dk10 Privacy Policy — How We Collect, Use & Protect Your Data

1. Introduction

dk10 is an online casino and sports betting platform operated for the Bangladeshi market. We are committed to safeguarding the privacy and personal data of every individual who uses our platform. This Privacy Policy sets out the basis on which we collect, process, store, and share personal data in connection with the operation of dk10 and the provision of our services to registered players and site visitors.

In this Privacy Policy, "personal data" refers to any information that can directly or indirectly identify a living individual. "Processing" refers to any operation performed on personal data, including collection, recording, organisation, structuring, storage, adaptation, retrieval, use, disclosure, or deletion.

dk10 acts as the data controller in respect of all personal data collected through the dk10 platform. As data controller, we determine the purposes for which and the manner in which your personal data is processed. Where we engage third-party service providers to process data on our behalf, those providers act as data processors and are contractually required to handle your data in accordance with our instructions and applicable data protection standards.

This Privacy Policy is effective as of January 2026. All references to "we", "us", "our", and "the Platform" refer to dk10. All references to "you", "your", and "the Player" refer to any individual who registers an account with or otherwise uses the dk10 platform. All monetary amounts referenced in this policy use the Bangladeshi Taka (BDT) as the functional currency.

2. Data We Collect

dk10 collects several categories of personal data from players and site visitors. The specific data collected depends on the nature of your interaction with the platform — some data is collected automatically upon visiting the site, while other data is provided directly by you during registration, verification, or in the course of using our services.

Identity and Contact Data

When you register an account with dk10, we collect your full legal name, date of birth, email address, and mobile phone number. This information is used to create and manage your player account, verify your identity, and communicate with you about your account and any transactions.

Financial and Payment Data

To facilitate deposits and withdrawals, dk10 collects information about your preferred payment method. This includes mobile wallet identifiers (such as your bKash, Nagad, Rocket, or Upay account number), bank account details where bank transfer is selected, and card details (such as the card type, last four digits, and billing name) where card payments are used. Full card numbers and CVV codes are not stored by dk10 — these are processed directly and securely by our payment service providers.

Verification and Identity Documents

As part of our Know Your Customer (KYC) programme, we collect copies of government-issued identity documents (such as your National Identity Card, passport, or driving licence) and proof-of-address documents (such as a utility bill or bank statement). These documents are used solely for identity verification and fraud prevention purposes.

Technical and Device Data

We automatically collect certain technical data when you access the dk10 platform. This includes your IP address, browser type and version, operating system, device type and model, screen resolution, and referring URL. This data helps us ensure platform security, detect fraudulent access attempts, and optimise the platform for the devices most commonly used by Bangladeshi players.

Gameplay and Transaction Data

dk10 maintains a complete record of all gameplay activity and financial transactions associated with your account. This includes bets placed, games played, win and loss records, deposit and withdrawal history, bonus activations and wagering progress, and any promotional offers claimed. This data is essential for account management, responsible gaming monitoring, dispute resolution, and regulatory compliance.

Communications Data

When you contact dk10's customer support team via live chat or email, we retain a record of the content of those communications, including any information you voluntarily provide in the course of seeking assistance. This allows us to track the history of your support interactions and ensure consistent, high-quality service.

Behavioural and Usage Data

We collect data about how you navigate and interact with the dk10 platform, including pages visited, time spent on each section, features used, and navigation patterns. This data, typically collected via cookies and similar tracking technologies, is used to improve the user experience and tailor content recommendations where applicable.

3. How We Collect Your Data

dk10 collects personal data through the following channels and mechanisms:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or participating in any promotional activity.
• Automated technical collection: Data collected automatically by our platform systems as you browse and interact with the site, including IP address, device identifiers, session data, and behavioural analytics via cookies and similar tracking technologies.
• Payment processors: Confirmation data returned to dk10 by our payment service partners (such as bKash, Nagad, Rocket, Upay, and banking partners) following the processing of a deposit or withdrawal transaction.
• Identity verification providers: Results of automated or manual identity and age verification checks carried out by our third-party KYC service providers on our behalf.
• Fraud prevention services: Risk signals and alert data provided by our fraud detection and anti-money laundering compliance partners.
• Game providers: Aggregated gameplay and session data returned by game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) in connection with games you play on the dk10 platform.

4. How We Use Your Data

dk10 uses the personal data we collect for the following specific purposes:

dk10 does not use your personal data for automated individual decision-making or profiling that produces legal or similarly significant effects on you, except where such processing is strictly necessary for fraud prevention or responsible gaming interventions, in which case you retain the right to request human review of any decision made.

5. Legal Basis for Processing

dk10 processes personal data only where a valid legal basis exists for doing so. The primary legal bases on which we rely are as follows:

Contractual Necessity

The majority of data processing carried out by dk10 is necessary for the performance of the contract between dk10 and each registered player — specifically, the Terms & Conditions you accept upon registration. This includes processing your identity data to create your account, processing your payment data to handle deposits and withdrawals, and maintaining your gameplay records to settle bets and administer bonuses.

Legal Obligation

Certain data processing activities are required by applicable law. These include identity and age verification (to comply with our age-gating obligations), anti-money laundering checks (to comply with financial crime prevention requirements), and the retention of transaction records for specified statutory periods.

Legitimate Interests

dk10 processes certain categories of data on the basis of our legitimate interests as a platform operator, provided those interests are not overridden by your fundamental rights and freedoms. Legitimate interest processing includes fraud detection and prevention, platform security monitoring, responsible gaming interventions where player welfare is at risk, and aggregate analytics for platform improvement.

Consent

Where dk10 relies on your consent as the legal basis for processing — for example, for sending you promotional communications and personalised offers — you may withdraw that consent at any time by contacting support at [email protected] or by updating your communication preferences within your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6. Data Sharing

dk10 does not sell your personal data to any third party. We may share your data with the following categories of recipients, strictly for the purposes described:

Payment Service Providers

Personal and payment data is shared with our payment processing partners (including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard) to the extent necessary to process your deposit and withdrawal transactions. These providers operate under their own data protection policies and are contractually bound to handle your data securely.

Identity Verification and KYC Providers

Identity documents and verification data are shared with our third-party KYC and age verification service providers for the purpose of confirming your identity and eligibility to hold a dk10 account. These providers process your data solely on our behalf and are contractually prohibited from using it for any other purpose.

Game Studios and Content Providers

Limited gameplay session data may be shared with our game content providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — for the purposes of game delivery, technical support, and fair play certification. These providers do not receive personally identifying information beyond what is technically necessary to deliver and monitor gameplay sessions.

Fraud Prevention and Compliance Partners

dk10 shares relevant data with specialist fraud detection, anti-money laundering, and responsible gaming compliance services to protect the integrity of the platform and the wellbeing of our players. Where legally required, we may also disclose data to law enforcement authorities, regulatory bodies, or courts in response to lawful requests or orders.

Corporate Transactions

In the event of a merger, acquisition, or sale of all or part of the dk10 business, personal data held by dk10 may form part of the transferred assets. In such an event, affected players would be notified in advance and the acquiring entity would be required to handle the transferred data in accordance with this Privacy Policy or a materially equivalent standard.

7. Cookies & Tracking Technologies

dk10 uses cookies and similar tracking technologies to operate the platform effectively, maintain your session state, detect security threats, and analyse how the platform is used so that we can continually improve the experience for Bangladeshi players.

What Are Cookies?

Cookies are small text files that a website places on your device when you visit it. They allow the website to recognise your device on subsequent visits and remember information about your preferences and session. Cookies can be "session cookies" (which expire when you close your browser) or "persistent cookies" (which remain on your device for a set period or until deleted).

Categories of Cookies Used by dk10

• Strictly necessary cookies: These cookies are essential for you to navigate the dk10 platform and use its core features, such as maintaining your logged-in session, remembering items in your account, and ensuring platform security. These cookies cannot be disabled without significantly degrading your experience of the platform.
• Functional cookies: These cookies remember your preferences (such as your selected language, display settings, and preferred payment method) to provide a more personalised and convenient experience on your next visit.
• Analytics cookies: These cookies collect aggregated, anonymised information about how visitors use the dk10 platform — for example, which pages are visited most frequently and how players navigate between sections. This data helps us identify areas for improvement and measure the effectiveness of new features.
• Security and fraud prevention cookies: These cookies help dk10 detect and prevent fraudulent account access, bot activity, and other security threats by analysing patterns in how the platform is accessed.

Managing Cookies

Most web browsers allow you to control cookies through their settings, including the ability to block or delete cookies. Please note that disabling certain categories of cookies — particularly strictly necessary cookies — may affect your ability to use the dk10 platform and may prevent you from logging in to your account. Detailed instructions for managing cookies in the most commonly used browsers (Chrome, Firefox, Samsung Internet, Opera Mini) are available in each browser's help documentation.

8. Data Retention

dk10 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any overriding legal, regulatory, or dispute-resolution requirements that require us to retain data for a longer period. The following general retention principles apply:

• Account data (name, contact information, login credentials) is retained for the duration of your account's active status and for a period of five years following account closure.
• Financial and transaction records (deposit and withdrawal history, payment method details) are retained for a minimum of seven years from the date of each transaction to satisfy statutory financial record-keeping obligations.
• KYC and identity verification documents are retained for a minimum of five years following the completion of the verification process, or for five years after account closure, whichever is later.
• Customer support communications are retained for three years from the date of the last interaction to which they relate.
• Gameplay and session data is retained for five years from the date of each session to support dispute resolution and responsible gaming monitoring.
• Technical and device data collected for security purposes is retained for 90 days in active logs and may be retained in archived form for up to two years where a security investigation is ongoing.

Upon expiry of the applicable retention period, personal data is securely and permanently deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual.

9. Security Measures

dk10 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the dk10 platform is encrypted using industry-standard SSL/TLS protocols. The padlock symbol displayed in your browser's address bar confirms that your connection to dk10 is encrypted.
• Encryption at rest: Sensitive personal data stored on dk10's servers — including identity documents, payment details, and account credentials — is encrypted at rest using strong encryption algorithms.
• Access controls: Access to personal data within dk10's internal systems is restricted on a strictly need-to-know basis. Staff members with access to player data are subject to confidentiality obligations and receive regular data protection training.
• Two-factor authentication: dk10 supports and encourages the use of two-factor authentication (2FA) for player account logins to provide an additional layer of account security beyond the username and password.
• Intrusion detection and monitoring: dk10 operates continuous real-time monitoring of its platform infrastructure to detect and respond promptly to any security incidents, intrusion attempts, or anomalous access patterns.
• Third-party security audits: dk10 conducts periodic security assessments and engages independent security professionals to evaluate the robustness of our data protection measures.

Despite these measures, no data transmission over the internet or storage system can be guaranteed to be completely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, dk10 will notify you without undue delay and will take all reasonable steps to mitigate the impact of the breach.

10. Your Rights

As a data subject whose personal data is processed by dk10, you hold the following rights in relation to your personal information:

Right of Access

You have the right to request a copy of all personal data that dk10 holds about you, along with information about how that data is processed, where it was obtained, and with whom it has been shared. Access requests should be submitted in writing to [email protected] with the subject line "Data Access Request". dk10 will respond within 30 days of receiving a valid request.

Right to Rectification

If any personal data held by dk10 about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating your email address or phone number) can typically be made by contacting our support team directly via live chat.

Right to Erasure

Subject to our legal and regulatory retention obligations, you have the right to request that dk10 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and no other legal basis applies, or where the data has been unlawfully processed. Please note that certain data — particularly financial transaction records and KYC documents — must be retained for defined statutory periods and cannot be deleted on request until those periods have expired.

Right to Restriction of Processing

You have the right to request that dk10 restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is being contested or while an objection to processing is being assessed.

Right to Data Portability

Where dk10 processes your personal data on the basis of your consent or on the basis of contractual necessity, you have the right to receive a copy of the data you have provided to dk10 in a structured, commonly used, and machine-readable format.

Right to Object

You have the right to object to the processing of your personal data where that processing is based on dk10's legitimate interests. Where an objection is raised, dk10 will cease the processing concerned unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where the processing is necessary for the establishment, exercise, or defence of legal claims.

How to Exercise Your Rights

To exercise any of the rights described above, please contact dk10's support team at [email protected] with the subject line "Data Rights Request — [Your Account Username]". We will acknowledge your request within 48 hours and provide a substantive response within 30 days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

11. Minors & Age Gating

dk10 is strictly an adults-only platform. We do not knowingly collect personal data from any individual under the age of 21. Our registration process includes automated age verification checks, and all accounts are subject to KYC verification that confirms the account holder is 21 years of age or older.

If dk10 becomes aware that personal data has been collected from an individual who is under 21 years of age, we will immediately suspend the account, void any associated transactions, and permanently delete all personal data associated with that individual. If you believe that a minor has registered an account with dk10, please contact us immediately at [email protected] so that we can take appropriate action.

Parents and guardians who are concerned about the risk of underage access to online gambling platforms are encouraged to make use of parental control software tools to restrict access to gambling websites on devices used by minors within their household.

12. International Data Transfers

dk10 is operated primarily for the Bangladeshi market and the majority of our data processing activity takes place within data centre infrastructure serving the South and South-East Asian region. However, some of our third-party service providers — including certain game content providers and technical infrastructure partners — may process data in jurisdictions outside Bangladesh.

Where personal data is transferred to a third-party processor located outside Bangladesh, dk10 ensures that appropriate safeguards are in place to protect the data. These safeguards may include contractual data processing agreements that impose data protection standards equivalent to those applied by dk10, the use of providers who operate under internationally recognised security certification frameworks, or other mechanisms that provide adequate protection for your personal data.

If you would like further information about the international data transfer arrangements that apply to your personal data, please contact us at [email protected].

13. Changes to This Privacy Policy

dk10 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements in our privacy governance framework. The most current version of this Privacy Policy will always be accessible on this page, and the effective date at the top of the document will be updated to reflect the date of the most recent revision.

Where changes to this Privacy Policy are material — meaning they significantly affect the way in which your personal data is collected, used, or shared — dk10 will provide advance notice of at least 7 days via the email address registered to your account and/or via a prominent notice displayed on the platform upon login.

Your continued use of the dk10 platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the updated policy. If you do not agree with any material change to this Privacy Policy, you should cease using the platform and contact our support team to request account closure.

14. Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or to the manner in which dk10 processes your personal data, you may contact our team through the following channels:

• Email: [email protected] (plain text — not a clickable link). Please use the subject line "Privacy Enquiry" for general questions or "Data Rights Request" for formal rights exercises.
• Live Chat: Available 24 hours a day, 7 days a week on Bangladesh Standard Time (BST, UTC+6), accessible from any page on the dk10 platform.

If you believe that dk10 has not handled your personal data in accordance with this Privacy Policy or applicable data protection standards, you have the right to raise a formal complaint. Formal privacy complaints should be submitted in writing via email with the subject line "Formal Privacy Complaint — [Your Account Username]". dk10 will acknowledge all formal complaints within 48 hours and provide a substantive response within 14 business days.

dk10 is committed to resolving all privacy complaints fairly, transparently, and promptly. We treat privacy concerns with the same seriousness as financial disputes and responsible gaming requests. Your trust is the foundation of our relationship with every player across Bangladesh, and we take every privacy concern seriously.