db8 Privacy Policy —
Your Data Is a Sacred Trust to Us

Db8 (db8.bio) places your privacy above all else. This Privacy Policy applies to all users of the db8 platform — including the website and mobile application. By using our services, you are deemed to have consented to the data collection and usage practices described in this policy.

Db8 believes that a user's personal data belongs to them. We use that data solely for the user's benefit — we never sell it for commercial gain or share it unnecessarily with third parties. This policy is the formal record of that commitment.

If you have any difficulty reading or understanding this Privacy Policy, db8's Bengali-speaking support team is always ready to help.

Db8 collects only the information that is strictly necessary — no unnecessary personal data is ever requested. A detailed list is provided below:

Db8 uses the data it collects solely for specific, limited purposes — never arbitrarily or for unrelated reasons.

• Account Management: Your information is used to create, verify, and secure your account.
• Payment Processing: Financial information is used for processing deposits, withdrawals, and bonus payouts.
• Service Improvement: Usage patterns are analyzed to make the platform more user-friendly.
• Security Assurance: Data is used to prevent fraud, money laundering, and unauthorised account access.
• Contact: We reach out for transaction notifications, important updates, and support services.
• Legal Obligations: Limited information may be disclosed to fulfil lawful requests from government or regulatory authorities.

Db8 never sells your information to advertisers or allows it to be used for third-party marketing purposes.

Db8 stores your data on secure servers that are encrypted and regularly audited.

• Account Information: Retained for the duration of account activity and for up to 5 years after closure (as required by law).
• Transaction Records: Transaction data is retained for up to 7 years in accordance with financial regulatory requirements.
• Log Files: System logs are automatically deleted after 90 days.
• Marketing Data: Once you opt out, you are removed from our marketing list immediately.

Following an account closure request, db8 will delete all data it is not legally required to retain within 30 business days.

db8 never sells your data. However, in certain limited circumstances, information may be shared with trusted partners:

• Payment Providers: Payment gateways such as bKash, Nagad, and banks receive only the limited data necessary to process transactions.
• Identity Verification Agencies: Name and NID details may be shared with authorized third parties as part of the KYC process.
• Law Enforcement Agencies: Information required by law is provided when a court order or government directive is in place.
• Security Auditors: Authorised security specialists are granted limited data access to ensure platform security.

All partners are bound by db8's strict data confidentiality agreements and may not use this information beyond their designated scope of work.

Db8 uses cookies and similar technologies on its website. Cookies are small data files stored in your browser that help improve the website's functionality.

• Essential Cookies: Login sessions, security tokens, and similar essentials — the site cannot function without them.
• Functional Cookies: Remembers your language preferences and settings.
• Analytics Cookies: Used to understand which sections of the site receive the most traffic.

You can disable non-essential cookies through your browser settings at any time, though this may limit certain features of the site.

Db8 keeps your data secure using industry-standard, internationally recognized security technology. Our security infrastructure is built on the following technologies:

• 256-bit SSL/TLS Encryption: All data transfers take place over encrypted channels.
• Two-Factor Authentication (2FA): Additional OTP verification is required at login and for high-value transactions.
• Real-Time Monitoring: Suspicious activity is detected and blocked immediately.
• Regular Security Audits: Independent third-party security experts conduct regular audits of db8's systems.
• Data Masking: Sensitive data (such as NID and payment numbers) is stored in masked form in the database.

However, 100% security on the internet cannot be guaranteed. You should also stay vigilant — use strong passwords and avoid clicking on unfamiliar links.

Db8 believes you should have full control over your own data. Your key rights are outlined below:

• Right to Be Informed: You may submit a request to find out what information we hold about you.
• Right to Rectification: If any of your information is incorrect, you may request that it be updated.
• Right to Erasure: You may request deletion of your data unless we are required to retain it under a legal obligation.
• Right to Restrict Processing: You may request that your data be restricted from being used for specific purposes.
• Right to Lodge a Complaint: If you believe your privacy has been violated, you may file a complaint with us or with the relevant regulatory authority.

To exercise any of these rights support@db8.bio. db8 is obligated to respond within 30 business days.

Db8 does not knowingly collect any information from anyone under the age of 18. Our platform is intended for adults only.

If we become aware that a minor's information has entered our system, db8 will immediately close that account and delete all associated data.

If a parent or guardian suspects their child is using db8, please support@db8.bio. We will take prompt action.

For any questions, requests, or complaints regarding this Privacy Policy, please contact db8's privacy team:

• Email: support@db8.bio
• Live Chat: via the live chat option on the db8 website
• Response Time: Typically within 24–48 business hours

If this Privacy Policy is updated, db8 will notify all registered users via email or SMS. For significant changes, at least 14 days' advance notice will be provided.