Your Privacy Matters — How db111 Protects Your Personal Data

db111 operates as an online entertainment and wagering platform accessible at db111.bio, offering sports betting, live casino games, slots, and exclusive titles to players based in Bangladesh. For the purposes of this Privacy Policy, db111 acts as the data controller responsible for determining how and why your personal data is processed.

If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, you may contact us at any time using the following details:

• Email: [email protected]
• WhatsApp: +880 1700 000000
• Live Chat: Available 24/7 via the db111 website
• Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

All privacy-related communications should be marked with the subject line "Privacy Request" to ensure they are routed directly to our data protection team. We aim to acknowledge all privacy requests within 24 hours and to provide a full response within 5 business days.

db111 collects personal data from you through several channels during your registration and ongoing use of the platform. The categories of information we collect are described below:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data (beyond responsible gaming records), or biometric data (beyond photo ID for KYC). We do not collect data from social media profiles unless you voluntarily provide such information during a support interaction.

db111 uses the personal data we collect for specific, clearly defined purposes. We do not use your data for any purpose other than those listed below without first obtaining your explicit consent or where otherwise required by law:

• Account Management: To create, verify, and maintain your db111 player account, including processing your registration details and keeping your account information up to date.
• Identity Verification (KYC): To verify that you meet the minimum age requirement of 21 years, that you are not on a self-exclusion register, and that the payment methods you use are registered in your own name, in compliance with anti-money laundering obligations.
• Transaction Processing: To process deposits and withdrawals through bKash, Nagad, Rocket, Upay, and partner bank channels, and to maintain accurate records of all financial activity on your account.
• Service Delivery: To provide access to cricket betting markets, live casino games from providers including Evolution Gaming, Ezugi, and Pragmatic Play Live, slot titles from NetEnt, Microgaming, and Spribe, and all other db111 gaming products.
• Customer Support: To respond to your queries, complaints, and responsible gaming requests through live chat, email, and WhatsApp.
• Promotions and Bonuses: To administer welcome bonuses, reload offers, BPL season promotions, Eid offers, and other seasonal campaigns to eligible players.
• Security and Fraud Prevention: To monitor your account for unusual activity, detect and prevent fraud, investigate suspected money laundering, and protect the integrity of the platform.
• Responsible Gaming: To monitor wagering patterns for signs of problem gambling, to enforce deposit limits and self-exclusion periods you have requested, and to flag accounts that may require responsible gaming intervention.
• Platform Improvement: To analyse aggregate usage data and technical performance metrics to improve the db111 website, mobile interface, and game offerings.
• Legal Compliance: To meet our obligations under applicable laws, to respond to lawful requests from regulatory or law enforcement authorities, and to establish, exercise, or defend legal claims.

Every instance of personal data processing by db111 is carried out on one or more of the following legal grounds:

• Contractual Necessity: Processing that is necessary to perform our contract with you — for example, processing your registration details, verifying your identity, and handling your deposits and withdrawals. Without this processing, we cannot provide you with the db111 service.
• Legal Obligation: Processing that is required to comply with applicable laws — for example, KYC checks, anti-money laundering transaction monitoring, and retaining financial records for audit purposes.
• Legitimate Interests: Processing where db111 has a legitimate business interest that does not override your fundamental rights — for example, using technical data to detect fraud, improve platform security, and analyse platform performance.
• Consent: Processing that is based on your freely given, specific, and informed consent — for example, sending you marketing communications about promotions and new game releases. You may withdraw your consent at any time.

Where we rely on legitimate interests as the legal basis for processing, we have carried out a balancing assessment to confirm that our interests do not override your privacy rights. If you would like further information about these assessments, please contact us at [email protected].

db111 does not sell, rent, or trade your personal data. We may share your personal information only in the limited circumstances described below, and only with parties who are bound by appropriate confidentiality obligations:

• Identity Verification Providers: We share identity documents and personal details with third-party KYC verification services to confirm your age and identity. These providers process data solely on our instructions and are not permitted to use it for any other purpose.
• Payment Processors: We share the minimum necessary transaction data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and card processing partners to facilitate your deposits and withdrawals. Full account credentials are never shared — only reference information required to execute the transaction.
• Game Technology Providers: When you play games provided by third-party studios such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, or Spribe, your player session data (including bets placed and game outcomes) is transmitted to those providers' systems as part of the game delivery infrastructure. These providers operate under strict data processing agreements with db111.
• Regulatory and Law Enforcement Authorities: We may disclose your personal data to government agencies, regulatory bodies, or law enforcement authorities where we are required to do so by law, court order, or a lawful regulatory request. We will notify you of any such disclosure where permitted by law.
• Professional Advisers: We may share relevant personal data with our legal advisers, auditors, or accountants on a strictly need-to-know basis, subject to professional confidentiality obligations.
• Business Transfers: In the event that db111 undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via email before it takes effect.

db111 takes the security of your financial information extremely seriously. The following measures govern how payment data is handled on the platform:

• db111 does not store full bKash, Nagad, Rocket, or Upay account numbers, nor full card numbers, on its servers. Only masked references (e.g., last four digits or a transaction token) are retained for account-linking and withdrawal purposes.
• All payment transactions are processed through encrypted gateway connections. Data in transit between your device, db111, and the payment provider is protected by 256-bit SSL/TLS encryption.
• Financial records — including deposit history, withdrawal history, and bonus transaction logs — are retained for a minimum of five (5) years from the date of the transaction, in compliance with standard financial record-keeping requirements.
• db111 operates a strict same-name payment policy. Deposits must originate from a payment account registered in the same name as your db111 account. This policy exists to prevent financial fraud and to protect our players from unauthorised use of their payment methods.
• Any transaction flagged by db111's automated monitoring systems as unusual, high-risk, or inconsistent with a player's normal wagering patterns may be held pending manual review and verification. During this review period, the player may be asked to provide source-of-funds documentation.

If you become aware of any unauthorised transaction on your db111 account, please contact our support team immediately at [email protected]. We will investigate and, where appropriate, work with the relevant payment provider to attempt resolution.

db111 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your session security, and analyse how players interact with our site. The types of cookies we use are as follows:

Essential and security cookies cannot be disabled as they are strictly necessary for the platform to operate safely. Functional and analytics cookies may be managed through your browser settings. Most modern browsers allow you to block or delete cookies; however, disabling functional cookies may affect your experience on the db111 platform.

db111 does not use cookies for cross-site advertising tracking or for sharing browsing data with third-party ad networks.

db111 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our standard retention periods are as follows:

• Account Data: Retained for the duration of your active account relationship with db111, plus a minimum of five (5) years following account closure to comply with financial record-keeping and anti-money laundering obligations.
• Identity and KYC Documents: Retained for a minimum of five (5) years from the date of verification, consistent with standard financial compliance requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Responsible Gaming Records: Retained for the duration of any self-exclusion period plus five (5) years, to ensure that self-exclusion commitments can be honoured if a previously excluded player attempts to re-register.
• Support Communications: Retained for two (2) years from the date of the most recent interaction, unless the communication relates to an unresolved dispute or legal claim, in which case it is retained until that matter is fully resolved.
• Marketing Consent Records: Retained for three (3) years from the date of the most recent marketing interaction, or until you withdraw consent, whichever comes first.
• Technical and Analytics Data: Retained in anonymised, aggregated form for up to 24 months from collection.

When personal data is no longer required and the applicable retention period has expired, db111 will securely delete or anonymise it in accordance with our internal data disposal procedures.

As a db111 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Request":

• Right of Access: You have the right to request a copy of all personal data that db111 holds about you. We will provide this in a clear, readable format within 5 business days of your verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update basic account information (such as your contact email or mobile number) directly from within your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data. We will fulfil this request where we are not legally obligated to retain the data (e.g., for financial compliance purposes). Where we cannot delete data due to a legal retention obligation, we will explain the reason clearly.
• Right to Restriction of Processing: You may ask us to restrict how we use your data — for example, while a correction request is being processed, or where you have objected to processing based on legitimate interests.
• Right to Data Portability: You may request a copy of the personal data you provided to db111 in a structured, machine-readable format (e.g., CSV), where technically feasible.
• Right to Object: You may object to the processing of your personal data where we rely on legitimate interests as the legal basis. You may also withdraw consent to marketing communications at any time.

db111 is strictly an adult platform. The minimum age to register and use db111 is 21 years. We do not knowingly collect personal data from individuals under the age of 21.

During the registration process, players are required to confirm their date of birth. db111 may request National Identity Card or passport verification to confirm age, particularly before approving a first withdrawal or processing a large transaction. Accounts found to belong to individuals under 21 will be immediately closed and all deposits returned to the payment source.

If you believe that a person under 21 has registered on the db111 platform, please notify us immediately at [email protected]. We take underage gambling with the utmost seriousness and will act promptly on all reports. Please also visit our Responsible Gaming page for guidance on parental controls and tools to restrict access to online gambling platforms.

db111 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your browser and the db111 servers is encrypted using industry-standard SSL/TLS protocols. The padlock icon displayed in your browser confirms that your connection is secure.
• AES-256 Data Encryption at Rest: Personal data and financial records stored in db111's databases are encrypted at rest, meaning that even in the unlikely event of a database breach, stored data would be unreadable without the decryption keys.
• Two-Factor Authentication (2FA): db111 supports SMS-based two-factor authentication for account logins. We strongly encourage all players to enable 2FA to add an additional layer of protection beyond their password.
• Access Controls: Internal access to player personal data is restricted to authorised db111 personnel on a strict need-to-know basis. All staff with data access privileges are subject to confidentiality agreements and regular security training.
• Intrusion Detection and Monitoring: db111's infrastructure is monitored continuously for signs of unauthorised access, anomalous traffic patterns, and potential security threats. Automated alerts are reviewed by our security team around the clock.
• Regular Security Audits: Our platform undergoes periodic security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.

Despite our best efforts, no online platform can guarantee absolute security against all possible threats. If you discover or suspect a security vulnerability in the db111 platform, please report it immediately to [email protected]. Do not attempt to exploit any suspected vulnerability — responsible disclosure is appreciated and will be treated with the seriousness it deserves.

The db111 platform may contain references to third-party game providers, payment services, and sports data feeds. When you interact with games or services delivered by third-party studios — such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, or Spribe — those providers operate their own privacy and data security practices.

db111 is not responsible for the privacy practices of third-party game providers or payment processors. We recommend that you review the privacy policies of any third-party service with which you interact. However, all third-party providers with whom db111 shares data are required to sign data processing agreements that bind them to using player data only for the purposes specified by db111 and to maintaining appropriate security standards.

Similarly, when you make a payment through bKash, Nagad, Rocket, Upay, or a partner bank, that transaction is subject to the privacy policy of the relevant financial service provider in addition to this policy. db111 does not control and is not responsible for the data practices of these financial institutions in relation to their own customer records.

db111 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered players by email to their registered address and/or by a prominent notice on the db111 platform prior to the changes taking effect. The updated policy will state the new effective date at the top of the document.

Your continued use of the db111 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should stop using the platform and contact [email protected] to request account closure.

We encourage you to review this Privacy Policy periodically to stay informed about how db111 is protecting your information. Previous versions of this policy are available on request by contacting [email protected].

For all privacy-related enquiries, data access requests, correction requests, erasure requests, and marketing opt-out requests, please contact the db111 data protection team using the details below:

• Email: [email protected] — please use the subject line "Privacy Request"
• WhatsApp: +880 1700 000000
• Live Chat: Available 24/7 via the db111 website
• Response Time: Acknowledgement within 24 hours; full response within 5 business days

When submitting a privacy request , please include your registered account username or mobile number so we can locate your records and verify your identity before processing the request. We will never action a data request without first confirming that the requester is the account holder.

db111 is committed to resolving all privacy concerns directly with players. If you feel that your privacy rights have not been adequately addressed after contacting us, you may escalate your concern to the relevant data protection authority in your jurisdiction.