dk365 Privacy
Policy

dk365 collects personal data from players and site visitors in order to operate a safe, compliant, and enjoyable gaming platform. We collect only the minimum data necessary for each specific purpose. The categories of personal data collected by dk365 are set out below.

1.1 Registration Data

When you create a dk365 account, we collect the information you provide during the registration process. This includes your full legal name, Bangladeshi mobile phone number, date of birth, and a self-selected password (stored as a one-way cryptographic hash — dk365 never stores passwords in plain text). This data is necessary to create and maintain your account, verify your identity, and communicate with you about your account.

1.2 Identity Verification (KYC) Data

As part of our mandatory Know Your Customer (KYC) process, dk365 collects copies of government-issued identity documents for all registered players. Accepted documents include your Bangladeshi National Identity Card (NID) — front and back — and your Bangladeshi Passport photo page. These documents are used solely for age verification and identity confirmation. KYC documents are stored in an encrypted document vault with access restricted to the dk365 compliance team.

1.3 Financial Transaction Data

dk365 records all deposits, withdrawals, and bonus transactions made on your account. This includes the transaction amount in BDT, the payment method used (bKash, Nagad, Rocket, or Upay), the transaction reference number issued by the payment provider, and the date and time of the transaction in Bangladesh Standard Time (BST, UTC+6). dk365 does not store full mobile financial service account numbers — only the last four digits are retained for reference purposes.

1.4 Gaming Activity Data

dk365 logs your gaming activity on the platform, including the games played, bet amounts placed, game outcomes, session start and end times, and bonus usage. This data is required for bet settlement, bonus verification, fraud detection, and responsible gaming monitoring. Gaming activity logs are retained in accordance with the data retention schedule in Section 7.

1.5 Device and Technical Data

When you access dk365 via a browser or mobile device, our servers automatically collect certain technical data. This includes your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited within dk365, and session duration. This technical data is used for platform security, fraud detection, and anonymised analytics to improve the dk365 user experience. IP addresses are not associated with your registered identity in our analytics systems.

1.6 Support and Communications Data

If you contact dk365 support via email or the on-site live chat, we retain a record of the conversation, including the content of messages exchanged and the date and time of contact. This data is used to resolve support queries, maintain a history of account-related issues, and improve our support quality. Support correspondence is retained for a period of 24 months from the date of the most recent interaction.

dk365 does not sell, rent, or share your personal data with third parties for their own marketing purposes. However, in order to operate the dk365 platform, we work with a limited set of trusted third-party service providers who process data on our behalf. All third-party processors are bound by data processing agreements that restrict their use of your data to the specific purpose for which it was shared.

3.1 Payment Service Providers

dk365 shares transaction reference data with your chosen mobile financial service provider (bKash, Nagad, Rocket, or Upay) as necessary to process deposits and withdrawals. The data shared is limited to the transaction amount, reference number, and the registered mobile number associated with your payment account. Payment providers operate under their own privacy policies and regulatory frameworks applicable to mobile financial services in Bangladesh.

3.2 Game Content Providers

Games hosted on the dk365 platform are provided by licensed third-party game studios including Pragmatic Play, Evolution Gaming, JILI, Ezugi, NetEnt, Microgaming, and Spribe. When you play a game provided by one of these studios, the game client may receive a session token and anonymised player identifier to enable game functionality and return bet results. No personally identifiable information (full name, mobile number, NID) is shared with game content providers.

3.3 Analytics and Security Services

dk365 uses internal analytics and third-party security tools — including fraud detection and bot-prevention services — to protect the platform and improve performance. These tools process technical data (IP addresses, device fingerprints, session patterns) under strict data minimisation and purpose-limitation controls. Analytics data is anonymised before being used for any reporting or product-improvement purpose.

3.4 Legal and Regulatory Disclosure

dk365 may disclose personal data to regulatory bodies, law enforcement agencies, or courts where we are legally required to do so — for example, in connection with an AML investigation, a court order, or a regulatory compliance audit. In such cases, dk365 will disclose only the minimum data required to satisfy the legal obligation and will, where permissible by law, notify the affected player of the disclosure.

3.5 Business Transfers

In the event that dk365 undergoes a merger, acquisition, or transfer of its business assets, player data held by dk365 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and any material change to this Privacy Policy that results from it.

dk365 implements a layered, defence-in-depth approach to protecting the personal data of all players. Security is not a single feature — it is a principle applied across every layer of the dk365 platform architecture.

5.1 Encryption

All data transmitted between your browser or mobile device and the dk365 platform is encrypted using TLS 1.3. Data stored in dk365 databases — including personal information, KYC documents, and financial records — is encrypted at rest using AES-256 symmetric encryption. Passwords are never stored in plain text; dk365 uses a modern cryptographic hashing algorithm with per-user salting to ensure password data cannot be reversed or bulk-cracked in the event of a security incident.

5.2 Access Controls

Access to personal data within dk365's internal systems is restricted on a strict need-to-know basis. dk365 staff are assigned role-based access permissions that grant only the minimum data access required to perform their job function. All internal access to player data is logged and subject to periodic access review. KYC document storage is further restricted to the compliance team and is inaccessible to customer-facing support staff by default.

5.3 Incident Response

dk365 maintains a documented data breach response plan. In the event that a security incident results in the unauthorised access, disclosure, or loss of player personal data, dk365 will: (a) contain the breach and assess its scope within 24 hours of detection; (b) notify affected players via their registered mobile number or email within 72 hours where the breach is likely to result in a risk to their rights or interests; (c) document the incident and remediation actions taken. Players are encouraged to notify dk365 immediately at [email protected] if they suspect that their account has been compromised.

5.4 Player-Side Security

While dk365 takes every reasonable technical measure to protect your data on the platform side, account security also depends on actions taken by you as the account holder. dk365 recommends that all players: use a unique, strong password for their dk365 account that is not reused on any other platform; enable two-factor authentication (2FA) via OTP where offered; never share their password or OTP codes with any person — including anyone claiming to be dk365 support; log out of their dk365 account when using shared or public devices.

dk365 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods applied by dk365 are set out in the table in Section 1 and summarised below.

7.1 Active Accounts

While your dk365 account is active, all personal data associated with your account is retained in full. This includes registration data, KYC documents, financial transaction records, gaming activity logs, and support correspondence, each retained for the periods specified in Section 1.

7.2 Closed or Suspended Accounts

Following the closure or permanent suspension of a dk365 account — whether player-initiated or dk365-initiated — personal data is retained for a post-closure period as follows: financial transaction records and KYC documents for 7 years (AML compliance requirement); gaming activity data for 5 years; registration data and support records for 5 years from the date of account closure; technical and session data for 12 months from the date of last access. After the applicable retention period expires, data is securely deleted or irreversibly anonymised.

7.3 Inactive Accounts

Accounts with no login activity for a continuous period of 12 months are classified as inactive. dk365 will attempt to contact inactive account holders via SMS to their registered mobile number before taking any action on the account. If no activity is recorded within 90 days of the inactivity notification, dk365 may archive the account. Archived account data continues to be retained in accordance with the retention periods above and may be fully re-activated upon the player's request.

7.4 Secure Deletion

When personal data reaches the end of its retention period, dk365 securely deletes it using industry-standard data destruction procedures. For digital records, this means cryptographic erasure (key destruction) for encrypted data stores and secure overwrite for unencrypted records. Paper KYC documents (if any are retained in physical form) are destroyed by cross-cut shredding.