bdd678 Privacy Policy

bdd678 is an online casino and sports betting platform operating at https://bdd678.app, serving registered players primarily based in Bangladesh. For the purposes of this Privacy Policy, bdd678 is the data controller — meaning we are the entity that determines the purposes and means by which your personal data is processed.

This policy applies to all personal data collected by bdd678 through any of the following channels: registration on the platform, use of any game, betting market, payment function, or support service on the platform, and any communication you send to bdd678 via email or other supported contact methods.

If you have any questions about how bdd678 handles your personal data, you may contact our support team directly at [email protected]. We will respond to privacy-related enquiries within five business days, Bangladesh Standard Time.

bdd678 collects personal data in two ways: data you provide to us directly, and data we collect automatically as a result of your use of the platform. The categories of personal data we collect are described below.

Data you provide directly:

• Identity data: your full legal name, date of birth, and a copy of government-issued identity documentation (National ID card, passport, or driving licence) where account verification is required.
• Contact data: your registered mobile phone number and any email address associated with your account.
• Address data: your residential address in Bangladesh, which may be required as part of the account verification process.
• Payment data: your bKash, Nagad, Rocket, or Upay mobile wallet number; your bank account number and bank name if bank transfer is selected; and transaction reference numbers. bdd678 does not store full payment card numbers or CVV codes.
• Communications data: the content of any email, support ticket, or feedback message you send to bdd678, including any attachments you choose to include.
• Responsible gaming data: any deposit limits, cooling-off periods, or self-exclusion requests you submit through your account dashboard, which are retained to enforce your stated preferences.

Data collected automatically:

• Technical data: your IP address, device type, operating system version, browser type and version, and the mobile network or internet service provider through which you access bdd678.
• Usage data: pages visited on bdd678, time and duration of visits, game sessions played, betting markets accessed, and search terms entered within the platform.
• Log data: server-side logs recording login timestamps, deposit and withdrawal events, bet placement records, and any error events encountered during your session. These logs are retained for security auditing and dispute resolution purposes.
• Cookie and session data: session identifiers and functional cookies that maintain your logged-in state and store your platform preferences. See Section 8 of this policy for full details on cookie use.

bdd678 processes your personal data only for the specific purposes listed below. For each purpose, we have identified the lawful basis on which processing takes place.

bdd678 does not sell or rent your personal data to any third party. We share personal data with external parties only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment service providers: bKash, Nagad, Rocket, Upay, and participating Bangladesh banks (City Bank, BRAC Bank, Dutch-Bangla Bank, Islami Bank, Sonali Bank) receive only the payment data necessary to execute your requested transaction. These providers operate under their own privacy frameworks and are bound by contractual data protection obligations.
• Game technology providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and anonymised player identifier to deliver game content. These studios do not receive your full identity or payment details.
• Identity verification services: Where enhanced verification is required, bdd678 may engage a third-party KYC (know-your-customer) technology provider to assist in validating government-issued identity documents. Such providers are contractually bound to process your data solely for verification purposes.
• Legal and regulatory authorities: bdd678 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities when required by applicable law, court order, or lawful regulatory request. We will notify you of such disclosures where we are legally permitted to do so.
• Fraud prevention networks: In cases of suspected fraud, money laundering, or bonus abuse, bdd678 may share relevant account and transaction data with industry fraud prevention services to protect the platform and other users.

bdd678 retains personal data for no longer than is necessary for the purposes for which it was collected, taking into account our legal obligations and any applicable limitation periods for legal claims. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your active account and for a minimum of five years following account closure, to comply with anti-money-laundering record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five years from the date of each transaction, in accordance with financial record-keeping obligations.
• Betting and game history: Retained for a minimum of three years from the date of each transaction, for dispute resolution and auditing purposes.
• Support communications: Retained for two years from the date of the last communication in each support thread, unless the subject matter is related to an ongoing dispute or legal matter.
• Server and security logs: Retained for up to 12 months, after which they are archived in anonymised form or securely deleted.
• Responsible gaming records: Self-exclusion and cooling-off records are retained for the duration specified in each request and for at least two years thereafter to prevent premature re-registration.

When data is no longer required and no legal basis for retention exists, bdd678 will securely delete or irreversibly anonymise it so that it can no longer be associated with your identity.

As a bdd678 account holder, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with a clear description of your request and sufficient information to verify your identity.

• Right of access: You may request a copy of the personal data bdd678 holds about you, along with information about how it is being used and with whom it has been shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. You may also update many of your account details directly through your account profile dashboard.
• Right to erasure: You may request that bdd678 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that financial and identity records must be retained for statutory periods regardless of deletion requests.
• Right to restriction of processing: In certain circumstances — such as where you contest the accuracy of data we hold — you may request that we restrict active processing of your personal data while the matter is investigated.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request a structured, machine-readable copy of the personal data you have provided to bdd678.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including any profiling for fraud detection or platform improvement purposes. bdd678 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (for example, optional marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

bdd678 will respond to all data rights requests within 30 calendar days. In complex cases we may extend this period by a further 60 days, in which case we will notify you of the extension and the reasons for it.

bdd678 employs a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to:

• SSL/TLS encryption for all data in transit between your device and bdd678 servers.
• Encryption at rest for sensitive stored data including payment references and identity document copies.
• Access controls that restrict internal access to personal data to only those employees and contractors with a legitimate operational need.
• Regular security audits and vulnerability assessments of platform infrastructure.
• Automated monitoring for suspicious login activity, unusual transaction patterns, and potential data breach indicators.
• Incident response procedures that require assessment and, where appropriate, notification in the event of a confirmed data breach affecting your personal data.

While bdd678 takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You play an important role in keeping your account secure — particularly by choosing a strong, unique password and never sharing your login credentials with anyone.

bdd678 uses cookies and similar local storage technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. The following categories of cookies are used on bdd678:

• Strictly necessary cookies: These cookies are essential to enable you to log in, maintain your session while navigating the platform, and use core features such as depositing, withdrawing, and placing bets. The platform cannot function correctly without these cookies. No consent is required for strictly necessary cookies.
• Functional cookies: These cookies remember your platform preferences — such as your chosen language or display settings — so you do not need to reset them on each visit.
• Analytics cookies: Aggregated, anonymised data about how users interact with the platform is collected to help us identify areas for improvement. This data does not identify you personally. Analytics cookies are only placed with your consent.

Most browsers allow you to control cookies through their settings. You may block or delete cookies at any time; however, disabling strictly necessary cookies will prevent you from logging in and using the platform's core functionality. Instructions for managing cookies are available in your device's browser help section.

bdd678 does not use third-party advertising cookies or tracking pixels for cross-site behavioural advertising.

bdd678 is strictly intended for adults aged 21 years and above. We do not knowingly collect or process personal data belonging to individuals under the age of 21. Age verification is a mandatory step of the account registration process, and bdd678 reserves the right to request documentary proof of age at any time.

If bdd678 becomes aware that personal data has been collected from a person under the age of 21 without verifiable parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered an account on bdd678, please report this to [email protected] so that we can act promptly.

bdd678 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will update the "Last updated" date at the top of this page and, where practicable, notify registered users via the contact details associated with their account.

We encourage you to review this Privacy Policy periodically. Your continued use of the bdd678 platform after any update takes effect constitutes your acknowledgement of the revised policy. If you disagree with any change, you may request closure of your account by contacting our support team before the change takes effect.