Data & Privacy

Privacy Policy — How db678a Handles Your Personal Data

This Privacy Policy explains what personal information db678a collects from players in Bangladesh, how it is used, stored, protected, and the rights you have over your own data.

Effective: January 2026 SSL Encrypted Bangladesh

Last updated: January 2026 — We recommend reviewing this policy periodically.

Introduction and Scope of This Policy

db678a is committed to protecting the privacy and personal data of every player who uses our online casino and sports betting platform at https://db678a.vip. This Privacy Policy (the "Policy") describes in detail how db678a collects, uses, processes, stores, shares, and protects personal information relating to individuals who visit, register on, or otherwise interact with the db678a Platform.

This Policy applies to all personal data collected through the db678a website, mobile browser interface, customer support channels (including live chat and email at [email protected]), and any promotional or marketing communications issued by db678a. By registering an account on db678a or by continuing to use the Platform after this Policy has been made available to you, you consent to the collection and use of your personal data as described herein.

db678a serves players primarily located in Bangladesh, including in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. Where this Policy refers to applicable law, it refers to the laws and data protection obligations relevant to the jurisdictions in which db678a operates. If you do not agree to this Privacy Policy, you must not use the db678a Platform.

SSL Encrypted

All data transmitted to and from db678a is protected by 256-bit SSL encryption at all times.

No Data Selling

db678a never sells or rents your personal information to third-party advertisers or data brokers.

Your Rights

You have the right to access, correct, or delete your personal data held by db678a at any time.

Secure Storage

Your data is stored on secured servers with access restricted to authorised db678a personnel only.

Payment Safety

bKash, Nagad, and Rocket transaction data is processed via encrypted channels and never stored in plain text.

Opt-Out Available

You may opt out of marketing communications from db678a at any time via your account settings or by contacting support.

Information We Collect

db678a collects personal data that is necessary to provide you with a safe, reliable, and personalised gaming and betting experience. The categories of personal information we collect are described below.

Registration and Account Data

When you create a db678a account, we collect the following information:

Full legal name as it appears on your government-issued identification document.
Date of birth — used to verify that you meet the 21+ age requirement.
Email address — used for account communication, security alerts, and optional marketing messages.
Mobile phone number — required for account verification and linked to your bKash, Nagad, or Rocket payment profile where applicable.
Username and encrypted password — your login credentials for accessing db678a.
Residential address in Bangladesh — required for identity verification and fraud prevention purposes.

Financial and Transaction Data

To process deposits and withdrawals, db678a collects and retains financial transaction data, including:

Deposit and withdrawal amounts in Bangladeshi Taka (BDT).
Payment method identifiers — for example, the mobile number associated with your bKash or Nagad account, or the masked card number of your Visa or Mastercard.
Transaction reference numbers issued by your payment provider.
Bank account details (account name and partial account number) where bank transfers via Dutch-Bangla Bank, BRAC Bank, City Bank, Sonali Bank, Islami Bank, or other Bangladeshi financial institutions are used.
Transaction timestamps, including the date and time of each deposit and withdrawal in Bangladesh Standard Time (BST, UTC+6).

db678a does not store full card numbers, CVV codes, or complete bank account numbers. All payment data is tokenised and processed through secure, encrypted payment channels.

Identity Verification (KYC) Documents

As part of our Know Your Customer (KYC) process, db678a may collect copies or scans of the following documents:

National Identity Card (NID) — front and back.
Passport — photo and personal details page.
Birth certificate — where NID is unavailable for age verification.
Proof of address documents — utility bills, bank statements, or mobile financial service (MFS) statements issued in Bangladesh within the past three months.

KYC documents are stored securely and accessed only by authorised compliance personnel. They are retained for the period required by applicable anti-money laundering (AML) and identity verification obligations.

Technical and Usage Data

When you access db678a, we automatically collect certain technical information about your device and browsing activity, including:

IP address — used for geolocation verification and fraud detection.
Device type, model, and operating system — used to optimise the db678a interface for your device.
Browser type and version.
Pages visited on db678a, including timestamps and time spent on each page.
Referring URL — the website or search engine that directed you to db678a.
Game session data — bet history, game choices, session duration, and wagering patterns, used for responsible gaming monitoring and platform improvement.
Cookies and similar tracking technologies — see the Cookies section below for full details.

Customer Support Communications

When you contact db678a's support team by email or live chat, we retain records of those communications, including your messages, the date and time of contact, and any information you provide during the interaction. This data is used to resolve your query, improve our support service, and maintain an accurate record of account-related decisions.

How We Use Your Information

db678a processes your personal data only for clearly defined, legitimate purposes. We do not use your information in any manner inconsistent with the purposes described in this Policy without obtaining your prior consent.

Operational Purposes

To create and manage your db678a account, including verifying your identity and age (21+).
To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and Bangladeshi bank transfer, and to resolve transaction disputes.
To deliver the games and sports betting services you have requested, including live casino tables, cricket betting markets, slot games, and crash games.
To provide customer support and respond to queries, complaints, and account requests.
To enforce our Terms & Conditions and monitor for violations, including detecting and preventing fraud, collusion, and bonus abuse.
To fulfil AML and KYC obligations, including verifying the source of deposited funds and reporting suspicious activity where legally required.
To implement responsible gaming controls, including monitoring wagering patterns, applying self-exclusion requests, and enforcing deposit limits and time-out periods.

Analytical and Improvement Purposes

To analyse platform usage patterns and identify areas where the db678a user experience can be improved.
To test new features, game offerings, and promotional structures before full deployment.
To generate aggregated, anonymised statistical reports on player behaviour — these reports do not identify individual players and are used solely for internal business purposes.

Marketing and Communications

With your consent, db678a may use your email address or mobile number to send you promotional offers, bonus notifications, and seasonal campaign messages — for example, promotions tied to the Bangladesh Premier League (BPL), IPL, Eid, or Pohela Boishakh. You may withdraw your marketing consent at any time by:

Updating your communication preferences in your db678a account settings.
Clicking the unsubscribe link included in any marketing email.
Contacting our support team at [email protected] with the subject line "Marketing Opt-Out".

Withdrawal of marketing consent does not affect your ability to use db678a or receive transactional and security-related communications about your account.

Cookies and Tracking Technologies

db678a uses cookies and similar technologies to enhance your experience on the Platform, remember your preferences, and collect analytical data. A cookie is a small text file stored on your device when you visit a website.

Types of Cookies We Use

Essential Cookies: Required for the Platform to function correctly — including session management, login authentication, and security tokens. These cannot be disabled without impacting core Platform functionality.
Analytical Cookies: Used to understand how players navigate the db678a Platform, which pages are visited most frequently, and how long sessions last. This data is used in aggregate form to guide product improvements.
Preference Cookies: Store your selected language, display settings, and other personalisation choices so that they are retained between visits.
Security Cookies: Help detect and prevent fraudulent activity, account takeover attempts, and automated bot interactions on the Platform.

Managing Your Cookie Preferences

You may control non-essential cookies through your browser's settings. Most modern mobile and desktop browsers allow you to block, delete, or restrict cookies. Please note that disabling certain cookies may affect the functionality of db678a, including the ability to stay logged in or to access certain game features. db678a does not use cookies to deliver third-party advertising.

db678a does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your personal information only in the limited circumstances described below.

Authorised Data Sharing

Payment Processors: We share transaction data with bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner Bangladeshi banks solely to process your deposit and withdrawal requests. These providers are contractually bound to handle your data securely and to use it only for payment processing purposes.
Game Software Providers: Game studios such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe receive anonymised session and gameplay data for the purposes of game delivery and fair-play certification. These providers do not receive your full personal profile.
Identity Verification Services: Where db678a uses a third-party KYC provider to verify your identity documents, that provider will receive a copy of the documents you submit. All KYC providers engaged by db678a are required to comply with strict data handling and confidentiality obligations.
Legal and Regulatory Authorities: db678a may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, including for the purposes of AML compliance, fraud investigation, or responding to a valid legal order.
Business Transfers: In the event of a merger, acquisition, or sale of all or part of db678a's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to how your data is handled.

Your Data Privacy Rights

As a db678a player, you have a number of rights with respect to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request".

Right of Access

You have the right to request a copy of all personal data that db678a holds about you. We will provide this information within 30 days of receiving your verified request.
Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Please contact support with the correct details and relevant supporting documentation.
Right to Erasure

You may request that db678a delete your personal data in certain circumstances — for example, where it is no longer necessary for the purposes for which it was collected. Note that we may be required to retain certain data for legal and AML compliance purposes even after your account is closed.
Right to Restriction

You have the right to request that db678a restrict the processing of your personal data in certain circumstances, such as while a rectification request is being assessed.
Right to Data Portability

You may request that db678a provide your personal data in a structured, commonly used, and machine-readable format so that it can be transferred to another service provider where technically feasible.
Right to Object

You have the right to object to db678a processing your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where your personal circumstances justify it.

Data Retention and Account Closure

Retention Periods

db678a retains personal data for as long as your account is active and for a defined period thereafter, depending on the category of data:

Account and identity data — retained for the duration of your account and for a minimum of five years following account closure, in accordance with AML record-keeping obligations.
Transaction and financial records — retained for a minimum of five years from the date of the transaction, as required by financial compliance regulations.
KYC documents — retained for five years following account closure or the completion of the most recent KYC review, whichever is later.
Customer support communications — retained for three years from the date of the communication unless the matter relates to an ongoing dispute or legal proceeding.
Technical and usage data (logs) — retained for up to 12 months from the date of collection, after which they are anonymised or deleted.

Closing Your Account

You may request closure of your db678a account at any time by contacting support at [email protected]. Upon account closure, db678a will cease processing your personal data for operational purposes. However, certain data categories will be retained for the minimum periods specified above to fulfil legal, regulatory, and AML obligations. Any remaining account balance will be refunded to your registered payment method in accordance with our withdrawal procedures, subject to successful identity verification.

Data Security and Protection Measures

db678a applies a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure.

Security Measures in Place

256-bit SSL/TLS encryption on all data transmitted between your device and the db678a Platform.
Encrypted password storage using industry-standard hashing algorithms — db678a staff cannot view your password in plain text.
Access controls — personal data is accessible only to authorised db678a personnel with a legitimate operational need.
Two-factor authentication (2FA) available on your db678a account to add an additional layer of login security.
Regular security audits and penetration testing of the db678a Platform infrastructure.
Fraud detection systems that monitor login activity, deposit patterns, and gameplay behaviour for indicators of account compromise or misuse.

While db678a employs robust security measures, no online platform can guarantee absolute data security. In the event of a data breach that poses a risk to your rights, db678a will notify affected players and take immediate remediation steps in accordance with applicable data protection obligations.

Changes to This Privacy Policy

Policy Updates

db678a reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, a change in the categories of data we collect or a new data-sharing arrangement — we will notify registered players by email or through a prominent notice on the db678a Platform at least 14 days before the changes take effect.

The "Last updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of db678a following the effective date of any revision constitutes your acceptance of the updated Policy. If you do not accept the revised terms, you must cease using db678a and may request account closure by contacting [email protected].

Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data db678a holds about you, please contact our dedicated privacy support team:

Email: [email protected] (subject line: "Privacy Enquiry")
Response time: We aim to respond to all privacy-related enquiries within five business days.
Operating hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).