db677 Privacy Policy — Your Data, Protected

db677 ("we", "us", "our") operates the online betting and casino platform accessible at db677.pro. We are committed to protecting the privacy and personal data of all users who access or register with our platform. This Privacy Policy sets out in clear terms what personal data we collect, the purposes for which we process it, how we keep it secure, with whom we share it, and the rights you hold as a data subject.

This policy applies to all personal data collected through db677.pro, including data submitted during account registration, identity verification, payment processing, customer support interactions, and general browsing of the platform. It applies equally to players accessing db677 from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and all other locations across Bangladesh.

The following table summarises the categories of personal data db677 collects, the source of that data, and the primary purpose for which each category is processed:

db677 processes personal data for the following specific purposes. We do not process personal data for any purpose not listed here without first obtaining your explicit consent or unless required by applicable law:

• To create and manage your db677 account, including authentication, access control, and account settings management.
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other supported payment methods, and to maintain accurate transaction records.
• To carry out Know Your Customer (KYC) identity verification in compliance with our anti-money laundering obligations.
• To deliver customer support, respond to account queries, investigate complaints, and resolve disputes.
• To monitor account activity for responsible gaming purposes, including identifying at-risk patterns and applying account controls such as deposit limits and session restrictions at a player's request.
• To send transactional communications such as deposit confirmations, withdrawal notifications, and security alerts. With your consent, to send promotional communications about bonuses and offers relevant to your interests.

db677 does not use personal data for automated decision-making that produces significant legal or financial effects on you without human oversight. Where profiling is used for responsible gaming purposes (such as identifying potential problem gambling indicators), a member of the db677 support team reviews the outcome before any account-level action is taken.

db677 processes your personal data only where a lawful basis for that processing exists. The following legal bases apply to the categories of processing described in this policy:

• Contractual necessity: processing required to fulfil your account agreement with db677, including account management, payment processing, and game delivery.
• Legal obligation: processing necessary to comply with applicable laws including anti-money laundering regulations, KYC requirements, and financial record-keeping obligations.
• Legitimate interests: processing for fraud prevention, security monitoring, responsible gaming oversight, and platform improvement where those interests are not overridden by your fundamental rights and freedoms.
• Consent: processing for optional communications such as promotional emails and marketing notifications, where you have given clear and specific consent. You may withdraw your consent at any time by contacting [email protected].

db677 is required to verify the identity of all players before enabling withdrawal rights and in other circumstances where identity confirmation is legally or operationally required. This process — Know Your Customer (KYC) — requires you to submit a copy of a valid government-issued photo identification document such as your National Identity Card (NID), passport, or birth certificate, and in some cases proof of address or additional supporting documents.

KYC documents submitted to db677 are processed solely for identity verification and fraud prevention purposes. They are stored using encryption and are not shared with third parties except as required to fulfil verification obligations or comply with applicable law. db677 retains KYC documents for the period required by applicable anti-money laundering and financial record-keeping regulations.

When you make a deposit or request a withdrawal on db677, the transaction is processed through your selected payment method — bKash, Nagad, Rocket, Upay, Visa, or Mastercard. db677 works with established payment processors to handle these transactions. Payment processor data handling is governed by the respective payment processor's own privacy policy and terms. db677 receives transaction confirmation data including amount, timestamp, and a reference identifier sufficient to reconcile your account balance.

db677 does not store full card numbers or mobile wallet PINs on its servers. Sensitive payment authentication credentials are handled exclusively by the payment processor in compliance with applicable payment security standards. db677 retains transaction records — including amounts, dates, and reference identifiers — as part of its financial record-keeping obligations under applicable law.

db677 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We share personal data only in the limited circumstances described below:

• Payment processors: transaction data is shared with your selected payment provider (bKash, Nagad, Rocket, Upay, Visa, Mastercard) solely for the purpose of processing your deposit or withdrawal.
• Identity verification providers: KYC documentation may be shared with third-party identity verification service providers who assist db677 in fulfilling its verification obligations under applicable law. These providers are bound by confidentiality obligations.
• Regulatory and law enforcement authorities: db677 will disclose personal data to competent regulatory authorities, law enforcement bodies, or courts where legally required to do so, including in connection with anti-money laundering investigations, fraud investigations, or court orders.
• Technology service providers: db677 may share limited technical and operational data with trusted infrastructure and hosting providers who support the operation of db677.pro. All such providers are subject to appropriate data processing agreements.

db677 does not share personal data with advertisers, data brokers, affiliate marketing networks, or any entity whose primary purpose is the commercial exploitation of personal data.

db677.pro uses cookies and similar client-side technologies to deliver a functional, secure, and personalised experience. The following categories of cookies are used:

• Essential cookies: required for the platform to function correctly. These include session authentication cookies, CSRF protection tokens, and load-balancing identifiers. You cannot opt out of essential cookies without ceasing to use the platform.
• Analytical cookies: used to understand aggregate platform usage patterns such as page load performance, navigation paths, and feature adoption rates. This data is used in anonymised or aggregated form only and is not linked to individual player identities.
• Preference cookies: used to remember your language selection and other non-critical account preferences to improve your experience across sessions.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not impair core platform functionality. db677 does not use third-party advertising cookies or tracking pixels for ad retargeting purposes.

db677 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply: account data and transaction records are retained for a minimum of five years following account closure to comply with anti-money laundering and financial record-keeping obligations; KYC documents are retained for the same minimum period; technical logs and session data are retained for up to twelve months for security and fraud detection purposes; marketing consent records are retained until consent is withdrawn, and for a period thereafter sufficient to demonstrate that consent was validly obtained.

Upon expiry of the applicable retention period, db677 will securely delete or anonymise personal data so that it can no longer be linked to an identifiable individual. Where deletion is not technically feasible within a standard operational cycle, the data will be placed in a restricted archive accessible only for compliance purposes.

db677 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include SSL/TLS encryption for all data in transit between your device and db677's servers; encryption of sensitive data at rest including KYC documents and financial records; access controls limiting data access to authorised personnel on a need-to-know basis; regular security assessments of the platform infrastructure; and incident response procedures designed to detect, contain, and remediate data security incidents promptly.

No security system is impenetrable. While db677 takes all reasonable precautions to secure your personal data, we cannot guarantee absolute security against all possible threats. In the event of a data security incident that is likely to result in a high risk to your rights and freedoms, db677 will notify affected players as promptly as practicable, providing details of the nature of the incident, the data affected, and the steps being taken to address it.

As a db677 account holder, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact db677 at [email protected]. db677 will respond to all valid data subject requests within a reasonable period and will not charge a fee for responding to rights requests in standard cases:

• Right of access: you may request a copy of the personal data db677 holds about you, together with information about how and why it is processed.
• Right to rectification: you may request correction of any inaccurate or incomplete personal data held on your account. Where the data concerned has been shared with a third party, db677 will notify that party of the correction where practicable.
• Right to erasure: subject to legal retention obligations, you may request that db677 delete your personal data. Note that db677 cannot delete data that it is legally required to retain, such as transaction records and KYC documents held under anti-money laundering regulations.
• Right to restrict processing: in certain circumstances, you may request that db677 restrict its processing of your personal data to storage only, for example while a rectification request is under review.
• Right to withdraw consent: where db677's processing of your personal data is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

db677 may request reasonable proof of identity before processing a data subject request to ensure that personal data is not disclosed to an unauthorised party. Where a request is refused, db677 will provide written reasons for the refusal.

db677 is strictly an adult platform for players aged 21 and above. db677 does not knowingly collect, store, or process personal data from individuals under the age of 21. If db677 becomes aware that personal data has been collected from a person under 21, it will take immediate steps to delete that data and close the associated account. If you believe that a person under 21 has created a db677 account, please notify db677 immediately at [email protected].

db677 reserves the right to update or amend this Privacy Policy at any time. When changes are made, the "Last Updated" date at the top of this page will be revised accordingly. Where changes are material — for example, where db677 begins processing personal data for a new purpose or sharing it with a new category of recipient — db677 will notify registered players by email or in-platform notification prior to the changes taking effect, and where required by applicable law, will seek your fresh consent.

Your continued use of db677.pro following the posting of an updated Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with the updated policy, you should cease using the platform and may request account closure by contacting [email protected].

For all privacy-related enquiries, data subject rights requests, or concerns about how db677 handles your personal data, please contact the db677 support team in writing. db677 is committed to responding to all privacy enquiries promptly and transparently. Support is available 24 hours a day, 7 days a week.

Email us at: [email protected]