ddb33 Privacy Policy
At ddb33, your privacy matters. This policy explains what personal data we collect, how we use it, who we share it with, and the rights you hold as a player on our Bangladesh online casino and sports betting platform.
Data Encryption
All personal data transmitted to and from ddb33 is protected by 256-bit SSL encryption. Stored data is encrypted at rest using AES-256 industry-standard protocols.
No Data Sales
ddb33 does not sell, rent, or trade your personal information to third-party advertisers or data brokers under any circumstances. Your data is yours.
Purpose-Limited Use
We collect only the data necessary to operate your account, process payments, prevent fraud, and personalise your experience on the ddb33 platform.
Your Data Rights
You have the right to access, correct, export, and request deletion of your personal data held by ddb33 at any time by contacting our support team.
Cookie Transparency
ddb33 uses essential and analytics cookies to keep the platform running smoothly. We do not use third-party advertising cookies that track you across other websites.
Responsible Data Handling
Our data handling practices follow internationally recognised privacy standards. We regularly review and update our security measures to safeguard your information.
Section 01
Information We Collect
ddb33 collects personal information from you in order to operate your account, process financial transactions, verify your identity, prevent fraud and money laundering, and deliver a personalised gaming experience. We collect information through the following channels: directly from you at registration and during account use, automatically through your interaction with the platform, and from trusted third-party verification and payment partners where necessary.
The categories of personal data we collect and process are outlined in the table below:
| Data Category | Examples | Collection Method | Required |
|---|---|---|---|
| Identity Data | Full legal name, date of birth, national ID number | Registration form, KYC documents | Mandatory |
| Contact Data | Email address, mobile number, residential address | Registration form | Mandatory |
| Financial Data | bKash / Nagad / Rocket wallet number, bank account details, transaction history | Cashier, payment processor | Mandatory |
| Technical Data | IP address, browser type, device ID, operating system, session timestamps | Automatic — platform logs | Automatic |
| Usage Data | Games played, bets placed, pages visited, session duration, bonus activity | Automatic — platform analytics | Automatic |
| Communications Data | Live chat transcripts, support emails, feedback submissions | Customer support interactions | Optional |
| Verification Documents | National ID card, passport, utility bill, selfie photo | KYC verification process | Mandatory (KYC) |
Age Verification: As an 18+ platform, ddb33 is required to verify the age of every registered player. During the KYC process, you will be asked to submit a government-issued photo identification document confirming that you are 18 years of age or older. This verification step is mandatory and cannot be bypassed.
ddb33 does not knowingly collect or store personal data from individuals under the age of 18. If we become aware that personal data belonging to a minor has been submitted to the platform, we will delete it immediately and close the associated account. If you believe a minor has registered on ddb33, please contact us at [email protected] immediately.
We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or biometric data beyond what is strictly required for identity verification purposes. Where biometric-style data (such as a facial photo for ID matching) is collected, it is used solely for age and identity verification and is not stored beyond the verification process.
Section 02
How We Use Your Data
ddb33 processes your personal data only for specific, legitimate purposes. We do not use your data for purposes that are incompatible with the reasons for which it was originally collected. The following outlines the primary purposes for which your data is used and the legal basis that justifies each use:
- Account Creation and Management: We use your identity and contact data to create and maintain your ddb33 account, verify your eligibility, and communicate important account-related information to you. This processing is necessary to fulfil the contract between you and ddb33.
- Payment Processing: We use your financial data to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods. Payment data is shared with our payment processing partners only to the extent necessary to complete the transaction.
- Identity Verification (KYC): We use your identity documents and personal details to verify your age, identity, and address in compliance with anti-money laundering obligations. This processing is required by law and cannot be opted out of.
- Fraud Prevention and Security: We use technical data, usage data, and financial data to monitor for suspicious activity, detect potential fraud, and protect the integrity of the ddb33 platform. This processing is in our legitimate interest and the interest of all ddb33 players.
- Personalisation: We use your usage data to personalise your experience on ddb33, including recommending games, tailoring promotional offers, and displaying content relevant to your activity — for example, cricket betting offers during BPL and T20 World Cup season.
- Responsible Gaming: We monitor your gaming behaviour to identify potential indicators of problem gambling. If our systems detect unusual patterns — such as rapidly escalating bet sizes or prolonged continuous sessions — we may contact you with responsible gaming resources or apply account restrictions in line with our Responsible Gaming Policy.
- Legal Compliance: We may process and retain your data as required by applicable laws and regulations, including anti-money laundering legislation, financial record-keeping obligations, and any lawful requests from regulatory or law enforcement authorities.
- Customer Support: We use your communications data, account history, and contact information to respond to your support requests, investigate complaints, and resolve disputes in a timely manner.
- Marketing Communications: With your consent, we may use your contact details to send you promotional offers, bonus notifications, and news about ddb33. You may withdraw your consent to marketing communications at any time by contacting support or updating your account preferences.
No Automated Decision-Making with Legal Effect: ddb33 does not use fully automated decision-making processes that produce legal or similarly significant effects on players without human oversight. Where automated systems flag an account for review, a trained member of our compliance team will conduct a manual assessment before any action is taken.
Section 03
Data Sharing & Disclosure
ddb33 does not sell, rent, or trade your personal data to any third party for commercial or advertising purposes. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for each purpose:
- Payment Processors: Your financial data is shared with our payment processing partners — including the operators of bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank, BRAC Bank, and Islami Bank gateways — solely to process deposits and withdrawals on your behalf. These partners operate under their own privacy policies and are bound by contractual obligations to handle your data securely.
- Identity Verification Partners: During the KYC process, your identity documents may be shared with a third-party verification service provider for automated or assisted document authentication. These providers are bound by strict data processing agreements and may not use your data for any purpose other than verification on our behalf.
- Game Software Providers: When you play games provided by third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, certain technical and gameplay data is transmitted to those providers to facilitate the game session. This data typically includes a session token and bet/win amounts but does not include your full identity or financial details unless required for compliance by the provider.
- Fraud Prevention and Security Services: We may share technical data and transaction data with specialist fraud detection and cybersecurity service providers who assist ddb33 in identifying and responding to security threats.
- Legal and Regulatory Authorities: ddb33 will disclose your personal data to law enforcement agencies, regulatory authorities, or courts if required to do so by applicable law, court order, or government directive. We will notify you of such disclosure where we are legally permitted to do so.
- Business Transfers: In the event that ddb33 undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy policy applicable to your data following the transaction.
No Cross-Border Transfers Without Safeguards: Where personal data is transferred to a third party located outside Bangladesh, ddb33 ensures that adequate safeguards are in place to protect your data to a standard equivalent to that described in this policy. We do not transfer personal data to jurisdictions without adequate data protection frameworks without implementing appropriate contractual protections.
Section 05
Data Retention
ddb33 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, accounting, and reporting obligations. The retention periods applicable to different categories of data are outlined below:
- Account and Identity Data: Retained for the lifetime of your ddb33 account plus a minimum period of 5 years following account closure, as required for anti-money laundering compliance and financial record-keeping.
- Transaction and Financial Data: Retained for a minimum of 5 years from the date of each transaction in accordance with financial record-keeping requirements.
- KYC Verification Documents: Retained for 5 years following account closure or the completion of the last transaction to which the verification relates, whichever is later.
- Technical and Usage Data: Typically retained for 12 months from the date of collection for platform analytics and fraud prevention purposes, after which it is anonymised or deleted.
- Customer Support Communications: Retained for 2 years from the date of the last communication, to allow for complaint handling and dispute resolution.
- Marketing Consent Records: Retained for as long as your consent remains active and for 2 years following any withdrawal of consent, for compliance documentation purposes.
When personal data is no longer required for any of the purposes described above, ddb33 will securely delete or anonymise it. Anonymised data (data from which all personally identifying information has been irreversibly removed) may be retained indefinitely for platform analytics and business intelligence purposes.
Account Closure Note: Closing your ddb33 account does not result in the immediate deletion of all associated personal data. Applicable legal retention periods continue to apply after account closure. If you have questions about the specific data held on your closed account, please contact [email protected].
Section 06
Your Rights
As a player on ddb33, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our data protection team at [email protected]. We will respond to all valid requests within 30 days of receipt. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension.
- Right to Access: You have the right to request a copy of all personal data that ddb33 holds about you. We will provide this in a structured, commonly used, machine-readable format where technically feasible.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
- Right to Erasure ("Right to Be Forgotten"): You may request that ddb33 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to our legal retention obligations — data that must be retained by law cannot be deleted in response to an erasure request.
- Right to Restriction of Processing: You may request that ddb33 restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
- Right to Data Portability: You have the right to receive the personal data you have provided to ddb33 in a structured, commonly used, machine-readable format and to transmit that data to another service provider where technically feasible.
- Right to Object: You have the right to object to the processing of your personal data for marketing purposes at any time. You also have the right to object to processing based on our legitimate interests, although in some cases we may be able to demonstrate compelling legitimate grounds that override your interests.
- Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.
Identity Verification for Rights Requests: To protect your personal data, ddb33 will require you to verify your identity before processing any data rights request. This is to prevent unauthorised access to or deletion of your data. We may request a copy of your ID document and confirmation of your registered account email address to authenticate your request.
Section 07
Data Security
ddb33 takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect it against unauthorised access, loss, alteration, disclosure, or destruction. Our security infrastructure is reviewed and updated regularly to address emerging threats.
- Transport Encryption: All data transmitted between your device and ddb33 is encrypted using TLS 1.3 with 256-bit SSL certificates. This protects your personal and financial data from interception during transmission.
- Storage Encryption: Sensitive data stored on ddb33 servers — including payment details and identity documents — is encrypted at rest using AES-256 encryption. Database access is controlled through strict role-based permissions.
- Access Controls: Access to personal data within ddb33 is restricted to authorised personnel on a strict need-to-know basis. All staff who handle personal data receive regular data protection training and are bound by confidentiality obligations.
- Network Security: ddb33 infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and 24/7 network monitoring. Penetration testing is conducted on a regular basis by qualified security professionals.
- Incident Response: ddb33 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your personal data, we will notify affected players without undue delay and take all reasonable steps to contain and remediate the incident.
- Two-Factor Authentication: ddb33 offers optional two-factor authentication (2FA) for account login. We strongly encourage all players to enable 2FA to add an additional layer of protection to their account.
While ddb33 implements robust security measures, no online platform can guarantee complete security against all possible threats. You are responsible for maintaining the security of your own account credentials. Never share your ddb33 password with anyone, and contact support immediately if you suspect your account has been compromised.
Section 08
Policy Updates & Contact
ddb33 reserves the right to update this Privacy Policy at any time. When we make changes, we will revise the "Last Updated" date shown at the top of this page. For significant changes that materially affect how we use your personal data, we will notify registered players by email prior to the changes taking effect. Your continued use of ddb33 following any update to this policy constitutes your acceptance of the revised terms.
We encourage you to review this Privacy Policy periodically so that you remain informed about how ddb33 collects, uses, and protects your personal information. If you have any objection to any change we make, you should stop using the ddb33 platform and contact us to close your account.
If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the ddb33 data protection team using the following details:
Data Protection Contact
Email: [email protected]
Subject line: Privacy Policy Enquiry — [Your Account Username]
Response time: Within 2 business days for general enquiries; within 30 days for formal data rights requests.
Availability: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6).
This Privacy Policy applies exclusively to the ddb33 platform at ddb33.net and does not extend to any third-party websites, payment platforms, or game provider portals that may be linked to or integrated with ddb33. We recommend reviewing the privacy policies of any third-party services you interact with independently of ddb33.
Continue Exploring ddb33
Your Data Is Safe — Now Let's Play
Now that you understand how ddb33 protects your personal information, explore our full range of cricket betting, live casino tables, slots, and keno games. If you have any questions about this Privacy Policy, our support team is available 24/7 at [email protected].