Privacy Policy — How dkwing Protects Your Data

When you use the dkwing platform, we collect certain categories of personal information. The data we collect depends on how you interact with our services — some information is provided directly by you, some is collected automatically as you use the platform, and some may be received from third-party payment processors or identity verification services.

Information You Provide Directly

• Account Registration Data: When you create a dkwing account, we collect your full legal name, email address, mobile phone number, date of birth, and preferred payment method details (such as your bKash or Nagad account number).
• Identity Verification Documents: As part of our KYC (Know Your Customer) process, we collect copies of government-issued identity documents such as your National ID card or passport, and proof of payment method ownership.
• Support Communications: When you contact dkwing's support team via email at [email protected], we retain the content of your communications, your contact details, and any attachments you submit, for the purpose of resolving your query and maintaining a support history.
• Transaction Information: Details of all deposits, withdrawals, and betting activity associated with your dkwing account, including transaction amounts in BDT, timestamps, payment method references, and game outcomes.

Information Collected Automatically

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers. This data is collected automatically when you access the dkwing platform.
• Usage & Behavioural Data: Pages visited, games played, bet amounts, session duration, click-through patterns, and feature usage within the platform. This data helps us understand how players use dkwing and how we can improve the experience.
• Location Data: Approximate geographic location derived from your IP address. We use this to confirm that you are accessing dkwing from Bangladesh and to apply the correct currency and language settings. We do not collect precise GPS-level location data.

Information from Third Parties

• Payment Processors: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a supported bank, we receive transaction confirmation data from those providers. We do not receive or store your full mobile banking credentials.
• Identity Verification Services: Where we use third-party identity verification providers to assist with KYC, those providers may return a verification status and risk score to dkwing. The underlying documents are processed in accordance with that provider's own privacy policy.

dkwing processes personal data on the basis of one or more lawful grounds. For each purpose listed below, we identify the lawful basis on which the processing rests. We do not use your personal data for purposes incompatible with those stated in this Privacy Policy without first seeking your consent.

Marketing Communications

dkwing sends promotional emails and notifications about bonuses, seasonal offers (such as Eid promotions, Pohela Boishakh specials, BPL season offers, and T20 World Cup campaigns), and platform updates only to players who have opted in to receive marketing communications. You may withdraw your consent at any time by updating your communication preferences in your account settings or by contacting [email protected].

dkwing does not sell or rent your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

Service Providers & Data Processors

dkwing engages carefully selected third-party service providers who process personal data on our behalf, under strict contractual data-processing agreements. These providers act only on dkwing's documented instructions and are not permitted to use your data for their own purposes. Categories of service providers include:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive the transaction data necessary to process your deposits and withdrawals. Each provider is subject to its own regulatory requirements under Bangladesh Bank guidelines.
• KYC & Identity Verification Providers: Third-party identity verification platforms that assist dkwing in confirming player identity and age as required by our AML/CTF compliance obligations.
• Game Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive game session data necessary to deliver game content and settle results. Game providers do not receive your financial transaction data or identity documents.
• Analytics Providers: Platform analytics services that help dkwing understand how the platform is used, identify technical issues, and improve user experience. Analytics data is aggregated and anonymised where possible.
• Email & Communication Services: Email delivery providers used to send account notifications, support responses, and (where opted-in) marketing communications.

Legal & Regulatory Disclosure

dkwing may disclose personal data to regulatory authorities, law enforcement agencies, or other public bodies where required to do so by law, court order, or regulatory direction. This includes disclosures made in connection with anti-money laundering (AML) investigations, counter-terrorism financing (CTF) obligations, and fraud investigations. dkwing will, where legally permitted, notify affected players of such disclosures.

Business Transfers

In the event that dkwing undergoes a corporate restructuring, merger, acquisition, or sale of all or part of its business, player personal data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and the privacy commitments applicable to their data under the new entity.

dkwing uses cookies and similar tracking technologies on its platform to enable essential functionality, maintain session security, analyse platform usage, and — where you have consented — deliver relevant promotional content. This section explains what cookies we use and how you can manage them.

What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device across pages and sessions. dkwing uses both first-party cookies (set by dkwing's own domain) and a limited set of third-party cookies (set by our analytics and game providers).

Cookie Categories Used by dkwing

Managing Your Cookie Preferences

You can manage cookie settings at any time through your browser's privacy or settings menu. Most modern browsers allow you to block or delete cookies on a site-by-site basis. Please note that disabling strictly necessary cookies will prevent you from logging in and using the dkwing platform. Disabling functional cookies may affect your experience by resetting personalisation settings on each visit.

dkwing applies a layered security architecture to protect the personal data of all registered players. Our security programme encompasses technical controls, operational procedures, and ongoing staff training designed to safeguard data against unauthorised access, alteration, disclosure, or destruction.

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or app and dkwing's servers is encrypted using industry-standard TLS protocols. This protects your login credentials, transaction data, and personal information during transit.
• Encrypted Data Storage: Sensitive personal data — including identity document scans and payment method details — is stored in encrypted form within dkwing's secure data infrastructure. Encryption keys are managed separately from the data they protect.
• Access Controls: Access to personal data is restricted to dkwing staff and contractors on a strict need-to-know basis. All internal access is logged and subject to regular access review. No employee has unrestricted access to the full player database.
• Intrusion Detection & Monitoring: dkwing operates continuous monitoring of its platform infrastructure for anomalous activity, potential intrusions, and data exfiltration attempts. Security alerts are triaged by a dedicated team operating on Bangladesh Standard Time (UTC+6).
• Regular Security Audits: dkwing conducts periodic security assessments and vulnerability scans. Critical vulnerabilities are remediated on a priority basis in accordance with dkwing's security patching policy.
• Staff Training: All dkwing staff with access to personal data receive training on data privacy obligations, secure data handling procedures, and the escalation process for suspected data incidents.

Data Breach Response

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, dkwing will take immediate steps to contain the breach, assess its scope and impact, and notify affected individuals as promptly as practicable. Notifications will be sent to the email address registered on the affected account and will include details of the nature of the breach, the data affected, the steps dkwing has taken in response, and any recommended actions for the player.

dkwing retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods below reflect the standard schedules applied to each category of data.

On expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that makes re-identification impossible. Where data cannot be immediately deleted due to technical constraints (for example, data held in backup archives), it is quarantined from active processing and deleted at the next scheduled archive purge cycle.

As a dkwing player, you have a number of rights in relation to the personal data we hold about you. dkwing is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact [email protected] with your full name, registered email address, and a description of your request.

• Right of Access: You have the right to request a copy of the personal data dkwing holds about you, along with information about how it is used. dkwing will provide this within 30 days of receiving a valid request.
• Right to Rectification: If any personal data held by dkwing is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account details (such as your email address or mobile number) directly within your account settings.
• Right to Erasure: In certain circumstances, you have the right to request that dkwing delete your personal data. This right is subject to dkwing's legal and regulatory retention obligations — for example, transaction records that must be retained for AML compliance cannot be deleted on request.
• Right to Restriction of Processing: You may request that dkwing restrict the processing of your personal data in certain situations — for example, while the accuracy of data is being contested, or where you have objected to processing and the outcome of that objection is pending.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to dkwing in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to Object: You have the right to object to dkwing's processing of your personal data where that processing is based on legitimate interest. You also have an absolute right to opt out of marketing communications at any time.
• Right to Withdraw Consent: Where dkwing processes your data on the basis of consent (for example, for marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Response Timeframes

dkwing will respond to all privacy rights requests within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, dkwing may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it within the initial 30-day period.

dkwing takes your privacy concerns seriously. If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a potential data security issue, please contact our support team directly. All privacy-related enquiries are handled by staff specifically trained in data protection obligations.

How to Reach Us

• Email: [email protected] — for all privacy requests, data rights exercises, and data security concerns. Please include "Privacy Request" in the subject line of your email to ensure prompt routing to the correct team.
• Response Hours: Our support team operates 24 hours a day, 7 days a week, aligned to Bangladesh Standard Time (BST, UTC+6). Privacy-specific requests receive a dedicated response within 30 calendar days as described in Section 7.
• Market: This Privacy Policy applies to players accessing dkwing from Bangladesh. All amounts referenced in this policy are in Bangladeshi Taka (BDT / ৳) unless otherwise stated.

Updates to This Privacy Policy

dkwing reviews and updates this Privacy Policy periodically to reflect changes in our data practices, new product features, or evolving legal and regulatory requirements. When we make material changes to this policy, we will notify active players by email at the address registered on their account and display a prominent notice on the dkwing platform for a minimum of 30 days following the update.

The date of the most recent revision is displayed at the top of this page. Continuing to use the dkwing platform after the effective date of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with the updated policy, you should cease using the platform and may request account closure by contacting [email protected].

Policy Version History