Privacy Policy — bd678a Platform

bd678a operates as an online casino and sports betting platform serving players in Bangladesh. For any privacy-related queries, requests, or concerns, please contact our data team at [email protected] (plain text — not a clickable link). We operate on Bangladesh Standard Time (BST, UTC+6) and aim to respond to all privacy enquiries within 5 business days.

This Policy applies to all services offered by bd678a, including the casino, sports betting, crash games, slots, live dealer tables, and the wallet and deposit/withdrawal infrastructure.

bd678a collects personal data through a number of channels — directly from you when you register or interact with the platform, automatically when you browse or play, and occasionally from trusted third-party verification partners. Specifically, we collect:

• Registration data: When you create an account on bd678a, you provide your name, date of birth, email address, and mobile number. This information is mandatory to establish and verify your account.
• Identity verification data: To comply with our 21+ age restriction and anti-fraud obligations, we may request a copy of a government-issued identification document (such as a National Identity Card or passport) and a selfie for verification purposes.
• Payment and transaction data: When you deposit or withdraw using bKash, Nagad, Rocket, Upay, or other approved methods, we record the mobile wallet account number, transaction reference, amount in Bangladeshi Taka (৳), and timestamp associated with each transaction. We do not store full card numbers for card-based payments — card processing is handled by the payment gateway.
• Device and technical data: We automatically collect your IP address, browser type and version, operating system, device model, screen resolution, and time-zone setting each time you access the platform. This data helps us detect suspicious login activity and prevent unauthorised access.
• Behavioural and usage data: We log which pages you visit, which games you play, your session start and end times, and the bets you place. This data is used to improve the platform and to monitor for signs of problem gambling in line with our Responsible Gaming commitments.
• Communications and support data: If you contact our support team, we retain the content of that communication — including emails, chat transcripts, and ticket details — for quality assurance, dispute resolution, and compliance purposes.
• Cookie and tracking data: bd678a uses cookies and similar tracking technologies. See Section 8 of this Policy for full details.

bd678a processes your personal data only for lawful, specific purposes. We do not use your data in ways that are incompatible with the reasons for which it was originally collected. Our processing activities include:

• Account management: Creating, maintaining, and securing your bd678a account, including processing login requests and password resets.
• Age and identity verification: Confirming that you meet the 21+ age requirement and that your identity matches the details provided at registration.
• Transaction processing: Facilitating deposits and withdrawals in BDT via your chosen payment method and maintaining an accurate record of your account balance and transaction history.
• Fraud prevention and security: Analysing login patterns, device fingerprints, and transaction behaviour to detect and prevent unauthorised account access, money laundering, and bonus abuse.
• Platform improvement: Using aggregated, anonymised usage data to understand how players interact with bd678a, identify technical issues, and prioritise product improvements.
• Responsible gaming monitoring: Reviewing player activity patterns to identify accounts that may show signs of excessive or harmful gambling, and proactively offering support tools where appropriate.
• Customer support: Responding to your queries, resolving disputes, and providing account assistance in a timely and accurate manner.
• Regulatory compliance: Retaining records as required by applicable financial regulations and cooperating with lawful requests from competent authorities.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to opted-in players. You may opt out of marketing emails at any time by contacting [email protected].

bd678a processes your personal data on the following legal grounds, depending on the nature of the processing activity:

• Contractual necessity: Processing required to perform our contract with you — that is, to operate your account, process your bets, and fulfil deposit and withdrawal requests.
• Consent: Where you have freely and explicitly given consent — for example, opting into marketing emails or agreeing to the use of optional cookies when registering.
• Legitimate interests: Where processing is necessary to pursue our legitimate business interests — including fraud detection, platform security, and responsible gaming monitoring — provided those interests are not overridden by your rights and freedoms.
• Legal obligation: Where processing is required to comply with applicable laws and regulations, including anti-money-laundering obligations and lawful authority requests.

Where we rely on consent as our legal basis, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

bd678a does not sell your personal data to third parties. We share data only where necessary, and only with the categories of recipients listed below:

• Payment processors: bKash, Nagad, Rocket, Upay, and card payment gateways receive the transaction data required to process your deposits and withdrawals. These providers process your data under their own privacy policies and security frameworks.
• Identity verification providers: Third-party KYC (Know Your Customer) and age-verification services may receive copies of identification documents you submit in order to confirm your eligibility to use bd678a.
• Game providers: Software providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe receive your account identifier and relevant session data to load and run games. They do not receive your full identity or payment details.
• Fraud prevention and analytics services: Trusted security partners may receive anonymised or pseudonymised technical data (device fingerprints, IP addresses) to assist in detecting fraudulent activity across the platform.
• Legal and regulatory authorities: bd678a may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies when required by law or in response to a lawful, documented request.

All third-party service providers who process data on our behalf are required to handle that data securely and to use it solely for the purposes for which it was shared. bd678a does not knowingly share personal data with parties based in jurisdictions that do not provide an adequate level of data protection.

bd678a retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and to comply with applicable legal retention obligations. Our general retention guidelines are as follows:

• Active account data: Retained for the full duration of your account's active status plus a minimum of five years after account closure, to satisfy financial record-keeping requirements.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• Identity verification documents: Retained for as long as legally required following account closure, typically five years.
• Support communications: Retained for two years from the date of the last interaction, unless the matter relates to an ongoing dispute, in which case they are retained until full resolution.
• Marketing consent records: Retained until you withdraw consent and for a reasonable period thereafter as proof of your original consent.

When personal data is no longer required, bd678a securely deletes or anonymises it so that it can no longer be associated with you as an individual.

As a data subject, you have the following rights in relation to the personal data bd678a holds about you. To exercise any of these rights, contact us at [email protected]:

• Right of access: Request a copy of the personal data we hold about you, along with information about how and why it is processed.
• Right to rectification: Request correction of any inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restriction: Request that we limit processing of your data in certain circumstances — for example, while we investigate a data accuracy dispute.
• Right to data portability: Request a structured, machine-readable copy of the personal data you have provided to us, where technically feasible.
• Right to object: Object to processing based on our legitimate interests, including direct marketing. We will honour objections to marketing immediately.
• Right to withdraw consent: Withdraw any consent you have previously given for data processing, without affecting the lawfulness of prior processing.

We will respond to all verified data rights requests within 30 days. In complex cases we may extend this period by a further 60 days, notifying you of the extension within the initial 30-day window. We may need to verify your identity before actioning a request to protect against fraudulent submissions.

bd678a uses cookies — small text files placed on your device — and similar tracking technologies to operate the platform effectively. The types of cookies we use include:

• Strictly necessary cookies: Required for core platform functions such as keeping you logged in during a session. These cannot be disabled without breaking the platform.
• Functional cookies: Remember your preferences — such as language or display settings — to personalise your experience.
• Analytics cookies: Collect anonymised data about how players navigate the platform, which pages are most visited, and where technical errors occur. This data is used solely to improve the platform.
• Security cookies: Help us detect and prevent suspicious activity such as bot traffic, credential stuffing, and session hijacking.

You can manage or delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will impair your ability to use bd678a. bd678a does not use advertising or retargeting cookies to serve ads on third-party websites.

bd678a is an adult platform strictly for players aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on bd678a, please notify us immediately at [email protected].

bd678a implements a range of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These include:

• SSL/TLS encryption for all data transmitted between your device and our servers.
• Secure password hashing using industry-standard algorithms; plain-text passwords are never stored.
• Access controls ensuring that only authorised staff with a legitimate business need can access personal data.
• Regular security assessments and vulnerability monitoring of our platform infrastructure.
• Fraud detection systems that flag abnormal login behaviour and transaction patterns in real time.

While we apply best-practice security measures, no online platform can guarantee absolute security. If you suspect that your bd678a account has been compromised, contact our support team at [email protected] immediately so we can lock the account and investigate.

bd678a reserves the right to update this Privacy Policy at any time. When material changes are made, we will update the "Last Updated" date at the top of this page. For significant changes that affect how we use your data, we may also notify registered players directly via email. Continued use of the platform following a policy update constitutes acceptance of the revised terms. We recommend reviewing this page periodically to stay informed.

This Privacy Policy should be read alongside the bd678a Terms & Conditions and our Responsible Gaming policy, both of which form part of the overall agreement between you and bd678a. In the event of any conflict between this Policy and the Terms & Conditions on a privacy-specific matter, this Policy shall prevail.