db456 Privacy Policy — How We Handle Your Personal Data

db456 is committed to protecting the privacy and personal data of every individual who interacts with our platform. This Privacy Policy applies to all services operated under the db456 brand, including the db456 website, mobile browser interface, and all associated gaming, betting, and payment services accessible to members based in Bangladesh.

When we refer to "db456", "we", "us", or "our" in this Policy, we mean the entity operating the db456 platform and responsible for the processing of your personal data. When we refer to "you" or "your", we mean any individual who accesses the db456 platform, registers an account, or submits personal information through any db456 service.

This Policy is written in formal English and should be read in conjunction with the db456 Terms and Conditions and Responsible Gaming Policy, both of which are available on this website. In the event of any conflict between this Policy and those documents with respect to data privacy matters, this Privacy Policy shall take precedence.

db456 collects personal data in several categories depending on your relationship with the platform. The categories of personal data we collect include but are not limited to the following:

db456 does not collect or store sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information, except where strictly required by applicable law or where you have provided such information voluntarily in the context of a responsible gaming request.

db456 collects personal data through several distinct channels, all of which are disclosed here for full transparency:

• Direct Submission: Data you provide when you complete the db456 registration form, submit account verification documents, contact our support team, fill in responsible gaming tools, or update your account profile.
• Automated Technical Collection: Data collected automatically by our platform systems each time you access or interact with db456, including IP address logging, device fingerprinting, session tracking, and browser behaviour analytics.
• Payment Processors: Transaction reference data and confirmation signals received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other payment partners when you initiate a deposit or withdrawal. db456 does not receive your full mobile banking PIN or password from any payment provider.
• Identity Verification Partners: Where db456 uses a third-party KYC service to assist with identity verification, that service may share verification results and document authenticity assessments with db456.
• Cookies and Tracking Technologies: Data collected via cookies, pixel tags, and similar technologies placed on your device when you visit the db456 platform. See Section 7 for full details on our cookie practices.

db456 processes your personal data only for specific, defined purposes. We do not process data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which db456 processes personal data are as follows:

• Account Creation and Management: To register your account, authenticate your identity at login, manage your account settings, and communicate essential account information to you.
• Payment Processing: To receive and process deposit transactions via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to execute withdrawal requests to your registered payment account.
• Identity Verification and Fraud Prevention: To verify that you meet the db456 eligibility requirements including the 21+ age requirement, to detect and prevent fraudulent activity, multi-accounting, money laundering, and other prohibited conduct as described in the db456 Terms and Conditions.
• Service Delivery: To make the db456 sportsbook, casino, slots, fishing games, and card games available to you and to record your betting and gaming activity for account management purposes.
• Customer Support: To respond to your support enquiries, resolve disputes, and communicate with you regarding your account status.
• Responsible Gaming Compliance: To apply and monitor responsible gaming tools including deposit limits, session reminders, cooling-off periods, and self-exclusion, and to identify members who may be showing signs of problem gambling.
• Legal and Regulatory Compliance: To meet obligations under applicable laws and to respond to lawful requests from competent authorities.
• Platform Improvement: To analyse usage patterns and technical data in aggregate form to improve the db456 platform, fix errors, and develop new features.
• Marketing Communications: Where you have provided consent, to send you information about db456 promotions, bonuses, and new games. You may withdraw consent for marketing communications at any time by contacting [email protected].

db456 processes your personal data on the following legal bases, depending on the specific processing activity in question:

• Contractual Necessity: The majority of data processing by db456 is necessary for the performance of the contract between you and db456 under the Terms and Conditions — for example, processing your deposits, crediting winnings, and managing your account.
• Legal Obligation: Certain processing activities are required to comply with applicable law, including identity verification requirements and anti-money-laundering obligations.
• Legitimate Interests: db456 processes some data on the basis of legitimate interests, including fraud detection, platform security, and aggregated analytics for service improvement, provided these interests are not overridden by your privacy rights.
• Consent: Where processing is based on your consent — such as sending marketing communications — db456 will obtain your clear, affirmative consent before processing. You may withdraw consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

db456 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your data only in the following limited and controlled circumstances:

• Payment Partners: Necessary transaction data is shared with bKash, Nagad, Rocket, Upay, and other payment processors solely to execute your deposit and withdrawal instructions.
• Identity Verification Providers: Where a third-party KYC service is engaged to assist with identity and age verification, your identity documents and verification data may be processed by that provider under strict data processing agreements with db456.
• Game Content Providers: Certain game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session tokens and game-result data as part of the technical integration required to deliver their games on the db456 platform. These providers do not receive your full identity profile.
• IT and Platform Service Providers: Hosting, cloud infrastructure, analytics, and cybersecurity service providers engaged by db456 may have access to platform data in the course of providing their services. All such providers are bound by data processing agreements that restrict use of your data to the specified service purpose.
• Legal and Regulatory Authorities: db456 will disclose personal data to law enforcement, regulatory bodies, or other competent authorities where required to do so by law, court order, or in connection with the investigation of fraud, money laundering, or other criminal activity.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of the db456 business, personal data held by db456 may be transferred to the successor entity, subject to equivalent data protection commitments.

The db456 platform uses cookies and similar tracking technologies to ensure the platform operates correctly, to remember your preferences, and to gather anonymised analytics data that helps us improve the user experience. The types of cookies used on db456 are as follows:

• Strictly Necessary Cookies: These cookies are essential for the db456 platform to function. They include session cookies that keep you logged in during an active session and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without impairing platform functionality.
• Functional Cookies: These cookies remember your preferences such as language settings and display options so that your experience is consistent across sessions.
• Analytics Cookies: These cookies collect anonymised data about how users interact with the db456 platform, including pages visited and time spent on each section. This data is used in aggregate form only and cannot be used to identify individual users.
• Marketing Cookies: Where you have consented to receive marketing communications, certain cookies may be used to understand which db456 promotions or features are most relevant to you. These cookies are only active where consent has been given.

You may manage cookie settings through your browser preferences. Disabling strictly necessary cookies may affect your ability to use core db456 platform features, including staying logged into your account.

db456 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The general retention periods applied by db456 are as follows:

• Active Account Data: Retained for the full duration of your account's active status on the db456 platform.
• Identity Verification Documents: Retained for a minimum of five years following account closure, in accordance with anti-money-laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five years from the date of each transaction.
• Support Communications: Retained for a minimum of two years from the date of the last communication in a support thread.
• Technical and Usage Data: Retained in anonymised form for up to two years for analytics and platform improvement purposes.
• Self-Exclusion Records: Where a member has requested self-exclusion, the record of that exclusion is retained for the full duration of the exclusion period and for a minimum of five years thereafter.

Following the expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

db456 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. The key security measures in place include:

• SSL/TLS Encryption: All data transmitted between your device and db456 servers is encrypted using industry-standard SSL/TLS protocols. This applies to all pages of the db456 platform including login, registration, deposit, and withdrawal flows.
• Access Controls: Access to personal data within db456's internal systems is restricted on a need-to-know basis. Only staff whose role specifically requires access to member data are authorised to view it, and all access is logged and audited.
• Password Security: Member account passwords are stored using strong one-way cryptographic hashing. db456 staff cannot view your password in plain text and will never ask you to reveal it.
• Fraud Monitoring: db456 operates continuous automated fraud monitoring systems that flag unusual account activity, including login attempts from unrecognised devices or locations, for human review.
• Secure Payment Integration: All financial transactions are processed through the secure APIs of our payment partners. db456 does not store your full mobile banking credentials on its own servers.

While db456 takes all reasonable precautions to protect your data, no digital platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in a risk to your rights and freedoms, db456 will notify affected members in accordance with applicable legal requirements.

As a db456 member, you have the following rights with respect to your personal data. To exercise any of these rights, please contact db456 support at [email protected] with the subject line "Data Rights Request" along with your registered username and a description of your request:

• Right of Access: You have the right to request a copy of the personal data that db456 holds about you. db456 will provide this information within a reasonable timeframe following identity verification.
• Right to Rectification: If any personal data that db456 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Many details can be updated directly in your account settings.
• Right to Erasure: In certain circumstances you may request that db456 delete your personal data. This right is subject to limitations where db456 is required by law to retain certain records, such as financial transaction data and identity verification documents.
• Right to Restriction: You may request that db456 restricts the processing of your data in certain circumstances, for example while a dispute about the accuracy of your data is being resolved.
• Right to Object: You have the right to object to processing based on legitimate interests, including any profiling conducted on that basis. You also have an absolute right to object to your data being used for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

db456 will respond to all data rights requests within 30 days. In complex cases, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day period.

The db456 platform is strictly intended for individuals aged 21 and above. db456 does not knowingly collect, process, or retain personal data relating to individuals under the age of 21. The 21+ age requirement is enforced at registration through age verification procedures, and any account found to belong to an individual under 21 will be closed immediately and all associated data will be deleted, except where retention is required for legal or regulatory reasons.

If you believe that db456 may have inadvertently collected data from an individual under the age of 21, please contact us immediately at [email protected]. We will investigate promptly and take all necessary steps to delete the data in question.

db456 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the structure of the db456 platform. The effective date displayed at the top of this page will be updated whenever material changes are made.

Where changes to this Policy are material — meaning they significantly affect your rights or the way your data is used — db456 will notify registered members via a prominent notice on the db456 platform or by email to the address registered on your account, at least 7 days before the changes take effect.

Your continued use of the db456 platform after any updated version of this Privacy Policy becomes effective constitutes your acknowledgement of the changes. If you do not agree to any updated version of this Policy, you should cease using the platform and may request the closure of your account by contacting [email protected].

The current version of this Privacy Policy supersedes all previous versions. We recommend bookmarking this page and reviewing it periodically, particularly if you make significant changes to your account activity or payment methods.