dbji Privacy Policy — Your Data, Protected

When you register for a dbji account, interact with the platform, place bets, participate in casino games, or contact our support team, dbji collects a range of personal and technical information. The categories of information we collect are described in detail below.

A. Registration and Identity Information

At the point of account creation via the dbji Login registration page, we collect the following information directly from you:

• Full legal name as it appears on your National Identity Card (NID) or passport.
• Date of birth (used for mandatory age verification — you must be 18 years or older to use dbji).
• Bangladeshi mobile phone number (used for account verification and two-factor authentication).
• Email address (used for account communications, transaction confirmations, and promotional messages where consent has been given).
• Residential address in Bangladesh (city, district, and postal code).
• Preferred username and encrypted password for the dbji Login portal.

B. KYC (Know Your Customer) Verification Documents

Before dbji processes your first withdrawal — and potentially at other points during your account lifecycle — we collect copies of identity and address verification documents as part of our KYC process. These may include:

• Scanned or photographed copy of your National Identity Card (NID), passport, or birth certificate.
• Proof of address document, such as a utility bill, bank statement, or mobile financial service statement issued in Bangladesh within the last three months.
• Proof of payment method, such as a screenshot confirming ownership of your bKash, Nagad, Rocket, or Upay account, or a bank card image showing your name.

C. Financial Transaction Information

Every deposit to and withdrawal from your dbji BDT wallet generates a transaction record. We collect and store the following financial data:

• Deposit amounts, timestamps, and the payment method used (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank).
• Withdrawal requests, amounts, approval status, and destination payment method.
• Bonus credits applied to your account and the wagering progress against each bonus.
• Running account balance in BDT.

D. Gaming and Betting Activity Data

dbji records a complete log of all gaming activity on your account. This includes:

• All bets placed across casino games (slots, live dealer tables, Mahjong Ways 2, The Great Icescape, and others), sports betting markets (cricket, BPL, T20, IPL, football, kabaddi), and any other games available on the platform.
• Game session start and end times, bet amounts in BDT, outcomes, and net results per session.
• Self-exclusion requests, deposit limit changes, loss limit activations, and any responsible gaming tool interactions.

E. Technical and Device Information

When you access dbji from a browser or mobile device, our platform automatically collects certain technical data:

• IP address and approximate geolocation (country and city level, derived from IP — not GPS).
• Device type, operating system, and browser version.
• Session duration and pages visited within the dbji platform.
• Referring URL (the website or link you clicked to arrive at dbji, if applicable).
• Cookie identifiers and local storage tokens used to maintain your login session.

F. Communications Data

When you contact the dbji support team by email at [email protected], via live chat after login, or through any other support channel, we retain a record of the communication, including the content of your messages and our responses. These records are used to manage and resolve your enquiry and to train and improve our support service.

dbji processes your personal information only for legitimate, clearly defined purposes. The table below summarises the primary purposes for which we use your data and the legal basis that justifies each processing activity.

Promotional Communications: If you have opted in to receive promotional emails or SMS messages from dbji at the time of registration or via your account settings, we may send you information about new games, seasonal bonuses (e.g., Eid, BPL season, Pohela Boishakh offers), and platform updates. You may withdraw your consent and unsubscribe from promotional communications at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

Automated Decision-Making: dbji uses automated systems to detect potential fraud, identify unusual betting patterns, and flag accounts for responsible gaming review. Where an automated process results in a significant decision affecting your account (such as a suspension), you retain the right to request human review of that decision by contacting [email protected].

dbji does not sell or rent your personal information to any third party. However, in order to deliver the dbji service to players in Bangladesh, we work with a carefully selected group of trusted service providers and technology partners. We may share specific categories of your personal data with these parties strictly for the purposes described below.

Payment Processors and Mobile Financial Services: To process your deposits and withdrawals in BDT, dbji shares the minimum necessary transaction data (amount, account identifier, and timestamp) with the payment service providers you use, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These providers operate under their own privacy policies and are independently responsible for the data they hold in connection with your transactions.

Game Content Providers: The casino games available on the dbji platform are supplied by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, among others. These providers may receive anonymised session data (bet amounts, game outcomes) for game integrity and RNG auditing purposes. They do not receive your full identity or contact information.

Identity Verification and KYC Partners: dbji may engage a specialist third-party KYC verification service to assist with the review and authentication of identity documents submitted by players. Any such partner is bound by strict data processing agreements and is prohibited from using your KYC documents for any purpose other than identity verification on behalf of dbji.

Fraud Prevention and Anti-Money Laundering Services: dbji uses automated fraud detection and AML screening tools, which may involve sharing device fingerprint data, IP addresses, and transaction patterns with specialised security service providers. This processing is carried out on the basis of legal obligation and legitimate interest in protecting the platform and its players.

Analytics Providers: dbji may use aggregated, anonymised platform usage data with analytics providers to understand how players navigate the site and to improve the user experience. No personally identifiable information is shared with analytics providers in identifiable form.

Legal and Regulatory Disclosure: dbji may disclose your personal information to regulatory authorities, law enforcement agencies, financial intelligence units, or courts in Bangladesh where we are legally required to do so, or where disclosure is necessary to prevent fraud, money laundering, or other serious crimes. dbji will notify you of such disclosures where legally permissible.

Business Transfer: In the event of a merger, acquisition, or sale of all or a substantial part of the dbji business, your personal data may be transferred to the acquiring entity as part of the transaction. In such circumstances, dbji will notify affected users by email at least 30 days prior to the transfer and will ensure the acquiring entity agrees to honour this Privacy Policy or provide equivalent protection.

dbji uses cookies and similar client-side storage technologies (including local storage and session storage) to operate the platform, maintain your login session, remember your preferences, and gather aggregate analytics about platform usage. This section explains what cookies dbji uses, why, and how you can manage them.

What Is a Cookie? A cookie is a small text file that a website stores on your device (computer, smartphone, or tablet) when you visit. Cookies allow the website to recognise your device on subsequent visits and to maintain continuity across your browsing session. Cookies cannot execute code, carry viruses, or access other files on your device.

Categories of Cookies Used by dbji:

Managing Cookies: You can control and delete cookies at any time through your browser settings. Most modern browsers allow you to block third-party cookies, clear all cookies on exit, or receive a notification before a cookie is placed. Please note that disabling strictly necessary cookies will prevent you from logging in to the dbji platform, as these cookies are essential to maintaining your authenticated session. Disabling functional cookies may affect your user experience but will not prevent basic access to the site.

Do Not Track: Some browsers support a "Do Not Track" (DNT) signal that requests that websites disable analytics and behavioural tracking. dbji acknowledges DNT signals and, where a valid DNT signal is detected, will limit analytics cookie placement to strictly necessary and security cookies only.

dbji implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. While no digital platform can guarantee absolute security, dbji's security architecture reflects industry best practices for online gaming platforms operating in the Bangladesh market.

Technical Security Measures:

• All data in transit is protected by TLS 1.2 or higher (HTTPS) encryption on every page and API endpoint of the dbji platform.
• Passwords stored in the dbji database are hashed using a strong, salted hashing algorithm — they are never stored in plaintext.
• KYC documents are stored in encrypted object storage with strict access control policies limiting access to authorised compliance personnel only.
• The dbji platform is protected by a web application firewall (WAF) and undergoes regular automated vulnerability scanning.
• Database access is restricted by role-based access controls, and all access to production data systems is logged and audited.
• Two-factor authentication (2FA) is available and recommended for all dbji player accounts and is mandatory for all internal dbji staff accounts.

Organisational Security Measures:

• All dbji personnel who handle personal data receive regular data protection and security awareness training.
• Access to personal data is granted on a strict need-to-know basis — support agents can access only the account data required to resolve a player's specific enquiry.
• dbji maintains an incident response plan. In the event of a personal data breach that poses a risk to affected individuals, dbji will notify affected account holders by email as promptly as practicable after the breach is confirmed.

Data Retention Schedule:

Upon expiry of the applicable retention period, personal data is either securely deleted from dbji's systems or anonymised in a manner that makes re-identification impossible. Anonymised data may be retained indefinitely for aggregate statistical purposes without any privacy impact.

As a player on the dbji platform, you hold a number of rights with respect to your personal data. dbji is committed to honoring these rights fully and promptly. To exercise any of the rights described below, please contact our support team at [email protected] with the subject line "Privacy Rights Request" and include your registered name, mobile number, and a clear description of your request.

dbji aims to respond to all privacy rights requests within 30 days of receipt. Where a request is complex or where dbji receives a high volume of requests, this period may be extended by a further 60 days, and you will be notified of the extension within the initial 30-day window. dbji does not charge a fee for processing privacy rights requests submitted in good faith.

dbji does not knowingly collect, process, or retain personal data from individuals under the age of 18. The dbji platform is strictly for adults aged 18 and above. Age verification is a mandatory step in the dbji registration and KYC process, and we take our obligations regarding the protection of minors' data with the utmost seriousness.

If dbji becomes aware that a registered account belongs to a person under the age of 18, the following actions will be taken immediately:

• The account will be permanently closed without prior notice.
• All gaming activity on the account will be voided and any winnings will be forfeited.
• Any deposits made will be returned to the original payment method where technically possible.
• All personal data collected in connection with the underage account will be securely deleted as quickly as reasonably practicable, subject to any legal obligation to retain certain records for AML investigation purposes.

Parental Guidance: If you are a parent or guardian in Bangladesh and you believe that a minor in your care has registered with or accessed the dbji platform, please contact us immediately at [email protected]. We will investigate and close the account as a matter of priority, and we will provide guidance on parental control tools available for Bangladeshi internet connections and mobile devices that can help prevent minors from accessing online gambling platforms.

dbji reserves the right to update, revise, or replace this Privacy Policy at any time. Changes to this Policy may be made in response to changes in applicable regulations, changes to the dbji service, or improvements to our data handling practices. We are committed to keeping you informed of material changes in a timely and transparent manner.

How We Notify You of Changes: When a material change to this Privacy Policy is made, dbji will notify active account holders by email to the address registered on their dbji account at least 14 days before the change takes effect. The updated Privacy Policy will also be published on this page with a revised "Effective Date" at the top. Minor changes that do not affect the substance of how we collect or use your data (such as formatting corrections or clarifications) may be made without prior individual notification.

Continued Use: Your continued use of the dbji platform after the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with a change to this Privacy Policy, you must cease using the dbji platform and may request account closure by contacting our support team.

Governing Language: This Privacy Policy is written in English. In the event of any translation being provided for informational purposes, the English version shall prevail in the event of any inconsistency or dispute.

Contact Details: If you have any questions, concerns, or complaints about this Privacy Policy or about the way dbji handles your personal data, please contact our Data Protection team using the details below. We take all privacy enquiries seriously and will respond as promptly as possible.

• Email: [email protected] (subject line: "Privacy Enquiry")
• Live Chat: Available on the dbji platform after login, 24 hours a day, 7 days a week
• Support Hours: 24/7 — Bangladesh Standard Time (BST, UTC+6)
• Platform: dbji.org — serving players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar