bd678bt Privacy
Policy

This Privacy Policy ("Policy") applies to all users of the bd678bt platform and describes in clear, plain English how bd678bt ("we", "us", "our") collects, uses, stores, and protects personal information. By registering an account or continuing to use bd678bt, you acknowledge that you have read and understood this Policy. This Policy forms part of the wider agreement between you and bd678bt, alongside our Terms & Conditions and our Responsible Gaming policy.

bd678bt is committed to safeguarding the privacy of players in Bangladesh. We process personal data only to the extent necessary to provide our services, fulfil legal obligations, and protect the integrity and security of the platform. We do not process personal data for purposes incompatible with those described in this Policy.

1. Data We Collect

bd678bt collects personal data through several channels: directly from you when you register or interact with the platform, automatically as you browse the site, and from third-party payment providers when you complete a transaction. The categories of data we collect are described below.

1.1 Registration and Account Data

When you create an account on bd678bt, we collect the following information:

• Full legal name (as it appears on your government-issued identification)
• Date of birth (to verify that you are 18 years of age or older)
• Residential address (city, district, and country — Bangladesh)
• Email address
• Mobile phone number
• Username and encrypted password
• Preferred currency (BDT by default for Bangladesh players)

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, we may collect and securely store copies of:

• Bangladesh National Identity Card (NID) or passport
• Proof of address (utility bill, bank statement, or mobile financial service statement issued within the past three months)
• Proof of payment method ownership (e.g., a screenshot confirming your bKash, Nagad, or Rocket account is registered in your name)
• A selfie or live photo for identity matching purposes, where required

1.3 Financial Transaction Data

When you make a deposit or request a withdrawal, we record transaction details including the payment method used (bKash, Nagad, Rocket, Upay), transaction reference number, amount in BDT, date and time, and transaction status. We do not store full bKash or Nagad PIN numbers. Payment processing is handled via secure third-party payment gateways, and bd678bt receives only the transaction confirmation data necessary to credit or debit your account.

1.4 Usage and Behavioural Data

As you use bd678bt, we automatically collect certain technical and behavioural data, including:

• IP address and approximate geographic location (country and city level)
• Device type, operating system, and browser version
• Pages visited, time spent on each page, and navigation paths through the platform
• Games played, bet amounts, session duration, and game outcomes
• Login and logout timestamps
• In-platform search queries and filter selections

This data is used to maintain platform security, detect suspicious or fraudulent activity, improve user experience, and meet our responsible gaming obligations — for example, to identify patterns of play that may indicate a problem gambling risk.

1.5 Communication Data

If you contact our support team via live chat or email, we retain records of those communications, including the content of your messages, timestamps, and the resolution provided. This data is used to resolve disputes, improve service quality, and maintain a record of interactions relevant to your account.

2. How We Use Your Data

bd678bt processes personal data only for specific, lawful purposes. We do not use your data for purposes beyond those listed here without first obtaining your explicit consent.

2.1 Providing and Operating the Platform

The primary purpose for which we process your personal data is to create and manage your account, process deposits and withdrawals in BDT, settle bets and casino game outcomes, provide customer support, and operate bd678bt as a functioning platform. Without this processing, we would be unable to deliver the service to you.

2.2 Identity Verification and Fraud Prevention

We are legally and operationally required to verify the identity of all players before processing withdrawals. KYC data is used to confirm that you are who you say you are, that you are 18 years of age or older, and that your account activity is consistent with legitimate recreational gambling. Usage data — including IP addresses and device fingerprints — is analysed to detect and prevent account fraud, identity theft, money laundering, and multi-accounting.

2.3 Responsible Gaming Monitoring

bd678bt takes its responsible gaming obligations seriously. We use your gameplay data — including session duration, frequency of play, bet sizes, and win/loss patterns — to identify indicators of problem gambling behaviour. Where such indicators are detected, our responsible gaming team may proactively reach out to you, apply temporary limits, or flag your account for review. This processing is carried out in your interest and in fulfilment of our platform safety commitments. For more information, see our Responsible Gaming page.

2.4 Legal and Regulatory Compliance

bd678bt may be required by applicable law, court order, or regulatory authority to retain or disclose certain personal data. We will comply with any valid legal obligation to disclose data, and we will notify affected players where we are legally permitted to do so.

2.5 Service Improvement and Analytics

Aggregated and anonymised usage data is used to analyse platform performance, identify popular features, understand player navigation patterns, and inform product development decisions. This processing does not identify you as an individual and uses data only in aggregate statistical form.

2.6 Marketing Communications

Where you have given explicit consent during registration or through your account settings, bd678bt may send you promotional communications about new games, bonuses, seasonal offers (such as Eid promotions, BPL cricket specials, or Pohela Boishakh offers), and platform updates. You may withdraw your marketing consent at any time without affecting your ability to use the platform. We do not send unsolicited marketing communications to players who have not opted in.

3. Cookies & Tracking Technologies

bd678bt uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and gather analytical insights about site usage. This section explains what cookies we use and how you can manage them.

3.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the site to remember information about your visit — such as your preferred language, login status, or items in a cart — so that your next visit is faster and the site is more useful to you. Cookies cannot execute code or deliver viruses and are not harmful to your device.

3.2 Types of Cookies We Use

• Strictly Necessary Cookies: These are essential for the platform to function. They manage your login session, maintain your account security token, and ensure that your bets and game sessions are correctly attributed to your account. These cookies cannot be disabled without breaking core platform functionality.
• Analytical / Performance Cookies: These cookies collect anonymised information about how visitors use bd678bt — such as which pages are visited most frequently, how long players spend on the casino lobby, and which device types are most common. This data helps us improve the platform. These cookies do not identify you personally.
• Functionality Cookies: These cookies remember your preferences — such as your preferred game category, display language (English), or notification settings — so that you do not need to re-select them every time you visit.
• Security Cookies: Used to detect and prevent fraudulent activity, including bot traffic, brute-force login attempts, and session hijacking. These are essential for platform integrity.

3.3 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to block, delete, or restrict specific types of cookies. Please note that disabling strictly necessary cookies will impair your ability to log in to bd678bt or place bets. Instructions for managing cookies in popular browsers are available on the respective browser help pages. bd678bt does not respond to browser "Do Not Track" signals, as no industry standard for such signals currently exists.

4. Data Sharing & Third Parties

bd678bt does not sell your personal data. We share personal data with third parties only in the specific, limited circumstances described below.

4.1 Payment Processing Partners

To process your deposits and withdrawals, bd678bt shares the minimum necessary transaction data with payment gateway providers supporting bKash, Nagad, Rocket, and Upay. These providers receive only the data required to complete or verify the transaction (such as your registered mobile number and transaction reference) and are contractually prohibited from using that data for any purpose other than processing the payment.

4.2 Game Software Providers

Games on bd678bt are delivered under licence from third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game powered by one of these providers, certain technical data (such as a session token, your bet amount, and game outcome) is exchanged between bd678bt and the game provider's servers to ensure that results are correctly recorded and displayed. Game providers are not permitted to use this data to personally identify you or to contact you directly.

4.3 Identity Verification Services

bd678bt may use third-party identity verification services to assist with KYC checks. Where this occurs, only the data required for the specific verification check is shared (for example, a scanned copy of your NID or passport). Verification partners operate under strict data processing agreements and are required to handle your documents with the same standard of care as bd678bt itself.

4.4 Legal Disclosure

bd678bt may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, a valid court order, or to protect the rights, property, or safety of bd678bt, its players, or the public. We will disclose only the minimum data necessary to satisfy the legal requirement and will notify affected players where we are legally permitted to do so.

4.5 Business Transfers

In the event that bd678bt undergoes a merger, acquisition, or sale of assets, personal data held on the platform may be transferred to the acquiring entity as part of that transaction. Affected players will be notified prior to any such transfer, and the new entity will be bound by this Privacy Policy or a policy that provides equivalent protections.

5. Data Retention

bd678bt retains personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal obligations, and to resolve disputes or enforce our agreements. The following retention periods apply as a general guide.

5.1 Active Account Data

Personal data associated with an active bd678bt account is retained for the lifetime of that account. Account data includes your registration details, KYC documents, transaction history, and gameplay records. This data is necessary to operate your account, process payments, and fulfil our responsible gaming and anti-fraud obligations.

5.2 Data After Account Closure

Following the closure of your bd678bt account — whether initiated by you or by bd678bt — we retain your personal data for a minimum of five (5) years after the date of closure. This retention period reflects standard anti-money laundering and record-keeping obligations that require platforms to retain player data for a defined period after the end of the business relationship. After the applicable retention period has elapsed, your data is securely deleted or anonymised.

5.3 Support Communication Records

Records of support communications (live chat transcripts and email correspondence) are retained for a period of three (3) years from the date of the communication. This period allows us to reference previous interactions when resolving disputes and to maintain a record of any responsible gaming interventions made in connection with your account.

5.4 Marketing Data

If you have opted in to receive marketing communications from bd678bt, we retain your marketing consent record and associated contact details for as long as you remain opted in. If you withdraw your marketing consent, we immediately cease sending promotional communications and retain only a record of your opt-out (to ensure we do not accidentally contact you again) for a period of three (3) years.

6. Data Security

Protecting your personal data is a core operational priority at bd678bt. We implement a range of technical and organisational measures to safeguard the data we hold against unauthorised access, loss, destruction, or disclosure.

6.1 Encryption

All data transmitted between your browser or mobile device and bd678bt servers is encrypted using TLS 1.3, the current industry standard for transport-layer security. Sensitive data at rest — including KYC documents, account passwords (stored as salted hashes), and financial records — is encrypted using AES-256 encryption within our database infrastructure.

6.2 Access Controls

Access to personal data held by bd678bt is restricted on a strict need-to-know basis. Internal staff members are granted access only to the categories of data required to perform their specific role. Access to KYC documents and financial records is additionally logged and audited. Administrative access to platform systems requires multi-factor authentication (MFA).

6.3 Incident Response

In the unlikely event of a data breach that poses a risk to your rights and freedoms, bd678bt will notify affected players promptly and without undue delay. Our security team conducts regular vulnerability assessments and penetration tests to identify and remediate potential weaknesses in the platform before they can be exploited.

6.4 Your Responsibilities

While bd678bt takes every reasonable precaution to protect your data at our end, you also play an important role in keeping your account secure. You should use a strong, unique password for your bd678bt account that is not shared with any other platform, enable any two-factor authentication options available in your account settings, and never share your login credentials with any third party. If you suspect that your account has been accessed without authorisation, contact our support team immediately via live chat.

7. Your Privacy Rights

As a player on bd678bt, you hold the following rights in relation to the personal data we process about you. To exercise any of these rights, please contact our support team using the details in Section 8 below.

7.1 Right to Access

You have the right to request a copy of the personal data that bd678bt holds about you. We will provide this information in a clear, readable format within 30 days of receiving your verified request. We may ask you to confirm your identity before fulfilling an access request to ensure that we do not disclose your data to an unauthorised party.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly from within your account settings. For changes to KYC-verified information (such as your legal name or date of birth), you will need to provide supporting documentation and contact our support team.

7.3 Right to Erasure

You may request that bd678bt delete the personal data we hold about you. This right is not absolute — we are required by law to retain certain categories of data (such as transaction records and KYC documents) for defined periods even after account closure. Where erasure is not possible due to a legal retention obligation, we will inform you of the specific reason and the earliest date on which that data can be deleted.

7.4 Right to Restrict Processing

In certain circumstances — for example, where you contest the accuracy of data we hold, or where you have objected to processing and that objection is under review — you may request that we restrict our processing of your personal data. During a restriction period, we will continue to store your data but will not actively process it except to maintain the restriction itself or as required by law.

7.5 Right to Object to Marketing

You have an unconditional right to object to the use of your personal data for direct marketing purposes at any time. You may exercise this right by updating your communication preferences in your account settings, clicking the unsubscribe link in any marketing email from bd678bt, or by contacting our support team. We will action your request immediately and no further marketing communications will be sent.

7.6 Right to Data Portability

Where technically feasible, you have the right to request that bd678bt provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service. This right applies to data that you have provided directly to us and that we process on the basis of your consent or in performance of our contract with you.

8. Contact & Privacy Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how bd678bt handles your personal information, please contact us using the details below. All privacy-related requests and queries are handled by our dedicated compliance team.

8.1 How to Contact Us

The fastest way to reach our compliance team for privacy matters is via the live chat function available on the bd678bt platform, which operates 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6). Alternatively, you may email us at support@bd678bt with the subject line "Privacy Request" and a description of your query or the right you wish to exercise.

8.2 Response Timeframes

bd678bt will acknowledge all privacy requests within 5 business days of receipt and will provide a full response within 30 calendar days. In cases where the complexity or volume of requests requires additional time, we will notify you within the initial 30-day period and provide an estimated completion date. No fee is charged for privacy requests unless they are manifestly unfounded or excessive.

8.3 Policy Updates

bd678bt may update this Privacy Policy from time to time to reflect changes in platform functionality, legal requirements, or data processing practices. When material changes are made, we will notify registered players via in-platform notification or email. The effective date at the top of this document reflects the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how we protect your data.