db67 Privacy Policy

1. Data We Collect

db67 collects personal information from players through a number of channels, including account registration, identity verification, payment transactions, customer support interactions, and your ongoing use of the platform. We are transparent about every category of data we hold, and the table below summarises the primary data types we collect.

Data Category	Examples	Collection Point
Identity Data	Full legal name, date of birth, nationality, NID or passport number	Registration & KYC verification
Contact Data	Email address, mobile phone number, district/city (e.g., Dhaka, Chittagong)	Account registration
Financial Data	bKash / Nagad / Rocket / Upay mobile wallet numbers, bank account details	Deposit & withdrawal requests
Transaction Data	Deposit amounts, withdrawal amounts, bet history, bonus usage records	Platform activity
Technical Data	IP address, browser type, operating system, device fingerprint, session tokens	Automatic — when you use db67
Behavioural Data	Pages visited, games played, time spent on platform, clickstream data	Automatic — analytics & cookies
Support Data	Chat transcripts, email correspondence, complaint records	Customer support interactions

1.1 Data You Provide Directly

The majority of personal data db67 holds is information you provide voluntarily when you register an account, complete identity verification, make a deposit or withdrawal, or contact our support team. This includes your name, date of birth, contact details, and financial account information linked to your chosen payment methods such as bKash, Nagad, or Rocket.

1.2 Data Collected Automatically

When you visit db67.vip or use our platform, certain technical information is collected automatically. This includes your IP address, the type and version of browser you are using, your device's operating system, the pages you visit and the order in which you visit them, the date and time of each visit, and any referring URL that directed you to our site. This data is collected through server logs, cookies, and similar technologies described further in Section 3 of this policy.

1.3 Data From Third Parties

In some circumstances, db67 may receive information about you from third parties. For example, payment processors may share transaction confirmation data with us; identity verification service providers may return the results of document checks; and fraud prevention partners may share risk signals associated with a particular IP address or device profile. We handle all third-party data under the same standards of care as data you provide directly.

2. How We Use Your Data

db67 processes your personal data only where there is a legitimate and clearly defined purpose for doing so. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The primary purposes for which we use personal data are set out below.

2.1 Account Management and Service Delivery

The most fundamental use of your personal data is to operate your db67 account. This includes creating and maintaining your account record, processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer, crediting and managing bonus funds, recording your bet history and game activity, and providing you with access to the full db67 platform including casino games, live dealer tables, and sports betting markets.

2.2 Identity Verification and Fraud Prevention

db67 is legally and operationally obligated to verify the identity of all players before processing withdrawals and at any point where suspicious activity is identified. Your identity data and financial data are used to conduct KYC checks, screen against relevant watch lists, detect patterns consistent with money laundering, and prevent the use of db67 by minors. These processing activities are essential to the integrity and legal compliance of the platform.

2.3 Responsible Gaming Monitoring

Your behavioural and transaction data is used to monitor for signs of problem gambling behaviour in accordance with our Responsible Gaming Policy. This may include identifying unusual spikes in deposit frequency, rapid loss patterns, or other indicators that suggest a player may benefit from intervention or support. Where such patterns are identified, our responsible gaming team may reach out proactively.

2.4 Customer Support

When you contact db67 support via email, live chat, or any other channel, we use your personal data — including your account information and the content of your support messages — to understand your query and respond effectively. Support correspondence is retained for a defined period as part of our operational records.

2.5 Marketing Communications

Where you have given your explicit consent, db67 may use your email address and/or mobile phone number to send you promotional communications including bonus offers, tournament announcements, seasonal promotions (such as BPL cricket season offers, Eid promotions, or Pohela Boishakh specials), and platform updates. You may withdraw your marketing consent at any time through your account settings or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

2.6 Platform Improvement and Analytics

Aggregated and anonymised behavioural and technical data is used to analyse how players use db67, identify popular features, detect technical issues, and guide decisions about platform development and improvement. Where possible, this analysis is conducted on data that has been stripped of any directly identifying information.

3. Cookies & Tracking Technologies

db67 uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience on our platform. A cookie is a small text file placed on your device by a website server. It enables the website to remember certain information about your visit, such as your login session, language preference, or the contents of a game session in progress.

3.1 Types of Cookies Used

• Strictly Necessary Cookies: These are essential for the db67 platform to function and cannot be disabled. They include session authentication cookies that keep you logged in, security tokens that protect your account from cross-site request forgery, and cookies that remember your consent choices.
• Performance and Analytics Cookies: These cookies collect anonymised information about how visitors use db67.vip — for example, which pages are visited most frequently and whether users encounter error messages. The data gathered is aggregated and cannot be used to identify you personally.
• Functional Cookies: These cookies allow db67 to remember choices you have made, such as your preferred deposit method or any display customisations you have applied, and to provide a more personalised experience during your session.
• Targeting and Preference Cookies: Where you have consented, these cookies are used to understand your interests based on your browsing and gaming activity on db67, so that any promotional communications we send are relevant to your preferences.

3.2 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers — including Chrome, Firefox, Safari, and Edge — allow you to view, block, or delete cookies at any time. Please note that disabling strictly necessary cookies will impair your ability to use db67; for example, you may be unable to maintain a login session or complete payment transactions. Disabling performance or functional cookies will not prevent you from using the core platform but may reduce the quality of your experience.

3.3 Third-Party Tracking

Certain game providers integrated into the db67 platform — including Pragmatic Play, Evolution Gaming, Spribe, and others — may set their own cookies within their game iframe environments. These cookies are governed by the respective game providers' own privacy policies. db67 does not have direct control over third-party cookies set by game providers and encourages players to review the privacy policies of relevant providers if they have specific concerns.

4. Data Sharing & Disclosure

db67 does not sell your personal information to third parties. We share data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

4.1 Payment Service Providers

To process deposits and withdrawals, db67 shares relevant financial and identity data with our payment processing partners. This may include bKash, Nagad, Rocket, Upay, and partnered banks such as Dutch-Bangla Bank, City Bank, BRAC Bank, and others. These providers receive only the information required to complete the specific transaction and are contractually prohibited from using your data for any other purpose.

4.2 Identity Verification Providers

During the KYC process, db67 may share identity documents and related data with specialist third-party identity verification service providers to conduct document authentication checks. These providers act as data processors on behalf of db67 and are bound by strict data processing agreements.

4.3 Game Technology Providers

Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical data — such as a pseudonymous player identifier and session token — necessary to run their games within the db67 platform. These providers do not receive your full name, contact details, or payment information.

4.4 Legal and Regulatory Disclosure

db67 may be required to disclose personal data in response to a valid legal request from a competent authority, court order, or regulatory body. We will only disclose the minimum information required to satisfy such a request and will, where legally permissible, notify the affected player of any such disclosure.

4.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of some or all of db67's assets, player personal data may be transferred to the acquiring or successor entity as part of that transaction. Any such transfer would be subject to the acquiring entity honouring the commitments made in this Privacy Policy with respect to the data transferred.

5. Data Retention

db67 retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

Data Category	Retention Period	Rationale
Account & Identity Data	Duration of active account + 5 years after closure	Anti-money laundering compliance and audit trail
Financial Transaction Records	7 years from transaction date	Financial record-keeping obligations
KYC Verification Documents	5 years from account closure	Regulatory compliance and fraud prevention
Customer Support Records	3 years from last interaction	Quality assurance and dispute resolution
Technical & Log Data	13 months from collection	Security monitoring and incident investigation
Marketing Consent Records	Until consent is withdrawn + 3 years	Evidence of lawful marketing basis

When data reaches the end of its applicable retention period, db67 will securely delete or irreversibly anonymise it. Where anonymisation is used, the resulting data may be retained indefinitely for statistical or analytical purposes, as it can no longer be linked to any identifiable individual.

6. Your Privacy Rights

As a db67 player, you have meaningful rights over the personal data we hold about you. We take these rights seriously and have processes in place to respond to all requests promptly and without undue delay. The following rights are available to all registered players:

6.1 Right of Access

You have the right to request a copy of the personal data db67 holds about you. Upon receiving a valid access request, db67 will provide you with a summary of the data categories held, the purposes for which they are processed, and any third parties to whom the data has been disclosed. We aim to respond to access requests within 30 days.

6.2 Right to Rectification

If any personal data db67 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain information — such as your contact email or phone number — directly through your account settings. For corrections to identity data such as your legal name or date of birth, please contact [email protected] with supporting documentation.

6.3 Right to Erasure

In certain circumstances, you have the right to request that db67 delete the personal data we hold about you. This right applies where the data is no longer necessary for the purpose for which it was collected, where you withdraw consent and there is no other lawful basis for processing, or where the data has been unlawfully processed. Please note that this right is not absolute: where db67 is required by law to retain certain data — for example, financial transaction records — we are not able to erase it prior to the end of the applicable mandatory retention period.

6.4 Right to Restrict Processing

You may request that db67 restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is being contested or while a deletion request is under review. During a processing restriction, db67 will continue to hold the data but will not use it for any active processing purpose.

6.5 Right to Object to Marketing

You have an unconditional right to object to the processing of your personal data for direct marketing purposes. This includes profiling carried out for the purposes of direct marketing. Once you exercise this right, db67 will cease all marketing communications directed to you and will update your preferences accordingly within 5 business days.

6.6 How to Exercise Your Rights

To exercise any of the rights described above, please contact the db67 data team at [email protected] with the subject line "Privacy Rights Request" and a description of the right you wish to exercise. We may ask you to verify your identity before processing the request to ensure that we are responding to the genuine account holder. All requests will be acknowledged within 5 business days and resolved within 30 days wherever possible.

7. Data Security

db67 implements a layered set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme is reviewed and updated on a regular basis to reflect changes in the threat landscape and best practices in information security.

7.1 Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your browser or app and db67.vip is encrypted using TLS 1.2 or higher. Our SSL certificate is valid and renewed continuously.
• Password Hashing: Player passwords are never stored in plain text. They are processed using a strong one-way cryptographic hashing algorithm with a unique salt per record.
• Database Encryption: Sensitive fields within the db67 database — including identity documents and financial account details — are encrypted at rest using AES-256 or equivalent.
• Access Controls: Access to systems containing personal data is restricted to db67 staff and contractors on a strict need-to-know basis, enforced by role-based access controls and multi-factor authentication.
• Intrusion Detection: db67 operates automated systems to monitor for unusual access patterns, brute-force attempts, and other indicators of potential security incidents in real time.

7.2 Organisational Safeguards

All db67 staff and contractors who handle personal data receive training on data protection obligations and are bound by confidentiality agreements. Vendor and third-party partner relationships are governed by data processing agreements that impose equivalent security standards. db67 conducts periodic reviews of its security posture and data handling practices to identify and remediate vulnerabilities.

7.3 Your Role in Security

While db67 takes extensive measures to secure your data, the security of your account also depends on the strength and confidentiality of your login credentials. You are responsible for choosing a strong, unique password for your db67 account and for keeping it confidential. db67 will never ask you for your password via email, live chat, or telephone. If you receive any communication purporting to be from db67 that asks for your password, please treat it as a phishing attempt and report it to [email protected] immediately.

7.4 Data Breach Response

In the unlikely event of a personal data breach that poses a risk to the rights and freedoms of affected players, db67 will take immediate steps to contain the breach, assess the scope and severity of the incident, and notify affected players without undue delay. Notifications will be sent to the email address registered on the affected account and will include a description of the nature of the breach, the categories of data involved, and the steps being taken to mitigate harm.

8. Policy Updates & Contact

8.1 Changes to This Policy

db67 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, platform features, legal obligations, or applicable data protection standards. When we make material changes — those that significantly affect how your data is used or the rights you have — we will notify all registered players by email to the address on file, and/or by a prominent on-site notice, at least 14 days before the changes take effect. Non-material updates, such as clarifications or corrections that do not alter the substance of any provision, may be made without advance notice. The "Last Updated" date at the top of this policy will always reflect when the most recent version was published.

8.2 Governing Version

This Privacy Policy is written and maintained in English. If a translation into another language is made available for reference purposes, the English version shall be the authoritative and governing version in any dispute, interpretation, or legal proceeding relating to this policy.

8.3 Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or about the way db67 handles your personal data, please reach out to our dedicated support team. We take all privacy concerns seriously and are committed to addressing them fairly and transparently.

• Email: [email protected]
• Response Time: Within 1 business day for privacy-related queries
• Support Hours: 24/7 · Bangladesh Standard Time (UTC+6)