db677 Privacy Policy

1. Data We Collect

When you access, register with, or use any service provided by db677, we collect certain categories of personal data in order to operate the platform, verify your identity, process transactions, and comply with our legal obligations. The categories of data we collect are described below.

Information You Provide Directly

When you create a db677 account or update your profile, we collect the information you submit, which may include your full name, date of birth, email address, phone number, postal address, city of residence (for example, Dhaka, Chittagong, Sylhet, or Khulna), and national identification details. We also collect any identity verification documents you submit in connection with our Know Your Customer (KYC) process, such as a copy of your National ID card, passport, or utility bill.

Financial and Transaction Data

To process deposits and withdrawals, db677 collects details relating to your chosen payment methods. This includes your bKash, Nagad, or Rocket mobile account number, bank account details (where applicable), transaction reference numbers, deposit and withdrawal amounts denominated in BDT (৳), and the history of all financial transactions conducted through your db677 account.

Technical and Usage Data

When you access db677 through a browser or mobile device, we automatically collect certain technical data, including your IP address, device type and model, operating system, browser type and version, screen resolution, time zone (Bangladesh Standard Time, UTC+6), pages visited, session duration, game activity logs, and referring URLs. This information helps us maintain platform security, improve user experience, and detect fraudulent activity.

Communications Data

If you contact our support team — via live chat, email, or any other channel — we retain records of those communications, including the content of messages, timestamps, and the resolution of any support requests. This allows us to maintain quality, resolve disputes, and improve our service standards.

2. How We Use Your Data

db677 uses the personal data we collect for clearly defined, legitimate purposes. We do not use your data for purposes that are incompatible with those described in this Privacy Policy, and we do not sell your personal information to third parties for their own commercial marketing.

Where we rely on your consent as the legal basis for processing — for example, to send you promotional emails about bonuses, seasonal offers, or new game launches — you may withdraw that consent at any time by contacting our support team or using the unsubscribe option in any marketing email. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

3. Data Sharing

db677 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may, however, share your data with trusted third parties in the following limited circumstances.

Payment Service Providers

To process financial transactions, we share relevant financial data with payment service providers including bKash, Nagad, Rocket, Upay, Visa, and Mastercard, as well as partner banks such as Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. These providers are bound by their own privacy policies and data security obligations and are not permitted to use your data for any purpose other than facilitating your transaction.

Identity Verification Partners

To comply with our KYC obligations, we may share identity documents and related data with accredited identity verification service providers. These partners process your data solely for the purpose of verifying your identity on db677's behalf and are contractually bound to strict confidentiality and data security standards.

Legal and Regulatory Disclosure

db677 may disclose personal data to law enforcement agencies, regulatory authorities, or other competent bodies where required to do so by applicable law, court order, or in connection with the investigation of suspected fraudulent or criminal activity. In such cases, disclosure is limited to what is strictly necessary to fulfil the legal requirement.

Service and Technology Providers

We work with trusted technology providers — including cloud infrastructure vendors, analytics platforms, customer support software, and game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — who may process certain technical or operational data on our behalf. All such providers are engaged under data processing agreements that require them to maintain appropriate security measures and to use your data only for the purposes for which it was shared.

4. Cookies Policy

db677 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate the platform, remember your preferences, analyse usage patterns, and deliver relevant content. A cookie is a small text file placed on your device by a website when you visit it.

Types of Cookies We Use

• Strictly Necessary Cookies: These are essential for the platform to function. They enable core features such as session management, login state, and security verification. These cookies cannot be disabled without affecting the usability of db677.
• Performance and Analytics Cookies: These cookies collect anonymous information about how visitors use db677 — for example, which pages are visited most often and whether users encounter error messages. This data helps us improve the platform's performance and reliability.
• Functional Cookies: These cookies remember choices you make, such as your preferred language or display settings, to provide a more personalised experience during your visit.
• Marketing and Targeting Cookies: With your consent, we may use cookies that track your browsing activity across sessions to deliver more relevant promotional content. You may opt out of marketing cookies at any time by adjusting your browser settings or contacting support.

Most web browsers allow you to control the use of cookies through their settings. Disabling cookies may affect the functionality of certain features on db677. For detailed instructions on managing cookies in your browser, please refer to your browser's help documentation.

5. Data Retention

db677 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to maintain your account, to comply with applicable legal and regulatory obligations, and to resolve any disputes that may arise. The following general retention periods apply.

• Account data and KYC documents: Retained for a minimum of five years following account closure, in accordance with anti-money laundering (AML) record-keeping requirements.
• Transaction records: Retained for a minimum of five years from the date of the transaction.
• Customer support communications: Retained for three years from the date of the last interaction, unless the communication relates to an open dispute, in which case records are retained until the dispute is fully resolved.
• Technical and usage logs: Retained for up to 13 months from the date of collection, after which they are either deleted or anonymised.
• Marketing consent records: Retained for three years from the date of consent, or until consent is withdrawn, whichever is earlier.

Where data is no longer required for any lawful purpose, db677 will securely delete or anonymise it in accordance with industry-standard data destruction practices.

6. Your Privacy Rights

As a db677 user, you have a number of rights with respect to the personal data we hold about you. db677 is committed to facilitating the exercise of these rights promptly and without undue restriction.

• Right of Access: You have the right to request a copy of the personal data db677 holds about you, together with information about how that data is used.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data. This right is subject to limitations where retention is required by law, for example in connection with AML obligations.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in specific circumstances, for example while the accuracy of data is disputed.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that your data be provided to you in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests. Where you object to processing for direct marketing purposes, db677 will cease that processing without requiring justification.
• Right to Withdraw Consent: Where we rely on consent as the basis for processing, you may withdraw your consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact the db677 support team at [email protected] (plain text — not a link). We will respond to your request within a reasonable period and in any event within 30 days of receipt. Where a request is complex or we receive a high volume of requests, we may extend this period by a further 30 days, in which case we will notify you accordingly.

7. Data Security

db677 employs a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include industry-standard SSL/TLS encryption for all data transmitted between your device and our servers, encrypted storage of sensitive personal and financial data, access controls that restrict data access to authorised personnel on a strict need-to-know basis, regular security audits and vulnerability assessments, and staff training on data protection and information security best practices.

While db677 takes every reasonable step to protect your data, no method of electronic transmission or storage is entirely secure. You also bear responsibility for the security of your own account credentials. We strongly recommend using a unique, strong password for your db677 account and enabling any available two-factor authentication features.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, db677 will take prompt action to contain the breach, assess its impact, and notify affected users in accordance with our obligations under applicable data protection law.

8. Policy Updates

db677 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. When material changes are made, we will publish the updated policy on this page with a revised effective date and, where appropriate, notify registered users via their registered email address.

We encourage you to review this Privacy Policy periodically to stay informed about how db677 collects, uses, and protects your personal data. Your continued use of the db677 platform following the publication of any revised Privacy Policy constitutes your acceptance of those changes.

This Privacy Policy was last updated on 1 January 2026. If you have any questions, concerns, or requests relating to this Privacy Policy or to the handling of your personal data, please contact the db677 support team at [email protected] (plain text — not a link). Our support team is available 24 hours a day, 7 days a week in English and Bengali.