db687 Privacy Policy

Introduction

This Privacy Policy applies to all personal data processed by db687 in connection with the operation of the online betting and casino platform available at db687.io (the "Platform"). It applies to all registered players, prospective players who browse the Platform without registering, and any individual who communicates with db687 via email or support channels.

db687 is operated as an entertainment platform serving players based primarily in Bangladesh. The Platform offers sports betting (including cricket, football, and kabaddi), live casino games, slots, and related wagering products. In the course of providing these services, db687 collects and processes certain personal data about players, the handling of which is governed by this Privacy Policy.

This Policy should be read alongside the db687 Terms and Conditions and the Responsible Gaming Policy, both of which are available on db687.io. Capitalised terms used in this Policy but not defined herein carry the meanings given to them in the Terms and Conditions.

Data Controller

For the purposes of this Privacy Policy, db687 acts as the data controller in respect of personal data collected from players using the Platform. As data controller, db687 determines the purposes and means of processing personal data as described in this document.

All data-related enquiries, access requests, correction requests, and deletion requests should be directed to our support team at the contact details provided in Section 15 of this Policy. db687 will acknowledge all valid data requests and respond within a reasonable time frame, which in standard circumstances will not exceed 30 calendar days from the date of receipt.

Data We Collect

db687 collects the following categories of personal data from players and platform users. The full data category table is provided in the section above, and the detailed breakdown is as follows:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification numbers (e.g., National ID card number, passport number). This data is required for age verification to enforce the 21+ player policy and for Know Your Customer (KYC) compliance.
• Contact Data: Email address, mobile phone number (including bKash/Nagad/Rocket-linked numbers), and current residential address including city and district within Bangladesh or other country of residence.
• Financial Data: Mobile banking account identifiers (bKash, Nagad, Rocket, Upay), bank account details for direct bank transfer deposits and withdrawals, and cryptocurrency wallet addresses used for USDT, BTC, or ETH transactions. db687 does not store full payment card numbers.
• Technical Data: IP address at time of registration and each subsequent login, device fingerprint, browser type and version, operating system, screen resolution, and session authentication tokens. This data is collected automatically when you access the Platform.
• Usage and Betting Data: Your betting history (including all markets wagered on, stake amounts, odds accepted, and outcomes), games played, bonus offers claimed, deposit and withdrawal transaction records, and login and logout timestamps.
• Communications Data: Records of all communication between you and the db687 support team, including live chat transcripts, email correspondence, and any complaint or dispute documentation.
• Responsible Gaming Data: Records of any deposit limits, loss limits, cool-off periods, or self-exclusion requests you have submitted, including the dates and durations of those restrictions. This data is processed to fulfil our duty of care obligations.

How We Collect Your Data

db687 collects personal data through the following means:

• Direct collection at registration: When you create a db687 account, you provide identity data, contact data, and your preferred payment methods directly through the registration form.
• During account verification (KYC): When you submit identity documents to complete verification, db687 collects and stores copies of those documents alongside the data extracted from them.
• During deposit and withdrawal transactions: Payment-related data is collected when you initiate financial transactions on the Platform through the cashier interface.
• Automatically through platform use: Technical data and usage data are collected automatically as you navigate the Platform, place bets, and interact with games. This is achieved through standard web logging and session management technologies.
• Through cookies and similar technologies: As described in Section 6 of this Policy, db687 uses cookies and tracking scripts to collect certain technical data and to maintain your session state across pages.
• Via support interactions: When you contact the db687 support team via email or live chat, the content of those communications and any personal data shared within them is retained as part of your account record.

How We Use Your Data

db687 processes personal data for the following specific purposes, each of which has a corresponding lawful basis:

• Account creation and management: To register your account, maintain your player profile, and enable you to log in and use all platform features. Lawful basis: performance of a contract.
• Identity and age verification: To confirm that you are at least 21 years of age and are who you claim to be, in fulfilment of our platform policy and responsible gaming obligations. Lawful basis: legal obligation.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, and cryptocurrency channels. Lawful basis: performance of a contract.
• Fraud prevention and platform security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and other security threats. Lawful basis: legitimate interest / legal obligation.
• Responsible gaming monitoring: To identify indicators of problem gambling and to apply or suggest protective measures such as deposit limits and self-exclusion. Lawful basis: legitimate interest / legal obligation.
• Customer support: To respond to your support queries, process complaints, and maintain accurate records of your interactions with the db687 team. Lawful basis: performance of a contract / legitimate interest.
• Platform improvement: To analyse aggregated usage patterns and improve the design, functionality, and game selection of the db687 platform. This analysis uses anonymised or pseudonymised data wherever possible. Lawful basis: legitimate interest.
• Marketing communications: To send promotional offers, bonus notifications, and platform news to players who have opted in to receive such communications. Lawful basis: consent. You may withdraw consent at any time by contacting support.
• Legal and regulatory compliance: To fulfil any legal obligations applicable to the operation of the db687 platform, including record-keeping obligations and cooperation with lawful requests from authorities. Lawful basis: legal obligation.

Cookies & Tracking Technologies

db687 uses cookies and similar tracking technologies on db687.io to enable core platform functionality, maintain session security, and collect analytical data about how the platform is used. The following types of cookies may be set when you visit db687.io:

• Strictly necessary cookies: These cookies are essential to the functioning of the Platform. They enable you to log in, maintain an authenticated session across pages, and use the cashier and game interfaces. These cookies cannot be disabled without impairing your ability to use the Platform.
• Analytical and performance cookies: These cookies collect anonymised data about which pages are visited most frequently, how long players spend on particular sections of the Platform, and which features generate the most engagement. This data is used solely to improve the Platform.
• Security cookies: These cookies are used to detect suspicious login attempts, identify device anomalies associated with potential account takeover activity, and protect your account from unauthorised access.
• Preference cookies: These cookies remember your platform preferences such as your preferred language and display settings so that they are applied automatically on your next visit.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to use the Platform. db687 does not use cookies to track your activity across third-party websites unrelated to the Platform.

Data Sharing & Third Parties

db687 does not sell, rent, or trade your personal data to any third party for commercial purposes. Personal data is shared only in the following circumstances, and only to the extent strictly necessary for the stated purpose:

• Payment service providers: Financial data is shared with the payment processors facilitating your transactions — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and cryptocurrency network infrastructure providers — solely to process your deposits and withdrawals.
• Identity verification providers: Identity data submitted during KYC may be shared with third-party document verification services contracted by db687. These providers are bound by data processing agreements that prohibit them from using your data for any purpose other than verification.
• Fraud prevention and security services: Technical and usage data may be shared with third-party fraud detection and cybersecurity services to protect the integrity of the Platform and the security of player accounts.
• Game content providers: When you play a game provided by a third-party studio such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, your username and the details of your game session may be transmitted to that provider's systems for the purpose of operating the game. These providers are contractually prohibited from using this data for any other purpose.
• Legal and regulatory authorities: db687 may disclose personal data where required to do so by a valid legal obligation, court order, or lawful request from a regulatory or law enforcement authority. In such cases, db687 will disclose only the minimum data required to satisfy the obligation.

International Data Transfers

As an online platform serving players across Bangladesh and accessible internationally, db687 may store or process personal data on servers located outside of Bangladesh. Where personal data is transferred to a country that does not provide an equivalent level of data protection, db687 takes steps to ensure that appropriate safeguards are in place. These safeguards may include contractual data protection clauses with the recipient entity, or the use of hosting infrastructure in jurisdictions with recognised data protection standards.

By registering an account on db687 and accepting this Privacy Policy, you acknowledge and consent to the possibility that your personal data may be transferred to, stored in, or processed in a country outside Bangladesh. db687 remains responsible for ensuring that any such transfer complies with the data protection principles described in this Policy.

Data Security

db687 implements a comprehensive set of technical and organisational security measures to protect player personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your browser or device and db687.io is encrypted using TLS (Transport Layer Security) protocols. The Platform operates exclusively over HTTPS.
• Password hashing: Account passwords are never stored in plain text. db687 uses industry-standard cryptographic hashing algorithms with salting to store password data, ensuring that even in the event of a database breach, your password remains protected.
• Access controls: Access to personal data within db687's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data required to fulfil their specific job functions. All internal access is logged and audited.
• Payment data tokenisation: Financial identifiers such as mobile banking numbers are stored using tokenisation techniques that prevent full account details from being exposed in system logs or support interfaces.
• Intrusion detection and monitoring: The db687 platform is monitored continuously for suspicious activity, anomalous login patterns, and potential security breaches. Automated alerts are configured to notify the security team of any unusual system behaviour.
• Incident response procedures: In the event of a data security incident that affects player personal data, db687 will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.

Despite these measures, no online platform can guarantee absolute security. Players are encouraged to use a strong and unique password for their db687 account and to contact support immediately if they suspect any unauthorised access to their account.

Data Retention

db687 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as is required by applicable legal or regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account relationship with db687 and for a minimum of five years following account closure, in accordance with anti-money laundering and record-keeping obligations.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction in compliance with financial record-keeping requirements.
• Communications and support data: Retained for a minimum of three years from the date of each communication, or for longer where the communication relates to an unresolved dispute or regulatory matter.
• Technical and usage data (logs): Standard server and session logs are retained for up to 90 days. Aggregated, anonymised usage analytics may be retained indefinitely as they do not constitute personal data.
• Responsible gaming records: Self-exclusion and limit records are retained permanently to prevent a self-excluded player from re-registering without completing the appropriate return-to-play process.
• Marketing preferences: Retained until you withdraw consent or request deletion, and for a reasonable period thereafter to demonstrate that your preference was honoured.

Once the applicable retention period has expired, personal data is securely deleted from db687 systems or irreversibly anonymised so that it can no longer be associated with an individual player.

Your Rights Over Your Data

As a player on the db687 platform, you have the following rights in respect of your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Privacy Request".

• Right of access: You have the right to request a copy of all personal data that db687 holds about you. We will provide this information in a structured, commonly used, and machine-readable format where technically practicable.
• Right to rectification: If any personal data held by db687 is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update basic contact details directly through your account settings; for identity document corrections, please contact support.
• Right to erasure: In certain circumstances, you have the right to request that db687 delete your personal data. This right is subject to exceptions where retention is required by law (such as for anti-money laundering compliance) or where the data is necessary to resolve a pending dispute.
• Right to restriction of processing: You have the right to request that db687 restrict the processing of your personal data in specific circumstances — for example, while an accuracy dispute is being investigated, or where processing is unlawful but you prefer restriction to erasure.
• Right to data portability: You have the right to receive personal data that you have provided to db687 in a structured, machine-readable format and to have that data transferred to another controller where technically feasible.
• Right to withdraw consent: Where db687 processes your personal data on the basis of your consent — such as for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.
• Right to object: You have the right to object to the processing of your personal data where it is based on db687's legitimate interests, including profiling. db687 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.

Children's Privacy

db687 is strictly an adult platform. Registration is prohibited for individuals under the age of 21. db687 does not knowingly collect or process personal data from any person under 21 years of age. If we become aware that an account has been created by an individual under the minimum age, that account will be suspended immediately, any funds held will be dealt with in accordance with our verification policy, and all associated personal data will be deleted except to the extent required to document the age breach and prevent future re-registration by the same individual.

If you believe that a person under the age of 21 has registered a db687 account, please notify us immediately at [email protected] so that we can investigate and take appropriate action without delay.

Marketing Communications

db687 may send marketing communications — including promotional bonus offers, seasonal campaign notifications (such as Eid, Pohela Boishakh, and BPL season promotions), and platform news — to players who have opted in to receive such communications at the time of registration or via their account settings.

You may opt out of marketing communications at any time by contacting [email protected] or by using the unsubscribe mechanism included in any marketing email. Following a valid opt-out request, db687 will cease sending marketing communications within five business days. Please note that opting out of marketing communications does not affect transactional and account-related communications, which are sent regardless of marketing preference as they are necessary to operate your account.

db687 does not use third-party advertising networks or social media tracking pixels that would enable your activity on db687.io to be used to target you with advertising on other platforms.

Policy Updates

db687 reserves the right to update or amend this Privacy Policy at any time. When material changes are made to the Policy, db687 will notify registered players via email to their registered address and by displaying a prominent notice on db687.io for a period of at least 14 days following the update. The effective date at the top of this Policy will be updated to reflect the date on which the revised Policy takes effect.

Your continued use of the db687 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes made to the Policy, you should discontinue use of the Platform and may request account closure by contacting our support team. We encourage you to review this page periodically to stay informed of how db687 handles your personal data.

Archived versions of previous Privacy Policy editions are available upon request by contacting [email protected] with the subject line "Privacy Policy Archive Request".

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which db687 handles your personal data, please contact our dedicated privacy support team using the details below. All correspondence should be in English to ensure it can be handled promptly by our team.

• Email: [email protected] (subject line: "Privacy Request — [Your Full Name]")
• Support availability: 24 hours a day, 7 days a week
• Response time: Within 14 calendar days for all privacy-related requests
• Platform: db687.io
• Time zone: Bangladesh Standard Time (BST, UTC+6)