dkwim Privacy Policy

1 Introduction and Scope

dkwim operates the online casino and sports betting platform accessible at dkwim.io, providing services to eligible players across Bangladesh. As part of delivering those services — including account management, game access, payment processing, and customer support — dkwim necessarily collects and processes certain categories of personal data.

This Privacy Policy sets out, in plain and formal English, the complete framework by which dkwim collects, uses, stores, protects, and in limited circumstances shares your personal information. It also describes the rights available to you as a dkwim player with respect to your personal data, and how you may exercise those rights.

This policy applies to all personal data collected through:

• The dkwim website and mobile web interface at dkwim.io
• Account registration and verification processes
• Customer support interactions via live chat, email, and WhatsApp
• Payment transactions processed through bKash, Nagad, Rocket, Upay, bank transfers, and card payments
• Game activity, wagering records, and sportsbook participation
• Marketing communications where you have opted in to receive them

dkwim is the data controller in respect of all personal data collected through the platform. All questions, requests, and concerns relating to data privacy should be directed to our support team at [email protected].

2 Personal Data We Collect

dkwim collects personal data across several categories depending on how you interact with the platform. The following table summarises the main categories of data collected, the specific data points within each category, and the primary reason for collection:

dkwim does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or health information, except where health or vulnerability information is voluntarily provided by a player in connection with a responsible gaming request (for example, a self-exclusion request citing a gambling problem). Such sensitive data, where provided, is handled with the highest level of care and used solely for the purpose for which it was shared.

3 How We Collect Your Data

dkwim collects personal data through a number of distinct channels depending on the nature of your interaction with the platform:

• Directly from you: When you register an account, submit KYC verification documents, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion, you provide personal data directly to dkwim.
• Automatically through your use of the platform: When you visit dkwim.io or interact with our games and sportsbook, we automatically collect technical and usage data including your IP address, device information, session duration, pages visited, and game activity via server logs and standard web analytics mechanisms.
• From payment processors: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a bank or card payment, the relevant payment provider shares confirmation data with dkwim to facilitate the transaction and confirm that the payment account is registered in your name.
• From identity verification services: Where dkwim engages a third-party KYC verification provider to validate the authenticity of identity documents you have submitted, that provider may return confirmation data, flag data, or risk-scoring data to dkwim.
• From cookies and similar tracking technologies: dkwim uses strictly necessary cookies to maintain session state (keeping you logged in), and functional cookies to remember your preferences. We do not use third-party advertising cookies or behavioural tracking pixels.

4 Legal Basis for Processing

dkwim processes your personal data on the following legal bases, each of which applies to the specific processing activities described:

• Performance of a contract: The majority of data processing on dkwim is necessary to deliver the services you have contracted for — maintaining your account, processing your deposits and withdrawals, settling your bets, and providing customer support. Without this processing, dkwim cannot provide its services to you.
• Legal obligation: Certain processing activities are required by applicable law, including identity verification (KYC), age verification (21+ requirement), anti-money laundering checks, and the retention of financial transaction records.
• Legitimate interests: dkwim processes technical and security data on the basis of its legitimate interest in protecting the platform from fraud, account takeover, and abuse. dkwim's legitimate interest in maintaining a secure, fair, and sustainable platform is balanced against your privacy rights and does not override them.
• Consent: Where dkwim sends you marketing communications — such as promotional emails or WhatsApp messages about bonuses and offers — we do so only on the basis of your explicit consent, given at the time of registration or subsequently via your account communication preferences. You may withdraw your consent to marketing communications at any time.

5 How We Use Your Personal Data

dkwim uses the personal data it collects for the following specific purposes:

• To create, maintain, and administer your dkwim account.
• To verify your identity and age in accordance with the 21+ age restriction.
• To process your deposits and withdrawals in Bangladeshi Taka via your chosen payment method.
• To deliver the casino games, live dealer tables, and sportsbook betting markets that make up the dkwim service.
• To detect, investigate, and prevent fraudulent activity, money laundering, account takeover, and any other form of abuse or prohibited activity on the platform.
• To administer bonuses, promotions, and loyalty rewards in accordance with applicable terms.
• To enforce responsible gaming limits, process self-exclusion requests, and monitor for signs of problem gambling where a player has requested monitoring support.
• To respond to customer support enquiries submitted via live chat, email, or WhatsApp.
• To send you account-related notifications — including deposit confirmations, withdrawal updates, security alerts, and Terms & Conditions amendment notices — which are non-promotional and mandatory for account holders.
• To send you promotional communications about bonuses, offers, and new features, where you have given consent.
• To compile anonymised and aggregated statistical reports on platform usage, game popularity, and player behaviour, which inform product development decisions. These reports do not identify individual players.

dkwim does not use your personal data for automated individual decision-making that produces legal or similarly significant effects without human review, with the limited exception of automated fraud detection systems that may trigger an account security flag — which is always reviewed by a member of the dkwim compliance team before any action is taken on your account.

6 Data Sharing and Third Parties

dkwim does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Personal data is shared with third parties only in the following limited and controlled circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — solely for the purpose of processing your deposit and withdrawal transactions. These providers operate under their own privacy policies and are bound by their respective regulatory obligations in Bangladesh.
• KYC and identity verification providers: Third-party verification services engaged by dkwim to validate identity documents submitted during the account verification process. These providers are contracted to process your data solely for verification purposes and are prohibited from using it for any other purpose.
• Game content providers: Live dealer game studios including Evolution Gaming and Ezugi operate game servers that you connect to when playing live casino games. These providers may process your IP address and session data for the purpose of delivering the game stream. Game providers do not receive your full identity or financial data.
• IT and infrastructure providers: Cloud hosting, data storage, and cybersecurity service providers who maintain the technical infrastructure on which dkwim operates. These providers are engaged under data processing agreements that restrict their use of your data strictly to the provision of infrastructure services.
• Legal and regulatory authorities: Where dkwim is required by applicable law, court order, or regulatory demand to disclose personal data, it will comply with such requirements and will notify the affected player to the extent permitted by law.

7 Data Retention

dkwim retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active account data: Retained for the lifetime of your account and for a period of 5 years following permanent account closure.
• Financial transaction records: Retained for a minimum of 7 years from the date of the transaction, in accordance with financial record-keeping requirements.
• KYC verification documents: Retained for a minimum of 5 years following account closure or the completion of the business relationship, whichever is later.
• Customer support records: Retained for 3 years from the date of the last interaction, or longer if the communication relates to an ongoing dispute or legal matter.
• Marketing consent records: Retained for the duration of your consent and for 1 year following withdrawal of consent, as evidence of the consent having been given and subsequently withdrawn.
• Server and security logs: Retained for 12 months on a rolling basis, except where specific log entries are preserved as evidence in connection with a security investigation or dispute.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with dkwim's internal data destruction procedures.

8 Data Security

dkwim implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption applied to all data transmissions between your device and dkwim's servers, ensuring that data in transit cannot be intercepted in readable form.
• Encryption at rest for stored personal data and financial records, using industry-standard encryption algorithms.
• Access controls ensuring that dkwim staff access personal data only on a strict need-to-know basis, with role-based access permissions and comprehensive access logging.
• Two-factor authentication (2FA) available to all players for their dkwim accounts, and mandatory for all dkwim staff accessing internal systems that contain personal data.
• Regular security assessments including vulnerability scanning and penetration testing of dkwim's infrastructure and application layer.
• Incident response procedures enabling dkwim to promptly identify, contain, and remediate any personal data breach, and to notify affected players and relevant authorities within required timeframes where a breach poses a risk to player rights and freedoms.

While dkwim takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their dkwim account and to enable two-factor authentication to maximise the security of their account access.

9 Cookies and Tracking Technologies

dkwim uses a limited and strictly controlled set of cookies and similar technologies on the dkwim.io platform. We do not use advertising cookies, behavioural tracking cookies, or third-party analytics cookies that share your data with external marketing platforms.

The cookies used by dkwim fall into the following categories:

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your login session, preserve your game state across pages, and enable the secure transmission of payment data. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: These cookies remember your preferences — such as your preferred language setting and responsible gaming limit configurations — so that you do not need to re-enter them on each visit.
• Security cookies: These cookies support fraud detection and bot-mitigation systems by recording anonymised session integrity signals. They do not track your browsing behaviour across external websites.

Most web browsers allow you to control the cookies stored on your device through browser settings. Disabling strictly necessary cookies will impair your ability to use the dkwim platform. Disabling functional cookies will result in loss of preference persistence between sessions.

10 Your Data Rights

As a player on the dkwim platform, you hold the following rights with respect to your personal data. dkwim is committed to facilitating the exercise of these rights promptly and without unnecessary complexity:

• Right of Access: You have the right to request a copy of the personal data that dkwim holds about you, including information on how it is used and with whom it is shared. dkwim will provide a structured response within 30 days of receiving a valid access request.
• Right to Rectification: If any personal data held by dkwim about you is inaccurate or incomplete, you have the right to request correction. You may update basic contact details through your account dashboard; for corrections to identity or financial data, please contact support.
• Right to Erasure: You may request that dkwim delete your personal data. This right is subject to limitations where dkwim is legally required to retain data — for example, financial transaction records subject to regulatory retention requirements. Where erasure is not possible in full, dkwim will explain the specific data categories that must be retained and the legal basis for retention.
• Right to Restriction of Processing: Where you contest the accuracy of your data or have objected to a particular processing activity, you may request that dkwim restrict processing of your data while the matter is under review.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you may request that dkwim provide your personal data in a structured, machine-readable format.
• Right to Object: You may object to processing based on dkwim's legitimate interests. dkwim will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests. You may also object to direct marketing communications at any time, without restriction.
• Right to Withdraw Consent: Where processing is based on your consent — primarily marketing communications — you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please contact dkwim by emailing [email protected] with the subject line "Data Rights Request". dkwim may request evidence of your identity before processing a data rights request, to ensure that personal data is not disclosed to or deleted at the request of an unauthorised third party.

11 Children and Minors

dkwim's platform is strictly intended for adults aged 21 and above. dkwim does not knowingly collect, process, or retain personal data from any individual under the age of 21. The registration process includes age verification steps designed to prevent minors from creating accounts.

12 Marketing Communications

Where you have opted in to receive marketing communications during registration or through your account preferences, dkwim may contact you via email or WhatsApp with information about bonuses, promotions, new games, sportsbook offers, and seasonal campaigns relevant to Bangladesh players — such as Eid offers, Pohela Boishakh promotions, and BPL or IPL cricket betting specials.

dkwim will never send unsolicited marketing communications to players who have not opted in. Each marketing message will include clear instructions for opting out of future communications. You may also update your communication preferences at any time through your account dashboard or by contacting support.

dkwim does not share your contact details with third-party marketers for the purpose of sending you marketing communications on their behalf. All marketing messages sent to dkwim players originate from dkwim only.

13 Third-Party Services

The dkwim platform integrates with third-party services including payment providers and live game studios. While dkwim exercises care in selecting reputable service partners, dkwim does not control the privacy practices of third-party providers and is not responsible for the data handling practices of those providers in respect of data processed directly between you and them.

Players who interact with third-party payment platforms such as bKash, Nagad, and Rocket are subject to those providers' own privacy policies in respect of data processed by those providers directly. dkwim encourages players to review the privacy policies of any third-party service they use in connection with their dkwim account.

14 Changes to This Privacy Policy

dkwim reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform services. Material changes to this policy will be communicated to registered players via email notification to the address on their account, and/or via a prominent notice on the dkwim platform, at least 7 days before the changes take effect.

The version of this Privacy Policy applicable to your use of the dkwim platform is the version in force at the time of your interaction. Continued use of the platform following the effective date of any updated Privacy Policy constitutes acceptance of the revised terms. The date of the most recent revision is shown at the top of this page.

15 Contact and Data Enquiries

All enquiries, complaints, and requests relating to this Privacy Policy or dkwim's handling of your personal data should be directed to:

• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" as appropriate.
• Live Chat: Available 24 hours a day, 7 days a week through the dkwim platform.
• WhatsApp: +880 1700 000000 — available 8AM to 12AM Bangladesh Standard Time (BST, UTC+6).

dkwim will acknowledge receipt of a privacy-related enquiry within 24 hours and will aim to provide a full and substantive response within 30 days. Where a request is particularly complex or dkwim receives a high volume of requests simultaneously, the response period may be extended by a further 30 days, in which case dkwim will notify you of the extension within the initial 30-day period.

This Privacy Policy was last reviewed and updated on 1 January 2026. Players are encouraged to review this policy periodically to remain informed of how dkwim protects their personal data.