db345 Privacy Policy

§01 Information We Collect

db345 collects personal information from you in the course of account registration, identity verification, financial transactions, customer support interactions, and your general use of the Platform. The categories of personal data we collect are described below.

Registration & Identity Data: When you create a db345 account, we collect your full legal name, date of birth, email address, mobile phone number, and the username and password you choose. This information is required to create and maintain your account and to verify that you meet the minimum age requirement of 21 years.

Identity Verification Data: As part of our know-your-customer (KYC) process, we may request copies of government-issued identity documents such as your National Identity Card (NID), passport, or birth certificate. We may also request proof of address and, in certain circumstances, proof of the source of funds used for deposits. These documents are used solely for the purpose of verifying your identity and complying with applicable regulations.

Financial & Transaction Data: We record details of all deposits and withdrawals processed through your db345 account, including transaction amounts in BDT, transaction dates and times, and the payment method used (bKash, Nagad, Rocket, Upay, or bank transfer). We do not store full mobile financial service account numbers or bank account details beyond what is required for transaction processing and fraud prevention.

Gaming Activity Data: We maintain records of your gaming and betting activity on db345, including the games played, bets placed, amounts wagered, and outcomes. This data is used to operate the Platform, calculate account balances, resolve disputes, and support responsible gaming monitoring.

Technical & Device Data: When you access db345, our systems automatically collect certain technical information, including your IP address, browser type and version, operating system, device type, screen resolution, and session timestamps. This information is used to ensure Platform security, detect fraud, and improve the user experience.

§02 How We Use Your Data

db345 uses the personal information we collect for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes described at the time of collection. The primary purposes for which we process your personal data are as follows:

Where db345 uses your data for analytics or Platform improvement, we apply aggregation and pseudonymisation techniques wherever practicable so that individual players cannot be identified from the resulting analytical outputs.

§03 Legal Basis for Processing

db345 processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing activity:

• Contractual Necessity: Processing is necessary to perform the contract between you and db345 — specifically, to create and maintain your account, process your deposits and withdrawals, and provide access to the games and betting markets on the Platform.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, know-your-customer (KYC) obligations, and record-keeping requirements imposed by gaming regulations.
• Legitimate Interests: db345 processes certain categories of data on the basis of its legitimate interests in operating a secure, fair, and commercially viable platform. This includes fraud detection, security monitoring, responsible gaming oversight, and internal analytics. We balance these interests against your privacy rights and apply appropriate safeguards.
• Consent: Where processing is based on your consent — such as the sending of promotional and marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. Withdrawal of consent will not affect your ability to continue using your db345 account.

If you would like more information about the specific legal basis applied to any particular processing activity, please contact us at [email protected].

§04 Data Sharing & Disclosure

db345 does not sell your personal data to third parties. We share personal information only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment Service Providers: We share transaction-related data with mobile financial service providers (bKash, Nagad, Rocket, Upay) and banking partners (including Dutch-Bangla Bank and City Bank) to process your deposits and withdrawals. These providers receive only the data necessary to complete the transaction and are subject to their own data protection obligations.
• Identity Verification Partners: We may share your identity documents and personal details with accredited third-party KYC service providers to verify your identity and age as required by our operating standards.
• Game Technology Providers: Your gaming activity data is shared with our Game Providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to the extent required to deliver their games and maintain game integrity on the db345 Platform.
• Fraud Prevention & Security Services: We may share technical and behavioural data with specialist fraud prevention and cybersecurity service providers to protect the Platform and its players from fraudulent activity.
• Legal & Regulatory Authorities: We may disclose personal data to regulatory bodies, law enforcement authorities, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of db345, its players, or the public.
• Corporate Transactions: In the event of a merger, acquisition, or sale of db345 or its assets, personal data held by db345 may be transferred to the relevant successor entity, subject to equivalent data protection obligations being maintained.

§05 Cookies & Tracking

db345 uses cookies and similar tracking technologies to operate the Platform effectively, maintain session security, remember your preferences, and gather aggregate analytics data. A cookie is a small text file placed on your device by your browser when you visit a website. The cookies used by db345 fall into the following categories:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable core features such as user authentication, session management, and security. You cannot opt out of strictly necessary cookies without affecting your ability to use db345.
• Functional Cookies: These cookies allow db345 to remember your preferences — such as your preferred language, display settings, and previously used payment methods — to provide a more personalised experience. Disabling functional cookies may reduce the convenience of your experience but will not prevent access to the Platform.
• Analytics Cookies: We use aggregate analytics data to understand how players navigate the Platform, which features are most used, and where technical issues may arise. This data is processed in aggregate and does not identify individual players. You may opt out of analytics cookies through your browser settings.
• Security Cookies: These cookies help db345 detect and prevent fraudulent activity, detect multiple simultaneous sessions, and protect against cross-site request forgery and other security threats.

You can manage or delete cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the db345 Platform. Most modern browsers allow you to refuse cookies, accept only certain types of cookies, or alert you when a new cookie is being set.

db345 does not use third-party advertising or retargeting cookies. We do not share your browsing behaviour on db345 with advertising networks or social media platforms for the purpose of serving targeted advertisements on external websites.

§06 Data Retention

db345 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulation. The general retention periods applied by db345 are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an identifiable individual. Where data is anonymised rather than deleted, the resulting anonymised dataset may be retained indefinitely for aggregate analytical purposes without restriction under this Privacy Policy.

§07 Your Rights

As a db345 player, you have the following rights with respect to your personal data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 48 hours and provide a substantive response within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data that db345 holds about you, along with information about how it is being used and with whom it has been shared.
• Right to Rectification: If any personal data held by db345 is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly through your account settings.
• Right to Erasure: Subject to applicable legal and regulatory retention requirements, you have the right to request that db345 delete your personal data. Please note that we cannot delete data that we are required to retain by law — for example, transaction records and KYC documentation subject to AML obligations.
• Right to Restriction: You may request that db345 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested or while an objection to processing is being assessed.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on db345's legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting your account access or the lawfulness of prior processing.
• Right to Data Portability: Where technically feasible and legally permissible, you may request that db345 provide your personal data in a structured, commonly used, machine-readable format.

§08 Security Measures

db345 applies a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security framework includes the following measures:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and db345 servers is encrypted using current industry-standard TLS protocols, ensuring that information cannot be intercepted during transmission.
• Data Encryption at Rest: Sensitive personal data — including identity documents and financial records — is encrypted when stored on db345 servers using strong encryption algorithms.
• Access Controls: Access to personal data within db345 is restricted on a strict need-to-know basis. Staff members can access only the data required for their specific role and responsibilities. All access is logged and audited.
• Two-Factor Authentication: db345 supports two-factor authentication (2FA) for player accounts. We strongly recommend that all players enable 2FA through their account security settings to provide an additional layer of protection against unauthorised access.
• Fraud Detection Systems: db345 operates automated fraud detection systems that monitor account activity for unusual patterns, multiple simultaneous sessions, and other indicators of unauthorised access or fraudulent behaviour.
• Regular Security Audits: The db345 Platform undergoes periodic independent security assessments to identify and address potential vulnerabilities before they can be exploited.

While db345 applies rigorous security measures, no online platform can guarantee absolute security against all potential threats. In the event of a data breach that is likely to result in a risk to your rights and freedoms, db345 will notify affected players and relevant authorities as required by applicable law, within a reasonable timeframe.

You also play an important role in keeping your account secure. Please ensure that you use a strong, unique password for your db345 account, do not share your login credentials with anyone, and contact [email protected] immediately if you suspect that your account has been accessed without your authorisation.

§09 Children's Privacy

db345 is strictly an adults-only platform. Access to and use of the db345 Platform is prohibited for any person under the age of 21. We do not knowingly collect, store, or process personal data relating to individuals under the age of 21.

As part of our registration and ongoing account monitoring processes, db345 takes active steps to detect and prevent underage access, including age verification checks at registration, KYC document review, and monitoring of account activity for patterns inconsistent with adult use. Any account found to be held by, or used on behalf of, a person under the age of 21 will be immediately suspended, all associated balances will be forfeited, and any personal data collected in relation to that account will be deleted in accordance with our data retention procedures.

If you are a parent or guardian and have reason to believe that your child has accessed or registered on db345, please contact us immediately at [email protected] so that we can take prompt action to close the account and delete the associated data.

§10 Contact & Updates

If you have any questions, concerns, or requests relating to this Privacy Policy or db345's handling of your personal data, please contact our data protection team at [email protected] with the subject line "Privacy Policy Enquiry". We aim to respond to all privacy-related enquiries within 2 business days (Bangladesh Standard Time, UTC+6).

db345 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, operational requirements, or applicable legal obligations. When we make material changes to this Privacy Policy, we will notify registered players by email to the address associated with their db345 account and post a prominent notice on the db345 website for a period of at least 30 days prior to the changes taking effect.

The effective date of the current version of this Privacy Policy is stated at the top of this page and in the hero section above. We recommend that you review this Privacy Policy periodically to stay informed about how db345 protects your personal data. Your continued use of the db345 Platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms.

Previous versions of this Privacy Policy are available on request by contacting [email protected]. db345 maintains an internal version history of this document for compliance and audit purposes.