Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how dhaka ("dhaka", "we", "us", "our"), the operator of the online gaming platform at https://dhaka.bio and all associated subdomains and mobile interfaces (the "Platform"), collects, uses, stores, discloses, and protects personal data relating to registered players, visitors, and prospective users ("you", "your").

By registering an account on the dhaka Platform or by continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform immediately and contact us to close your account.

This Policy should be read alongside the dhaka Terms & Conditions, which together form the complete framework governing your relationship with us.

2. Data Controller

2.1 For the purposes of this Policy, dhaka acts as the data controller in respect of personal data collected from users of the Platform. As data controller, dhaka determines the purposes and means by which your personal data is processed.

2.2 Where dhaka engages third-party service providers to process data on our behalf (for example, payment processors, game studios, or identity verification services), those providers act as data processors under our instruction and are bound by data processing agreements that restrict their use of your personal data to the purposes defined by dhaka.

2.3 All enquiries relating to data protection, including requests to exercise your data rights, should be directed to our support team via the contact details set out in Section 13 of this Policy.

3. Data We Collect

dhaka collects the following categories of personal data in connection with the operation of the Platform:

3.1 Identity & Registration Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (used to verify the 18+ age requirement);
• Registered mobile number and email address;
• National Identity Card (NID) number or passport number (collected during KYC verification);
• Photographic identification documents submitted for KYC purposes.

3.2 Financial & Transaction Data

• Mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers);
• Bank account details provided for withdrawals;
• Deposit amounts, withdrawal amounts, and transaction timestamps;
• Betting history, game participation records, and wagering activity.

3.3 Technical & Usage Data

• IP address and approximate geographic location at the time of access;
• Device type, operating system, and browser or application version;
• Session duration, pages visited, and interaction patterns on the Platform;
• Login timestamps and access logs;
• Cookie identifiers and analytics data (see Section 9 for full details).

3.4 Communications Data

• Records of live chat conversations with dhaka support staff;
• Email correspondence sent to or received from dhaka;
• Records of any complaints, disputes, or responsible gaming requests submitted.

4. How We Collect Your Data

4.1 Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a survey or promotion.

4.2 Automatically — when you access and interact with the Platform, our servers automatically record technical data including your IP address, device identifiers, session data, and usage patterns. This data is collected via cookies, server logs, and analytics tools.

4.3 From third parties — dhaka may receive data about you from third-party identity verification providers (for KYC purposes), payment processors (to confirm deposit and withdrawal transactions), and fraud-prevention services. We will only use such third-party data in ways consistent with this Policy.

5. Purpose & Legal Basis for Processing

The table below sets out the purposes for which dhaka processes your personal data and the corresponding legal basis for each processing activity.

Purpose	Legal Basis
Account registration and management	Performance of contract
Processing deposits and withdrawals	Performance of contract
Identity verification (KYC / AML)	Legal obligation
Age verification (18+ compliance)	Legal obligation
Fraud detection and prevention	Legitimate interests
Platform security and abuse prevention	Legitimate interests
Customer support and dispute resolution	Performance of contract
Responsible gaming monitoring	Legal obligation / legitimate interests
Platform analytics and performance improvement	Legitimate interests
Sending promotional communications	Consent (opt-in)

6. Data Sharing & Disclosure

6.1 dhaka does not sell, rent, or trade your personal data to any third party for marketing or commercial gain under any circumstances.

6.2 We may share your personal data with the following categories of third parties, strictly on a need-to-know basis and only to the extent necessary to fulfil the purposes set out in this Policy:

• Payment processors — bKash, Nagad, Rocket, Upay, and banking partners, solely to facilitate deposit and withdrawal transactions;
• Identity verification providers — third-party KYC and AML service providers engaged to verify player identities and comply with legal obligations;
• Game content providers — studios including Pragmatic Play, NetEnt, Microgaming, Spribe, Evolution Gaming, and Ezugi may receive session tokens and anonymised gameplay data for game delivery and RNG certification purposes;
• Analytics providers — aggregated, anonymised platform usage data may be shared with analytics services to help us improve the Platform;
• Legal and regulatory authorities — where required by applicable law, court order, or regulatory direction, dhaka may disclose personal data to competent authorities.

6.3 All third-party data processors engaged by dhaka are bound by data processing agreements requiring them to process your data only as instructed by dhaka and to maintain appropriate technical and organisational security measures.

7. Data Retention

7.1 dhaka retains your personal data for as long as your account remains active and for a period thereafter as required to comply with our legal, regulatory, and contractual obligations.

7.2 As a general principle, the following retention periods apply:

• Account and identity data: retained for a minimum of five years from the date of account closure, in compliance with anti-money-laundering record-keeping obligations;
• Transaction records: retained for a minimum of five years from the date of each transaction;
• Support communications: retained for three years from the date of the communication;
• Technical and usage logs: retained for up to 12 months, after which they are anonymised or deleted.

7.3 Where you request deletion of your personal data, dhaka will assess the request against its legal retention obligations. Data that is subject to a mandatory retention period cannot be deleted until that period has expired, at which point it will be securely destroyed.

8. Security Measures

8.1 dhaka implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and the Platform;
• Encryption of sensitive data at rest within our databases;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular security audits and vulnerability assessments of the Platform infrastructure;
• Multi-factor authentication requirements for administrative access to back-end systems;
• Incident response procedures for the detection, reporting, and management of data security events.

8.2 In the event of a data security incident that is likely to affect your rights or interests, dhaka will notify affected players as promptly as practicable, providing details of the nature of the incident and the steps we are taking to address it.

8.3 While dhaka takes every reasonable precaution to protect your data, no digital platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials and for reporting any suspected unauthorised access to dhaka support immediately.

9. Cookies & Tracking Technologies

9.1 The dhaka Platform uses cookies — small text files stored on your device — and similar tracking technologies to support the operation of the Platform. We use the following categories of cookies:

Cookie Type	Purpose	Duration
Strictly Necessary	Session management, login state, security tokens	Session / up to 24 hours
Functional	Language preferences, last-visited game, display settings	Up to 12 months
Analytics	Aggregated usage data to improve Platform performance	Up to 12 months

9.2 dhaka does not use advertising cookies, tracking pixels, or third-party marketing cookies on the Platform. No cookie data is shared with advertising networks.

9.3 You may manage or disable cookies through your browser settings. Please note that disabling strictly necessary cookies may prevent you from logging in or using certain features of the Platform correctly.

10. Your Data Rights

Subject to applicable law and our legal retention obligations, you have the following rights in relation to your personal data held by dhaka:

• Right of access — you may request a copy of the personal data we hold about you;
• Right to rectification — you may request correction of inaccurate or incomplete personal data;
• Right to erasure — you may request deletion of your personal data, subject to our legal retention obligations;
• Right to restriction — you may request that we restrict the processing of your data in certain circumstances;
• Right to data portability — you may request a machine-readable copy of the data you have provided to us;
• Right to object — you may object to processing carried out on the basis of legitimate interests;
• Right to withdraw consent — where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact dhaka support via live chat in your account dashboard or by email at [email protected]. We will acknowledge your request within 24 hours and respond substantively within 30 days.

11. Minors

11.1 The dhaka Platform is strictly for adults aged 18 years and above. dhaka does not knowingly collect, store, or process personal data relating to individuals under the age of 18.

11.2 If dhaka becomes aware that personal data has been submitted by or on behalf of a minor, that data will be deleted immediately and the associated account will be closed. Parents or guardians who believe a minor has accessed the Platform should contact our support team immediately.

12. International Data Transfers

12.1 dhaka's primary data storage and processing infrastructure is located in data centres serving the South and South-East Asia region. In certain circumstances, data may be processed by third-party service providers whose systems are located outside Bangladesh, including providers of game content, KYC verification, and cloud infrastructure.

12.2 Where personal data is transferred outside Bangladesh, dhaka ensures that appropriate safeguards are in place — such as contractual protections and security standards equivalent to those described in this Policy — to protect your data throughout any international transfer.

13. Changes to This Policy

13.1 dhaka reserves the right to update this Privacy Policy at any time. The revised Policy will be published on this page with an updated effective date. Where changes are material, dhaka will endeavour to notify registered players via email or in-platform notification prior to the changes taking effect.

13.2 Your continued use of the Platform after any revision to this Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed of how we protect your data.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way dhaka handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 within your dhaka account dashboard
• Email: [email protected]
• WhatsApp: +880 1700 000000

dhaka aims to acknowledge all privacy-related enquiries within 24 hours and to provide a full response within 30 days of receiving a verified request.