests: Processing carried out for db44's legitimate business interests, including fraud prevention, platform security monitoring, and improving service quality — provided these interests are not overridden by your fundamental rights and freedoms.
- Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw consent for marketing at any time by updating your account preferences or contacting [email protected].
6 Data Sharing & Disclosure
6.1 Service Providers. db44 shares personal data with carefully selected third-party service providers who process data on our behalf under contractual data processing agreements. These include payment gateway operators (bKash, Nagad, Rocket, Upay, and participating banks), KYC and document verification platforms, cloud hosting and infrastructure providers, fraud detection and risk scoring services, and customer support tooling providers. All such third parties are contractually required to process data only as instructed by db44 and to apply security standards equivalent to or exceeding those described in this Policy.
6.2 Game Providers. db44 shares limited session data with our licensed game studio partners (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) solely for the purposes of facilitating gameplay, resolving game disputes, and auditing game outcomes. Game providers do not receive your financial data, KYC documentation, or contact details beyond what is technically necessary for game session authentication.
6.3 Regulatory and Law Enforcement Disclosure. db44 may disclose personal data to competent regulatory authorities, law enforcement agencies, financial intelligence units, or courts where we are legally required to do so or where we reasonably believe disclosure is necessary to prevent or report financial crime, fraud, or other serious unlawful activity. Such disclosures are made without prior notice to the account holder where required by law.
6.4 Business Transfers. In the event that db44 undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, your personal data may be transferred as part of that transaction. We will provide reasonable notice before your data becomes subject to a materially different privacy policy.
6.5 No Sale of Data. db44 does not sell, rent, license, or otherwise commercially transfer your personal data to any unaffiliated third party for their own independent marketing, profiling, or data brokerage purposes. This prohibition applies unconditionally and is not subject to any opt-out mechanism — it is an absolute organisational commitment.
Important: If you receive any communication purporting to be from db44 that requests your account password, payment PIN, or full identity document details via email or chat, treat it as fraudulent. db44 will never request passwords or PINs through any channel. Report suspicious contact immediately to [email protected].
7 Cookies & Tracking Technologies
The db44 Platform uses cookies and similar tracking technologies to deliver core functionality, maintain session state, detect fraud, and analyse Platform usage patterns. The categories of cookies we use are described below.
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Maintain login session state, CSRF protection tokens, load balancing, and core Platform security functions | No — essential for Platform operation |
| Functional | Remember your display preferences, game lobby filters, and responsible gaming settings between sessions | Yes — disabling may reduce convenience |
| Analytics | Aggregate, anonymised data on page views, navigation paths, feature usage, and error reporting to help us improve the Platform | Yes — via browser settings or cookie preference centre |
| Fraud & Security | Device fingerprinting, IP reputation checks, and behavioural anomaly detection to protect your account and the Platform from unauthorised activity | No — required for platform security |
You may manage non-essential cookies through your browser settings. Disabling strictly necessary or fraud-detection cookies may impair your ability to log in to or use the Platform. db44 does not use third-party advertising or retargeting cookies.
8 Data Retention
8.1 Active Accounts. For as long as your db44 account remains active, we retain all personal data associated with your account as necessary to provide the service, comply with our legal obligations, and resolve any disputes.
8.2 Closed Accounts. Following account closure — whether initiated by you or by db44 — we retain your personal data for a minimum of five (5) years from the date of closure. This retention period reflects our obligations under anti-money laundering regulations, which require gambling operators to maintain adequate transaction and customer records for regulatory inspection.
8.3 KYC Documentation. Identity and address verification documents are retained for the duration of your account plus five years following closure, consistent with international AML record-keeping standards.
8.4 Communications Records. Support chat logs and email correspondence are retained for three years from the date of each communication, after which they are securely deleted or anonymised.
8.5 Anonymised Analytics Data. Aggregated, anonymised analytics data from which individual players cannot reasonably be identified may be retained indefinitely for internal service improvement purposes.
Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised using industry-standard data sanitisation procedures.
9 Data Security
db44 maintains a comprehensive information security programme designed to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. Key security measures in place include:
- TLS/SSL encryption for all data transmitted between your device and the db44 Platform, ensuring communications cannot be intercepted in transit.
- Encryption at rest for sensitive data categories including identity documents, financial records, and authentication credentials stored on db44 servers.
- Password hashing using industry-standard cryptographic hashing algorithms — plaintext passwords are never stored.
- Access controls restricting employee access to personal data on a strict need-to-know basis, with role-based permissions and audit logging of all access events.
- Two-factor authentication (2FA) available to all players and mandatory for all internal administrative systems.
- Regular penetration testing and vulnerability scanning of the Platform by qualified third-party security professionals.
- Incident response procedures ensuring that any confirmed personal data breach is assessed, contained, and — where required — reported to affected individuals and relevant authorities within required timeframes.
Your Responsibilities: The security of your db44 account also depends on you. Use a strong, unique password that you do not use on any other platform. Enable two-factor authentication. Never share your login credentials with any third party. If you suspect your account has been compromised, contact support immediately via live chat or at [email protected].
10 Your Rights
Subject to applicable law and certain limitations inherent in operating a regulated gambling platform (such as our AML record-keeping obligations), you have the following rights in respect of your personal data held by db44:
- Right of Access: You may request a copy of the personal data db44 holds about you (a "Subject Access Request").
- Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
- Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
- Right to Restriction: You may request that we restrict processing of your personal data in certain circumstances, such as where you contest its accuracy.
- Right to Portability: You may request a structured, machine-readable copy of personal data you have provided to db44 for transfer to another service provider where technically feasible.
- Right to Object: You may object to processing carried out on the basis of legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: Where processing is based on consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us in writing at [email protected] with the subject line "Data Rights Request — [Your Username]". We will acknowledge your request within 3 business days and respond substantively within 30 calendar days. Where requests are complex or numerous, this period may be extended by a further 60 days with notice provided to you.
11 International Data Transfers
db44 operates as an internationally licensed offshore platform. Your personal data may be processed in or transferred to countries outside Bangladesh in connection with our use of cloud hosting, payment processing, KYC verification, and game provider services. Where such transfers occur, db44 takes appropriate steps to ensure that your data receives a level of protection consistent with the principles set out in this Policy, including through the use of contractual safeguards with receiving parties.
db44 does not transfer personal data to jurisdictions known to have inadequate data protection standards without first implementing appropriate technical and contractual protections. If you have questions about the international transfer mechanisms applicable to your data, please contact [email protected].
12 Minors
The db44 Platform is strictly restricted to individuals who are 21 years of age or older. db44 does not knowingly collect, process, or retain personal data from individuals below this age. If we become aware that personal data has been submitted by or on behalf of a person under 21, we will take immediate steps to delete that data and close the associated account.
If you are a parent or guardian and believe that a minor in your care has registered an account or submitted personal data to db44, please contact us immediately at [email protected] with the subject line "Minor Account Report". We will investigate and respond within one business day.
db44 recommends that parents and guardians use parental control software on shared devices to restrict access to online gambling platforms. db44 does not direct any marketing or communications toward individuals under the age of 21.
13 Policy Updates
db44 reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. When we make material changes, we will provide reasonable advance notice by posting a prominent notice on the Platform and, where practical, by sending a notification to your registered email address.
The version of this Policy currently in force is identified by the "Last Updated" date shown in the hero section at the top of this page. Your continued use of the Platform following the effective date of any update constitutes your acknowledgement of the revised Policy. If you do not agree with the updated Policy, you must discontinue use of the Platform and may request account closure in accordance with our Terms & Conditions.
Previous versions of this Privacy Policy are available on request by contacting [email protected] with the subject line "Privacy Policy Archive Request".
14 Contact & Complaints
If you have any questions, concerns, or complaints regarding this Privacy Policy or db44's data practices, please contact our Data Support team using the following channels:
- Email: [email protected] — use subject line "Privacy Enquiry — [Your Username]" for fastest routing.
- Live Chat: Available 24/7 via the db44 Platform — average response time 2–5 minutes for standard enquiries.
- Response Timeframe: We aim to acknowledge all privacy-related correspondence within 3 business days and to provide a full response within 30 calendar days.
If you believe db44 has not adequately addressed your privacy concern, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction or to the supervisory authority of the jurisdiction in which db44 holds its operating licence.
Our Commitment: db44 treats every privacy enquiry seriously. We do not penalise players for exercising their data rights. Submitting a data rights request has no impact on your account status, bonus eligibility, or access to the Platform.
Data Protection Highlights
How db44 Protects Your Privacy
These are the core commitments that underpin every data decision we make at db44 — from the moment you register to years after your account is closed.
SSL Encryption End-to-End
Every byte of data exchanged between your device and the db44 Platform is protected by TLS/SSL encryption. Sensitive data stored on our servers is encrypted at rest, ensuring your personal and financial information is secure at every stage of its lifecycle.
We Never Sell Your Data
db44 does not sell, rent, or trade personal data to data brokers, advertisers, or unaffiliated third parties under any circumstances. Your betting history and financial data are used exclusively to deliver and secure the service you signed up for — nothing else.
Full Data Rights Access
You hold real, actionable rights over your data: access, rectification, erasure, restriction, portability, and objection. Submit a request to [email protected] and we will respond substantively within 30 days — no administrative runaround, no unexplained delays.
Defined Retention Periods
We keep your data only as long as necessary. Account data is retained for five years post-closure to meet AML obligations, and support communications are deleted after three years. When retention periods expire, data is securely purged or irreversibly anonymised.
No Advertising Cookies
db44 does not deploy third-party advertising or retargeting cookies. The only tracking technologies on the Platform are those required for security, session management, fraud prevention, and first-party analytics — never for building commercial advertising profiles.
Strict 21+ Data Policy
db44 never knowingly collects data from individuals under 21. Age verification is enforced at registration and KYC stages. If a minor account is identified, it is closed immediately and all associated data deleted without delay.
Your Rights at a Glance
Data Rights Quick Reference
A summary of your rights under db44's privacy framework. To exercise any of these rights, email [email protected] with your username and the right you wish to invoke.
Right of Access
Request a full copy of the personal data db44 holds about you, including how it is used and with whom it has been shared.
Right to Rectification
Ask us to correct inaccurate or incomplete information on your account. We will action valid rectification requests promptly.
Right to Erasure
Request deletion of your data where it is no longer needed, subject to our legal retention obligations under AML regulations.
Right to Restriction
Ask us to pause processing of your data in certain circumstances, such as while we review a rectification or objection request.
Right to Portability
Receive a structured, machine-readable copy of data you provided to db44, suitable for transfer to another service provider.
Right to Object
Object to data processing based on legitimate interests, or withdraw consent for marketing communications at any time.
Continue Exploring db44
Ready to Play Responsibly?
Your privacy is protected every step of the way at db44. Explore our games, review our responsible gaming tools, or log in to your account and experience Bangladesh's most trusted online casino platform.