1. Introduction
This Privacy Policy governs the collection, use, storage, disclosure and protection of personal data by 654db ("654db", "we", "us", "our") in connection with the operation of the 654db online casino and sports betting platform accessible at https://654db.io (the "Platform"). 654db is committed to handling all personal data responsibly, transparently and in accordance with applicable data protection principles.
By registering an account, making a deposit, placing a wager or otherwise using the 654db Platform, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and processing of your personal data as described herein. If you do not agree to the terms of this Privacy Policy, you must not use the Platform.
This Privacy Policy should be read together with the 654db Terms & Conditions and Responsible Gaming Policy, all of which form part of the contractual relationship between you and 654db. In the event of any conflict between this Privacy Policy and the Terms & Conditions with respect to data processing, this Privacy Policy prevails.
Important: 654db processes personal data primarily in connection with its operations serving players in Bangladesh. All data handling described in this policy applies to players regardless of their location within Bangladesh, including those accessing the Platform from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh and Cox's Bazar.
2. Data We Collect
654db collects several categories of personal data in the course of providing its services. The categories of data we collect are set out below, organised by type. We collect only the data that is necessary for the specific purposes described in Section 4.
2.1 Identity and Contact Data
- Full legal name as it appears on your government-issued identity document
- Date of birth (used for mandatory age verification — 654db enforces a strict 21+ policy)
- Residential address, including city, district and postal code
- Email address (used as your primary account identifier and communication channel)
- Mobile phone number (used for account security and withdrawal verification)
- Username chosen at registration
- Scanned copies or photographs of identity documents submitted for KYC purposes (National ID card, passport, driving licence)
- Proof of address documents (utility bills, bank statements dated within three months)
2.2 Financial Data
- Mobile money account identifiers for bKash, Nagad, Rocket and Upay (account numbers/mobile numbers only — 654db does not store mobile money PINs or passwords)
- Visa and Mastercard details submitted for card-based deposits (card number, expiry date — CVV is never stored)
- Transaction history including deposit amounts, withdrawal amounts, dates and payment method references
- Wagering history and account balance records
2.3 Technical and Usage Data
- IP address at time of registration and at each subsequent login
- Device type, operating system, browser type and version
- Session timestamps, session duration and pages visited within the Platform
- Game history including games played, bet sizes, outcomes and session timestamps
- Geolocation data (country and city level, derived from IP address)
- Referral source (how you arrived at the 654db Platform)
2.4 Communication Data
- Records of all live chat conversations between you and 654db's support team
- Email correspondence sent to or received from 654db's support address
- Feedback, complaints and dispute records
2.5 Responsible Gaming Data
- Deposit limit, loss limit and session time limit settings applied to your account
- Self-exclusion requests and the duration and status of any active exclusion
- Reality check preferences and session timeout configurations
3. How We Collect Your Data
654db collects personal data through a number of channels and mechanisms, all of which are described transparently in this section.
3.1 Directly from You
The majority of personal data held by 654db is provided directly by you in the course of your interaction with the Platform. This includes data submitted during account registration, during the KYC verification process, when you contact customer support, when you set responsible gaming limits, and when you complete payment transactions via the cashier.
3.2 Automatically via Technology
When you access and use the 654db Platform, certain technical data is collected automatically by our systems. This includes your IP address, device identifiers, browser fingerprint data, session logs and behavioural analytics generated by your navigation through the Platform. This data is collected using server logs, analytics software and cookie technology as described in Section 9.
3.3 From Third-Party Service Providers
654db may receive data about you from third-party service providers engaged in connection with Platform operations. These include:
- Payment processors: bKash, Nagad, Rocket, Upay, Visa and Mastercard transaction confirmation data
- Identity verification providers: Results of automated document verification checks performed against national databases
- Fraud prevention services: Risk scores and device reputation data from third-party fraud detection partners
- Game providers: Game session data from Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Play'n GO and Spribe systems where required for dispute resolution
4. Purpose of Data Processing
654db processes your personal data for specific, defined purposes. We do not process data beyond what is necessary for those purposes. The table below sets out the primary purposes for which your data is used and the corresponding data categories involved.
| Purpose | Data Categories Used |
|---|---|
| Account registration and management — creating, maintaining and administering your 654db player account | Identity data, contact data, technical data |
| Age and identity verification (KYC) — verifying that you meet the 21+ requirement and that your identity documents are genuine | Identity data, financial data (payment method ownership) |
| Payment processing — processing deposits, withdrawals and refunds via bKash, Nagad, Rocket, Upay, Visa and Mastercard | Identity data, financial data, technical data |
| Service delivery — providing access to casino games, sports betting markets and all other Platform features | Identity data, technical data, usage data |
| Fraud prevention and security — detecting, investigating and preventing fraudulent transactions, account takeovers and platform abuse | All categories |
| Anti-money laundering (AML) — monitoring transactions and activity patterns to identify and report potential money laundering in accordance with applicable obligations | Identity data, financial data, usage data |
| Responsible gaming — applying player-set deposit limits, loss limits, session timers and self-exclusions; identifying at-risk players for proactive intervention | Identity data, financial data, responsible gaming data, usage data |
| Customer support — responding to enquiries, resolving disputes and handling complaints | Identity data, communication data, financial data |
| Marketing communications — sending promotional offers, bonus notifications and platform updates to players who have opted in to receive them | Identity data, contact data, usage data |
| Platform improvement — analysing aggregated, anonymised usage data to improve Platform performance, game selection and user experience | Technical data, usage data (anonymised) |
| Legal compliance — retaining records as required by applicable legal obligations and responding to lawful requests from law enforcement or regulatory authorities | All categories |
5. Legal Basis for Processing
654db processes your personal data on one or more of the following legal bases depending on the specific processing activity involved:
- Contractual necessity: Processing is necessary to perform the contract between you and 654db — specifically, to provide you with access to the Platform, process your transactions and administer your account. Without this processing, 654db cannot deliver its services to you.
- Legal obligation: Processing is required for 654db to comply with applicable legal obligations, including age verification, KYC/AML procedures, record-keeping requirements and responses to lawful authority requests.
- Legitimate interests: Processing is necessary for the legitimate interests pursued by 654db, including fraud prevention, platform security, responsible gaming monitoring and internal analytics — provided those interests are not overridden by your data protection rights and freedoms.
- Consent: For certain processing activities — principally the sending of direct marketing communications — 654db relies on your freely given, specific and informed consent. You may withdraw consent for marketing communications at any time by updating your communication preferences in your account settings or by contacting support at [email protected].
7. Data Retention
654db retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The table below summarises the standard retention periods applied to each category of data.
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration and identity data | Duration of account + 5 years post-closure | Legal obligation (AML / KYC record-keeping) |
| KYC verification documents | Duration of account + 5 years post-closure | Legal obligation |
| Financial transaction records | Duration of account + 7 years post-closure | Legal obligation (financial record-keeping) |
| Wagering and game history | Duration of account + 3 years post-closure | Legitimate interests (dispute resolution) |
| Customer support communication records | 3 years from date of last interaction | Legitimate interests (complaint handling) |
| Technical and usage logs | 13 months on a rolling basis | Legitimate interests (security, analytics) |
| Marketing consent records | Until consent is withdrawn + 3 years | Legal obligation (consent record-keeping) |
| Self-exclusion records | Duration of exclusion + 10 years | Legal obligation and player protection |
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with any individual player. Where data cannot be immediately deleted due to technical constraints (for example, data stored in backup systems), it will be isolated from active processing and deleted at the next scheduled backup purge cycle.
8. Security Measures
654db takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, alteration or disclosure.
8.1 Technical Safeguards
- 256-bit SSL/TLS encryption: All data transmitted between your device and the 654db Platform is encrypted using industry-standard 256-bit SSL/TLS protocols. The padlock indicator in your browser confirms this encryption is active during every session.
- Password hashing: Player passwords are never stored in plaintext. 654db uses strong, salted cryptographic hashing algorithms to store password credentials. 654db support staff cannot view your password.
- Database encryption: Sensitive data fields within 654db's databases are encrypted at rest using AES-256 encryption.
- Firewalls and intrusion detection: 654db's infrastructure is protected by enterprise-grade firewalls, web application firewalls (WAF) and continuous intrusion detection systems (IDS) that monitor for anomalous access patterns in real time.
- Two-factor authentication: Players are strongly encouraged to enable two-factor authentication (2FA) on their accounts. 654db's support team will use 2FA verification challenges when handling sensitive account actions via live chat or email.
8.2 Organisational Safeguards
- Access to personal data is restricted on a strict need-to-know basis. Only 654db personnel whose job functions require access to specific data categories are granted that access.
- All 654db personnel with access to personal data are bound by confidentiality obligations and receive data handling training appropriate to their role.
- Third-party service providers processing personal data on 654db's behalf are subject to data processing agreements that mandate equivalent security standards.
- 654db conducts periodic internal reviews of its data security practices and access control lists.
8.3 Data Breach Response
In the event of a confirmed personal data breach that is likely to result in a risk to the rights and freedoms of affected players, 654db will take immediate steps to contain the breach, assess its scope and notify affected players without undue delay. Notifications will be sent to the email address registered on each affected account and will include a clear description of the nature of the breach, the categories of data involved, the likely consequences, and the steps 654db has taken or proposes to take to address the breach.
10. Your Data Protection Rights
As a player on the 654db Platform, you hold a number of rights with respect to the personal data we hold about you. 654db is committed to facilitating the exercise of these rights promptly and without unnecessary barriers.
- Right of Access: You have the right to request a copy of all personal data that 654db holds about you. 654db will provide this information in a structured, machine-readable format within 30 days of receiving a valid request.
- Right to Rectification: You have the right to request that 654db corrects any inaccurate personal data held about you or completes any incomplete data record. You may update basic contact details directly from your account dashboard at any time.
- Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data. 654db will honour erasure requests where no legal obligation requires continued retention. Please note that financial records and KYC documents must be retained for the periods specified in Section 7 and cannot be erased on request during those retention windows.
- Right to Restriction of Processing: You may request that 654db restrict the processing of your personal data in certain circumstances — for example, while an accuracy dispute is being resolved, or where you object to legitimate-interest-based processing and an assessment is underway.
- Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that 654db provide your data in a portable, structured format suitable for transfer to another service provider.
- Right to Object: You have the right to object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, in which case 654db will assess whether its legitimate interests are overridden by your rights and will communicate the outcome to you.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
To exercise any of the rights listed above, please contact 654db's support team at [email protected] with the subject line "Data Rights Request — [Your Username]". 654db will acknowledge your request within 48 hours and will complete the required action within 30 calendar days, unless the complexity of the request requires an extension (in which case you will be informed of the delay and the expected resolution date).
11. Minors and Age Verification
21+ Policy Strictly Enforced: The 654db Platform is strictly for adults aged 21 years and above. 654db does not knowingly collect or process personal data relating to individuals under the age of 21 for the purpose of providing access to gambling services. All accounts are subject to mandatory age verification as part of the KYC process.
If 654db discovers or has reasonable grounds to believe that personal data has been submitted by or in connection with an individual under the age of 21, 654db will immediately suspend the associated account, void all gameplay activity conducted from that account and delete or securely quarantine the personal data in question, subject to any legal obligations that require it to retain records relating to underage account activity for compliance and reporting purposes.
Parents and guardians who believe that a person under the age of 21 in their household may have created a 654db account are encouraged to contact 654db's support team immediately at [email protected]. 654db will treat all such reports with urgency and will take appropriate action within 24 hours of receiving a valid report.
654db also recommends the use of parental control software to prevent minors from accessing online gambling platforms. Free parental control tools are available through major internet service providers and device manufacturers.
12. Third-Party Services and External Links
The 654db Platform integrates with third-party services — principally game providers, payment processors and identity verification platforms — in order to deliver its full range of features. While 654db selects these third-party providers with care and requires them to maintain adequate data protection standards, each provider operates under its own privacy policy. 654db is not responsible for the data handling practices of third-party providers beyond the terms of its data processing agreements with them.
The third-party game providers accessible through the 654db Platform — including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Play'n GO and Spribe — may collect limited technical and gameplay data directly from your device as part of their game delivery infrastructure. The scope of this collection is governed by each provider's own privacy documentation, which is available on their respective corporate websites.
654db does not operate external social media accounts, affiliate referral programs or third-party advertisement networks that would result in your browsing activity on the Platform being shared with social media platforms or advertising exchanges. The Platform does not embed third-party social media widgets that would allow social networks to track your activity on the 654db site.
13. Amendments to This Privacy Policy
654db reserves the right to update, amend or replace this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable legal requirements, or improvements to the way we describe our practices to players. All amendments will be published on this page at https://654db.io/privacy-policy with an updated "Last Updated" date at the top of the document.
Where an amendment constitutes a material change to the way in which 654db processes your personal data — for example, a new category of data being collected, a new purpose for which existing data is used, or a new category of third-party recipient — 654db will provide advance notice of the change by sending an email notification to the address registered on your account no less than 14 days before the amended policy takes effect. Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgement of, and agreement to, the updated Privacy Policy.
If you do not agree with a material amendment, you have the right to close your account and request deletion of your personal data (subject to the retention obligations set out in Section 7) before the amended policy takes effect. Account closure requests should be submitted via live chat or by email to [email protected].
654db recommends that you review this Privacy Policy periodically to stay informed about how your data is being handled. The version number and effective date at the top of this document allow you to confirm whether you are reading the most current version.
14. Contact Us
If you have any questions, concerns or requests relating to this Privacy Policy or to the way in which 654db handles your personal data, please contact our support team using the details below. 654db is committed to responding to all privacy-related enquiries promptly and thoroughly.
654db Data Support
Email: [email protected]
Support Hours: 24/7 — English Language Live Chat and Email
Response Time: Privacy enquiries acknowledged within 48 hours; resolved within 30 calendar days
Subject Line Format: "Privacy Policy Enquiry — [Your Username]"
When submitting a privacy-related enquiry or data rights request, please include your registered username, the email address associated with your account, and a clear description of your request or concern. This will allow 654db's support team to locate your account records and respond to your request without unnecessary delay.
For urgent security concerns — such as suspected unauthorised access to your account or a suspected data breach affecting your information — please contact 654db via live chat immediately so that the security team can respond in real time. Live chat is accessible 24 hours a day, 7 days a week, and is staffed by agents with the authority to escalate security incidents directly to 654db's technical team.
Privacy at 654db — Key Commitments
The sections above contain the full formal text of the 654db Privacy Policy. The cards below summarise the six most important commitments 654db makes to every player regarding their personal data.
Every data exchange between your device and the 654db Platform is protected by industry-standard 256-bit SSL/TLS encryption. Your login credentials, payment details and personal information are never transmitted in plaintext.
654db does not sell, rent or trade your personal data to any third party for commercial purposes. Your information is used exclusively to deliver and improve the Platform services you have signed up for.
You have the right to access, correct, export or request deletion of your personal data at any time. Send a request to [email protected] and our team will action it within 30 calendar days.
654db keeps your data only as long as legally required or operationally necessary. Full retention schedules are published in Section 7 of this policy. Data is securely deleted or anonymised once the applicable period expires.
Promotional emails and bonus notifications are sent only to players who have actively opted in. You may withdraw marketing consent at any time from your account settings or by contacting our support team — no questions asked.
Your self-exclusion settings, deposit limits and session timers are treated as highly sensitive data with additional access restrictions. Responsible gaming records are retained for up to 10 years after an exclusion to prevent circumvention.
Ready to Play at 654db?
Now that you understand how 654db protects your personal data, explore the full range of games and betting markets available on Bangladesh's trusted platform.