dhaka1 Privacy Policy

1Introduction and Data Controller

1.1 This Privacy Policy describes how dhaka1 ("we", "us", "our", or "the Platform"), accessible at dhaka1.onl, collects, processes, stores, and protects the personal data of individuals who register for, access, or use the dhaka1 online casino and sports betting platform.

1.2 dhaka1 acts as the data controller in respect of all personal data collected through the platform. This means dhaka1 determines the purposes and means by which personal data is processed.

1.3 This policy applies to all registered players, prospective players who visit the platform without completing registration, and any other individuals whose personal data dhaka1 processes in connection with its services.

1.4 This Privacy Policy should be read alongside the dhaka1 Terms & Conditions and Responsible Gaming Policy, both of which are published on the platform and incorporated by reference into this policy.

2Legal Basis for Processing

2.1 dhaka1 processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to create and manage your account, process deposits and withdrawals, and provide access to games and betting markets.
• Legal obligation: Processing required to comply with Know Your Customer (KYC) obligations, anti-money-laundering requirements, and any applicable regulatory obligations.
• Legitimate interests: Processing carried out to detect and prevent fraud, maintain platform security, improve the platform, and manage responsible gaming obligations — where these interests are not overridden by your rights and freedoms.
• Consent: Processing of your data for direct marketing communications, where you have explicitly opted in to receive such communications.

2.2 Where dhaka1 relies on consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

3How We Use Your Personal Data

3.1 dhaka1 uses the personal data it collects for the following purposes:

• To create, verify, and manage your player account, including authentication of your identity at login.
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard in BDT.
• To conduct mandatory KYC verification prior to the processing of withdrawal requests.
• To deliver casino games, live dealer tables, sports betting markets, crash games, slots, and Hi-Lo content to your device.
• To administer bonuses, promotions, and loyalty rewards, including verifying eligibility and tracking wagering progress.
• To detect and prevent fraud, money laundering, cheating, multi-accounting, and other prohibited conduct.
• To provide customer support and resolve disputes or complaints.
• To enforce responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion.
• To send transactional communications (e.g., deposit confirmations, withdrawal updates, account security alerts) via SMS or email.
• To send marketing communications about promotions, new games, and platform updates — only where you have provided explicit consent.
• To analyse platform usage patterns and improve the user experience, game selection, and platform performance.

4Sharing Your Personal Data

4.1 dhaka1 does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for their own marketing purposes.

4.2 dhaka1 may share your personal data with the following categories of third parties, strictly for the purposes described:

• Payment processors: bKash, Nagad, Rocket, Upay, and card processing partners receive only the data required to authenticate and complete a transaction. They do not receive your full gaming profile or betting history.
• Identity verification providers: Third-party KYC partners may receive copies of identity documents and facial verification data solely for the purpose of completing mandatory age and identity checks.
• Game studio providers: Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, Microgaming, and other integrated studios may receive a session token and anonymised player identifier for the purpose of delivering game content. They do not receive your full registration details.
• IT and infrastructure providers: Cloud hosting, security monitoring, and content delivery services that process data on dhaka1's behalf under strict data processing agreements.
• Legal and regulatory authorities: dhaka1 may disclose personal data to law enforcement agencies, courts, or competent regulatory bodies where required to do so by applicable law or in connection with legal proceedings.

4.3 All third-party service providers engaged by dhaka1 are required to process personal data only on documented instructions from dhaka1 and are obligated to implement appropriate technical and organisational security measures.

5Cookies and Tracking Technologies

5.1 dhaka1 uses cookies and similar tracking technologies to operate the platform, maintain your session state, detect fraud, and analyse platform usage. The following categories of cookies may be placed on your device:

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Used to remember your account preferences such as language settings and responsible gaming tool configurations.
• Analytical cookies: Used to collect anonymised data about how players navigate the platform, which games are most visited, and how long sessions last. This data is used solely to improve the platform.
• Security cookies: Used to detect and block automated bot traffic, multi-account activity, and other fraudulent behaviour.

5.2 dhaka1 does not place third-party advertising cookies or retargeting pixels on the platform. You will not be tracked across other websites for the purpose of delivering personalised advertisements based on your dhaka1 activity.

5.3 You may manage cookie preferences through your device or browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into and using the platform.

6Data Retention

6.1 dhaka1 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including legal, accounting, and compliance obligations.

6.2 The following retention periods apply as a general guide:

• Account registration data: Retained for the duration of the account relationship and for a minimum of five years following account closure, for KYC and anti-money-laundering record-keeping purposes.
• Transaction records: Retained for a minimum of five years from the date of the transaction, in accordance with financial record-keeping requirements.
• KYC documents: Retained for a minimum of five years from the date of verification or account closure, whichever is later.
• Support communications: Retained for two years from the date of the last communication in a support thread.
• Marketing consent records: Retained for the duration of your consent and for two years following withdrawal, as evidence of compliance.

6.3 Where personal data is no longer required for any lawful purpose, dhaka1 will securely delete or anonymise it in accordance with its internal data destruction procedures.

7Security Measures

7.1 dhaka1 implements a range of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and dhaka1's servers.
• Encrypted storage of sensitive data fields, including identity document data and payment method identifiers.
• Role-based access controls ensuring that only authorised personnel with a legitimate business need can access player personal data.
• Regular security audits and penetration testing of the platform infrastructure.
• Automated monitoring for unusual access patterns, brute-force login attempts, and other potential security incidents.
• Two-factor authentication options available to registered players for additional account security.

7.2 Despite these measures, no internet-based system can guarantee absolute security. Players are responsible for maintaining the security of their own login credentials and should notify dhaka1 immediately at [email protected] if they suspect unauthorised access to their account.

8Your Data Rights

8.1 As a registered player on dhaka1, you hold the following rights in respect of your personal data. Requests to exercise any of these rights should be submitted to [email protected] with the subject line "Data Rights Request".

8.2 dhaka1 will acknowledge all data rights requests within five business days and will provide a substantive response within 30 calendar days. In complex cases, this period may be extended by a further 30 days, with written notice provided to the requesting player.

8.3 Please note that certain rights — particularly the right to erasure — may be subject to limitations where dhaka1 is required to retain data for legal or regulatory compliance purposes, including KYC and anti-money-laundering record-keeping obligations.

9Children and Minors

9.1 The dhaka1 platform is strictly for adults aged 21 and above. dhaka1 does not knowingly collect personal data from individuals under the age of 21. If dhaka1 discovers that personal data has been collected from a minor, that data will be deleted promptly and the associated account will be permanently closed.

9.2 If you have reason to believe that a person under the age of 21 has registered on the dhaka1 platform, please notify the support team immediately at [email protected].

10Changes to This Privacy Policy

10.1 dhaka1 reserves the right to update or amend this Privacy Policy at any time. The most current version will always be published at dhaka1.onl/privacy-policy, with the "Last Updated" date revised accordingly.

10.2 Where changes are material, dhaka1 will notify registered players via the email address associated with their account or via an in-platform notification. Continued use of the platform following the publication of a revised Privacy Policy constitutes acceptance of the updated terms.

11Contact and Complaints

11.1 For any questions, concerns, or requests relating to this Privacy Policy or to the handling of your personal data, please contact the dhaka1 privacy team at [email protected] with the subject line "Privacy Enquiry".

11.2 dhaka1 is committed to resolving privacy complaints promptly and fairly. If you submit a complaint, dhaka1 will acknowledge receipt within 48 hours and provide a substantive response within 14 business days.