dbok Privacy Policy — How We Collect, Use, and Protect Your Personal Data

This Privacy Policy ("Policy") is issued by dbok ("dbok", "we", "us", or "our"), the operator of the online casino and sports betting platform accessible at https://dbok.vu (the "Platform"). This Policy describes how dbok collects, uses, stores, discloses, and protects personal data relating to individuals ("you" or "Player") who register an account, complete the dbok Login, make a deposit, or otherwise interact with the Platform.

This Policy forms part of the dbok Terms and Conditions and is incorporated by reference into that Agreement. By using the Platform or completing any registration step, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you must not use the Platform.

This Policy applies to personal data collected through the dbok Platform, including via desktop browsers, mobile browsers, and any associated mobile application where applicable. It does not cover the data practices of third-party game providers, payment processors, or other external services, whose own privacy policies govern those interactions.

dbok acts as the data controller in respect of personal data collected through the Platform. As data controller, dbok determines the purposes for which and the means by which personal data is processed. All enquiries relating to this Policy, including requests to exercise data subject rights, should be directed to the dbok support team at the email address provided in Section 15 of this Policy.

Where dbok engages third-party service providers to process personal data on its behalf — for example, identity verification partners, payment gateway processors, or fraud detection services — those parties act as data processors and are subject to written data processing agreements that restrict their use of your personal data to the specific purposes defined by dbok. dbok remains responsible for ensuring that any data processor it engages provides sufficient guarantees as to the security and lawfulness of their data processing activities.

dbok collects personal data from you in the following categories, depending on the nature of your interaction with the Platform:

dbok processes personal data for the following defined purposes only. We do not use your personal data for any purpose that is incompatible with the purpose for which it was originally collected without first obtaining your separate, explicit consent.

• Account management: To create, maintain, and administer your dbok account, including processing dbok Login requests, managing account settings, and providing access to gaming services.
• Identity verification (KYC): To verify your identity and age (21+ only) in compliance with our responsible gaming and anti-fraud obligations, and to comply with any applicable regulatory requirements.
• Payment processing: To process deposits made via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to process withdrawal requests to your registered payment method in BDT.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, unauthorised access to dbok accounts, money laundering, and other prohibited conduct as defined in the dbok Terms and Conditions.
• Responsible gaming: To monitor gaming activity patterns that may indicate problem gambling behaviour, to enforce self-exclusion and deposit limit settings, and to communicate responsible gaming information where appropriate.
• Customer support: To respond to your enquiries, process formal complaints, and provide assistance via the dbok support team.
• Platform improvement: To analyse aggregated, anonymised usage data for the purpose of improving the Platform's features, performance, and player experience.
• Legal and compliance obligations: To fulfil any legal, regulatory, or compliance obligation to which dbok is subject, including the retention of financial transaction records for the required statutory period.
• Promotional communications: To send you information about dbok promotions, bonus offers, and seasonal campaigns — only where you have provided explicit consent to receive marketing communications. You may withdraw this consent at any time by contacting the dbok support team.

dbok processes personal data on the following legal bases, consistent with internationally recognised data protection principles:

• Contractual necessity: Processing your identity, contact, account, and financial data is necessary for dbok to perform its obligations under the Terms and Conditions agreement entered into with you at registration. Without this processing, dbok cannot provide you with access to the Platform or process financial transactions.
• Legitimate interests: dbok processes technical data, gaming activity data, and communications data on the basis of its legitimate interests in operating a secure, fair, and commercially viable gaming platform. These interests do not override your fundamental rights and freedoms where those rights require protection of personal data.
• Legal obligation: dbok processes certain categories of data — including KYC documentation and financial transaction records — to comply with applicable anti-money laundering requirements, identity verification obligations, and responsible gaming standards imposed by its operating framework.
• Consent: Where dbok processes your data for direct marketing communications, it does so only on the basis of your explicit, prior consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

dbok does not sell, rent, or trade your personal data to any third party for their own independent commercial purposes. Personal data is shared with third parties only in the following strictly defined circumstances:

• Payment processors: Personal and financial data necessary to process your deposit or withdrawal transaction is shared with the relevant payment gateway provider (e.g., the operator of the bKash, Nagad, Rocket, or Upay integration, or the card scheme processor for Visa and Mastercard transactions). These providers act as data processors under written agreements with dbok.
• Identity verification providers: Identity data and KYC documentation may be shared with third-party identity verification service providers engaged by dbok to assist in the KYC process. These providers are bound by data processing agreements and may not use your data for any purpose other than identity verification on behalf of dbok.
• Game software providers: Technical session data (such as player session tokens) is shared with game providers — including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe — to the extent necessary to load and operate their game titles within the dbok Platform. These providers do not receive your full identity or payment data.
• Fraud and security partners: Anonymised or pseudonymised technical data may be shared with fraud detection and cybersecurity service providers engaged by dbok to protect the Platform and its players.
• Legal and regulatory requirements: dbok may disclose personal data to law enforcement, regulatory bodies, or other competent authorities where it is legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of dbok, its players, or third parties.

dbok retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as is required by applicable legal and compliance obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active dbok account and for a minimum of five (5) years following permanent account closure, in order to comply with anti-money laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, consistent with financial record-keeping obligations.
• KYC documentation: Retained for the duration of your active account and for a minimum of five (5) years following account closure.
• Technical and gaming activity data: Retained for up to two (2) years from the date of collection, after which it is either deleted or anonymised for aggregate analytical purposes.
• Support correspondence: Retained for up to three (3) years from the date of the last communication in a given support thread.
• Self-exclusion records: Retained indefinitely to prevent re-registration by players who have applied a permanent self-exclusion to their dbok account.

Where your data is no longer required for any active purpose and no legal retention obligation applies, dbok will securely delete or anonymise the data in accordance with its internal data lifecycle management procedures.

dbok implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures in place include:

• SSL/TLS encryption: All data transmitted between your browser or device and the dbok Platform is encrypted using industry-standard SSL/TLS protocols. The padlock icon visible in your browser's address bar confirms that your connection to dbok is encrypted.
• Password hashing: dbok account passwords are stored exclusively as one-way cryptographic hashes. dbok does not store your password in readable form and will never ask you to disclose it.
• Access controls: Access to personal data within dbok's internal systems is restricted to authorised personnel who require it for specific, defined operational purposes. All staff with access to personal data are subject to confidentiality obligations.
• Server security: dbok's data infrastructure is hosted on secured servers protected by firewalls, intrusion detection systems, and regular security patching.
• Security assessments: dbok conducts periodic security reviews and vulnerability assessments to identify and address potential weaknesses in its data security posture.

Please be aware that no method of transmission over the internet or method of electronic storage is 100% secure. While dbok employs all commercially reasonable measures to protect personal data, it cannot guarantee absolute security against all possible threats.

dbok uses cookies and similar browser-based technologies on the Platform. A cookie is a small text file that is placed on your device by a website you visit. Cookies allow the website to recognise your device on subsequent visits and to maintain certain preferences or session information.

dbok uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the operation of the Platform. They enable core functions such as maintaining your dbok Login session, keeping your account secure during your visit, and enabling page navigation. The Platform cannot function correctly without these cookies, and they cannot be disabled.
• Functional cookies: These cookies remember preferences you have set on the Platform — such as your language or display preferences — to improve your experience on subsequent visits. They do not track your activity on other websites.
• Analytical cookies: dbok may use anonymised, aggregated analytical data to understand how players navigate the Platform, which games are most popular, and where technical issues are occurring. Any analytical data collected is anonymised before being used for any internal reporting purpose and is not associated with your individual account.

dbok does not use advertising or tracking cookies for the purpose of serving you targeted advertisements on other websites. No cookie data collected by dbok is shared with third-party advertising networks.

Most web browsers allow you to control cookies through their settings. You may set your browser to refuse cookies or to alert you when a cookie is being placed. However, if you disable strictly necessary cookies, certain parts of the Platform — including the dbok Login function — may not operate correctly.

As a data subject, you hold the following rights in respect of personal data that dbok holds about you. dbok will respond to all valid data rights requests within a reasonable timeframe in Bangladesh Standard Time (BST, UTC+6):

• Right of access: You have the right to request a copy of the personal data dbok holds about you, together with information about how that data is being processed.
• Right to rectification: You have the right to request the correction of any personal data that dbok holds about you that is inaccurate, outdated, or incomplete. You may also update certain account details directly from your dbok account settings page after dbok Login.
• Right to erasure: You have the right to request the deletion of personal data dbok holds about you in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and no other legal basis for processing applies. Note that this right is subject to dbok's legal retention obligations; certain data cannot be deleted until mandatory retention periods have elapsed.
• Right to object: You have the right to object to dbok's processing of your personal data where that processing is based on legitimate interests. dbok will cease the processing in question unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to restrict processing: In certain circumstances, you have the right to request that dbok restrict the processing of your personal data — for example, while a dispute about the accuracy of your data is being resolved.
• Right to data portability: You have the right to receive personal data you have provided to dbok in a structured, commonly used, machine-readable format, and to request that dbok transmit that data directly to another data controller where technically feasible.
• Right to withdraw consent: Where dbok processes your personal data on the basis of your consent (such as for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

The dbok Platform is strictly intended for adults aged 21 years and above. dbok does not knowingly collect personal data from any person under the age of 21. If you are under 21 years of age, you must not register an account, complete the dbok Login, or use any part of the Platform.

If dbok becomes aware that personal data has been collected from a person under the age of 21, it will take immediate steps to delete that data and permanently close the associated account. If you are a parent or guardian and you believe that your child has registered an account or provided personal data to dbok, please contact the support team immediately at the email address provided in the footer of this page so that the matter can be investigated and resolved promptly.

dbok operates as an internationally oriented platform. In the course of providing its services, personal data may be transferred to and processed in countries outside Bangladesh — for example, by third-party game providers, payment processors, or fraud prevention partners whose infrastructure is located in other jurisdictions.

Where personal data is transferred internationally, dbok takes reasonable steps to ensure that an adequate level of protection is maintained for that data, consistent with the principles set out in this Policy. This may include entering into appropriate data transfer agreements with the receiving parties, or relying on other lawful transfer mechanisms.

By using the dbok Platform, you acknowledge that your personal data may be processed outside Bangladesh as described in this section.

The dbok Platform may contain references to third-party game providers and payment service partners. These third parties operate their own platforms, infrastructure, and privacy practices independently of dbok. This Privacy Policy does not apply to the data practices of any third party.

dbok is not responsible for the privacy practices, content, or security of any third-party platform or service. Players who interact directly with third-party services — for example, by visiting a game provider's website independently of the dbok lobby — do so at their own risk and should review the relevant third party's own privacy policy before providing any personal information.

dbok reserves the right to update or amend this Privacy Policy at any time. The date of the most recent update is displayed at the top of this page. Where a material change is made to this Policy, dbok will make reasonable efforts to notify registered players before the updated Policy takes effect — for example, by displaying a prominent notice on the Platform.

Your continued use of the dbok Platform following the publication of a revised Privacy Policy constitutes your acknowledgement and acceptance of the updated terms. If you do not agree with any revised version of this Policy, you must cease using the Platform and may request the closure of your account by contacting the dbok support team.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which dbok handles your personal data, please contact the dbok support team using the details below. All privacy-related enquiries are handled in English. dbok aims to respond to all privacy and data rights queries within a reasonable timeframe in Bangladesh Standard Time (BST, UTC+6).

Email: [email protected]

When submitting a privacy-related enquiry, please include your registered dbok username, a clear description of your concern or request, and any relevant supporting information. This will help the dbok team process your request as efficiently as possible.