End-to-End Encryption
All data transmitted between your device and 45db servers is protected by industry-standard SSL/TLS encryption. Your personal and financial information travels securely at all times.
Minimal Data Collection
45db collects only the data that is strictly necessary to operate the platform, verify your identity, process payments, and comply with anti-money laundering obligations. We do not collect data for its own sake.
Your Rights Are Respected
You have the right to access, correct, export, and request deletion of your personal data at any time. Submit a request to [email protected] and we will respond within 30 days.
No Unauthorised Sharing
45db never sells your personal data to third-party marketers. Data is shared only with trusted technology and payment partners who operate under strict data processing agreements.
Transparent Cookie Use
We use cookies strictly for session management, security, and platform performance analytics. We do not use third-party advertising or behavioural tracking cookies without your consent.
Defined Retention Periods
Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Detailed retention schedules are set out in Section 6.
Introduction & Scope
45db ("we", "us", "our") operates the online casino and sports betting platform accessible at 45db.bet. We are committed to protecting the privacy and security of all individuals who interact with our platform, whether as registered players, prospective users browsing the site, or visitors accessing our publicly available content.
This Privacy Policy sets out the legal basis on which we process your personal data, the categories of data we collect, the purposes for which that data is used, the circumstances in which it may be shared, and the rights available to you as a data subject. This policy applies to all personal data collected through the 45db website, mobile experience, customer support channels, and any other touchpoints through which you interact with the 45db brand.
This policy is intended to meet internationally recognised privacy standards including the principles of the General Data Protection Regulation (GDPR) as adapted for the contexts in which 45db operates. Where local laws in Bangladesh impose additional obligations, 45db will comply with those requirements to the extent applicable. This policy is written and maintained in English. In the event of any inconsistency between a translated version and the English version, the English version shall prevail.
References to "personal data" in this policy mean any information that directly or indirectly identifies a natural person, including but not limited to: name, date of birth, contact details, financial account identifiers, device identifiers, and behavioural data generated through platform use.
Data We Collect
45db collects personal data from you directly (when you register, deposit, contact support, or participate in promotions), automatically (through your use of the platform), and in some cases from third parties (such as payment processors and identity verification services). Below is a detailed breakdown of the categories of data we collect and the source of each.
| Category | Examples | Source |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, national ID number, passport number | Provided by you at registration or during KYC verification |
| Contact Data | Mobile phone number, email address, residential address, city (e.g., Dhaka, Chittagong) | Provided by you at registration or when contacting support |
| Financial Data | bKash / Nagad / Rocket / Upay account identifiers, bank account details, transaction history, deposit and withdrawal amounts in BDT (৳) | Provided by you during deposit/withdrawal, or received from payment processors |
| Account Data | Username, hashed password, account balance, bonus history, game preferences, bet history, login timestamps | Generated automatically through your use of the platform |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, session duration, referring URL | Collected automatically via server logs and analytics tools |
| Usage Data | Pages visited, games played, search queries, clickstream data, time spent on each section of the platform | Collected automatically via cookies and analytics tools |
| Communications Data | Support chat transcripts, email correspondence, feedback submitted via contact forms | Provided by you when contacting the 45db support team |
| Verification Data | Copies of government-issued photo ID, proof of address documents, selfie verification images | Provided by you during KYC verification process |
45db does not knowingly collect data from individuals under the age of 18. If we become aware that a minor has provided personal data without parental consent, we will delete that data promptly and close the associated account. If you believe a minor has registered on our platform, please notify us immediately at [email protected].
How We Use Your Data
45db processes your personal data only where a valid legal basis exists. The primary legal bases we rely on are: (a) performance of a contract — processing necessary to provide you with the services you have registered for; (b) legal obligation — processing required to comply with anti-money laundering, fraud prevention, and identity verification obligations; (c) legitimate interests — processing that serves 45db's reasonable business interests, provided those interests do not override your fundamental rights; and (d) consent — where you have given explicit consent for a specific processing activity, such as receiving marketing communications.
- Account Creation & Management: We use your identity, contact, and account data to create and maintain your player account, verify your eligibility (including age verification), and provide you with access to the 45db platform. This is necessary for the performance of the contract between you and 45db.
- Payment Processing: We use your financial data to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks. This is necessary both for the performance of the contract and to comply with financial regulations applicable to payment processing.
- Identity Verification (KYC): We use your verification data to confirm your identity, age, and the ownership of payment methods. This is required to fulfil our legal obligations under applicable anti-money laundering and responsible gambling frameworks.
- Fraud Prevention & Security: We use technical, account, and financial data to detect and prevent fraudulent activity, unauthorised access, money laundering, collusion, and other prohibited conduct. This is both a legal obligation and a legitimate interest of 45db and its honest player community.
- Responsible Gaming Compliance: We use account and usage data to monitor gambling behaviour for signs of problem gambling, to enforce self-exclusion requests, and to apply deposit limits or time-out periods where requested or mandated. Visit our Responsible Gaming page for full details.
- Customer Support: We use your contact and communications data to respond to support enquiries, resolve disputes, and provide assistance with account, payment, and technical issues. This is necessary for the performance of our contractual obligations.
- Platform Improvement: We use usage and technical data in aggregated, anonymised form to analyse platform performance, improve game offerings, optimise the user interface, and inform product development decisions. This is a legitimate interest of 45db.
- Promotions & Bonuses: We use your account and usage data to determine your eligibility for promotions, apply bonuses to your account, and administer wagering requirement tracking. This is necessary for the performance of the promotional contract you enter when claiming a bonus offer.
- Legal Compliance: We process and retain data as required by applicable laws, including responding to lawful requests from regulatory or law enforcement authorities, meeting record-keeping obligations, and defending legal claims.
- Marketing Communications (consent-based): With your explicit consent, we may use your contact data to send you promotional emails or platform notifications about new games, seasonal offers (such as Eid or Pohela Boishakh promotions), and BPL or IPL cricket betting opportunities. You may withdraw this consent at any time by contacting [email protected].
Data Sharing & Third Parties
45db does not sell, rent, or trade your personal data to third-party marketers under any circumstances. We share personal data only in the specific, limited circumstances described in this section, and only with parties who are contractually required to protect it to a standard at least equivalent to our own.
- Payment Processors: To facilitate deposits and withdrawals, we share necessary financial and identity data with our payment processing partners including bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank). These partners process your data solely to execute the payment transaction and are bound by their own privacy and security obligations.
- Identity Verification Providers: To fulfil our KYC obligations, we may share identity and verification documents with trusted third-party identity verification service providers. These providers are engaged under data processing agreements that prohibit secondary use of the data.
- Game Technology Providers: Game content on 45db is powered by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session data (e.g., stake amounts, game outcomes) for game integrity and audit purposes. They do not receive directly identifiable personal data such as your name or contact details.
- Platform Technology Partners: We use third-party cloud hosting, analytics, and security services to operate the 45db platform. These providers act as data processors on our behalf and are contractually restricted from using your data for any purpose other than providing services to 45db.
- Legal Authorities: We may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other government authorities where we are legally required to do so, or where disclosure is necessary to prevent fraud, protect the safety of individuals, or defend legal proceedings involving 45db.
- Business Transfers: In the event of a merger, acquisition, sale of assets, or restructuring of the 45db business, your personal data may be transferred to the acquiring or successor entity, provided that entity agrees to honour the terms of this Privacy Policy or a policy that offers equivalent protection.
- Responsible Gaming Organisations: Where a player requests referral to a problem gambling support service, limited contact information may be shared with that organisation strictly to facilitate the support request. This sharing requires your explicit consent at the time of referral.
Data Security & Retention
45db implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Security is treated as an ongoing operational priority, not a one-time implementation task.
- Encryption in Transit: All data exchanged between your device and 45db servers is encrypted using TLS 1.2 or higher. This applies to account login, payment processing, and all API communications between your browser or app and our platform.
- Encryption at Rest: Sensitive data stored in our databases — including identity documents, financial account identifiers, and KYC records — is encrypted at rest using industry-standard AES-256 encryption.
- Password Storage: User passwords are never stored in plain text. 45db uses a one-way salted hashing algorithm (bcrypt or equivalent) to store password credentials. Even 45db staff cannot view your password — only you know it.
- Access Controls: Access to personal data within 45db's internal systems is governed by a strict role-based access control (RBAC) policy. Only personnel who require access to personal data to perform their specific job function are granted that access. All internal access is logged and audited.
- Penetration Testing: 45db commissions periodic security assessments and penetration testing of its platform infrastructure to identify and remediate vulnerabilities proactively.
- Incident Response: In the event of a data breach that is likely to result in a risk to your rights and freedoms, 45db will notify affected players without undue delay and take immediate steps to contain and assess the incident.
Despite these measures, no online platform can guarantee absolute security. You also play a role in keeping your data safe — choose a strong and unique password for your 45db account, do not share your login credentials with anyone, and log out of your account when using shared devices.
Data Retention Schedule
| Data Category | Retention Period | Reason |
|---|---|---|
| Active Account Data | Duration of account + 5 years after closure | Contract performance, legal obligation, AML compliance |
| KYC / Identity Documents | 5 years from date of verification | Anti-money laundering regulatory requirements |
| Financial Transaction Records | 7 years from date of transaction | Financial record-keeping obligations |
| Support Communications | 3 years from the date of the last interaction | Dispute resolution and quality assurance |
| Responsible Gaming Records | 5 years from date of request or self-exclusion | Compliance with responsible gaming obligations |
| Technical / Log Data | Up to 13 months | Security monitoring and fraud detection |
| Marketing Consent Records | Until consent is withdrawn + 1 year | Demonstrating consent compliance |
When personal data is no longer required for the purpose for which it was collected and no legal obligation requires its continued retention, 45db will securely delete or anonymise the data so that it can no longer be linked to you as an individual.
Your Rights & Choices
As a data subject, you have a number of rights in relation to the personal data 45db holds about you. 45db is committed to honouring these rights promptly and without creating unnecessary barriers. To exercise any of the rights listed below, contact us at [email protected] with the subject line "Privacy Rights Request" and a clear description of the right you wish to exercise.
- Right of Access: You have the right to request a copy of all personal data that 45db holds about you. This is commonly known as a Subject Access Request (SAR). We will provide the data in a structured, commonly used, machine-readable format within 30 days of receiving a valid request.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update basic account information (such as email address and phone number) directly through your account settings. For corrections to identity documents or KYC records, please contact support.
- Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where: (a) the data is no longer necessary for the purpose it was collected; (b) you withdraw consent on which processing is based; (c) the data has been unlawfully processed; or (d) erasure is required to comply with a legal obligation. Note that we may be required to retain certain data for legal compliance reasons even after an erasure request (see the retention schedule in Section 6).
- Right to Restriction of Processing: You have the right to request that we restrict processing of your personal data in certain circumstances, for example while the accuracy of the data is contested or while an objection to processing is under consideration.
- Right to Data Portability: Where processing is based on your consent or the performance of a contract, and processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
- Right to Object: You have the right to object to processing of your personal data where that processing is based on 45db's legitimate interests. If you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
- Right to Withdraw Consent: Where processing is based on your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw marketing consent, email [email protected] or use the unsubscribe link in any marketing communication.
- Right Not to Be Subject to Automated Decisions: You have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects on you, except where such processing is necessary for a contract or permitted by law. See our note in Section 3 on automated decision-making.
We will respond to all valid privacy rights requests within 30 calendar days. In complex cases, we may extend this period by a further 60 days, in which case we will inform you of the extension within the initial 30-day period. We will not charge a fee for processing a rights request unless the request is manifestly unfounded, repetitive, or excessive, in which case we may charge a reasonable administrative fee.
Contact & Policy Updates
If you have any questions, concerns, or requests relating to this Privacy Policy or the way 45db handles your personal data, please contact our support team. We take all privacy enquiries seriously and commit to acknowledging your message within 48 hours on Bangladesh Standard Time (BST, UTC+6).
Email: [email protected] — please use the subject line "Privacy Enquiry" or "Privacy Rights Request" for faster routing to the appropriate team.
Response Time: General privacy enquiries within 48 hours; formal rights requests within 30 calendar days as described in Section 7.
Policy Updates
45db reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When a material change is made, we will update the "Last Updated" date at the top of this document and, where appropriate, notify registered players via their registered email address. We encourage you to review this page periodically to stay informed about how we protect your data.
Your continued use of the 45db platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you disagree with any change to this policy, please discontinue use of the platform and contact us to discuss account closure and data deletion options.
Thank you for trusting 45db with your personal data. We understand that privacy is fundamental to a trustworthy gaming experience, and we are committed to upholding the highest standards of data protection for every player across all 8 divisions of Bangladesh.