76db Privacy
Policy

1 Who We Are

76db ("76db", "we", "us", "our") operates the online betting and casino platform accessible at 76db.io. We are the data controller responsible for the personal information collected through the 76db website and all related services, features, and content (collectively, the "Platform").

This Privacy Policy applies to all visitors, registered players, and former account holders who have interacted with the 76db Platform. It describes how 76db collects, processes, stores, shares and protects personal data, and explains the rights available to you under applicable data protection principles.

By accessing or using the 76db Platform, you acknowledge that you have read and understood this Privacy Policy. This policy should be read alongside the 76db Terms & Conditions. In the event of any conflict between the two documents, the Terms & Conditions shall prevail in respect of the contractual relationship between you and 76db, while this Privacy Policy governs data processing matters.

2 Data We Collect

76db collects personal data that is necessary to provide, maintain and improve the Platform, to comply with legal and regulatory obligations, and to prevent fraud and financial crime. The categories of personal data we collect include, but are not limited to, the following:

We do not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information unless specifically required by applicable law or with your explicit consent.

3 How We Collect Data

76db collects personal data through the following channels:

• Direct interactions: Information you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting support, or submitting any form on the Platform.
• Automated technologies: Technical and usage data collected automatically as you navigate the Platform, including cookies, web beacons, server logs and similar tracking technologies.
• Payment processors: Transaction confirmation and payment status data received from bKash, Nagad, Rocket, Upay and cryptocurrency network nodes when you make a deposit or request a withdrawal.
• Identity verification partners: Document verification results and risk scores received from third-party Know Your Customer (KYC) providers when verifying your identity.
• Fraud prevention services: Device fingerprint data, IP reputation scores and behavioural analytics received from third-party fraud and anti-money laundering service providers.
• Public sources: Publicly available information used to verify your identity or to carry out anti-money laundering checks, where required.

4 How We Use Your Data

76db uses your personal data only for specific, legitimate purposes. The following table sets out the primary purposes for which we process personal data and the corresponding legal basis for each:

• Account creation and management: To set up and maintain your 76db player account, including verifying your identity and age before activation.
• Service delivery: To process your deposits and withdrawals, settle bets, award winnings, apply bonuses, and otherwise fulfil our contractual obligations to you as a registered player.
• Security and fraud prevention: To detect, investigate and prevent fraudulent transactions, unauthorised account access, money laundering, and other prohibited activity on the Platform.
• Regulatory compliance: To meet our obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and know your customer (KYC) requirements.
• Responsible gaming: To monitor your gaming activity for signs of problem gambling and to administer any responsible gaming tools you have activated on your account, such as deposit limits or self-exclusion.
• Customer support: To respond to your enquiries, resolve disputes, process complaints and maintain records of customer service interactions.
• Platform improvement: To analyse usage patterns, conduct A/B testing, and improve the performance, design and content of the 76db Platform.
• Marketing and promotions: To send you promotional offers, bonus notifications, and personalised recommendations — but only where you have given your explicit consent to receive such communications.
• Legal compliance: To retain records as required by applicable law and to respond to lawful requests from regulatory authorities or law enforcement agencies.

5 Legal Basis for Processing

76db processes your personal data on one or more of the following legal bases depending on the specific processing activity:

• Contractual necessity: Processing is required to enter into or perform the contract with you — for example, verifying your identity, processing your deposits, and settling your bets.
• Legal obligation: Processing is required to comply with applicable legal and regulatory requirements, including AML and KYC obligations.
• Legitimate interests: Processing is necessary for 76db's legitimate business interests, such as fraud prevention, platform security and improving the service, provided those interests are not overridden by your rights.
• Consent: Where processing is based on your consent — such as receiving marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing that took place before the withdrawal.

6 Data Sharing & Third Parties

76db does not sell, rent or trade your personal data. We share personal data with third parties only to the extent strictly necessary to deliver the Platform, comply with legal obligations, or protect the legitimate interests of 76db and its players. Categories of third parties with whom data may be shared include:

• Payment service providers: bKash, Nagad, Rocket, Upay and cryptocurrency infrastructure providers who process your transactions. These providers receive only the data required to complete the payment.
• Identity verification providers: Third-party KYC and document verification services that assist in confirming your identity and age before your account is fully activated.
• Game content providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Ezugi and other licensed studios whose games are hosted on the 76db Platform. Game providers may receive anonymised session data for game performance and fairness auditing purposes.
• Fraud and security providers: Specialist third-party services that analyse transactional and behavioural data to detect and prevent fraud, money laundering, and account compromise.
• IT infrastructure providers: Cloud hosting, content delivery network (CDN), and data storage providers who process data on our behalf under strict data processing agreements.
• Legal and regulatory authorities: Courts, law enforcement agencies, financial intelligence units, and regulatory bodies where disclosure is required by applicable law or court order.

All third-party service providers who process personal data on behalf of 76db are required to handle that data in accordance with applicable data protection standards and may not use it for any purpose beyond the specific service they provide to 76db.

7 Cookies & Tracking Technologies

76db uses cookies and similar technologies — including web beacons, pixel tags, and local storage — to operate, secure and improve the Platform. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Remember your preferences, such as language settings, selected sports markets, and game display options, to provide a more personalised experience.
• Analytics cookies: Collect anonymised data about how players navigate and interact with the Platform, helping 76db identify areas for improvement. No personally identifiable information is captured by analytics cookies.
• Marketing cookies: Used only where you have given your consent, to measure the effectiveness of promotional campaigns and to avoid showing you the same offer repeatedly.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect your experience on the Platform, including the ability to remain logged in across sessions. 76db does not use cookies to build profiles for sale to third-party advertisers.

8 Data Retention

76db retains personal data for as long as is necessary to fulfil the purpose for which it was collected, to comply with legal and regulatory obligations, and to resolve any disputes that may arise. The following general retention periods apply:

• Active account data: Retained for the full duration of your account's active status on the Platform.
• Closed account data: Retained for a minimum of 5 years following account closure to comply with AML record-keeping obligations and to facilitate dispute resolution.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Customer support records: Retained for 3 years from the date of the last interaction.
• Marketing consent records: Retained for the duration of consent plus 1 year after withdrawal of consent, to demonstrate compliance.
• Technical and security logs: Retained for 12 months unless required for longer in connection with an active security investigation.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

9 Data Security

76db takes the security of your personal data seriously and employs a range of technical and organisational measures to protect it from unauthorised access, loss, alteration, disclosure or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and 76db servers.
• Encryption of sensitive data at rest, including financial records and identity documents.
• One-way cryptographic hashing of all account passwords — 76db staff cannot read or retrieve your password.
• Role-based access controls limiting personnel access to personal data on a strict need-to-know basis.
• Regular penetration testing and vulnerability scanning of the Platform infrastructure.
• Multi-factor authentication (MFA) available for all player accounts and mandatory for internal administrative access.
• 24/7 security monitoring and automated anomaly detection to identify suspicious activity in real time.

In the event of a data breach that poses a risk to your rights or interests, 76db will notify affected players without undue delay and take immediate steps to contain and remediate the incident.

10 Your Privacy Rights

Subject to applicable law, you have the following rights in relation to the personal data 76db holds about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and include your registered username and a brief description of your request.

• Right of access: You may request a copy of all personal data 76db holds about you, along with information about how it is processed.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected or updated. Where possible, you can update basic profile information directly within your account settings.
• Right to erasure: You may request deletion of your personal data in certain circumstances, for example where the data is no longer necessary for the purpose for which it was collected. This right is subject to our legal obligation to retain certain records under AML regulations.
• Right to restrict processing: You may request that we pause processing of your personal data in certain circumstances, such as while a dispute about the accuracy of the data is being resolved.
• Right to data portability: You may request that certain personal data be provided to you in a structured, machine-readable format so that it can be transferred to another service provider.
• Right to object: You may object to processing based on legitimate interests, including direct marketing. Where you object to direct marketing, we will stop processing your data for that purpose immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

11 Children & Minors

The 76db Platform is strictly intended for adults aged 21 years and above. 76db does not knowingly collect, process or store personal data from any person under the age of 21. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor in your care has registered an account on 76db, please contact us immediately at [email protected]. We will investigate and take appropriate action as a matter of priority.

12 International Data Transfers

76db primarily serves players in Bangladesh and stores the majority of personal data on servers located within or near the South and Southeast Asian region. In some circumstances, personal data may be processed by third-party service providers (such as identity verification or fraud prevention partners) located in other countries.

Where personal data is transferred internationally, 76db takes appropriate steps to ensure that adequate protections are in place, including contractual clauses requiring the recipient to protect the data to standards equivalent to those applied by 76db. By using the Platform, you acknowledge and consent to the possible transfer of your personal data across borders as described in this section.

13 Changes to This Policy

76db reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements or operational needs. Material changes will be communicated to registered players via the email address on their account or through a prominent notice on the Platform at least 7 days before the updated policy takes effect.

We encourage you to review this Privacy Policy periodically. The "Last Updated" date at the top of this page indicates when the most recent changes were made. Your continued use of the Platform following the effective date of any change constitutes your acceptance of the revised Privacy Policy.

14 Contact & Data Requests

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a privacy-related concern, please contact the 76db data team using the details below. All communications should be in English or Bengali and should include your registered username to help us locate your account efficiently.

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: "Data Rights Request — [your username]"
• Response time: Within 30 days for standard requests; complex requests may take up to 90 days
• Support hours: 24 hours a day, 7 days a week including public holidays (BST, UTC+6)
• Languages: English and Bengali