bd678a Privacy Policy — How We Handle Your Data

1. Who We Are

bd678a ("we", "us", "our") is an online gaming platform operated for players in Bangladesh. The bd678a platform is accessible via the website at bd678a.io and through the bd678a mobile application. For the purposes of this Privacy Policy, bd678a is the data controller responsible for the personal data of registered players and visitors to the platform.

If you have any questions about this Privacy Policy or about how bd678a handles your personal data, you can contact us at [email protected]. We aim to respond to all privacy-related enquiries within 72 hours.

2. Data We Collect

bd678a collects personal data in the following categories:

Registration Data

When you create a bd678a account, we collect your full name, date of birth, email address, phone number, and the country you are registering from. This information is required to create and manage your account.

Identity Verification Data

To comply with our obligations regarding age verification and anti-money laundering, we may collect copies of government-issued photo identification, proof of address documents, and proof of payment method ownership. These documents are processed securely and retained only for as long as required by law.

Transaction Data

We collect records of all deposits, withdrawals, and gaming transactions made through your bd678a account. This includes transaction amounts, timestamps, payment method references, and game identifiers. We do not store full payment card numbers or mobile banking PINs.

Gaming Activity Data

We collect data about your gaming activity on the bd678a platform, including the games you play, the amounts you wager, your win and loss history, and the duration of your gaming sessions. This data is used to operate the platform, detect problem gambling patterns, and comply with regulatory requirements.

Technical Data

When you access bd678a, we automatically collect certain technical data including your IP address, device type, operating system, browser type, and session timestamps. This data is used for security monitoring, fraud detection, and platform performance optimisation.

Communications Data

If you contact bd678a support via live chat, email, or any other channel, we retain records of those communications. This helps us resolve disputes, improve our support quality, and maintain a record of any commitments made to you.

3. How We Use Your Data

bd678a uses your personal data for the following purposes:

• Account management: To create, maintain, and secure your bd678a account, and to verify your identity when you log in.
• Payment processing: To process deposits and withdrawals through our payment partners, and to maintain accurate financial records.
• Game delivery: To provide access to the games and services available on the bd678a platform and to record game outcomes accurately.
• Regulatory compliance: To meet our obligations under applicable law, including age verification, anti-money laundering checks, and responsible gaming requirements.
• Fraud prevention: To detect and prevent fraudulent activity, account abuse, and other prohibited conduct on the platform.
• Customer support: To respond to your enquiries, resolve disputes, and improve the quality of our support services.
• Responsible gaming: To monitor gaming patterns that may indicate problem gambling and to apply responsible gaming tools where appropriate.
• Marketing communications: To send you promotional offers and platform updates, where you have opted in to receive them.
• Platform improvement: To analyse usage patterns and technical performance in order to improve the bd678a platform for all players.

bd678a does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. If any automated process flags your account for review, a member of our team will assess the situation before any action is taken.

4. Legal Basis for Processing

bd678a processes your personal data on the following legal bases:

• Contract performance: Processing that is necessary to provide the services you have signed up for, including account management, game delivery, and payment processing.
• Legal obligation: Processing that is required to comply with applicable law, including age verification, anti-money laundering obligations, and tax reporting requirements.
• Legitimate interests: Processing that is necessary for bd678a's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your rights.
• Consent: Processing that is based on your explicit consent, such as sending marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Who We Share Data With

bd678a shares personal data only with third parties that are necessary to operate the platform and comply with our legal obligations. We do not sell personal data to any third party. The categories of third parties with whom we may share your data are:

• Payment providers: bKash, Nagad, Rocket, and bank partners receive the transaction data necessary to process your deposits and withdrawals. These providers are bound by their own data protection obligations.
• Identity verification services: Third-party KYC providers may process copies of your identity documents to verify your age and identity on our behalf.
• Game providers: The studios and providers whose games are available on bd678a receive the minimum data necessary to deliver game content and record outcomes.
• IT and hosting providers: Our platform infrastructure is hosted on secure servers. Hosting and IT service providers may have access to technical data as part of their service delivery.
• Regulatory and law enforcement authorities: bd678a will disclose personal data to competent authorities where required to do so by law, court order, or regulatory direction.
• Fraud prevention agencies: We may share data with fraud prevention and security services to protect the platform and its players from fraudulent activity.

All third parties with whom bd678a shares personal data are required to handle that data in accordance with applicable data protection law and are prohibited from using it for any purpose other than the one for which it was shared.

6. Cookies and Tracking

bd678a uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse how the platform is used. The types of cookies we use are:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. You cannot opt out of essential cookies without stopping use of the platform.
• Functional cookies: Remember your preferences such as language settings and display options. These improve your experience but are not strictly necessary.
• Analytics cookies: Help us understand how players use the bd678a platform so we can improve it. Analytics data is aggregated and does not identify individual players.
• Marketing cookies: Used only where you have consented to receive personalised promotional content. You can withdraw consent at any time through your browser settings or account preferences.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the bd678a platform. For a full list of cookies used by bd678a, please contact our support team.

7. Data Retention

bd678a retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The general retention periods we apply are:

• Account data: Retained for the duration of your account and for five years after account closure, to comply with anti-money laundering and tax record-keeping requirements.
• Transaction records: Retained for seven years from the date of the transaction, in line with standard financial record-keeping obligations.
• Identity verification documents: Retained for five years after account closure or the completion of the relevant verification process, whichever is later.
• Support communications: Retained for three years from the date of the communication, unless the communication relates to an ongoing dispute.
• Technical and log data: Retained for up to 12 months for security and fraud detection purposes.

When personal data is no longer required, bd678a deletes or anonymises it securely. Where anonymisation is not possible, the data is stored in a restricted environment with access limited to authorised personnel only.

8. Data Security

bd678a takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. These measures include:

• TLS 1.3 encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data stored on our servers.
• Hashed and salted storage of account passwords — bd678a staff cannot read your password.
• Multi-factor authentication options for player accounts.
• Regular penetration testing and security audits conducted by independent third parties.
• Strict access controls limiting data access to authorised personnel on a need-to-know basis.
• Continuous monitoring of platform activity for signs of unauthorised access or suspicious behaviour.

Despite these measures, no online platform can guarantee absolute security. If you believe your bd678a account has been compromised, please contact our support team immediately. In the event of a confirmed data breach that poses a risk to your rights, bd678a will notify you and the relevant authorities within the timeframe required by applicable law.

9. Your Rights

You have the following rights in relation to the personal data that bd678a holds about you:

To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days. We may need to verify your identity before processing your request. There is no charge for exercising your rights, though we may charge a reasonable fee for manifestly unfounded or excessive requests.

10. Children's Privacy

The bd678a platform is strictly for adults aged 18 and over. bd678a does not knowingly collect personal data from anyone under the age of 18. If we become aware that a player is under 18, their account will be closed immediately, all data collected will be deleted, and any balance will be forfeited in accordance with our Terms and Conditions.

If you believe that a minor has registered an account at bd678a, please contact us immediately at [email protected]. We take underage access extremely seriously and will act on any report promptly.

11. International Transfers

bd678a primarily processes personal data within the jurisdiction in which it operates. Where it is necessary to transfer personal data to a third party located in another country — for example, to a game provider or technology partner — bd678a ensures that appropriate safeguards are in place to protect your data to the same standard as it would be protected domestically.

These safeguards may include contractual clauses that require the recipient to protect your data, or reliance on the recipient's certification under a recognised data protection framework. If you would like more information about the safeguards in place for any specific international transfer, please contact us at [email protected].

12. Changes to This Policy

bd678a may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable law. When we make changes, we will update the effective date at the top of this page. For significant changes, we will notify registered players via email or an in-platform notification before the changes take effect.

We encourage you to review this Privacy Policy periodically. Your continued use of the bd678a platform after any update constitutes your acknowledgement of the revised policy. If you do not agree with any changes, you may close your account by contacting our support team.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data bd678a holds about you, please get in touch:

• Email: [email protected]
• Subject line for data requests: "Data Rights Request"
• Live Chat: Available 24/7 via the chat icon on any page of the bd678a platform
• Response time: Within 72 hours for privacy enquiries; within 30 days for formal data rights requests

bd678a is committed to resolving all privacy concerns fairly and transparently. If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.