Privacy Policy — bd678b Data Commitment

1 Introduction

This Privacy Policy ("Policy") describes how bd678b ("we", "us", "our", or "the Platform") collects, uses, stores, shares, and protects personal information provided by individuals ("you", "the Player") who visit, register on, or use any feature of the bd678b website located at https://bd678b.net and all associated services.

bd678b operates as an online casino and sports betting platform serving players in Bangladesh. We are fully aware of the trust you place in us when you share your personal data, and we take that responsibility seriously. Every data handling practice described in this Policy is designed to balance the legitimate operational needs of the Platform with your fundamental right to privacy.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy. Together, these three documents form the complete legal framework governing your relationship with bd678b. If you have any questions about any aspect of this Policy, please contact us before using the Platform. Our contact details are provided in Section 14 of this document.

2 Data Controller

For the purposes of applicable data protection law, bd678b acts as the data controller in respect of all personal data collected through the Platform. As data controller, bd678b determines the purposes and means of processing personal data submitted by registered players and visitors.

All data processing activities carried out by bd678b are conducted in accordance with the principles of lawfulness, fairness, and transparency. We process only the data necessary for the specified purposes described in this Policy, and we do not retain personal data for longer than is required to fulfil those purposes or comply with applicable legal obligations.

3 Data We Collect

bd678b collects personal data through several channels, including your account registration, ongoing platform use, payment transactions, customer support interactions, and technical data generated automatically by your device and browser. The categories of data we collect are set out in the table below.

Data Category	Specific Examples	Collection Method
Identity Data	Full name, date of birth, national ID or passport number, photograph (for KYC)	Registration form; KYC verification upload
Contact Data	Mobile phone number, email address, residential address (city, district)	Registration form; account settings
Financial Data	bKash / Nagad / Rocket / Upay account numbers, bank account details, transaction history, deposit and withdrawal records	Payment processing; transaction logs
Account Data	Username, encrypted password hash, account balance, bonus history, bet history, game play history	Platform activity logs
Technical Data	IP address, device type, operating system, browser type and version, session duration, pages visited	Automatic collection via cookies and server logs
Communications Data	Live chat transcripts, support email content, feedback submissions	Customer support interactions
Responsible Gaming Data	Deposit limit settings, self-exclusion status, cooling-off period records, session time alerts	Responsible gaming dashboard; support requests

We do not collect any special categories of sensitive personal data (such as racial or ethnic origin, religious beliefs, health data, or biometric data) other than where expressly required for age verification purposes as part of our mandatory Know Your Customer (KYC) process.

4 How We Use Your Data

bd678b uses the personal data we collect for a range of clearly defined purposes. We do not use your data for purposes that are incompatible with the original reason it was collected. The primary purposes for which we process your personal data are as follows:

• Account Creation and Management: To create and maintain your bd678b player account, verify your identity, and enable you to use all platform features following a successful bd678b login.
• Payment Processing: To process your deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and connected banking partners. Financial data is handled securely and is never stored in plain text.
• Identity Verification (KYC): To comply with our legal obligations to verify player identity, confirm minimum age (18+), and prevent fraud, money laundering, and financial crime.
• Customer Support: To respond to your enquiries, resolve account issues, process responsible gaming requests, and maintain records of communications for quality assurance.
• Platform Security: To detect and prevent fraudulent activity, duplicate accounts, bonus abuse, unauthorised access, and other prohibited conduct as described in our Terms & Conditions.
• Responsible Gaming Compliance: To administer and enforce deposit limits, loss limits, cooling-off periods, and self-exclusion requests in accordance with our Responsible Gaming Policy.
• Service Improvement: To analyse aggregated, anonymised usage patterns and technical data for the purpose of improving the bd678b platform, game selection, and user experience.
• Legal Compliance: To meet any legal, regulatory, or law enforcement obligations that require us to retain, disclose, or report certain categories of data.

5 Legal Basis for Processing

bd678b processes your personal data only where a valid legal basis exists for doing so. The legal bases we rely upon for the various categories of processing are:

• Contractual Necessity: Processing required to perform our contractual obligations to you under the Terms & Conditions — including account management, payment processing, and game provision.
• Legal Obligation: Processing required to comply with applicable laws — including anti-money laundering (AML) rules, age verification requirements, and fraud prevention obligations.
• Legitimate Interests: Processing conducted for the legitimate business interests of bd678b — including platform security, fraud detection, responsible gaming administration, and service improvement — where those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — principally for marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Data Sharing & Third Parties

bd678b does not sell or rent your personal data to any third party. However, in the course of operating the Platform, we may share certain categories of your data with the following types of trusted third parties, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive the financial data necessary to process your deposit and withdrawal transactions. Each provider operates under its own data protection obligations.
• Game Technology Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data necessary to deliver their game software within the bd678b platform environment.
• Identity Verification Partners: Third-party KYC and AML service providers may process identity documents and verification data on our behalf to fulfil our legal age verification and fraud prevention obligations.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, courts, or regulatory bodies where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of bd678b, our players, or third parties.
• IT Infrastructure Providers: Hosting, cloud storage, and cybersecurity service providers may process technical data on our behalf under strict contractual data processing agreements that prohibit independent use of your data.

All third-party data processors engaged by bd678b are required to handle your personal data securely, use it only for the specified purpose, and comply with applicable data protection standards. We do not permit third-party processors to use your data for their own commercial purposes.

7 Cookies & Tracking Technologies

bd678b uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. Cookies allow the Platform to recognise your browser across sessions, maintain your login state, and analyse how pages are used.

The types of cookies used on the bd678b Platform include:

• Essential Cookies: Required for the Platform to function correctly. These include session authentication cookies that keep you logged in after a successful bd678b login and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without significantly impairing your experience.
• Functional Cookies: Used to remember your preferences, such as language settings and game display options. These are not strictly necessary but improve usability.
• Analytics Cookies: Used to collect anonymised data about how players navigate the Platform — including pages visited, time on site, and features used. This information helps bd678b identify areas for improvement. No personally identifiable data is included in analytics reports.
• Security and Fraud Detection Cookies: Used to identify unusual account activity patterns, detect bot behaviour, and prevent fraudulent login attempts.

You may control cookie settings through your browser preferences. Disabling certain cookies may affect the functionality of the bd678b Platform. bd678b does not use third-party advertising or behavioural targeting cookies.

8 Data Retention

bd678b retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The general retention periods we apply are as follows:

• Active Account Data: Retained for the duration of your account's active status plus a period of five (5) years following account closure, to satisfy AML record-keeping requirements.
• Transaction and Financial Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial crime prevention obligations.
• KYC Verification Documents: Retained for five (5) years following account closure or the completion of the relevant KYC review, whichever is later.
• Customer Support Communications: Retained for two (2) years from the date of the interaction, unless the communication relates to an ongoing dispute or legal matter requiring longer retention.
• Technical and Analytics Data: Anonymised technical data may be retained indefinitely for aggregate analysis. Non-anonymised technical data (such as IP address logs) is retained for no longer than twelve (12) months.
• Responsible Gaming Records: Self-exclusion and cooling-off records are retained for the duration of the applicable restriction period plus a minimum of two (2) years thereafter.

When personal data is no longer required, bd678b securely deletes or anonymises it in a manner that prevents reconstruction of any personally identifiable information.

9 Security Measures

bd678b implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following controls:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and bd678b servers is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Password Hashing: Account passwords are never stored in plain text. We use a strong one-way cryptographic hashing algorithm to store password credentials securely.
• Access Controls: Strict role-based access controls ensure that personal data is accessible only to authorised bd678b staff with a documented business need.
• Intrusion Detection: Our infrastructure is monitored continuously for suspicious activity, unauthorised access attempts, and anomalous data patterns.
• Regular Security Audits: bd678b conducts periodic security reviews of its platform architecture, data handling procedures, and third-party integrations to identify and address vulnerabilities proactively.
• Data Minimisation at Rest: Sensitive fields such as payment account numbers are masked in our internal systems so that full details are only visible to the specific processes that require them.

10 Your Privacy Rights

As a bd678b player whose personal data we process, you hold the following rights in relation to your information. To exercise any of these rights, please contact us at [email protected]. We will respond to all verified requests within 30 days.

• Right of Access: You have the right to request a copy of the personal data bd678b holds about you, along with information about how it is being processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure: You may request that bd678b delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that we cannot delete data we are legally required to retain.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to Data Portability: Where processing is based on your consent or on a contractual basis and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for marketing purposes. Where you object to marketing, we will cease processing your data for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

11 Minors & Age Policy

The bd678b Platform is strictly intended for adults aged 18 years and above. We do not knowingly collect, store, or process personal data from individuals under the age of 18. If you are under 18, you must not attempt to register an account, access any gambling feature, or submit personal data through any part of the bd678b Platform.

If bd678b discovers that personal data belonging to a person under the age of 18 has been collected — whether through misrepresentation during registration or any other means — we will take immediate steps to suspend the associated account, delete the personal data in question, and void any account balance or associated winnings. Parents or guardians who believe their child has created a bd678b account should contact us immediately at [email protected].

12 International Data Transfers

bd678b primarily processes and stores player data on servers located within or accessible from the Asia-Pacific region. In certain circumstances, particularly where we engage third-party technology providers for services such as game delivery, payment processing, or cybersecurity, your data may be processed in jurisdictions outside Bangladesh.

Where such international transfers occur, bd678b takes reasonable steps to ensure that the receiving party provides an adequate level of data protection, either through standard contractual clauses, binding corporate rules, or equivalent safeguards. We do not transfer personal data to countries or territories that we determine do not offer an adequate level of protection for personal data without first implementing appropriate protective measures.

13 Changes to This Privacy Policy

bd678b reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or Platform features. When we make material changes to this Policy, we will notify registered players via the email address associated with their bd678b account and display a prominent notice on the Platform for a minimum of 14 days following the update.

The date at the top of this page always reflects the most recent revision. We encourage you to review this Policy periodically to remain informed about how bd678b protects your data. Your continued use of the Platform following publication of an updated Policy constitutes your acceptance of the revised terms. If you do not agree to any changes, you may close your account by contacting our support team.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data bd678b holds about you, please reach out to our dedicated privacy support team. We are committed to addressing all privacy-related matters promptly and transparently.

You may contact bd678b's privacy support team by email at: [email protected]

Our customer support team is available 24 hours a day, 7 days a week, operating on Bangladesh Standard Time (BST, UTC+6). For general account queries, you may also use the live chat function available after bd678b login. All formal privacy requests — including data access, rectification, erasure, and portability requests — should be submitted via email with the subject line "Privacy Request" to ensure they are directed to the appropriate team member.