db678 Privacy Policy — How We Handle Your Data

Privacy at a Glance

1. Introduction

This Privacy Policy ("Policy") describes how db678 ("Platform", "We", "Us", "Our") collects, uses, stores, shares and protects the personal data of individuals who visit, register on, or interact with the db678 website and platform at db678.lat ("Platform", "Service"). This Policy applies to all registered players, visitors who browse the platform without registering, and any individuals who contact db678 through any communication channel, including live chat and email.

By registering an account on db678, you acknowledge that you have read this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you should not register an account or use the platform. This Policy is incorporated by reference into the db678 Terms and Conditions, which you also agree to by registering. In the event of any conflict between this Policy and the Terms and Conditions, the Terms and Conditions shall prevail to the extent of any inconsistency.

2. Data We Collect

db678 collects two broad categories of personal data: information you provide to us directly, and information that is generated automatically when you use the platform. We collect only the data that is necessary for the purposes described in this Policy, and we do not collect sensitive categories of personal data (such as health data, biometric data or political opinions) unless specifically required for responsible gaming compliance or identity verification and only with your explicit consent.

Information You Provide Directly

• Registration data: your full legal name, date of birth, gender, residential address, email address, and the username and password you choose when creating your account.
• Identity verification (KYC) documents: government-issued photo identification (such as a National Identity Card or passport) and proof of address documents, submitted when db678 requests identity verification.
• Payment information: the mobile wallet numbers (bKash, Nagad, Rocket, Upay) or bank card details (Visa, Mastercard) associated with your deposit and withdrawal transactions. Full card numbers are never stored by db678; only the last four digits and card type are retained for reference.
• Communications data: the content of any messages you send to db678 support through live chat, email, or any other channel, including any attachments or screenshots you submit.
• Responsible gaming data: information you provide when setting deposit limits, session timers, self-exclusion periods, or reality check preferences in your account settings.

Information Collected Automatically

• Device and connection data: your IP address, device type, operating system, browser type and version, screen resolution, and mobile network operator, collected each time you access the platform.
• Platform usage data: pages visited, games launched, bets placed, session duration, navigation paths, and feature interactions — all recorded in server logs and analytics systems to help us understand how players use the platform.
• Transaction logs: a complete timestamped record of every deposit, withdrawal, bonus activation, bet placement, and game result associated with your account, retained for financial compliance and dispute resolution purposes.
• Cookie and tracking data: information collected via cookies and similar technologies placed on your browser or device during your session. See Section 7 (Cookies) for full details.

3. How We Use Your Data

db678 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose that is incompatible with the purposes listed below, and we do not engage in automated decision-making that produces legal or similarly significant effects without human review.

• Account creation and management: to create and maintain your player account, verify your identity, process your login sessions, and enable all platform features you are entitled to use.
• Payment processing: to process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa or Mastercard, confirm transaction status, and resolve payment disputes.
• Regulatory compliance and fraud prevention: to fulfil our obligations under applicable anti-money laundering (AML) and Know Your Customer (KYC) requirements, detect and prevent fraud, account abuse, and bonus exploitation, and to report suspicious activity where required by law.
• Platform improvement and analytics: to analyse aggregated usage data in order to improve the platform's performance, fix technical issues, and develop new features that better serve Bangladesh players.
• Responsible gaming support: to monitor account activity for signs of problem gambling, to apply responsible gaming tools you have activated, and to reach out proactively where there are genuine welfare concerns.
• Customer support and communications: to respond to your enquiries, resolve disputes, send transactional notifications (such as deposit confirmations and withdrawal status updates), and — where you have opted in — to send promotional communications about bonuses and offers.

4. Legal Basis for Processing

db678 processes personal data on the following legal bases, depending on the specific processing activity involved:

• Contractual necessity: processing your registration data, payment information and account activity data is necessary to perform the contract between you and db678 (i.e., to provide you with access to the platform and its features).
• Legal obligation: processing KYC documents and transaction records is required to comply with applicable anti-money laundering regulations, financial record-keeping requirements, and any other mandatory legal obligations.
• Legitimate interests: processing platform usage and analytics data is based on db678's legitimate interest in maintaining and improving the platform, preventing fraud, and ensuring the security of all players' accounts.
• Consent: processing data for promotional communications is based on your explicit opt-in consent, which you may withdraw at any time by contacting support or updating your account notification preferences.

5. Sharing Your Data

db678 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following limited and clearly defined circumstances:

• Payment processors and mobile wallet providers: we share the transaction data necessary to process your deposits and withdrawals with bKash, Nagad, Rocket, Upay and card network processors (Visa/Mastercard). These providers receive only the data required to complete the specific transaction.
• Identity verification partners: we share the KYC documentation you submit with our identity verification service providers who assist db678 in meeting its anti-money laundering obligations. These partners operate under strict data processing agreements.
• Game providers: our game studio partners (including Evolution Gaming, Pragmatic Play, Spribe and others) receive the session and wager data necessary to deliver and record the outcomes of their games. They do not receive your full profile or payment details.
• Law enforcement and regulatory authorities: where required by applicable law, court order or regulatory directive, db678 may disclose account information and transaction records to relevant law enforcement agencies or regulatory bodies.

Where we share data with third-party service providers, those providers are contractually required to process your data only for the purposes for which it was shared, to maintain appropriate security standards, and to delete or return the data when the service engagement ends. db678 remains responsible for ensuring that all third-party data processing is conducted in accordance with this Policy.

6. Cookies & Tracking Technologies

db678 uses cookies — small text files stored on your browser or device — and similar tracking technologies to make the platform function correctly, to remember your preferences, and to understand how players navigate the site. The cookies we use fall into the following categories:

• Strictly necessary cookies: these are essential for the platform to operate. They manage your login session, keep your account authenticated between pages, remember your language preference, and enable the deposit and withdrawal flows. These cookies cannot be disabled without breaking core platform functionality.
• Analytics cookies: these collect anonymised or pseudonymised data about how players use the platform — which pages are visited, how long sessions last, and which features are used most — to help us identify technical issues and prioritise improvements. The data collected by analytics cookies does not identify you as an individual.
• Preference cookies: these remember your platform settings, such as your chosen language version, responsible gaming limits you have configured, and any display preferences you have saved. Disabling these cookies may result in your settings not being remembered between sessions.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the db678 platform. For instructions on managing cookies in the most common mobile browsers (Chrome for Android, Safari for iOS), please refer to your browser's help documentation.

7. Data Retention

db678 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting or reporting requirements. The retention periods we apply vary by data type: account registration data and KYC documents are retained for a minimum of five (5) years from the date of account closure to meet financial regulatory record-keeping requirements. Transaction logs and payment records are retained for a minimum of five (5) years from the date of each transaction. Platform usage and analytics data is retained in identifiable form for up to two (2) years, after which it is either deleted or permanently anonymised.

When your personal data is no longer required for the purposes for which it was collected and all applicable retention periods have expired, db678 will either securely delete the data or permanently anonymise it so that it can no longer be associated with you as an individual. You may request early deletion of your data (subject to our legal retention obligations) by contacting support at [email protected].

8. Data Security

db678 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include: industry-standard SSL/TLS encryption for all data transmitted between your device and the db678 platform; encrypted storage of sensitive account and payment data at rest; access controls that restrict platform database access to authorised personnel only, on a strictly need-to-know basis; regular security assessments and vulnerability testing of the platform's infrastructure; and staff training on data protection and security awareness.

While db678 takes data security seriously and applies commercially reasonable measures to protect your data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, db678 will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach. If you believe your account has been compromised, please contact support immediately at [email protected].

9. Your Data Rights

As a player on the db678 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with your account username and a description of your request. We will respond to all valid requests within a reasonable timeframe and at no charge to you.

• Right of access: you have the right to request a copy of the personal data that db678 holds about you, along with information about how that data is being processed and the purposes for which it is used.
• Right to rectification: if any of the personal data db678 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. You can update most account details directly from your account settings page.
• Right to erasure: in certain circumstances (for example, where your data is no longer needed for the purpose it was collected, or where you withdraw consent), you have the right to request that db678 delete your personal data, subject to our legal retention obligations.
• Right to restrict processing: you may request that db678 temporarily stop processing your data in certain circumstances, such as while a dispute about its accuracy is being resolved.
• Right to data portability: where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive a copy of your data in a structured, machine-readable format.
• Right to withdraw consent: where processing is based on your consent (for example, for promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

db678 will make every effort to respond to your data rights requests promptly and in good faith. If you believe that db678 has not handled your personal data in accordance with this Policy, you have the right to raise a complaint directly with us at [email protected]. We treat all privacy complaints seriously and will investigate and respond to every complaint we receive.

10. Children's Privacy

The db678 platform is strictly intended for adults aged 21 years and above. db678 does not knowingly collect, process, or store personal data from any individual who is under the age of 21. If you are a parent or guardian and you believe that a person under the age of 21 in your care has registered an account or provided personal data to db678 without your knowledge, please contact us immediately at [email protected]. Upon receiving such a notification, db678 will promptly investigate and, where the account holder is confirmed to be under 21, will close the account, delete the associated personal data (subject to any legally mandated minimum retention obligations), and return any real-money deposits to the payment method from which they originated where technically feasible.

11. Third-Party Links

The db678 platform may contain references to third-party game providers and payment partners. While db678 takes care to work only with reputable partners, we are not responsible for the privacy practices or the content of any third-party systems, websites, or platforms that may be accessible in connection with using our service. This Policy applies solely to data processed by db678. We encourage you to review the privacy policies of any third-party providers whose services you use in connection with the db678 platform, particularly your chosen mobile wallet provider (bKash, Nagad, Rocket, or Upay) and any bank whose card you use for deposits.

12. Changes to This Privacy Policy

db678 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or platform functionality. When we make a material change to this Policy, we will update the "Last updated" date at the top of this page and, where the change is significant, endeavour to provide advance notice to registered players via the platform or by email to your registered address. Your continued use of the db678 platform following the publication of a revised Policy constitutes your acceptance of the updated terms. We recommend that you review this page periodically to stay informed of how db678 protects your personal data.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way db678 processes your personal data, please contact our support team. We aim to respond to all privacy-related enquiries within one business day Bangladesh Standard Time (BST, UTC+6). When contacting us about a data rights request, please include your account username and a clear description of your request so that we can locate your records efficiently.

Email: [email protected]