Privacy Policy — How db666 Collects, Uses, and Protects Your Personal Data

1. Overview & Scope

This Privacy Policy applies to all personal data collected and processed by db666 in connection with your use of the db666 website, mobile platform, live casino, sportsbook, customer support channels, and any other services offered under the db666 brand at db666.io.

For the purposes of this Privacy Policy, "personal data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly. This includes your name, email address, date of birth, payment account details, device identifiers, and records of your activity on the db666 platform.

db666 acts as the data controller in respect of the personal data it collects directly from users of the platform. Where db666 engages third-party service providers to process data on its behalf, those providers act as data processors under the direction and instruction of db666.

2. Data We Collect

db666 collects the following categories of personal data from users of the platform:

db666 does not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) except where explicitly required by applicable law or regulation.

3. How We Collect Your Data

db666 collects personal data through the following channels:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or updating your account profile.
• Automated technologies: Technical and usage data collected automatically when you access the db666 platform, including through cookies, server logs, session tracking, and similar technologies (see Section 9 for full cookie details).
• Payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and other payment partners when you make a deposit or request a withdrawal.
• Identity verification services: Data returned by third-party KYC and fraud-prevention providers when we verify your identity documents and cross-check them against relevant databases.
• Publicly available sources: In limited circumstances related to fraud prevention and AML compliance, db666 may cross-reference data against publicly available records or commercially licensed data sources.

4. How We Use Your Data

db666 uses your personal data for the following purposes:

• Account creation and management: To register your account, verify your identity, and maintain your account in good standing throughout your use of the platform.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to maintain accurate transaction records.
• Legal and regulatory compliance: To fulfil Know Your Customer (KYC) obligations, anti-money laundering (AML) requirements, fraud prevention duties, and any other legal obligations applicable to the operation of the platform.
• Platform security: To detect and prevent unauthorised account access, fraud, cheating, collusion, and other activities prohibited under the db666 Terms & Conditions.
• Customer support: To respond to your enquiries, investigate complaints, and resolve disputes in a timely and fair manner.
• Responsible gaming: To monitor your gaming patterns and, where indicators of problem gambling are identified, to take appropriate protective action including offering responsible gaming tools or applying account restrictions.
• Service improvement: To analyse aggregated, anonymised usage data for the purposes of improving the db666 platform, fixing technical issues, and developing new features.
• Marketing communications: To send you relevant promotional offers, bonus notifications, and platform updates, where you have provided consent or where we have a legitimate interest in keeping you informed. You may opt out of marketing communications at any time via your account settings or by contacting support.

db666 does not use your personal data to make fully automated decisions that have legal or similarly significant effects on you without human oversight, except as required by applicable law or fraud-prevention obligations.

5. Legal Basis for Processing

db666 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil our obligations to you under the db666 Terms & Conditions, including account management, payment processing, and dispute resolution.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC and AML requirements.
• Legitimate interests: Processing carried out for purposes such as platform security, fraud prevention, responsible gaming monitoring, and service improvement, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your explicit consent, including the sending of direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Data Sharing & Disclosure

db666 may share your personal data with the following categories of recipients:

• Payment processors: bKash, Nagad, Rocket, Upay, and other payment partners receive the minimum data necessary to process your transactions and confirm payment ownership.
• KYC and identity verification providers: Third-party services engaged by db666 to verify your identity documents and cross-check them against fraud and AML databases.
• IT and platform infrastructure providers: Cloud hosting, database, and security service providers who process data on db666's behalf under strict data processing agreements.
• Game content providers: Providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised session identifiers necessary to deliver their game content. These providers do not receive your full personal profile.
• Legal and regulatory authorities: Where db666 is required by law, court order, or regulatory directive to disclose personal data to a competent authority, db666 will comply with such requirements.
• Professional advisers: Lawyers, auditors, and insurers who require access to data in connection with the provision of professional services to db666, subject to strict confidentiality obligations.

Where db666 engages third-party processors, it does so under written data processing agreements that require those processors to handle your data securely, use it only for the specified purpose, and not retain it beyond the period necessary to fulfil that purpose.

7. Data Retention

db666 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements.

• Active account data: Retained for the full duration of your account with db666, plus a minimum of five years following account closure to satisfy AML and financial record-keeping obligations.
• KYC documents: Retained for a minimum of five years following account closure or the completion of the last transaction, in accordance with applicable anti-money laundering regulations.
• Transaction records: Retained for a minimum of five years to satisfy financial and tax record-keeping requirements.
• Customer support communications: Retained for three years following the resolution of the relevant enquiry or complaint.
• Marketing consent records: Retained for the duration of your consent plus three years following withdrawal, to demonstrate compliance.
• Technical and usage data: Typically retained in identifiable form for up to 24 months, after which it is anonymised or deleted.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual.

8. Data Security

db666 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption across all pages and data transmission channels, ensuring that data in transit between your device and db666's servers cannot be intercepted or read by third parties.
• Encryption at rest for all stored personal data, including KYC documents and financial records, using industry-standard encryption algorithms.
• Access controls that restrict access to personal data to authorised db666 personnel on a strict need-to-know basis. All staff with access to personal data receive regular data protection training.
• Two-factor authentication (2FA) available to all account holders as an additional layer of login security. db666 strongly recommends enabling 2FA on your account.
• Regular security assessments including vulnerability scanning and penetration testing conducted on the db666 platform infrastructure.
• Incident response procedures to detect, investigate, and respond to personal data breaches promptly and in accordance with applicable legal notification requirements.

While db666 takes all reasonable and industry-standard precautions to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your own login credentials confidential and for notifying db666 immediately if you suspect unauthorised access to your account.

9. Cookies & Tracking Technologies

db666 uses cookies and similar tracking technologies (such as web beacons and local storage objects) to operate the platform, recognise returning users, maintain session state, and analyse aggregate usage patterns. The following categories of cookies are used on db666:

• Strictly necessary cookies: Essential to the basic functioning of the platform, including maintaining your logged-in session and enabling core features such as the cashier and game lobby. These cookies cannot be disabled without breaking platform functionality.
• Performance and analytics cookies: Used to collect anonymised data about how users interact with the platform — such as which pages are visited most frequently and where technical errors occur — to help db666 improve the user experience over time.
• Functional cookies: Used to remember your preferences, such as language settings and display options, so that you do not need to re-enter them on each visit.
• Responsible gaming cookies: Used to track session duration and gaming activity thresholds to support the responsible gaming tools available to db666 users.

You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the db666 platform. Most browsers allow you to refuse new cookies, delete existing cookies, and be notified when new cookies are set — consult your browser's help documentation for specific instructions.

10. Your Privacy Rights

As a user of db666, you have the following rights in respect of your personal data. To exercise any of these rights, please contact the db666 support team via live chat or at [email protected] (copy and paste — this is not a clickable link).

• Right of access: You may request a copy of the personal data that db666 holds about you, together with information about how it is being used.
• Right to rectification: You may request the correction of any inaccurate or incomplete personal data held about you.
• Right to erasure: In certain circumstances, you may request the deletion of your personal data. Note that this right is subject to legal retention obligations — db666 may be required to retain certain data (e.g., KYC and transaction records) even after account closure.
• Right to restriction of processing: You may request that db666 restrict the processing of your personal data in specific circumstances, such as where you contest the accuracy of the data or object to its use.
• Right to data portability: Where processing is carried out by automated means on the basis of your consent or a contract, you may request that your data be provided to you in a structured, machine-readable format.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interests, subject to db666's assessment of whether compelling grounds exist to continue.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

db666 will respond to all valid data subject requests within 30 days of receipt. Where a request is complex or numerous, db666 may extend this period by a further 60 days, in which case you will be notified of the extension and the reasons for it.

11. Protection of Minors

If you believe that a person under the age of 21 has registered an account with db666 or provided personal data to the platform, please contact the support team immediately at [email protected] (copy and paste — not a clickable link) so that appropriate action can be taken without delay.

12. International Data Transfers

db666 may transfer your personal data to, or process it in, countries outside of Bangladesh where our service providers, data processors, or infrastructure partners are located. Where such transfers occur, db666 takes steps to ensure that your personal data is afforded an equivalent level of protection to that which applies within Bangladesh.

Appropriate safeguards for international transfers may include contractual clauses requiring the recipient to process personal data to an equivalent standard, or reliance on recognised data transfer frameworks where applicable. If you would like further information about the specific safeguards in place for international transfers of your data, please contact the db666 support team.

13. Third-Party Services

The db666 platform incorporates game content and services provided by third parties including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. These providers operate their own privacy practices and may process certain technical data (such as anonymised session identifiers) in connection with the delivery of their games. db666 does not share your full personal profile with game content providers.

db666 is not responsible for the privacy practices of third-party payment providers such as bKash, Nagad, Rocket, and Upay. When you use these services to make a deposit or withdrawal, your use of their platforms is also governed by their respective privacy policies. db666 encourages you to review those policies independently.

This Privacy Policy applies exclusively to the db666 platform. Any links to external websites or services from the db666 platform are provided for convenience only; db666 has no control over and accepts no responsibility for the content or privacy practices of those external sites.

14. Policy Amendments

db666 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, db666 will publish a notice on the platform and update the effective date shown at the top of this document. Where changes are required by law or regulatory obligation, they may take effect immediately without prior notice.

Your continued use of the db666 platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms. We recommend reviewing this page periodically to stay informed of how db666 protects your data. The most recent version of this policy is always available at db666.io/privacy-policy.

15. Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or about the way db666 handles your personal data, please contact the db666 Data Protection team using the following details:

• Live Chat: Available 24/7 directly within the db666 platform. Average response time under 10 minutes.
• Email: [email protected] (plain text only — copy and paste into your email client; this is not a clickable link).

db666 takes all privacy complaints seriously and commits to investigating each complaint thoroughly and responding within 30 days. Where a complaint cannot be resolved to your satisfaction through direct contact with db666, you may have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.

All privacy-related correspondence should be submitted in English and must include your registered account username, a clear description of your concern, and any relevant supporting information to allow db666 to investigate effectively.