Privacy Policy for db444

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, mobile number, device identifiers, IP address, payment account details, and identity document data.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, db444.
• "Data Processor" means any third party that processes Personal Data on behalf of db444, such as payment processors, KYC verification providers, and cloud hosting services.
• "Data Subject" means the individual whose Personal Data is being processed — in this context, the registered Player or website visitor.
• "Consent" means a freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their Personal Data.
• "KYC" (Know Your Customer) refers to the identity verification procedures db444 uses to confirm the identity and age of registered Players.
• "Platform" refers to the db444 website, mobile-optimised interface, and all associated services accessible at db444.onl.

db444 acts as the Data Controller for all Personal Data collected and processed through the db444.onl platform. As Data Controller, db444 is responsible for determining the purposes for which and the means by which Personal Data is processed.

All data-related enquiries, subject access requests, and data deletion requests should be directed to the db444 data protection contact:

db444 collects Personal Data across several categories. The specific data collected depends on the nature of the interaction you have with the platform:

db444 collects only the minimum Personal Data necessary to fulfil the purposes described in Section 5. We do not collect sensitive categories of data such as biometric, genetic, health, religious, or political data.

db444 collects Personal Data through the following channels:

• Direct interactions: Data you provide when creating an account, completing KYC, making a deposit or withdrawal, contacting our support team, or submitting any form on the platform.
• Automated technologies: As you interact with the db444 platform, we automatically collect Technical Data and Usage Data through cookies, web beacons, server logs, and similar tracking technologies. See Section 9 for details on our Cookie Policy.
• Third-party payment processors: When you transact via bKash, Nagad, Rocket, Upay, or a bank transfer, the payment provider may transmit transaction confirmation data to db444 for the purpose of crediting your account and maintaining financial records.
• KYC verification partners: db444 may use third-party identity verification services to cross-check the identity documents you submit. These services return a verification result and a risk score to db444; they do not store a copy of your documents on their own systems beyond the period required to complete the check.
• Fraud prevention agencies: db444 may receive flagging data from industry fraud databases to protect the platform against identity fraud, payment fraud, and money laundering.

db444 processes your Personal Data for the following clearly defined purposes:

• Account creation and management: To register your account, verify your identity, maintain your account profile, and enable access to all db444 services.
• Transaction processing: To process deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and bank transfers, and to maintain accurate financial records associated with your account.
• Legal and regulatory compliance: To comply with applicable anti-money laundering (AML) obligations, age verification requirements, and any other legal duty applicable to db444's operations, including record-keeping obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, underage gambling, and other prohibited conduct described in the Terms and Conditions.
• Responsible gaming: To monitor gameplay patterns for indicators of problem gambling behaviour, to apply deposit limits and self-exclusion settings requested by Players, and to comply with responsible gaming obligations.
• Customer support: To respond to your enquiries, process complaints, and provide technical assistance related to your account or any db444 service.
• Platform improvement: To analyse aggregated Usage Data for the purpose of improving platform performance, game selection, user experience, and customer communications. This analysis uses anonymised or pseudonymised data wherever possible.
• Marketing communications: Where you have provided explicit consent, to send you promotional offers, bonus notifications, and seasonal promotions relevant to your activity on db444. You may withdraw this consent at any time by contacting [email protected].

db444 processes Personal Data only where a valid legal basis exists. The applicable legal bases are as follows:

• Contractual necessity: Processing is necessary for the performance of the contract between db444 and the Player (i.e., the Terms and Conditions). This basis applies to account creation, transaction processing, customer support, and game provision.
• Legal obligation: Processing is necessary to comply with a legal obligation, including AML record-keeping, age verification, and responding to lawful requests from competent authorities.
• Legitimate interests: Processing is necessary for the legitimate interests of db444, provided those interests are not overridden by the fundamental rights and freedoms of the Data Subject. This basis applies to fraud prevention, security monitoring, and platform analytics.
• Consent: For marketing communications and non-essential cookies, db444 relies on your explicit, freely given consent. You have the right to withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

db444 does not sell, rent, or trade your Personal Data to any third party for their own independent marketing or commercial purposes. Personal Data is shared with third parties only in the following strictly limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank receive the minimum transaction data necessary to process your deposits and withdrawals. Each payment processor is bound by its own privacy and data security obligations.
• KYC and identity verification providers: Third-party services that verify identity documents and conduct age checks receive Identity Data and KYC Document Data solely for the purpose of completing the verification check on behalf of db444.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a pseudonymous player identifier and session token to facilitate game play. These providers do not receive your full name, contact details, or financial data.
• Cloud infrastructure and hosting providers: db444 uses secure, reputable cloud hosting infrastructure. Hosting providers process data solely on db444's instructions as Data Processors and are contractually bound to maintain appropriate security standards.
• Fraud prevention and AML agencies: Where required to prevent financial crime or comply with a legal obligation, db444 may share relevant data with fraud prevention databases or financial intelligence units.
• Law enforcement and regulatory authorities: Where db444 is compelled by a lawful court order, regulatory requirement, or law enforcement request, Personal Data may be disclosed to the relevant authority. db444 will inform the Data Subject of any such disclosure to the extent permitted by law.

All third-party Data Processors engaged by db444 are required to process Personal Data only on documented instructions from db444 and to implement appropriate technical and organisational security measures.

db444 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Where data must be retained beyond the standard period due to an active legal dispute or regulatory investigation, db444 will document the justification for extended retention.

The db444 platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain session security, and to gather analytical insights that help improve the user experience. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the platform to function and cannot be disabled. They include session cookies that keep you logged in, security tokens, and load-balancing cookies. No consent is required for strictly necessary cookies.
• Functional Cookies: These cookies remember your platform preferences, such as language settings, preferred deposit method, and display options. Disabling them may reduce the quality of your experience.
• Analytical Cookies: These cookies collect aggregated data about how Players use the platform — such as which game categories are most visited and where users commonly encounter errors. This data is used to improve platform performance. Consent is required for analytical cookies.
• Session Security Cookies: These cookies store encrypted session identifiers and cross-site request forgery (CSRF) tokens to protect your account from unauthorised access. They expire at the end of each session.

You may manage your cookie preferences through your browser settings. Please note that disabling cookies classified as Strictly Necessary will prevent you from logging in to your db444 account. Most modern browsers allow you to block, delete, or receive notifications about cookies through the browser's privacy or security settings.

As a Data Subject, you hold the following rights in relation to your Personal Data held by db444. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request":

• Right of Access: You have the right to request a copy of the Personal Data db444 holds about you, along with information about how it is used and with whom it is shared. db444 will respond to access requests within 30 days.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data held on your account. Minor corrections (such as updating a mobile number) can be made directly through your account settings or via the support team.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to overriding retention obligations described in Section 8.
• Right to Restrict Processing: You may request that db444 restricts processing of your Personal Data in certain circumstances, such as where you contest the accuracy of the data or have objected to processing based on legitimate interests.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your Personal Data for direct marketing purposes at any time, with immediate effect. You may also object to processing based on legitimate interests, in which case db444 will assess whether its legitimate interests override your rights.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

All rights requests will be acknowledged within 5 business days and fully resolved within 30 calendar days. If a request is complex or involves a large volume of data, db444 may extend this period by a further 30 days, in which case you will be notified of the extension and its reason.

db444 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or alteration:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the db444 platform is encrypted using industry-standard SSL/TLS protocols. This applies to login sessions, deposit and withdrawal transactions, and all account interactions.
• Encrypted Data Storage: Personal Data and financial data stored in db444's databases are encrypted at rest. Encryption keys are managed separately from the encrypted data and rotated on a scheduled basis.
• Access Controls: Access to Personal Data within db444's systems is restricted on a strict need-to-know basis. All staff and contractor access is logged, audited, and subject to role-based permissions. No employee has unrestricted access to the full dataset of Player Personal Data.
• Two-Factor Authentication: db444 supports two-factor authentication (2FA) for Player accounts and mandates 2FA for all internal staff systems that access Personal Data.
• Regular Security Audits: The db444 platform undergoes periodic security assessments, including vulnerability scanning and penetration testing, to identify and remediate potential weaknesses before they can be exploited.
• Incident Response: In the event of a data breach that poses a risk to the rights and freedoms of Data Subjects, db444 will notify affected Players promptly and take immediate remedial action. Internal incident response procedures are maintained and tested regularly.

While db444 applies robust security measures, no online platform can guarantee absolute security. You are encouraged to use a strong, unique password for your db444 account and to enable 2FA to minimise the risk of unauthorised access.

db444 is strictly an adult platform. Access to db444 services is prohibited for any person under the age of 21 years. db444 does not knowingly collect, process, or store Personal Data belonging to individuals under 21.

If db444 discovers that Personal Data has been collected from a person under the age of 21, that account will be immediately suspended, all associated funds will be placed on hold pending investigation, and the data will be securely deleted after the conclusion of any required compliance review.

Parents and guardians who believe that a minor in their care has registered an account on db444 are urged to contact [email protected] immediately so that the matter can be addressed as a priority.

db444 reserves the right to update or amend this Privacy Policy at any time to reflect changes in legal requirements, platform functionality, or data processing practices. The following process governs all amendments:

• Material changes — those that significantly affect how Personal Data is processed or the rights available to Data Subjects — will be communicated to registered Players via the email address on file at least seven days before the changes take effect.
• Non-material changes, such as clarifications, typographical corrections, or minor structural updates that do not alter the substance of the Policy, may be published without prior notice and take effect immediately.
• The "Effective Date" displayed at the top of this page will be updated each time a new version of the Privacy Policy is published. Players are responsible for periodically reviewing this page.
• Continued use of the db444 platform after an updated Privacy Policy has taken effect constitutes acceptance of the revised terms. If you do not agree with the changes, you must cease using the platform and contact [email protected] to request account closure and data erasure.

For all privacy-related enquiries, data subject access requests, consent withdrawal requests, or complaints regarding the handling of your Personal Data, please contact the db444 data protection team: