Data protection

Daffatoto's Privacy Policy
Your Data Is Safe With Us

When you use Daffatoto, we collect certain information from you. This Privacy Policy clearly sets out what data is collected, why it is collected, how it is stored, and what your rights are.

Last Updated: January 1, 2026

How Much We Value Your Privacy

Daffatoto's Core Data Protection Principles at a Glance

End-to-End Encryption

All your personal data and financial transaction details are protected with SSL/TLS encryption. No third party can access this information under any circumstances.

Your data is never sold

Under no circumstances does Daffatoto sell your personal information to third parties. Your data is used solely to improve and deliver platform services.

Right to data control

You may request to view, correct, or delete your data at any time. We will process your request within 7 business days.

Secure data storage

Your data is stored on secure servers and undergoes regular security audits. We use state-of-the-art firewalls to prevent unauthorized access.

Cookie Transparency

This policy clearly explains what types of cookies we use and why. You can change your cookie settings at any time.

Immediate breach notification

In the event of a data breach, we guarantee that affected users will be notified within 72 hours. Your protection is our responsibility.

Brief Overview

Daffatoto takes your privacy seriously. This Privacy Policy explains what information we collect, why we collect it, how we keep it secure, and what rights you have. By creating an account or using the platform, you agree to this policy.

1. Information We Collect

Daffatoto collects only the information necessary to provide our services. We do not collect excessive or irrelevant data. The types of information we collect are detailed below.

Identity Data

  • Full name and date of birth.
  • National ID number or passport number (for verification purposes).
  • Registered mobile number.
  • Username and password (stored in encrypted form).

Contact Data

  • Mobile number linked to your mobile banking account.
  • Email address (if provided).
  • Division or district name (optional).

Financial Data

  • Mobile banking number (bKash, Nagad, Rocket).
  • Transaction History – dates, amounts, and reference numbers for all deposits and withdrawals.
  • Win/loss history (gaming records).

Technical Data

  • IP address.
  • Device type, operating system, and browser version.
  • Login timestamps and session information.
  • Cookie and web beacon data.
Good to know

We never collect or store your full bank account number, card number, or CVV. All payments are processed through secure third-party mobile banking systems.

2. How We Collect Information

Daffatoto collects information through various methods. The table below outlines how and why each type of data is collected:

Source of Collection How It Is Collected Types of data
Registration form Information You Provide Directly Full name, mobile number, date of birth
Transaction Processing Payment gateway logs Transaction Amount & Reference
Website / App Usage Automated Tracking IP, Device & Cookie Data
KYC Verification Document upload National ID card, selfie
Customer Support Chat & Call Records Content of communications

3. Purpose of Data Use

Daffatoto uses your information only for specific, defined purposes. Your data is never used for unrelated reasons. The main purposes are:

  • Account Management: To create, verify, and secure your account.
  • Service delivery: To process gaming services, deposits, withdrawals, and bonuses.
  • Legal Obligations: To comply with KYC (Know Your Customer) and AML (Anti-Money Laundering) regulations.
  • Fraud prevention: To maintain account security and detect suspicious activity.
  • Platform improvement: To improve platform performance and enhance the user experience.
  • Marketing communications: To inform you of relevant offers and promotions (with your consent only).
  • Responsible Gaming: To monitor your gaming behavior and issue warnings where necessary.
Important

If you no longer wish to receive marketing messages, you can opt out at any time through our support team. However, account and transaction notifications cannot be turned off, as they are essential for your security.

4. Data Sharing & Disclosure

Daffatoto never sells your personal information. However, limited data may be shared in certain circumstances:

Service providers

We share limited data with the technology and payment partners that help us operate our platform. These partners are bound by strict confidentiality agreements and may not use your data without our authorization.

Legal Authorities

Information may be disclosed in response to lawful requests from Bangladeshi government authorities or law enforcement agencies. In such cases, we are required to comply with our legal obligations.

Fraud prevention

Information may be shared with investigating agencies in cases of suspected money laundering or other financial crimes.

Our commitment

We never sell or rent your data to advertisers, data brokers, or any other third parties. Your information is shared only for the reasons stated above.

5. Cookies & Tracking Technologies

Daffatoto uses cookies and similar technologies on its website and app to enhance your browsing experience and keep the platform running smoothly.

Cookie Type

  • Essential Cookies: Used to maintain login sessions and ensure security. These cannot be disabled.
  • Functional Cookies: To remember your preferences and language settings.
  • Analytics cookies: To understand which parts of the platform are most used.
  • Marketing cookies: To show you relevant offers (with your consent only).

You can manage cookies through your browser settings, but disabling essential cookies may affect the functionality of certain platform features.

6. Data Retention Period

Daffatoto does not retain your data longer than necessary. Retention periods vary depending on the type of information:

Types of data Retention Period Reason
Account Information 5 years after account closure Legal Obligations
Transaction Records 7 Years Financial Regulatory Requirements
KYC Documents 5 Years AML Legal Obligations
Customer Support Conversations 3 Years Dispute resolution
Technical logs 90 Days Security monitoring
Marketing preferences Until Consent is Withdrawn Based on Your Preferences

7. Your Rights

Under Daffatoto's Privacy Policy, you have the following rights. Contact our support team to exercise any of them.

  • Right to access your data: You can find out exactly what information we hold about you.
  • Right to Rectification: You may request corrections to any inaccurate or incomplete information.
  • Right to erasure: You may request that your data be deleted under certain circumstances.
  • Right to restrict processing: You may request that processing of your data be restricted in certain specific circumstances.
  • Right to data portability: You have the right to receive a copy of your data.
  • Right to Object: You may object to receiving marketing communications.
Response time

We will process any rights request within 7 business days. For complex cases, this may take up to 30 days, and you will be informed accordingly.

8. Protection of Minors

Daffatoto strictly prohibits gaming by anyone under 18. We do not knowingly collect any information from minors.

If we find evidence that a minor has opened an account using false information, the account will be immediately closed and all associated data will be permanently deleted. If a parent or guardian believes their child is using this platform, please contact our support team without delay.

9. Security Measures

Daffatoto employs industry-standard security technology to protect your data. The key components of our security framework are:

  • 256-bit SSL/TLS encryption – applied to all data transfers.
  • Two-Factor Authentication (2FA) support.
  • Regular penetration testing.
  • 24/7 Security Operations Center monitoring.
  • Automated suspicious activity detection system.
  • Data backup and disaster recovery plan.

While we maintain the highest security standards, no one can guarantee 100% security on the internet. We are prepared to respond swiftly to any security incident.

10. Policy Changes

Daffatoto may update this Privacy Policy from time to time. For any significant changes, we will notify you via SMS to your registered mobile number or through an in-app notification. Continued use of the platform after any changes constitutes your acceptance of the updated policy.

We recommend revisiting this page every 3 months to stay informed about the latest updates. Previous versions of this policy are available upon request.

Notification policy

For material changes, you will be notified at least 14 days before they take effect. Minor edits or language corrections may not require a separate notice.

Join our trusted platform today

Your data is completely secure with Daffatoto. Accept our Privacy Policy and open your account today to enjoy the best gaming experience.

By registering, you agree to our Privacy Policy and Terms & Conditions. For users aged 18+ only.

বাংলা