Privacy Policy — db687

Data We Collect

When you register and use db687, we collect certain categories of personal data that are necessary to provide you with a secure, personalised, and legally compliant gaming service. We collect only the data we genuinely need — we do not collect data speculatively or without a clear operational purpose.

The following table summarises the categories of data db687 collects, the specific data points within each category, and the primary reason for collection:

Data may be collected directly from you (during registration, KYC, or when you contact support), automatically (through cookies and server logs when you use the platform), or from third parties (such as payment providers confirming a transaction or fraud-prevention services flagging a known bad actor). In all cases, the data is used only as described in this Privacy Policy.

How We Use Your Data

db687 processes your personal data on one or more of the following legal bases: (a) performance of the contract between you and db687 (i.e., providing the gaming services you signed up for); (b) compliance with a legal obligation (e.g., anti-money laundering checks, age verification); (c) our legitimate interests in operating a secure and commercially viable platform, provided those interests are not overridden by your rights; or (d) your explicit consent, where required.

The specific purposes for which db687 uses your data include:

• Account management: Creating, maintaining, and securing your db687 player account, including password resets and two-factor authentication.
• Identity verification: Conducting KYC checks to confirm your age, identity, and source of funds in compliance with applicable anti-money laundering obligations.
• Transaction processing: Facilitating deposits and withdrawals through bKash, Nagad, Rocket, and Upay, and maintaining a complete transaction ledger for your account.
• Fraud and security monitoring: Detecting suspicious activity, identifying duplicate accounts, preventing money laundering, and protecting players and the platform from unauthorised access.
• Customer support: Responding to your enquiries, resolving disputes, and providing assistance via Live Chat and email.
• Responsible gaming: Monitoring your gameplay patterns for signs of problem gambling behaviour and enabling self-exclusion, deposit limits, and cooling-off periods where needed.
• Platform improvement: Analysing aggregated, anonymised usage data to improve game selection, site performance, and user experience.
• Marketing communications: Sending you promotional offers, bonus notifications, and seasonal campaign updates by email or SMS — only if you have not opted out of marketing communications.
• Legal compliance: Meeting our obligations under applicable laws and responding to lawful requests from regulatory or law enforcement authorities.

Data Sharing & Third Parties

db687 does not sell your personal data to any third party. We share data only when it is necessary to deliver our services, meet a legal obligation, or protect the integrity of the platform. The categories of third parties with whom db687 may share your data are described below.

• Payment service providers — bKash, Nagad, Rocket, and Upay receive the transaction details necessary to process your deposit or withdrawal. These providers operate under their own privacy policies and are independently responsible for data shared with them in the course of a payment transaction.
• Identity verification partners — Third-party KYC and anti-fraud service providers may process copies of your identity documents and cross-reference them against databases of known fraudulent actors or politically exposed persons. These partners are contractually bound to process data only for the purposes defined by db687.
• Cloud infrastructure and hosting providers — db687's platform is hosted on secure cloud infrastructure. Our hosting partners have access to server-level data but are contractually prohibited from accessing or using player data for any purpose other than infrastructure operation.
• Customer support tools — Live chat and ticketing platforms used by our support team may process the content of your communications with us. These platforms are selected for their strong security posture and are bound by data processing agreements.
• Legal and regulatory authorities — db687 may disclose player data to law enforcement, regulatory bodies, or courts when required to do so by a valid legal order, warrant, or obligation under applicable law. db687 will, where legally permissible, notify the affected player of such a disclosure.
• Business successors — In the event of a merger, acquisition, or sale of all or part of db687's business, player data may be transferred to the acquiring entity. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

All third parties that process personal data on db687's behalf are required to implement appropriate technical and organisational security measures consistent with the standards applied by db687 itself. db687 does not permit third-party service providers to use your data for their own commercial purposes.

Cookies & Tracking

db687 uses cookies and similar browser-based technologies to make the platform function correctly, maintain your session security, and collect aggregated analytics data. A cookie is a small text file stored on your device by your browser when you visit a website. Cookies do not execute code and cannot access files on your device beyond what the browser stores in the cookie itself.

db687 uses the following categories of cookies:

db687 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. You will not see db687 advertisements follow you around other websites as a result of cookies set by this platform.

You can manage cookie preferences through your browser settings. Most modern browsers allow you to view, block, or delete cookies on a per-site basis. Blocking strictly necessary or security cookies will prevent you from logging in and using db687. Blocking functional or analytics cookies will not prevent platform access but may reduce the quality of your experience.

Data Retention

db687 retains your personal data for as long as your account is active and for a defined period after closure. Retention periods are determined by the operational need for the data and by applicable legal obligations, particularly those related to anti-money laundering record-keeping.

• Account and identity data — Retained for the duration of your active account plus a minimum of 5 years after account closure to meet anti-money laundering compliance requirements.
• Transaction records — All deposit and withdrawal records are retained for a minimum of 5 years from the date of the transaction, consistent with financial record-keeping obligations.
• KYC documents — Copies of identity documents submitted during verification are retained for 5 years post account closure or as otherwise required by applicable law.
• Customer support communications — Live chat transcripts and email correspondence are retained for 2 years from the date of the conversation to assist with dispute resolution and quality review.
• Technical and usage data — Server logs and session data are retained for 12 months on a rolling basis for security monitoring purposes.
• Marketing consent records — Records of your marketing consent or opt-out are retained for the lifetime of your account plus 2 years to demonstrate compliance with consent obligations.

When the applicable retention period expires, db687 will securely delete or anonymise the data in question. Anonymised data (from which all identifying information has been irreversibly removed) may be retained indefinitely for aggregate statistical analysis.

Your Privacy Rights

As a player on db687, you hold meaningful rights over your personal data. db687 is committed to honouring these rights promptly and without unnecessary barriers. To exercise any of the rights listed below, contact our support team at [email protected] with the subject line "Privacy Rights Request". We aim to respond to all rights requests within 10 business days.

• Right of Access — You have the right to request a copy of all personal data db687 holds about you, along with information about how it is being used. This is commonly referred to as a Subject Access Request (SAR).
• Right to Rectification — If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update basic account details (such as your email address or mobile number) directly through your account settings.
• Right to Erasure — You have the right to request that db687 delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis for processing exists. This right is subject to legal retention obligations as described in Section 5.
• Right to Restrict Processing — In certain circumstances — for example, where you contest the accuracy of your data or have objected to processing — you may request that db687 temporarily restrict how it uses your data while the matter is resolved.
• Right to Data Portability — Where processing is based on your consent or on a contract, you have the right to request that db687 provide your data in a structured, commonly used, machine-readable format (such as CSV or JSON) so you can transfer it to another service provider if you choose.
• Right to Object — You have the right to object to db687 processing your data for direct marketing purposes at any time, with immediate effect. You may also object to processing based on legitimate interests, in which case db687 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent — Where processing is based on your consent (for example, marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

db687 will not charge a fee for exercising any of the above rights in ordinary circumstances. We may charge a reasonable administrative fee or decline to act on a request that is manifestly unfounded or excessive, in which case we will explain our decision in writing.

Data Security

db687 implements a layered security architecture designed to protect player data against unauthorised access, accidental loss, alteration, or disclosure. Our approach to data security encompasses technical controls, organisational practices, and ongoing monitoring.

• Encryption in transit: All data transmitted between your device and db687's servers is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to every page on the platform, including login, registration, deposit, and game play sessions.
• Encryption at rest: Sensitive data fields — including identity document hashes and financial data — are encrypted at the database level. Encryption keys are managed separately from the encrypted data and rotated on a regular schedule.
• Access controls: Access to player data within db687's internal systems is governed by role-based access controls. Staff members access only the data necessary for their specific function. All internal access is authenticated and logged.
• Intrusion detection and monitoring: db687's infrastructure is monitored continuously for anomalous activity, including unusual login attempts, data exfiltration patterns, and DDoS activity. Automated alerts and human review are both part of the monitoring process.
• Penetration testing: db687 conducts periodic security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a data breach that poses a risk to players, db687 has an incident response plan in place. Affected players will be notified without undue delay, with information about what data was involved, what steps db687 has taken, and what actions you should consider taking to protect yourself.

While db687 applies robust security measures, no internet-based platform can guarantee absolute security. You also play an important role in keeping your account safe: use a strong, unique password for your db687 account, do not share your login credentials with anyone, and contact us immediately at [email protected] if you suspect unauthorised access to your account.

Policy Updates & Contact

db687 reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, legal obligations, or the services we offer. When we make a material change to this policy — meaning a change that affects your rights or the way we use your data in a meaningful way — we will notify you by email and/or by displaying a prominent notice on the platform before the change takes effect. Minor clarifications or corrections that do not affect the substance of the policy may be made without advance notice.

The effective date at the top of this Privacy Policy will always reflect when the current version was last revised. We encourage you to review this policy periodically so you remain informed about how db687 protects your data. Continued use of the platform after a notified policy change constitutes your acceptance of the updated terms.

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or want to report a concern about how db687 handles your personal data, please contact our privacy team using the following details:

db687 is committed to resolving all privacy-related concerns promptly and fairly. If you raise a concern with us and are not satisfied with our response, you have the right to escalate the matter through appropriate legal or regulatory channels available in Bangladesh.