bd7678 Privacy Policy

At bd7678, we understand that trust is the foundation of everything we do. Players across Bangladesh — from Dhaka and Chittagong to Sylhet, Rajshahi, Khulna, and Barisal — share personal and financial information with us every day. We take that responsibility seriously and are committed to being fully transparent about how that information is handled.

This Privacy Policy applies to all personal data collected through the bd7678 website at https://bd7678.app, including all account management pages, game interfaces, payment screens, and customer support channels. It should be read alongside our Terms & Conditions, which govern the overall relationship between you and bd7678.

1. Data Controller

For the purposes of this Privacy Policy, bd7678 acts as the data controller in respect of the personal data it collects from Players and site visitors. This means that bd7678 determines the purposes and means by which your personal data is processed.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which your personal data is handled, you may contact our Data Protection team at any time using the contact details provided at the end of this document.

2. Personal Data We Collect

The categories of personal data that bd7678 may collect about you include, but are not limited to, the following:

We do not intentionally collect sensitive personal data (such as racial or ethnic origin, religious beliefs, health information, or biometric data) unless specifically required for identity verification or responsible gaming purposes and only with your explicit consent.

3. How We Collect Your Personal Data

bd7678 collects personal data through the following channels:

• Direct interactions: Data you provide when registering for an Account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to a survey or promotion.
• Automated technologies: Data collected automatically as you navigate the Platform, including cookies, session logs, IP address records, and device fingerprinting used for fraud prevention and security monitoring.
• Third-party sources: Data received from payment processors (such as bKash, Nagad, Rocket, and Upay) to confirm transaction status; identity verification service providers used during KYC checks; and fraud detection partners.
• Publicly available sources: In limited circumstances, bd7678 may cross-reference publicly available information (such as sanction lists or politically exposed person (PEP) databases) for anti-money-laundering compliance purposes.

4. How We Use Your Personal Data

bd7678 processes personal data only where there is a lawful basis for doing so. The primary lawful bases we rely on are: contractual necessity (to provide the Platform services you have requested), legal obligation (to comply with applicable laws and regulations), legitimate interests (to protect the Platform's security and integrity), and consent (for optional marketing communications).

Specifically, your personal data is used for the following purposes:

• To create, manage, and maintain your bd7678 Account.
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods.
• To verify your identity and age in compliance with our KYC obligations (players must be 21 years or older).
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities.
• To monitor betting patterns for responsible gaming purposes and to apply account restrictions where a player may be at risk.
• To respond to your customer support queries and complaints in a timely manner.
• To send you transactional communications, including deposit confirmations, withdrawal notifications, and important account alerts.
• To send you promotional communications about bd7678 bonuses, tournaments, and seasonal offers — only where you have opted in to receive such communications.
• To improve the Platform's features, performance, and user experience through aggregated, anonymised analytics.
• To comply with applicable laws, regulatory requirements, and any lawful requests from competent authorities.

5. Sharing Your Personal Data

bd7678 does not sell your personal data. We may share your data with the following categories of third parties, strictly on a need-to-know basis and subject to binding data processing agreements:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard — to facilitate your deposit and withdrawal transactions.
• Identity verification providers: Third-party KYC and age verification services used to confirm that Players meet our eligibility requirements.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised session data necessary to deliver game content; they do not receive your personally identifiable information.
• Fraud prevention and security partners: Services that help bd7678 detect unusual activity, prevent account takeover, and identify potential money laundering.
• IT and hosting providers: Cloud infrastructure and server hosting partners who store Platform data under strict security controls and confidentiality obligations.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by law, court order, or regulatory direction.

Where personal data is transferred to a third party located outside Bangladesh, bd7678 will ensure that appropriate safeguards are in place to protect your data, including contractual data protection clauses consistent with internationally recognised standards.

6. Cookies & Tracking Technologies

bd7678 uses cookies and similar technologies (including local storage and session storage) on the Platform. These technologies serve the following purposes:

• Essential cookies: Required for the Platform to function correctly. These include session authentication tokens, load-balancing cookies, and security cookies. You cannot opt out of essential cookies while using the Platform.
• Analytics cookies: Used to collect aggregated, anonymised data about how Players use the Platform — such as which pages are visited most frequently and where errors occur. This helps us improve the Platform experience.
• Preference cookies: Store your in-Platform preferences, such as language selection and responsible gaming display settings, so that they are remembered between sessions.
• Fraud prevention cookies: Help us identify suspicious activity and protect your Account from unauthorised access attempts.

bd7678 does not deploy third-party advertising cookies, social media tracking pixels, or cross-site behavioural profiling technologies without your explicit, informed consent. You may manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Platform.

7. Data Retention

bd7678 retains personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law. Our general data retention schedule is as follows:

• Active Account data: Retained for the full duration of your Account's active status plus a period of 5 years following Account closure, to meet anti-money-laundering and financial record-keeping obligations.
• KYC and identity documents: Retained for a minimum of 5 years from the date of verification, in line with standard financial services compliance requirements.
• Transaction records: Retained for 5 years from the date of each transaction.
• Customer support communications: Retained for 2 years from the date of the last communication in a support thread.
• Technical and session logs: Retained for 12 months and then automatically purged or anonymised.
• Marketing opt-in records: Retained until you withdraw your consent, plus 1 year thereafter as evidence of your consent history.

When data is no longer required, bd7678 will securely delete or anonymise it so that it can no longer be linked to you as an individual.

8. Your Data Rights

As a registered Player on bd7678, you have the following rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected]:

• Right of Access: You may request a copy of all personal data we hold about you. We will provide this within a reasonable period and at no charge for standard requests.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it promptly.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data. This right is subject to legal retention obligations — for example, we may be required to retain financial transaction records regardless of a deletion request.
• Right to Restrict Processing: You may request that we limit the way in which we process your personal data while a complaint or correction request is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contractual basis, you may request that your personal data be provided to you in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.
• Right to Object: You have the right to object to the processing of your personal data where bd7678 relies on legitimate interests as the lawful basis, unless bd7678 can demonstrate compelling legitimate grounds that override your interests.

bd7678 will respond to all data rights requests within 30 days of receipt. Where a request is particularly complex or where you have submitted multiple requests simultaneously, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reasons for it.

9. Security Measures

bd7678 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data in transit between your device and bd7678's servers.
• Encryption of sensitive data at rest, including financial records and identity documents.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their specific job function.
• Regular security audits, vulnerability assessments, and penetration testing by qualified security professionals.
• Multi-factor authentication requirements for all internal staff accessing systems that process personal data.
• Comprehensive incident response and data breach notification procedures.

Despite these measures, no system connected to the internet can be guaranteed to be completely secure. In the unlikely event of a data breach that poses a risk to your rights and freedoms, bd7678 will notify affected Players without undue delay and will take immediate steps to contain and remediate the incident.

You also play a role in keeping your data secure. Please ensure that your bd7678 Account password is strong and unique, that you do not share your login credentials with any third party, and that you log out of your Account when using a shared or public device.

10. Minors & Underage Protection

The bd7678 Platform is strictly intended for adults aged 21 years and over. bd7678 does not knowingly collect or process personal data relating to individuals under the age of 21. If we discover or have reason to believe that a registered Player is under 21, we will immediately suspend the Account, conduct a review, and if confirmed, permanently close the Account and return any real-money deposits in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that your child has registered on bd7678, please contact us immediately at [email protected] so that we can take appropriate action without delay.

11. Third-Party Services & Links

The bd7678 Platform integrates with third-party services including payment gateways and game content providers. While we carefully vet all third-party partners and require them to maintain appropriate data protection standards, bd7678 is not responsible for the privacy practices of third-party services once you navigate away from our Platform or interact directly with a third-party provider's interface.

We encourage you to review the privacy policies of any third-party service you use in connection with bd7678, particularly your mobile wallet provider (bKash, Nagad, Rocket, Upay) or your bank.

12. Changes to This Privacy Policy

bd7678 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will post a prominent notice on the Platform and update the "Last Updated" date at the top of this document. Where changes significantly affect your rights or the way we process your personal data, we will endeavour to provide you with advance notice via your registered email address or in-account notification.

Your continued use of the bd7678 Platform following the posting of an updated Privacy Policy constitutes your acknowledgement of the changes. We encourage you to review this page periodically to stay informed about how we are protecting your data.

13. Contact & Data Rights Requests

If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to report a privacy concern, please contact the bd7678 Data Protection team using the details below. All communications are handled in English.

Please include your registered Account username and a clear description of your request or concern when contacting us. We may need to verify your identity before processing a data rights request to ensure we are responding to the correct individual.