dlb777 Privacy Policy — How We Protect Your Personal Data

dlb777 collects personal information through several channels: directly from you when you register and use the Platform; automatically through your device and browser as you navigate the site; and, in limited circumstances, from trusted third-party service providers involved in payment processing or identity verification.

1.1 Information You Provide Directly

When you create a dlb777 account, you are required to provide the following information:

• Identity information: Full legal name, date of birth, gender, and nationality.
• Contact information: Email address, mobile phone number (including mobile banking numbers for bKash, Nagad, and Rocket), and residential address.
• Account credentials: Username and password (passwords are stored in hashed, non-reversible form — we never store plain-text passwords).
• KYC documents: Copies of your National Identity Card (NID), passport, or other government-issued photo ID; address verification documents such as utility bills or bank statements.
• Financial information: Payment method details, including mobile banking account references and bank account numbers used for deposits and withdrawals. Full card numbers are not stored on dlb777 servers — they are handled directly by our PCI-DSS-compliant payment processors.
• Communications: Messages you send to our support team via email or live chat, including the content of those messages and any attachments you provide.

1.2 Information Collected Automatically

When you access and use the dlb777 Platform, our systems automatically collect certain technical and behavioural data:

• Device & browser data: IP address, device type, operating system, browser type and version, screen resolution, and time zone settings.
• Usage data: Pages visited, games played, bets placed, duration of sessions, click paths, and feature interactions.
• Location data: Approximate geographic location derived from your IP address. We do not collect GPS or precise physical location data.
• Transaction logs: A complete log of all deposit, withdrawal, bonus, and wagering activity associated with your account, maintained for compliance and dispute resolution purposes.
• Cookies and tracking data: Information collected via cookies, local storage, and similar technologies. See Section 4 for full details.

1.3 Information from Third Parties

We may receive information about you from third-party service providers in the following circumstances:

• Payment providers (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, Mastercard) may share transaction status and account verification data.
• Identity verification partners may confirm the authenticity of documents you submit during KYC.
• Fraud-detection and responsible gaming databases may flag accounts associated with known fraudulent activity or self-exclusion registries.

dlb777 does not sell your personal data. We share your information only with the categories of third parties listed below, and only to the extent strictly necessary for the stated purpose:

3.1 Payment Service Providers

To process your deposits and withdrawals, we share relevant financial and identity information with our payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard. These providers are contractually bound to process your data solely for the purpose of completing the relevant transaction and are prohibited from using it for any other purpose.

3.2 Identity Verification Partners

To fulfil our KYC obligations, we may share your identity documents and related information with specialist identity verification service providers. These providers verify the authenticity of the documents you submit and confirm your identity against relevant databases. All such providers are contractually bound to treat your data with strict confidentiality.

3.3 Technology & Infrastructure Providers

dlb777 uses third-party technology providers for services including cloud hosting, database management, cybersecurity monitoring, and customer support platforms. These providers act as data processors on our behalf and are permitted to access your data only as necessary to deliver their contracted services. They may not use your data for their own purposes.

3.4 Game Content Providers

Games on the dlb777 Platform are supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised or pseudonymised session and wager data for the purpose of ensuring fair game operation, detecting technical faults, and resolving game-round disputes. They do not receive your name, contact details, or payment information.

3.5 Legal & Regulatory Authorities

dlb777 may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or government authorities where required to do so by applicable law, court order, or lawful government request. We will notify you of any such disclosure where legally permitted to do so.

3.6 Business Transfers

In the event that dlb777 undergoes a merger, acquisition, or sale of all or a portion of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified in advance of any such transfer and the privacy practices of the new entity will be communicated to you at that time.

dlb777 implements a layered security architecture designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include, but are not limited to, the following:

• Transport Layer Security (TLS 1.2+): All data transmitted between your device and our servers is encrypted using current TLS standards. Outdated protocols (SSL 3.0, TLS 1.0) are disabled.
• Data encryption at rest: Sensitive personal data — including KYC documents, payment method references, and identity records — is encrypted at the storage layer using AES-256 encryption.
• Password hashing: Account passwords are never stored in plain text. They are hashed using a one-way cryptographic algorithm (bcrypt) with a unique salt per account. Not even our support staff can view your password.
• Access controls: Access to personal data within dlb777's internal systems is restricted on a strict need-to-know basis. Staff access is authenticated via multi-factor authentication (MFA) and is audited continuously.
• Intrusion detection and monitoring: Our infrastructure is monitored 24 hours a day, 7 days a week by automated security systems that detect and alert on anomalous activity, unauthorised access attempts, and potential data breaches.
• Penetration testing: dlb777 conducts regular penetration testing and vulnerability assessments of its platform to identify and remediate security weaknesses before they can be exploited.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that affects your personal information, dlb777 will notify affected players promptly in accordance with applicable data protection laws and will take immediate remediation steps.

Data Storage Location

Player data collected by dlb777 is stored on secure servers. Where data is processed or stored outside Bangladesh, dlb777 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to applicable data protection requirements. You may request information about where your data is stored by contacting us at [email protected].

dlb777 retains your personal data only for as long as is necessary for the purposes described in this Privacy Policy, and in accordance with applicable legal, regulatory, and operational requirements. The following retention periods apply to the main categories of data we hold:

When the applicable retention period expires, dlb777 will securely delete or anonymise your personal data so that it can no longer be associated with you. Where anonymisation is not technically feasible for specific data types, we will apply appropriate technical controls to prevent any further processing of that data beyond storage.

Please note that even if you close your dlb777 account or request erasure of your data, we are legally required to retain certain records — particularly KYC documents and financial transaction records — for the minimum periods specified above. This obligation exists under applicable anti-money laundering and financial record-keeping regulations and cannot be waived by individual request.