The only way to guarantee that is to make the server physically secure and limit network access to it, so someone can't copy it. You can also encrypt the database using Transparent Data Encryption, but that also requires you keep the encryption keys secure.
For an existing database, TDE is probably the least intrusive method that you can use to encrypt, so that may be a price you are willing to pay.
One other thing to keep in mind is that TDE can have adversely affect the performance of other databases on the same server even if those databases do not use TDE.