db876 Privacy Policy

This Privacy Policy ("Policy") describes how db876 ("db876", "we", "us", "our") collects, stores, uses, and discloses personal data provided by individuals ("you", "Player", "User") who access or use the db876 website at db876.com and all associated products and services, including casino games, sports betting markets, live casino, crash games, and any other features available through the db876 platform (collectively, the "Platform"). This Policy forms part of the db876 Terms and Conditions and is incorporated into them by reference. By accessing, registering, or using the Platform in any capacity, you confirm that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

db876 is committed to handling all personal data responsibly, with transparency, and in compliance with applicable data protection principles. We collect only the minimum data necessary to deliver the Platform's services and fulfil our legal and operational obligations. This Policy applies to all Players accessing db876 from Bangladesh, including those using mobile browsers and mobile wallet payment methods such as bKash, Nagad, and Rocket.

db876 collects personal data through several channels — at registration, during payment processing, through your ongoing use of the Platform, and through automated technical means. The categories of personal data we collect include:

db876 uses personal data collected from Players only for the purposes set out below. We do not use your data for any purpose that is incompatible with the reason it was originally collected:

• To create and manage your db876 Account, including verifying your identity in accordance with KYC requirements and maintaining accurate Account records.
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain a complete and accurate transaction history for your Account.
• To deliver, maintain, and improve the Platform, including diagnosing technical issues, monitoring Platform performance, and developing new features and game content.
• To detect, investigate, and prevent fraud, money laundering, unauthorised access, and other prohibited activities in accordance with db876's anti-financial-crime obligations.
• To send you service-related communications including account notifications, deposit confirmations, withdrawal approvals, security alerts, and updates to this Policy or the db876 Terms and Conditions.
• To comply with applicable legal and regulatory obligations, including responding to lawful requests from competent authorities, tax reporting obligations, and record-keeping requirements.

db876 processes personal data on the following legal bases, depending on the specific purpose and context of the processing activity:

• Contract Performance: Processing is necessary to fulfil our obligations under the db876 Terms and Conditions, including operating your Account, processing payments, and delivering platform services.
• Legal Obligation: Processing is required for compliance with applicable laws, including KYC and anti-money-laundering obligations, financial record-keeping requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing is necessary for db876's legitimate interests in preventing fraud, protecting Platform security, improving services, and ensuring responsible gaming compliance, provided those interests are not overridden by your own data protection rights.
• Consent: Where processing is based on your consent — for example, receiving optional promotional communications — you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of any processing carried out before withdrawal.

db876 does not sell, rent, or trade personal data to third parties for commercial purposes. We share personal data only in the following limited circumstances:

• Payment Processors: We share payment-related data with payment service providers including bKash, Nagad, Rocket, Upay, Visa, and Mastercard, strictly for the purpose of processing your deposits and withdrawals. These providers operate under their own privacy policies and security standards.
• Game Providers: Game software providers (such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi) may receive anonymised or pseudonymised gameplay data necessary for game operation, RNG auditing, and RTP compliance verification.
• Legal Authorities: We may disclose personal data to law enforcement, regulatory bodies, or other government authorities where required to do so by applicable law, court order, or other legally binding obligation.
• Business Transfers: In the event of a merger, acquisition, or sale of db876 business assets, personal data held by db876 may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection commitments.

db876 uses cookies and similar tracking technologies on the Platform to support essential site functionality, analyse usage patterns, and deliver a better player experience. The types of cookies we use are:

• Essential Cookies: Required for core Platform functionality including login session management, Account authentication, balance display, and security token maintenance. These cannot be disabled without impairing Platform access.
• Analytics Cookies: Used to collect anonymised data about how Players use the Platform, including pages visited, time spent on each section, and navigation flows. This data helps db876 identify and fix usability issues.
• Functional Cookies: Used to remember your preferences such as language setting, notification preferences, and display options, so your experience remains consistent across sessions.
• Security Cookies: Used to detect and mitigate fraud, bot activity, and suspicious login attempts, including cross-site request forgery (CSRF) protection tokens and session integrity checks.

You may adjust your browser settings to refuse or delete cookies at any time. Please note that disabling essential cookies may prevent you from accessing certain features of the db876 Platform, including secure login and Account management functions.

db876 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The following retention periods apply as a general guide: active Account data is retained for the duration of the Account's active status; transaction records and financial data are retained for a minimum of five years following the closure of an Account, in line with applicable financial record-keeping obligations; communications data (support tickets, emails) is retained for a minimum of two years; technical log data (IP logs, session data) is retained for a maximum of 13 months.

Upon permanent Account closure, db876 will delete or anonymise personal data that is no longer required for legal, regulatory, or operational purposes within a reasonable timeframe. Certain data categories may be retained beyond the standard periods where required by a specific legal obligation or where retention is necessary to defend against a pending or anticipated legal claim.

db876 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure. Our key security measures include:

• Industry-standard 256-bit SSL/TLS encryption on all data transmissions between your device and the db876 Platform, ensuring that your personal and financial information cannot be intercepted in transit.
• Access controls and role-based permissions ensuring that personal data can only be accessed by db876 personnel who require it for a specific, authorised operational purpose. All internal access to personal data is logged and auditable.
• Secure encrypted storage of all sensitive personal data at rest, including identity documents, payment references, and Account credentials, using current cryptographic best practices.
• Regular security assessments and vulnerability testing of Platform infrastructure to identify and remediate potential security weaknesses before they can be exploited. db876 maintains an incident response plan for managing any data security breach promptly and responsibly.

As a db876 Player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with your Account details and a clear description of your request:

• Right of Access: You may request a copy of the personal data db876 holds about you at any time. We will respond to verified access requests within a reasonable timeframe.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you. For Account details such as name or date of birth, KYC re-verification may be required.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to db876's legal obligations to retain certain data categories (such as transaction records) for specified minimum periods.
• Right to Restriction: You may request that db876 restrict the processing of your personal data in certain circumstances, such as while the accuracy of data is being contested or while a data erasure request is under review.
• Right to Data Portability: Where processing is carried out on the basis of your consent or a contract, you may request that db876 provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing of your personal data where db876 is relying on its legitimate interests as the legal basis, unless db876 can demonstrate compelling legitimate grounds for the processing that override your own interests.

The db876 Platform may contain references to or integrations with third-party services, including payment providers and game software suppliers. db876 is not responsible for the privacy practices of any third-party service provider. When you interact with a third-party service — such as completing a bKash or Nagad payment transaction — that interaction is governed by the third party's own privacy policy and terms of service. db876 encourages all Players to review the privacy policies of any third-party services they use in connection with their db876 Account.

The db876 Platform is strictly for adults aged 21 and above. db876 does not knowingly collect personal data from individuals under the age of 21. If db876 discovers that personal data has been collected from a person under 21 — whether through misrepresentation at registration or any other means — that Account will be immediately closed, all associated funds will be forfeited, and all personal data related to that Account will be deleted as promptly as legally permissible. If you believe that a person under the age of 21 has registered an Account on db876, please notify us immediately at [email protected].

db876 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. When we make material changes, we will update the Last Updated date at the top of this page. We may also notify Players of significant changes via the email address registered to their Account, where we consider the changes sufficiently material to warrant direct notice.

Your continued use of the db876 Platform following any update to this Policy constitutes your acceptance of the revised Policy. If you do not agree to any revised Privacy Policy, your sole remedy is to cease using the Platform and request Account closure by contacting [email protected].

If you have any questions, concerns, or requests regarding this Privacy Policy or the way db876 handles your personal data, please contact the db876 support team. All privacy-related requests and communications are handled in English. Please include your registered Account details in any privacy request so we can verify your identity and respond accurately. db876 aims to acknowledge all privacy-related requests within 5 business days and provide a substantive response within 30 days of receipt.