1. What Information We Collect
Digilocker collects two types of information from you โ what you provide directly, and what is generated automatically as you use the platform. We only collect what is genuinely necessary to deliver our services.
Information You Provide Directly:
Full Name
Email Address
Mobile Number
Date of Birth
Current Address
Payment Method Details
National ID Number (KYC)
Automatically Collected Information:
- IP Address & Browser Type
- Device Type (Mobile/Desktop) & Operating System
- A log of how long and how you used the platform during each session
- Transaction History & Gaming Activity Records
- Cookies & Session Data (see details below)
Please Note: A copy of your national ID or passport is requested for KYC verification solely to confirm your age and identity. These documents are not used for any other purpose.
2. How Your Information Is Used
Digilocker uses your data only for specific, defined purposes. We believe that when users know where their data goes, trust comes naturally.
| Data Type |
Purpose of Use |
Legal Basis |
| Name, Email, Phone |
Account Creation & Communication |
Contract Performance |
| Date of Birth, NID |
Age Verification (18+) & KYC |
Legal Obligation |
| Payment Information |
Deposit & Withdrawal Processing |
Contract Performance |
| Transaction History |
Anti-Money Laundering & Audit |
Legal Obligation |
| Usage Patterns |
Platform Improvement & Personalized Experience |
Legitimate Interest |
| Email (with consent) |
Sending Offers, Bonuses & Updates |
Consent |
Want to unsubscribe from marketing emails? You can turn off marketing communications at any time by going to Account Settings and selecting "Notification Preferences". Service-related essential emails, such as transaction confirmations, cannot be disabled.
3. Who We Share Your Data With
Digilocker never sells your data. That said, we do share limited information with trusted third parties where necessary to operate our services.
- Payment Providers (bKash, Nagad, Rocket, Bank): Only the information needed to process a transaction โ name and account number. Nothing beyond that is shared.
- Game Providers (Pragmatic Play, Evolution Gaming, etc.): A session ID is used to manage game sessions. No personal identity is shared.
- KYC Verification Service: Identity documents are sent through secure channels for verification and deleted once the process is complete.
- Government & Law Enforcement Agencies: Digilocker is legally required to disclose information when directed by a lawful order or court mandate.
- Cloud Service Providers: For data storage purposes โ they are contractually bound to maintain confidentiality.
Warning: Digilocker never shares personal data with social media platforms, advertisers, or data brokers. If anyone contacts you claiming otherwise, it is likely fraudulent.
4. Security Measures
Digilocker protects your data through multiple layers of security. Alongside technical safeguards, every member of our team is trained in data security practices.
- SSL/TLS Encryption: All data traveling from your browser to our servers is protected with 256-bit encryption.
- Payment Card Details: Card numbers and CVV details are never stored on Digilocker's servers โ they are processed directly by the payment gateway.
- Two-Factor Authentication (2FA): SMS or email OTP verification is available when logging into your account.
- Suspicious Activity Detection: If unusual login activity or transactions are detected, automated account security measures are triggered immediately.
- Regular Security Audits: Third-party security specialists conduct regular audits of our systems.
- Access Control: Digilocker staff can only access the data necessary for their specific role.
That said, please keep in mind โ no platform can guarantee 100% security on the internet. So make sure your password is strong, and never share it with anyone.
5. Cookies & Tracking Policy
The Digilocker website and app use cookies. Cookies are small data files stored in your browser that help remember your session on your next visit.
- Essential Cookies: Used to maintain login sessions and ensure security โ these cannot be disabled as the site will not function properly without them.
- Functional Cookies: Used to remember language preferences and theme settings.
- Analytics Cookies: This helps us understand which pages are used most and where issues occur โ your identity is never revealed.
You can manage cookies from your browser settings. However, disabling essential cookies may disrupt login and payment functionality.
Third-Party Cookies: Game providers (such as Pragmatic Play) may set their own cookies, which are governed by their respective privacy policies.
6. How Long Your Data Is Retained
Digilocker does not retain your data indefinitely. How long each piece of information is stored depends on the purpose for which it was collected.
| Data Type |
Retention Period |
Reason |
| Account Information |
For the duration of active account + 5 years |
Legal Obligation |
| Transaction Records |
7 Years |
Financial Audit Policy |
| KYC Documents |
5 Years After Account Closure |
Legal Requirements |
| Cookies / Session Data |
Until session ends or a maximum of 30 days |
Technical Requirements |
| Support Chat Logs |
3 Years |
For Dispute Resolution |
Once the retention period expires, we securely delete your data or anonymize it so it can no longer be linked to you.
7. Your Rights Regarding Your Data
Digilocker believes you should have full control over your personal data. To that end, we uphold the following rights:
- Right to Access: To find out what information we hold about you, send us an email โ we'll respond within 30 days.
- Right to Rectification: If any of your information is incorrect, you can request that it be updated.
- Right to Erasure: When an account is closed, all data beyond legal retention obligations will be permanently deleted.
- Right to Object to Processing: You may opt out of marketing communications or object to specific types of data processing at any time.
- Right to Portability: We're ready to provide your account data in a readable, portable format upon request.
Submit a Request: Send all data-related requests to support@digilocker.best. Use "Privacy Request" as the subject line and send from the email address registered to your account.
8. Protection of Minors
Digilocker's services are intended for users aged 18 and above only. We do not knowingly collect any information from individuals under the age of 18.
Date of birth is verified at registration, and users under 18 are not permitted to create an account. Age is reconfirmed during KYC verification.
If you're aware that a minor has accidentally created an account, please contact us at support@digilocker.best. We will take immediate action.
9. Changes to the Privacy Policy
Digilocker may update this privacy policy when necessary. For minor changes, a notice will be posted on the website.
- For major changes, you will be notified at least 14 days in advance to your registered email address.
- The date of each update is displayed at the top of the page.
- Continued use of the platform after any changes will be considered acceptance of the updated policy.