db768 Privacy Policy — Your Data, Protected

1 Information We Collect

When you interact with the db768 platform — whether by registering an account, making a deposit via bKash or Nagad, placing a wager, or contacting our support team — we collect certain categories of personal information. The specific data collected depends on how you use db768 and the services you access. We collect only what is necessary to deliver a secure, reliable, and legally compliant gaming experience for players across Bangladesh.

1.1 Information You Provide Directly

During registration and ongoing platform use, you provide us with:

• Identity data: Your full legal name, date of birth, and gender — used to verify your identity and confirm you meet the 18+ age requirement
• Contact data: Your email address, mobile phone number (required for OTP-based security), and residential address in Bangladesh
• Payment data: Your bKash, Nagad, Rocket, or Upay wallet number; bank account details (if using City Bank, BRAC Bank, or Dutch-Bangla Bank for transfers) — used solely to process deposits and withdrawals in BDT
• Identity verification documents: Copies of your National Identity Card (NID), passport, or driving licence, submitted during KYC verification
• Account credentials: Your chosen username and hashed password (we never store passwords in plain text)
• Communications data: Records of your correspondence with the db768 support team via email at [email protected], including support tickets and complaint records

1.2 Information Collected Automatically

When you access db768 through a browser or mobile device, we automatically collect the following technical data:

• Device and browser data: Device type, operating system, browser version, screen resolution, and device identifiers
• Network data: IP address, approximate geographic location derived from IP (city and country level — we do not collect GPS coordinates), and internet service provider
• Usage and session data: Pages visited, game titles played, session duration, bet history, deposit and withdrawal transaction timestamps, and navigation paths within the platform
• Cookie and tracking data: Session cookies, preference cookies, and analytics identifiers — detailed in Section 4 of this Policy

1.3 Information from Third Parties

db768 may receive limited data about you from trusted third parties in specific circumstances, including:

• Payment processors (bKash, Nagad, Rocket, Upay, and partner banks) confirming transaction status and wallet ownership
• Identity verification service providers who assist with NID and document authentication during KYC review
• Fraud detection and anti-money-laundering service providers who flag suspicious transaction patterns
• Game suppliers (such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi) who provide game-round outcome data for dispute resolution purposes

2 How We Use Your Data

db768 processes your personal data for specific, documented purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The following table outlines the primary purposes for which db768 processes personal data and the lawful basis for each:

Processing Purpose	Data Categories Used	Lawful Basis
Account registration and identity verification	Identity data, contact data, KYC documents	Contractual necessity; legal obligation (KYC/AML)
Processing BDT deposits and withdrawals	Payment data, identity data, transaction records	Contractual necessity; legal obligation (AML compliance)
Delivering casino games, live dealer tables, and sports betting markets	Account data, session data, usage data	Contractual necessity
Platform security, fraud detection, and anti-money-laundering monitoring	Device data, network data, payment data, transaction history	Legal obligation; legitimate interest (platform integrity)
Responsible gaming compliance — deposit limits, self-exclusion, age verification	Identity data, transaction data, gaming history	Legal obligation; legitimate interest (player protection)
Customer support and dispute resolution	Communications data, account data, transaction records	Contractual necessity; legitimate interest
Sending promotional communications and bonus offers (where consented)	Contact data, gaming preferences, transaction history	Consent (opt-in); legitimate interest where existing player relationship exists
Platform analytics and product improvement	Anonymised/aggregated usage data, session data	Legitimate interest (improving the player experience)

2.1 Marketing Communications

db768 may send you promotional emails, SMS messages, or in-platform notifications about bonuses, seasonal promotions (such as BPL cricket season offers, Eid bonus campaigns, or Pohela Boishakh promotions), and new game launches — provided you have given your consent to receive such communications during registration or subsequently in your account settings. You may withdraw your consent to marketing communications at any time by updating your notification preferences in your db768 account or by contacting us at [email protected]. Withdrawing marketing consent does not affect the processing of data necessary to operate your account.

3 Data Sharing & Disclosure

db768 shares personal data with third parties only where strictly necessary and only with parties who are contractually bound to handle your data securely and in accordance with applicable data protection standards. We do not share your personal information with any party for purposes beyond those described in this Privacy Policy.

3.1 Categories of Third-Party Recipients

• Payment service providers: bKash, Nagad, Rocket, Upay, City Bank, BRAC Bank, and Dutch-Bangla Bank receive transaction data (amount, wallet/account number, timestamp) necessary to process your deposits and withdrawals in BDT. These providers operate under Bangladesh Bank regulations and their own privacy policies.
• Game suppliers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive your account identifier and game-round data to deliver game content and resolve disputes about game outcomes. Game suppliers do not receive your full identity or payment details.
• KYC and identity verification providers: Specialist third-party services that assist db768 in authenticating identity documents (NID, passport, driving licence) submitted during account verification.
• Fraud prevention and AML compliance providers: Services that analyse transaction patterns to detect potential fraud, bonus abuse, or money laundering activity. These providers process data under contractual data processing agreements with db768.
• IT infrastructure and cloud service providers: Hosting, database, and security service providers who store and process platform data on db768's behalf and under db768's instructions. These providers do not use your data for their own purposes.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory requirement, db768 may disclose personal data to relevant authorities — including Bangladesh Financial Intelligence Unit (BFIU) where AML reporting obligations apply.

3.2 International Data Transfers

Some of db768's third-party service providers (particularly game suppliers and IT infrastructure providers) may process data outside Bangladesh. Where such transfers occur, db768 ensures that adequate contractual safeguards are in place — including data processing agreements that require the recipient to maintain security standards equivalent to those described in this Policy. We do not transfer your payment data or KYC documents outside the secure processing environment without contractual protections.

4 Cookies & Tracking Technologies

db768 uses cookies and similar tracking technologies to operate the platform efficiently, maintain session security, understand how players use the site, and improve the overall experience. A cookie is a small text file placed on your device by the db768 website when you visit. Cookies do not contain executable code and cannot access other information stored on your device.

4.1 Types of Cookies Used by db768

Cookie Type	Purpose	Duration
Strictly Necessary	Maintain your login session, remember your account state, enable secure OTP authentication, prevent cross-site request forgery (CSRF)	Session (deleted on browser close)
Functional / Preference	Remember your language preference (English), game lobby display settings, and notification preferences between visits	Up to 12 months
Analytics	Collect anonymised data about which pages and game categories are visited most frequently, session duration, and navigation patterns — used to improve platform design and content	Up to 24 months (anonymised)
Security / Fraud Detection	Identify devices associated with fraudulent activity, detect unusual login patterns, and support anti-bot protections on the db768 login and deposit flows	Up to 12 months

4.2 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies. Note that disabling strictly necessary cookies will prevent db768 from functioning correctly — you will not be able to maintain a login session or complete deposits and withdrawals if these cookies are blocked. Disabling analytics or preference cookies will not affect your ability to use core platform features but may result in a less personalised experience.

Instructions for managing cookies in the most common browsers used by Bangladesh players are available through the browser's own help documentation. db768 does not use third-party advertising cookies or cross-site tracking pixels.

5 Data Retention & Storage

db768 retains your personal data for only as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Different categories of data are subject to different retention periods based on their purpose and the legal requirements applicable to online gaming platforms operating in Bangladesh.

5.1 Retention Periods by Data Category

Data Category	Retention Period	Reason
Account registration data (name, email, mobile number, date of birth)	Duration of account + 5 years after closure	Legal obligation; dispute resolution; AML compliance
KYC / identity verification documents (NID, passport)	Duration of account + 5 years after closure	Legal obligation (AML/KYC regulatory requirements)
Transaction records (deposits, withdrawals, wagers)	7 years after transaction date	Financial record-keeping; AML compliance; tax obligations
Support communications and complaint records	3 years after resolution	Dispute resolution; legal claims; service quality review
Anonymised analytics data	Up to 24 months	Platform improvement (no personal identifiers retained)
Self-exclusion records	Duration of exclusion + 7 years	Responsible gaming compliance; prevention of premature re-registration

Upon expiry of the applicable retention period, db768 securely deletes or anonymises personal data so that it can no longer be linked to any individual. Where data is anonymised rather than deleted, it may be retained indefinitely for aggregate statistical analysis but will not be used in any way that identifies you personally.

6 Security Measures

Protecting your personal and financial data is a core operational priority at db768. We implement a layered security architecture that combines technical, administrative, and procedural controls to protect player data against unauthorised access, disclosure, alteration, or destruction.

6.1 Technical Security Controls

• SSL/TLS encryption: All data transmitted between your device and the db768 platform — including login credentials, deposit requests, and personal profile information — is encrypted using SSL/TLS protocols, the same standard used by bKash and major Bangladesh banks
• AES-256 data-at-rest encryption: All personal data and financial records stored in db768's databases are encrypted at rest using AES-256 encryption
• OTP-based two-factor authentication: db768 uses one-time password (OTP) verification via your registered Bangladesh mobile number for login and high-value transaction confirmation
• Hashed password storage: Player passwords are never stored in plain text; they are stored as salted cryptographic hashes using industry-standard algorithms
• Firewall and intrusion detection: db768's platform infrastructure is protected by enterprise-grade firewalls and continuous intrusion detection and prevention systems
• Regular security audits: db768 conducts periodic security assessments of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited

6.2 Your Role in Account Security

While db768 implements robust technical controls, the security of your account also depends on the steps you take to protect your credentials. You are responsible for keeping your db768 username, password, and registered mobile number (used for OTP delivery) confidential. Never share your login details with anyone. If you suspect your account has been accessed without authorisation, contact the db768 support team immediately at [email protected] so we can investigate and secure your account promptly.

6.3 Data Breach Response

In the unlikely event of a data security incident that affects the confidentiality, integrity, or availability of your personal data, db768 has an incident response plan in place. We will investigate the breach promptly, take steps to contain and remediate it, and notify affected players via the registered email address on file within a reasonable timeframe, describing the nature of the incident, the data affected, and the steps we are taking to address it.

7 Your Privacy Rights

As a db768 player, you hold a number of rights in relation to the personal data we hold about you. db768 is committed to honouring these rights and will respond to verifiable requests within a reasonable timeframe — typically within 30 days of receipt of a valid request. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Privacy Request" and your registered account email address.

7.1 Right of Access

You have the right to request a copy of the personal data that db768 holds about you, together with information about how that data is processed. We will provide this information in a structured, readable format within 30 days of a verified request. Note that certain data categories (such as fraud detection records or AML investigation files) may be withheld where disclosure would prejudice an ongoing investigation or conflict with a legal obligation.

7.2 Right to Rectification

If any personal data db768 holds about you is inaccurate or incomplete, you have the right to request that we correct or update it. For account details such as your email address, mobile number, or withdrawal payment method, you may also update these directly in your db768 account settings or by contacting support.

7.3 Right to Erasure

You may request that db768 delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw consent and no other lawful basis for processing applies. Note that this right is not absolute: db768 may be required to retain certain data for the retention periods described in Section 5 in order to meet legal and regulatory obligations (particularly AML/KYC record-keeping requirements). We will inform you which data can be deleted and which must be retained, and the reason why.

7.4 Right to Restrict Processing

You have the right to request that db768 restrict the processing of your personal data in certain circumstances — for example, while we are investigating a rectification request or considering a deletion request. During a restriction, db768 will store your data but not actively process it for purposes beyond those necessary to handle the restriction itself.

7.5 Right to Withdraw Consent

Where db768 processes your personal data on the basis of your consent — for example, for marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. To withdraw marketing consent, update your notification preferences in your db768 account settings or email [email protected].

8 Contact & Policy Updates

8.1 Contact Us About Privacy

If you have any questions, concerns, or complaints about how db768 handles your personal data — or if you wish to exercise any of the privacy rights described in Section 7 — please contact the db768 data privacy team:

• Email: [email protected] (subject line: "Data Privacy Request")
• Response time: Under 30 minutes during Bangladesh Standard Time (BST, UTC+6) business hours; within 24 hours at all other times
• Formal complaints: Responded to within 5 Bangladesh business days with a written outcome

8.2 Policy Updates

db768 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made to this Policy, we will notify registered players via the email address on file at least 14 days before the changes take effect. The "Effective Date" displayed at the top of this Policy and in the hero section above indicates the date from which the current version applies.

Your continued use of db768 following notification of a Privacy Policy update constitutes your acceptance of the revised Policy. If you do not agree to the updated terms, you should close your account and cease using the platform before the effective date of the changes.

This Privacy Policy was last reviewed and updated on 1 January 2026. It applies to all players accessing db768 from Bangladesh and supersedes all previous versions of the db768 Privacy Policy.