Privacy Policy – How 678bd2 Handles Your Personal Data

1. Personal Data We Collect

678bd2 collects personal data in two broad categories: data you provide directly, and data generated automatically by your use of the platform.

Data you provide directly:

• Full name, date of birth, and gender (collected at registration to verify your identity and confirm you meet the 21+ age requirement).
• Email address and mobile phone number (used for account communication, transaction notifications, and support).
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh) and postal code.
• National ID card number, passport number, or other government-issued identification documents provided during the Know Your Customer (KYC) verification process.
• Payment method details, including bKash wallet numbers, Nagad account numbers, Rocket account numbers, Upay account numbers, or bank account details associated with deposits and withdrawals.
• Communications you send to our support team via email or live chat, including the content of those messages and any attachments.
• Any additional information you voluntarily provide when completing surveys, responding to promotions, or participating in competitions on the 678bd2 platform.

Data collected automatically:

• IP address, device type, operating system, and browser type at the time of each session.
• Geolocation data derived from your IP address (country and city level only — we do not access GPS location).
• Session logs, including login timestamps, pages visited, games played, bets placed, and session durations.
• Cookies and similar tracking technologies as described in Section 7 of this Policy.
• Transaction history, including all deposits, withdrawals, bonus activations, wager amounts, and game results associated with your account.

2. How We Use Your Personal Data

678bd2 uses the personal data we collect for the following purposes:

3. Legal Basis for Processing

678bd2 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to create and operate your account, process transactions, and deliver the services you have contracted for.
• Legal obligation: Processing required for us to comply with applicable anti-money laundering, identity verification, and record-keeping obligations.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and improving our services — provided those interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and certain optional features, where you have given explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

4. Data Sharing and Third Parties

678bd2 does not sell your personal data. We may share your data with the following categories of third party, strictly for the purposes described:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other supported payment partners receive the minimum data necessary to process your deposit or withdrawal transaction. These partners operate under their own privacy policies and are bound by contractual data protection obligations.
• Identity verification providers: Third-party KYC service providers may receive your identification documents and personal details solely for the purpose of verifying your identity and age. These providers are prohibited from using your data for any other purpose.
• Game providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Spribe may receive a session token and anonymised player identifier to serve game content. They do not receive your name, contact details, or payment information.
• Technology and infrastructure providers: Hosting, database, security, and analytics service providers who process data on our behalf under strict data processing agreements and are not permitted to use the data for their own purposes.
• Law enforcement and regulatory authorities: Where we are legally required or compelled by a valid court order or regulatory direction to disclose personal data, we will do so. We will notify you of such disclosure where permitted by law.

All third-party service providers engaged by 678bd2 are required to implement appropriate technical and organisational security measures to protect the personal data we share with them.

5. Data Retention

678bd2 retains personal data for as long as necessary to fulfil the purposes for which it was collected, taking into account our legal, regulatory, and operational requirements. The following retention periods apply as a general guide:

• Active account data is retained for the lifetime of your account and for a minimum of five years following account closure.
• Transaction records and financial data are retained for a minimum of five years from the date of the transaction to meet anti-money laundering record-keeping requirements.
• Identity verification documents are retained for a minimum of five years following account closure or the last verification event, whichever is later.
• Customer support communications are retained for three years from the date of the final communication in any given support thread.
• Session and technical log data is retained for a maximum of 12 months and then anonymised or deleted.
• Marketing preference records are retained for as long as your account is active or until you withdraw consent, whichever comes first.

Where data is retained solely to meet a legal obligation, it is stored securely and access is restricted to authorised personnel only. It will not be used for any operational or marketing purpose during the retention period.

6. Cookies and Tracking Technologies

678bd2 uses cookies and similar technologies to enable platform functionality, remember your preferences, maintain your login session, and analyse how players navigate and use the site.

We use the following categories of cookie:

• Strictly necessary cookies: Required for the platform to function. These include session cookies that keep you logged in, cookies that remember your language preference, and cookies that route your requests to the correct server. These cannot be disabled.
• Functional cookies: Remember your preferences such as game display settings, notification preferences, and responsible gaming tool settings. Disabling these may reduce your experience.
• Analytics cookies: Help us understand how players use 678bd2 — which pages are most visited, where players encounter difficulties, and how platform performance can be improved. Data is aggregated and anonymised.
• Marketing cookies: Used to deliver relevant promotional content to you. These are only set where you have given consent and can be disabled at any time via your account settings.

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent the platform from functioning correctly. Disabling other categories will not affect your ability to use core platform features.

7. Your Privacy Rights

As a player on 678bd2, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data we hold about you. We will respond within 30 days of receiving a verified request.
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that we correct or complete it.
• Right to erasure: You may request that we delete your personal data. This right is subject to our legal retention obligations — where we are required by law to retain certain records, we cannot delete them until the mandatory retention period has expired.
• Right to restriction: You may request that we restrict processing of your personal data in certain circumstances — for example, while a dispute regarding accuracy is being resolved.
• Right to withdraw consent: Where processing is based on consent (for example, marketing emails), you may withdraw that consent at any time by updating your notification preferences in your account settings or by contacting support.
• Right to lodge a complaint: If you believe your privacy rights have been violated, you are entitled to raise a formal complaint by emailing [email protected]. We take all privacy complaints seriously and will respond within 14 business days.

To exercise any of these rights, please contact our support team at [email protected] with your registered email address and a clear description of your request. We may need to verify your identity before acting on any request.

8. Security Measures

678bd2 implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption on all pages, forms, and API communications.
• Encrypted storage of sensitive account credentials — passwords are never stored in plain text.
• Access controls that restrict internal access to personal data on a strict need-to-know basis.
• Regular security assessments and penetration testing of the platform infrastructure.
• Fraud detection systems that monitor account activity and transaction patterns in real time.
• Two-factor authentication options available to all registered players for additional account security.

While 678bd2 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials. If you suspect that your account has been compromised, please contact [email protected] immediately.

9. Protection of Minors

If you believe that a minor has registered on the 678bd2 platform, please notify us immediately at [email protected]. We take the protection of minors extremely seriously and will act on all such reports without delay.

10. Contact and Privacy Enquiries

For all privacy-related enquiries, requests, or complaints relating to this Policy or to the personal data 678bd2 holds about you, please contact our support team:

Please include your registered email address and a clear description of your request in all privacy-related correspondence. For access, rectification, or erasure requests, we will ask you to verify your identity before we take any action on your account data.