Privacy Policy — bdt678 Platform

1. Introduction

bdt678 operates Bangladesh's trusted online casino and sports betting platform at bdt678.bid. We recognise that the personal data you entrust to us is valuable, and we take our obligations as a data processor seriously. This Privacy Policy sets out, in clear and accessible language, every aspect of how your personal information is handled from the moment you visit our website through the entire lifecycle of your account relationship with bdt678.

This policy applies to all personal data collected through the bdt678 website, mobile-optimised web experience, customer support communications, and any other channel through which you interact with bdt678. It covers data collected from registered players, prospective players who browse the platform without registering, and individuals who contact the bdt678 support team.

We encourage you to read this document carefully. If you have questions about any provision, our support team is available at [email protected] and will respond within 24 hours on any day of the year including Bangladeshi public holidays.

2. Data Controller

For the purposes of this Privacy Policy, the data controller responsible for your personal information is bdt678, operating the platform accessible at bdt678.bid. As data controller, bdt678 determines the purposes and means of processing your personal data and bears responsibility for ensuring that processing is carried out lawfully, fairly, and transparently.

All data-related enquiries, access requests, correction requests, and deletion requests should be directed to the bdt678 data protection contact at: [email protected]. Please include "Data Privacy Request" in the subject line of your email so that your query is routed to the appropriate team member without delay.

3. Personal Data We Collect

bdt678 collects personal data across several categories depending on how you interact with the platform. The table below summarises the categories of data collected and their typical sources.

Data Category	Examples	Source
Identity Data	Full legal name, date of birth, gender, government-issued ID number	Provided by you at registration or KYC verification
Contact Data	Email address, phone number, residential address	Provided by you at registration or account update
Financial Data	bKash / Nagad / Rocket / Upay account references, card BIN data, transaction amounts, deposit/withdrawal history	Generated by your transactions on the platform; provided by payment processors
KYC Documents	National ID card scans, passport scans, utility bills, selfie verification images	Provided by you during identity verification
Gaming Activity Data	Game sessions, bet amounts, win/loss history, wagering activity, bonus usage	Automatically generated by your use of the platform
Technical Data	IP address, device type, browser type, operating system, session duration, page visit logs	Automatically collected via server logs and cookies
Communications Data	Support chat transcripts, emails sent to [email protected], complaint records	Generated by your communications with the bdt678 team
Marketing Preferences	Communication opt-in/opt-out status, preferred notification channels	Provided by you in account settings or via unsubscribe links

bdt678 does not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, biometric data used for identification purposes, or health data) unless this is strictly required to fulfil a responsible gaming obligation — for example, processing a self-exclusion request that you initiate.

4. How We Collect Your Data

bdt678 collects personal data through the following mechanisms:

• Direct interactions: When you complete the registration form, submit KYC documents, make a deposit or withdrawal, contact customer support, or update your account settings, you provide data directly to bdt678.
• Automated technologies: As you navigate the bdt678 website, our servers automatically record technical data including your IP address, device identifiers, browser characteristics, and page interaction patterns. This data is collected via server logs, cookies, and similar technologies as described in section 11.
• Third-party payment processors: When you transact via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the relevant payment service provider shares transaction confirmation data with bdt678 for the purposes of crediting your account balance and maintaining accurate financial records.
• KYC and identity verification partners: Where bdt678 uses a third-party KYC verification service to validate your identity documents, that provider may share verification results and risk signals with bdt678. The underlying document data is handled in accordance with the provider's own privacy policy.
• Fraud prevention and AML services: bdt678 may receive risk scoring and fraud indicators from specialist third-party services as part of its anti-money laundering and security monitoring obligations.

5. How We Use Your Personal Data

bdt678 processes your personal data for the following specific purposes. We do not use your data for any purpose that has not been identified in this policy.

5.1 Account Management

Your identity data and contact data are used to create and maintain your bdt678 account, authenticate your login sessions, send account-related notifications (such as deposit confirmations and withdrawal status updates), and manage your account preferences including responsible gaming settings.

5.2 Payment Processing

Financial data and identity data are used to process deposits and withdrawals via the supported payment methods — bKash, Nagad, Rocket, Upay, Visa, and Mastercard — and to maintain accurate transaction records as required for financial compliance purposes.

5.3 Identity Verification (KYC)

Identity data and KYC documents are used to verify that you meet bdt678's eligibility requirements including the minimum age of 18 years, and to comply with anti-money laundering obligations that require bdt678 to confirm the identity of players before processing significant transactions.

5.4 Responsible Gaming

Gaming activity data is used to monitor player behaviour for signs of problem gambling, apply deposit limits and self-exclusion periods that you have requested, and — where bdt678's responsible gaming team has serious concerns about a player's wellbeing — proactively reach out to offer support. This processing is carried out in the genuine interest of player welfare.

5.5 Security and Fraud Prevention

Technical data, financial data, and gaming activity data are used to detect and prevent fraudulent activity, collusion, bonus abuse, money laundering, account takeover attempts, and other forms of platform abuse. This processing is essential to maintaining a fair and secure environment for all bdt678 players.

5.6 Legal and Regulatory Compliance

bdt678 processes personal data as necessary to comply with applicable laws and regulations, respond to lawful requests from competent authorities, and defend bdt678's legal position in the event of a dispute or claim.

5.7 Platform Improvement

Aggregated and anonymised technical data and gaming activity data are used to analyse platform performance, identify user experience issues, and improve the range and quality of games and services offered on bdt678. This analysis is carried out on anonymised datasets and does not result in decisions that directly affect individual players.

5.8 Marketing Communications

Where you have provided consent, bdt678 may send promotional communications about new games, seasonal offers (such as Eid or Pohela Boishakh promotions), and platform updates to your registered email address or phone number. You may withdraw consent at any time by contacting [email protected] or by updating your communication preferences in your account settings. Withdrawal of marketing consent does not affect bdt678's ability to send you transactional communications about your account.

6. Legal Basis for Processing

bdt678 processes your personal data on one or more of the following legal bases depending on the specific processing activity:

• Contractual necessity: Processing that is required to provide the services you have requested, including account creation, deposits, withdrawals, and access to games.
• Legal obligation: Processing required for bdt678 to comply with applicable anti-money laundering regulations, tax laws, and lawful requests from competent authorities.
• Legitimate interests: Processing necessary for bdt678's legitimate interests in maintaining platform security, preventing fraud, improving services, and protecting the integrity of the gaming environment — provided those interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications and certain non-essential cookies, where you have provided a clear and freely given opt-in. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7. Data Sharing with Third Parties

bdt678 does not sell, rent, or commercially transfer your personal data to any third party. We share data with the following categories of trusted partners only to the extent necessary for the purposes described in this policy:

• Payment service providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard) — for the purpose of processing financial transactions. Each provider is bound by their own privacy policy and applicable financial regulations.
• KYC and identity verification services — for the purpose of confirming your identity and age eligibility in compliance with anti-money laundering requirements.
• Fraud prevention and security services — for the purpose of detecting suspicious activity and protecting the bdt678 platform from abuse.
• Game content providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) — limited technical session data is shared to facilitate game play. These providers operate their own certified gaming infrastructure under independent regulatory oversight.
• IT infrastructure and hosting providers — for the purpose of operating and maintaining the bdt678 platform and its data storage systems, under strict data processing agreements.
• Legal and regulatory authorities — where bdt678 is legally required to disclose information in response to a lawful request, court order, or regulatory inquiry.

All third-party service providers engaged by bdt678 are required to process your data only for the specified purpose, to maintain appropriate security measures, and to comply with applicable data protection standards.

8. International Data Transfers

bdt678 primarily serves players based in Bangladesh and stores data on servers located in secure data centres. Some of bdt678's third-party service providers — including certain game providers and technical infrastructure partners — may process data in jurisdictions outside Bangladesh. Where such transfers occur, bdt678 takes reasonable steps to ensure that the receiving organisation applies data protection standards that are consistent with the protections described in this Privacy Policy, through the use of contractual data processing agreements and recognised security frameworks.

By using the bdt678 platform and accepting this Privacy Policy, you acknowledge and consent to the possibility that your data may be transferred to and processed in countries other than Bangladesh solely for the service delivery purposes described in section 7.

9. Data Retention

bdt678 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data and KYC records: Retained for the duration of your active account relationship with bdt678, and for a minimum of five years following account closure, in compliance with anti-money laundering record-keeping obligations.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction, as required for financial regulatory compliance.
• Gaming activity data: Retained for the duration of your active account and for up to two years following account closure for responsible gaming monitoring and dispute resolution purposes.
• Customer support communications: Retained for up to three years from the date of the last communication, to facilitate follow-up and to support any dispute resolution process.
• Marketing preference records: Retained until you withdraw consent or close your account, and for a short period thereafter as evidence of your historical preferences.
• Technical and log data: Retained for up to 12 months for security monitoring and platform performance analysis, then deleted or irreversibly anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual.

10. Security Measures

bdt678 implements a layered approach to data security designed to protect your personal information against unauthorised access, accidental loss, destruction, or disclosure. Key security measures in place include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and the bdt678 servers.
• Encryption at rest for stored personal data and financial records on bdt678's server infrastructure.
• Strict access controls ensuring that personal data is accessible only to bdt678 staff members and authorised service partners who have a documented operational need.
• Regular security assessments and vulnerability testing of the bdt678 platform and supporting infrastructure.
• Multi-factor authentication options available to all registered players to protect account access.
• Automated anomaly detection systems that flag unusual account activity for review by the bdt678 security team.

While bdt678 takes all reasonable and technically appropriate steps to protect your data, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in a risk to the rights and freedoms of affected individuals, bdt678 will take immediate containment steps and notify affected players without undue delay.

11. Cookies & Tracking Technologies

bdt678 uses cookies — small text files placed on your device — and similar tracking technologies to operate the platform correctly, remember your session, and analyse how the website is used. The following categories of cookies are used by bdt678:

11.1 Strictly Necessary Cookies

These cookies are essential for the bdt678 website to function. They enable core features such as maintaining your login session, remembering items in your account settings, and ensuring secure navigation through the platform. These cookies cannot be disabled without significantly impairing the functionality of the website.

11.2 Performance and Analytics Cookies

These cookies collect aggregated, anonymised information about how visitors use the bdt678 website — for example, which pages are visited most frequently and whether visitors encounter error messages. This information is used solely to improve platform performance and user experience. No personally identifiable information is collected through analytics cookies.

11.3 Functional Cookies

These cookies allow bdt678 to remember choices you have made — such as your preferred language, notification settings, and display preferences — so that you receive a more personalised experience on subsequent visits.

bdt678 does not use advertising or behavioural profiling cookies, and does not permit third-party advertising networks to place tracking cookies on the bdt678 platform. You may control or delete cookies through your browser settings at any time; however, disabling strictly necessary cookies may affect the operation of your bdt678 account.

12. Your Data Protection Rights

As an individual whose personal data is processed by bdt678, you have the following rights with respect to your information. To exercise any of these rights, please contact [email protected] with the subject line "Data Privacy Request". bdt678 will respond to all valid requests within 30 calendar days.

• Right of Access: You have the right to request a copy of all personal data that bdt678 holds about you, together with information about how that data is being processed.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data held by bdt678 be corrected without undue delay. You may also update some account information directly through your bdt678 account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and there is no other legal basis for processing, or where the data has been processed unlawfully. This right is subject to bdt678's legal obligation to retain certain records for minimum statutory periods.
• Right to Restriction of Processing: You have the right to request that bdt678 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to Data Portability: You have the right to receive personal data that you have provided to bdt678 in a structured, commonly used, machine-readable format, and to transmit that data to another data controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data on the basis of legitimate interests, and to object at any time to the use of your data for direct marketing purposes. Where you object to marketing, bdt678 will cease processing for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

13. Children and Minors

The bdt678 platform is strictly intended for adults aged 18 years and above. bdt678 does not knowingly collect personal data from individuals under the age of 18. Registration is subject to age verification, and bdt678 may request documentary proof of age at any stage of the player relationship.

If bdt678 becomes aware that personal data has been collected from an individual under the age of 18 — whether through a false declaration at registration or by any other means — that data will be deleted immediately, the associated account will be closed, any deposits made will be returned to the original payment method, and any winnings generated will be voided. If you have reason to believe that a minor has registered an account on bdt678, please notify the support team at [email protected] without delay.

14. Changes to This Privacy Policy

bdt678 reviews this Privacy Policy periodically and reserves the right to update it to reflect changes in our data processing practices, applicable law, or platform functionality. The version number and effective date shown at the top of this document are definitive indicators of the current version.

Where changes are material — meaning they significantly affect how your personal data is processed or your rights in relation to that data — bdt678 will notify registered players by email to their registered address and/or via an in-platform notification before the changes take effect. Minor amendments such as typographical corrections or clarifications of existing provisions may be made without advance notice.

The current version of this Privacy Policy is always available at bdt678.bid/privacy-policy. Your continued use of the bdt678 platform following any update constitutes your acceptance of the revised policy.

15. Contact & Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or bdt678's handling of your personal data, please contact the bdt678 data protection team using the details below. The support team is available 24 hours a day, 7 days a week, including Bangladeshi public holidays such as Eid, Pohela Boishakh, Victory Day (December 16), and Independence Day (March 26).

Data protection email: [email protected]

Please use the subject line "Data Privacy Request" so your message is directed to the appropriate team without delay. For access requests, correction requests, or deletion requests, please include your registered username and a brief description of your request. bdt678 aims to acknowledge all privacy-related enquiries within 2 business hours and to provide a full response within 30 calendar days.