677db Privacy Policy

1. Information We Collect

677db collects personal data from players in Bangladesh across several categories. We are transparent about every category of data we collect and the specific purpose each serves. We do not collect sensitive personal data (such as health records, religious beliefs, or political opinions) except where directly relevant to a responsible gaming referral made at your own request.

1.1 Registration Data

When you create a 677db account, we collect your full legal name, date of birth, email address, mobile phone number, and preferred payment method details (for example, your bKash or Nagad registered mobile number). This data is required to create and manage your account, verify that you meet the 18+ age requirement, and communicate with you about your account activity.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, we may request copies of government-issued photo identification — typically a Bangladesh National Identity Card (NID) or passport — and proof of payment method ownership. This data is used solely for identity and age verification purposes and is stored in encrypted form. KYC documents are reviewed by authorised 677db compliance staff and are not shared with third parties except as described in Section 3 of this Policy.

1.3 Financial Transaction Data

We record details of all deposits and withdrawals processed through your 677db account, including transaction amounts in Bangladeshi Taka (BDT), timestamps, payment method references, and transaction status codes. This data is retained for audit, fraud prevention, and dispute resolution purposes. 677db does not store complete payment credentials such as full bank account numbers or mobile wallet PINs on its servers.

1.4 Gaming & Betting Activity Data

We maintain records of all wagers placed through your account, including game type, stake amount, outcome, timestamp, and device information at the time of the bet. This data is used for account management, dispute resolution, bonus tracking, and responsible gaming monitoring. Aggregated, anonymised gaming data may also be used for internal platform analytics and product development.

1.5 Technical & Device Data

When you access the 677db platform, our servers automatically record certain technical information: your IP address, browser type and version, operating system, device type, referring URL, pages visited, and session duration. This data is used to maintain platform security, detect fraudulent access patterns, and improve the user experience for players connecting from Dhaka, Chittagong, Sylhet, Khulna, and other parts of Bangladesh.

1.6 Communications Data

If you contact 677db's support team by email, your messages and our replies are stored as part of your account record. This allows our team to maintain continuity in handling your queries and provides an audit trail for dispute resolution purposes. Support communications are retained for a minimum of 2 years from the date of the relevant interaction.

Data Category	Examples	Primary Purpose
Registration Data	Name, DOB, email, mobile number	Account creation & age verification
KYC Documents	NID scan, passport, bKash screenshot	Identity verification & compliance
Financial Data	Transaction amounts, timestamps, method refs	Payment processing & fraud prevention
Gaming Activity	Bet history, stakes, outcomes, game types	Account management & responsible gaming
Technical Data	IP address, browser, device, session data	Security & platform optimisation
Communications	Support emails, query history	Customer service & dispute resolution

2. How We Use Your Data

677db processes your personal data only for specific, legitimate purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected. The following is a complete description of how your data is used within the platform.

2.1 Account Operation

Your registration data is used to create and maintain your 677db account, authenticate your login sessions, process deposit and withdrawal requests, calculate your Balance, and apply bonus credits where applicable. Without this data, the core functions of the platform cannot be delivered.

2.2 Age & Identity Verification

677db applies a strict 18+ policy. Your date of birth and KYC documents are used to verify that you are legally eligible to use the platform. This processing is not optional — it is a legal and ethical obligation that protects both the player and the platform.

2.3 Payment Processing

Financial transaction data is processed to execute your deposit and withdrawal requests via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. Transaction records are maintained for reconciliation, fraud detection, and to support any payment disputes you may raise.

2.4 Responsible Gaming Monitoring

Your gaming activity and deposit history may be analysed to identify indicators of problem gambling behaviour, such as rapidly increasing bet sizes, extended session durations, or frequent failed withdrawal requests. Where such indicators are detected, 677db may proactively contact you to offer responsible gaming tools, including deposit limits, session reminders, cool-off periods, or self-exclusion. This processing is carried out in your interest and is a core part of our duty of care as a responsible platform.

2.5 Security & Fraud Prevention

Technical data, including IP addresses and device fingerprints, is analysed to detect and prevent fraudulent account access, multi-account abuse, automated betting activity, and money laundering. Where suspicious activity is detected, your account may be temporarily suspended pending investigation, as described in our Terms & Conditions.

2.6 Platform Improvement

Aggregated, anonymised analytics data is used to understand how players interact with the 677db platform — which games are most popular in Dhaka versus Chittagong, at what times of day usage peaks, and which areas of the interface cause friction. This data does not identify you personally and is used solely to improve the product for all users.

2.7 Legal & Regulatory Compliance

We may be required to retain or disclose certain categories of data to comply with applicable legal obligations or to respond to lawful requests from competent authorities. In all such cases, 677db will disclose only the minimum data required and will notify you of such disclosure where legally permitted to do so.

3. Data Sharing & Third Parties

677db does not sell or rent your personal data to any third party. We may share specific categories of data with carefully selected third-party service providers where necessary to operate the platform. All third-party data processors are required to handle your data in accordance with this Privacy Policy and are bound by contractual data processing agreements.

3.1 Game Content Providers

Casino games on the 677db platform are supplied by certified providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To deliver live dealer content and real-money game sessions, your account identifier and session token are passed to the relevant game provider's servers. Game providers are not permitted to use this data for any purpose other than delivering the game session.

3.2 Payment Processing Partners

To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank, we share the minimum necessary transaction data — typically a transaction reference, amount in BDT, and your registered mobile number or account identifier — with the relevant payment partner. Payment partners are independent data controllers with their own privacy policies governing their handling of your data.

3.3 Identity Verification Services

Where automated identity verification tools are used to supplement manual KYC review, your name, date of birth, and document images may be passed to a trusted verification service provider operating under a strict data processing agreement. No KYC document is stored by a verification partner beyond the duration required to complete the verification check.

3.4 Legal Disclosures

677db may disclose your personal data where required by law, court order, or lawful request by a competent authority. We will make reasonable efforts to notify you of any such disclosure in advance unless prohibited by law or where doing so would compromise an ongoing investigation.

4. Cookies & Tracking Technologies

The 677db platform uses cookies and similar browser-based tracking technologies to maintain login sessions, remember your preferences, and gather aggregated analytics data. This section explains the types of cookies we use and how you can manage them.

4.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your preferred language, whether you are logged in, and which pages you have viewed — across multiple pages or visits. Cookies themselves do not contain executable code and cannot access other files on your device.

4.2 Types of Cookies We Use

Cookie Type	Category	Purpose	Expiry
Session token	Essential	Maintains your authenticated login session	Session end / logout
CSRF token	Essential	Prevents cross-site request forgery attacks	Session end
Device fingerprint	Essential	Detects suspicious login attempts from unrecognised devices	30 days
Analytics ID	Analytics	Aggregated, anonymised page-view and interaction tracking	12 months
Preference cookie	Functional	Stores your display preferences and last-visited game category	90 days

4.3 Managing Cookies

You can control and delete cookies through your browser settings. Disabling essential cookies will prevent you from maintaining a login session and will affect the functionality of the 677db platform. Disabling analytics or functional cookies will not prevent you from using core platform features. Instructions for managing cookies are available in the help documentation of your browser (Chrome, Firefox, Safari, Edge, Samsung Internet).

5. Data Retention & Storage

677db retains personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy and to comply with applicable legal obligations. The following retention periods apply by data category.

Data Category	Retention Period	Rationale
Account registration data	Duration of account + 5 years post-closure	Dispute resolution & audit trail
KYC documents	Duration of account + 5 years post-closure	Regulatory compliance & anti-fraud
Financial transaction records	7 years from transaction date	Financial audit requirements
Gaming activity logs	Duration of account + 3 years post-closure	Responsible gaming & dispute resolution
Support communications	2 years from last interaction	Continuity of service & dispute audit
Technical / device logs	90 days rolling	Security monitoring
Analytics data (anonymised)	24 months	Platform optimisation

5.1 Data Storage Location

677db's platform data is stored on secure servers. All data is encrypted at rest using industry-standard AES-256 encryption. Access to production data stores is restricted to authorised personnel only and is subject to multi-factor authentication controls. Backups are encrypted and stored in geographically separated locations to ensure business continuity.

5.2 Cross-Border Transfers

Some of 677db's third-party service providers — including game content providers such as Pragmatic Play and Evolution Gaming — may process your session data on servers located outside Bangladesh. Where such transfers occur, 677db takes reasonable contractual steps to ensure that your data receives a level of protection consistent with this Privacy Policy, including the use of data processing agreements and standard contractual clauses where applicable.

6. Your Privacy Rights

As a registered player on the 677db platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Request — [Right Type]". We will acknowledge your request within 2 business hours and aim to fulfil it within 5 business days.

• Right of Access: You may request a copy of all personal data 677db holds about you, provided in a structured, readable English format.
• Right to Rectification: If any personal data we hold about you is inaccurate or out of date, you may request that it be corrected. Where the data relates to your registered identity, supporting documentation may be required.
• Right to Erasure: Subject to legal retention obligations described in Section 5, you may request deletion of your personal data following account closure. Data subject to a 5-year or 7-year retention requirement cannot be deleted ahead of schedule.
• Right to Restriction: You may request that 677db restricts the processing of your data to storage only — for example, while a dispute is being resolved — without deleting it entirely.
• Right to Data Portability: You may request that the personal data you provided to 677db during registration be provided to you in a machine-readable format (CSV or JSON) for transfer to another service provider.
• Right to Object: You may object to 677db processing your data for marketing purposes at any time. You may also raise an objection to processing carried out on the basis of our legitimate interests, and we will assess whether those interests override your objection in each individual case.
• Right to Withdraw Consent: Where 677db processes your data on the basis of your consent (for example, for marketing emails), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

7. Security Measures

677db implements a multi-layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. The following technical and organisational measures are in place at all times.

7.1 Encryption

All data in transit is protected by TLS 1.2 or higher. All data at rest — including account records, KYC documents, and transaction logs — is encrypted using AES-256 symmetric encryption. Encryption keys are managed through a dedicated key management system with rotation policies and access controls.

7.2 Access Controls

Access to personal data within 677db's internal systems is restricted on a strict need-to-know basis. All internal access is subject to role-based access controls, mandatory multi-factor authentication, and access logging. Access logs are reviewed periodically to detect anomalous patterns.

7.3 Vulnerability Management

677db conducts regular security reviews of its platform infrastructure, including testing for common web application vulnerabilities. Third-party game integrations are assessed for security compliance before deployment. Identified vulnerabilities are prioritised and remediated according to their severity classification.

7.4 Incident Response

In the event of a data security incident that may affect your personal data, 677db will notify affected players by email within a reasonable timeframe, describing the nature of the incident, the categories of data affected, the steps 677db has taken in response, and the actions you should take to protect yourself. Security incident notifications will be sent to your registered email address.

7.5 Your Role in Security

While 677db takes all reasonable technical measures to protect your data, security is a shared responsibility. You can protect your 677db account by using a strong, unique password, not sharing your login credentials with anyone, enabling any two-factor authentication option available in your account settings, logging out from shared or public devices, and contacting [email protected] immediately if you notice any suspicious activity on your account.

8. Changes to This Privacy Policy

677db reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. All updates will be published on this page with a revised effective date. Where a change materially affects the way we process your personal data, we will notify you by email to your registered address at least 7 days before the change takes effect.

Your continued use of the 677db platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with a material change, you may close your account by contacting [email protected] before the change takes effect, and any remaining real-money Balance will be returned to your verified payment method.

We encourage you to review this Privacy Policy periodically. The current version is always accessible at https://677db.app/privacy-policy. If you have any questions about this Policy or about how 677db handles your personal data, please contact us at [email protected]. Our support team operates 24 hours a day, Bangladesh Standard Time (BST, UTC+6), and will respond to privacy enquiries within 2 business hours.