567db Privacy
Policy

1. Data We Collect

When you register an account or use the 567db platform, we collect personal data in several ways. The categories of data we collect, and the specific circumstances in which we collect them, are described below.

567db collects only the data that is necessary for the stated purposes. We do not collect sensitive personal categories of data — such as racial or ethnic origin, political opinions, religious beliefs, or health data — unless directly relevant to a specific responsible gaming or self-exclusion request submitted by the player themselves.

Where you choose to connect to 567db via a mobile device registered to a Bangladeshi network operator (Grameenphone, Banglalink, Robi, Airtel, or Teletalk), certain technical identifiers associated with that device may be automatically captured as part of standard server logging. This data is used exclusively for security and fraud prevention purposes and is not associated with your personal profile for marketing purposes.

2. How We Use Your Data

567db processes player data only for clearly defined, legitimate purposes. We do not use personal data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes for which 567db uses player data are as follows.

• Account creation and management: Your identity and contact data are used to create and maintain your 567db player account, verify your identity, and ensure that only the registered account holder can access the account.
• Payment processing: Financial data — including your bKash, Nagad, or Rocket account number — is used solely to process deposits into and withdrawals from your 567db account. We retain transaction records as required for financial record-keeping and fraud investigation.
• Security and fraud prevention: Device and technical data, along with account activity logs, are analysed to detect and prevent unauthorised access, bonus abuse, collusion, money laundering, and other forms of fraudulent behaviour. 567db's security systems operate continuously to protect the integrity of the platform and the safety of individual player accounts.
• Customer support: Communications data — including support tickets and chat transcripts — is retained to enable 567db's support team to assist players effectively, to track the resolution of reported issues, and to improve service quality over time.
• Legal and regulatory compliance: Certain categories of player data — particularly identity verification records and financial transaction logs — must be retained by 567db for defined periods in order to meet anti-money laundering (AML) and know-your-customer (KYC) obligations. Retention periods are described in Section 5 of this policy.
• Responsible gaming management: Responsible gaming data — including self-exclusion requests, deposit limits, and session reminders — is used to implement the specific safeguards requested by the player and to monitor account activity for patterns that may indicate problem gambling behaviour.
• Platform improvement: Aggregated, anonymised analytics data derived from player interactions with the 567db platform is used to understand user behaviour at a population level, identify technical issues, and improve the overall player experience. This analysis does not identify individual players.
• Service communications: Your registered mobile number or email address may be used to send you account-specific notifications, such as deposit confirmation messages, withdrawal status updates, security alerts, and updates to these terms or our privacy policy. These communications are not marketing messages and cannot be opted out of while your account remains active, as they form part of the essential account management service.

3. Data Sharing & Third Parties

567db does not sell, license, or otherwise transfer your personal data to third parties for their own commercial purposes. However, in order to operate the platform and deliver its services to Bangladesh players, 567db does share specific categories of player data with trusted third-party service providers under strict contractual conditions. Every third party with whom 567db shares player data is required to process that data solely for the agreed purpose and to maintain appropriate security standards.

• Payment processors: To process your bKash, Nagad, Rocket, or bank transfer transactions, 567db shares the minimum necessary financial data — your registered account number and the transaction amount — with the relevant payment service provider. These providers operate under their own privacy and security frameworks and are independently regulated as mobile financial service providers in Bangladesh.
• Game studios and content providers: When you play a game delivered by a third-party studio — such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, or Ezugi — certain technical session data (such as your player session token and stake amounts) is transmitted to that studio's systems in order to run the game and settle results. Game studios do not receive your full identity or financial data from 567db.
• Identity verification providers: Where 567db uses a third-party KYC service to verify identity documents submitted during the account verification process, your identity data will be processed by that provider for verification purposes only. The result of the verification check is returned to 567db; the underlying documents are not retained by the third-party provider beyond the verification process.
• Analytics providers: 567db may use anonymised, aggregated traffic analytics tools to understand how players navigate the platform. These tools do not receive data that identifies you as an individual.
• Legal and regulatory authorities: 567db may be required by applicable law, court order, or regulatory instruction to disclose player data to a government body, law enforcement agency, or financial intelligence authority in Bangladesh or another relevant jurisdiction. 567db will comply with all lawful data disclosure requests and will, where legally permitted, notify the affected player of such a request.

567db does not transfer player data to countries or territories that do not maintain adequate data protection standards relative to the nature of the data being transferred. Where cross-border data transfers are unavoidable — for example, in the case of internationally hosted game studio infrastructure — such transfers are conducted under appropriate contractual safeguards.

4. Cookies & Tracking

567db uses cookies and similar tracking technologies on its platform to ensure the site functions correctly, to keep your session active during gameplay, and to collect anonymised analytics about how players navigate the site. Cookies are small text files stored on your device by your browser. The 567db platform uses only the cookie categories described below.

567db does not use advertising cookies, social media tracking pixels, or cross-site behavioural profiling technologies of any kind. You will not be served with retargeted advertising based on your 567db browsing activity on other websites.

You can control cookie behaviour through your browser settings. Most modern browsers allow you to view, block, or delete cookies stored by a particular website. Please note that disabling strictly necessary cookies will prevent you from logging in to your 567db account, as these cookies are essential for session management. Disabling analytics cookies will not affect your ability to use any platform feature.

5. Data Retention

567db retains personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following retention framework applies to the primary categories of player data held by 567db.

• Active account data: While your 567db account remains active, we retain all account data — including identity records, contact information, account activity logs, and communications history — for the duration of the account relationship.
• Identity verification records: Copies of identity documents submitted during the KYC verification process are retained for a minimum of five years following account closure. This retention period reflects anti-money laundering record-keeping obligations.
• Financial transaction records: All deposit and withdrawal transaction records are retained for a minimum of five years from the date of the transaction. These records may be required for regulatory investigation, tax reporting, or dispute resolution purposes.
• Responsible gaming records: Records of self-exclusion requests, deposit limit changes, and cooling-off activations are retained for a minimum of five years following account closure to ensure that any future re-registration request can be assessed against the player's responsible gaming history.
• Support communications: Customer support ticket records and chat transcripts are retained for two years from the date of the final communication in each ticket thread. After this period, records are anonymised or deleted.
• Analytics data: Anonymised analytics data is retained for up to 24 months for platform performance analysis. Because this data contains no personal identifiers, it falls outside the scope of personal data retention obligations.
• Closed and suspended accounts: Following the closure or permanent suspension of a 567db account, personal data associated with that account is retained for the minimum periods described above and then securely deleted or anonymised. Players may request early deletion of data that is not subject to a mandatory retention obligation by contacting [email protected].

Where 567db is required to retain data beyond the standard retention period — for example, in connection with an active legal proceeding, regulatory investigation, or disputed transaction — the relevant data will be preserved until that matter is fully resolved, after which standard retention and deletion procedures will resume.

6. Data Security Measures

567db implements a layered set of technical and organisational security measures to protect player data against unauthorised access, accidental loss, disclosure, alteration, or destruction. The following measures are in place across the 567db platform.

• SSL/TLS encryption: All data transmitted between your device and the 567db platform is encrypted using SSL/TLS protocols. The platform enforces HTTPS across all pages, ensuring that your account credentials, financial data, and personal information cannot be intercepted in transit.
• Password hashing: Player account passwords are stored using a one-way cryptographic hashing algorithm. 567db staff cannot read your password in plain text under any circumstances. This is why 567db support will never ask you to provide your password.
• Two-factor authentication: OTP-based two-factor authentication is available to all registered players and is strongly recommended. 2FA ensures that even if your password is compromised, a second verification step is required before account access is granted.
• Access controls: Internal access to player data is restricted on a need-to-know basis. 567db staff access to player records is logged, audited, and limited to the minimum scope necessary for each staff member's role.
• Regular security reviews: The 567db platform undergoes periodic security assessments to identify and remediate vulnerabilities. These reviews cover both the application layer and the underlying infrastructure on which the platform operates.
• Incident response: In the event of a data security incident that affects player data, 567db will take immediate steps to contain the incident, assess its scope, and notify affected players as promptly as practicable. Notification will be sent to the registered mobile number or email address associated with the affected account.

While 567db maintains robust security measures, no online platform can guarantee absolute security. Players are encouraged to protect their own account security by using a strong, unique password, enabling two-factor authentication, and accessing 567db only from trusted personal devices. If you believe your 567db account has been compromised, contact [email protected] immediately.

7. Your Rights as a Player

As a 567db player whose personal data is processed by the platform, you hold a set of rights in relation to that data. 567db is committed to honouring these rights promptly and without undue restriction. To exercise any of the rights described below, please contact the 567db data team at [email protected], including your registered mobile number (but never your password) in your message to assist with account identification.

• Right of access: You have the right to request a copy of the personal data that 567db holds about you. Upon receipt of a verified access request, 567db will provide a summary of the data categories held and, where practicable, the specific data points within each category. Responses to access requests will be provided within 30 calendar days.
• Right to rectification: If any personal data held by 567db about you is inaccurate or incomplete, you have the right to request that it be corrected. Corrections to identity data may require submission of updated identity verification documents before the change can be applied.
• Right to deletion: You have the right to request the deletion of your personal data. 567db will honour deletion requests for data that is not subject to a mandatory retention obligation (see Section 5). Data that must be retained for legal, regulatory, or fraud-prevention purposes cannot be deleted before the applicable retention period expires, but will be isolated from active processing pending deletion.
• Right to restrict processing: In certain circumstances — for example, where you contest the accuracy of data held about you, or where you have objected to a specific processing activity — you may request that 567db restrict the processing of your data while the matter is under review.
• Right to data portability: Where technically feasible, you may request that 567db provide your personal data in a structured, machine-readable format so that you can transfer it to another service. This right applies to data that you have actively provided to 567db, such as account registration details.
• Right to object to marketing: You have the right to object at any time to the use of your personal data for promotional communications. To opt out, contact [email protected]. Opting out of marketing does not affect essential account communications.

8. Policy Updates & Contact

567db reserves the right to update or amend this Privacy Policy at any time. The current version of the Privacy Policy is always available at 567db.app/privacy-policy. The effective date displayed at the top of this page indicates when the current version came into force. Where a change to this policy materially affects the way in which 567db processes your personal data, we will notify registered players via their registered mobile number or email address before the change takes effect.

Continued use of the 567db platform following the publication of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree with a change to this policy, you should stop using the platform and may request account closure by contacting [email protected].