bd676 Privacy Policy — How We Collect, Use, and Protect Your Data

1. Introduction

bd676 ("bd676", "we", "us", "our") is committed to protecting the privacy and personal data of every individual who accesses or uses the bd676 platform at https://bd676.io (the "Platform"). This Privacy Policy ("Policy") describes how bd676 collects, processes, stores, shares, and protects your personal information in connection with your use of the Platform and its associated services, including casino games, sports betting, payment transactions, account management, and customer support.

This Policy applies to all registered players, visitors to the bd676 website, and any individual whose personal data is processed by bd676 in connection with the delivery of its services. By creating a bd676 account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

This Policy should be read in conjunction with the bd676 Terms & Conditions, which govern your overall use of the Platform. Terms not defined in this Policy carry the same meaning as in the Terms & Conditions.

2. Data Controller Information

For the purposes of applicable data protection legislation, bd676 acts as the data controller in respect of the personal data it collects and processes about you. As data controller, bd676 determines the purposes and means by which your personal data is processed.

All privacy-related enquiries, data access requests, and complaints may be directed to the bd676 support team using the contact details set out in Section 15 of this Policy. bd676 is committed to handling all privacy concerns promptly and in good faith.

3. What Personal Data We Collect

bd676 collects personal data that is necessary and proportionate to the purposes for which it is used. The categories of personal data we collect include, but are not limited to, the following:

3.1 Identity and Contact Data

• Full legal name as provided during account registration
• Date of birth (for age verification purposes)
• Email address
• Mobile phone number
• Residential address (where provided or required for KYC)
• Nationality and country of residence

3.2 Identity Verification (KYC) Data

• Copies of government-issued identity documents (e.g., National Identity Card, passport, driving licence)
• Proof of address documents (e.g., utility bill, bank statement)
• Proof of payment method ownership (e.g., screenshot of bKash or Nagad account registered in your name)
• Selfie or facial image where required for enhanced identity verification

3.3 Financial and Transaction Data

• Payment method type (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard)
• Payment method identifier (e.g., registered mobile number for bKash/Nagad, partial card number for bank cards)
• Deposit and withdrawal transaction records, including amounts in Bangladeshi Taka (৳), dates, and reference numbers
• Account balance history

3.4 Gaming and Activity Data

• Game play history, including games accessed, bets placed, and outcomes
• Sports betting records, including matches bet on, bet types, stake amounts, and settlement outcomes
• Bonus and promotion usage history
• Session duration and login/logout timestamps
• Responsible gaming tool settings and usage (e.g., deposit limits, self-exclusion requests)

3.5 Technical and Device Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser type and version
• Unique device identifiers
• Referring URL and navigation path within the Platform
• Cookie identifiers and session tokens

3.6 Communications Data

• Records of correspondence between you and bd676 support, including live chat transcripts, email exchanges, and any submitted support tickets
• Marketing communication preferences and opt-in/opt-out history

4. How We Collect Your Data

bd676 collects personal data through the following channels and mechanisms:

• Direct provision by you: Data you voluntarily submit during account registration, KYC verification, deposit/withdrawal processing, support interactions, or when completing surveys or promotional forms.
• Automated technical collection: Data collected automatically when you access the Platform, including IP address, device data, browser data, and cookie-derived information via our analytics and session management systems.
• Third-party service providers: Data received from payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), identity verification providers, and fraud prevention services in connection with processing your transactions or verifying your identity.
• Publicly available sources: In limited circumstances related to fraud prevention or compliance obligations, bd676 may cross-reference data against publicly available records or sanctions screening databases.

5. How We Use Your Personal Data

bd676 uses the personal data it collects for the following purposes:

Purpose	Data Categories Used
Account registration and management	Identity & contact data
Age and identity verification (KYC)	Identity data, KYC documents
Processing deposits and withdrawals	Financial & transaction data
Delivering casino games and sports betting services	Gaming & activity data, technical data
Fraud prevention and anti-money laundering (AML) compliance	Identity data, financial data, technical data
Customer support and dispute resolution	All relevant categories as required
Responsible gaming monitoring and tool administration	Gaming activity data, identity data
Sending marketing communications (where opted in)	Contact data, communications preferences
Platform analytics and performance improvement	Technical data, gaming activity data
Legal and regulatory compliance	All relevant categories as required by law

6. Legal Basis for Processing

bd676 processes your personal data on the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between you and bd676, including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable legal obligations, including anti-money laundering regulations, age verification requirements, and fraud prevention obligations.
• Legitimate interests: Processing necessary for bd676's legitimate business interests, including fraud detection, platform security, analytics, and service improvement, provided that such interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent, including the sending of marketing communications and the use of non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7. Sharing Your Data with Third Parties

bd676 does not sell your personal data. bd676 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to binding confidentiality and data protection obligations:

• Payment service providers: bKash, Nagad, Rocket, Upay, SureCash, Tap, BRAC Bank, City Bank, Islami Bank, Visa, and Mastercard, for the purpose of processing your financial transactions.
• Identity verification (KYC) providers: Third-party KYC and anti-money laundering screening services used to verify your identity and comply with applicable compliance requirements.
• Game content providers: Third-party studios such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe receive limited technical session data necessary to deliver the game experience. These providers operate under their own data protection frameworks.
• IT and infrastructure providers: Cloud hosting providers, data centre operators, and cybersecurity service providers who support the technical operation of the bd676 Platform.
• Legal and regulatory authorities: In circumstances where disclosure is required by law, court order, or lawful regulatory demand, bd676 may disclose personal data to relevant government bodies, law enforcement agencies, or regulatory authorities.
• Professional advisers: Lawyers, auditors, accountants, and other professional advisers engaged by bd676, subject to professional duties of confidentiality.

8. International Data Transfers

As an offshore online gaming platform serving players in Bangladesh, bd676 may transfer your personal data to countries or territories outside Bangladesh for processing or storage. Such transfers may occur in connection with the use of cloud infrastructure, third-party game providers, or payment processing partners whose systems are operated from multiple geographic locations.

Where personal data is transferred internationally, bd676 takes appropriate steps to ensure that your data continues to receive an adequate level of protection. This may include relying on standard contractual clauses, data processing agreements that incorporate appropriate privacy safeguards, or transferring data only to recipients in jurisdictions recognised as providing adequate data protection standards.

By using the bd676 Platform, you acknowledge and consent to the international transfer of your personal data as described in this section.

9. Data Retention

bd676 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any legal, regulatory, or contractual requirements that mandate a longer retention period. The following general retention principles apply:

• Account data: Retained for the duration of your active account relationship with bd676, and for a period of up to five (5) years following account closure, in order to meet anti-money laundering, fraud prevention, and dispute resolution obligations.
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of verification, in accordance with applicable AML and compliance obligations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support records: Retained for up to three (3) years from the date of the last interaction, unless a longer retention period is required for dispute resolution purposes.
• Marketing preference records: Retained until you withdraw consent or close your account, plus a further reasonable period to evidence compliance with your consent preferences.
• Technical and device data (logs): Retained for up to twelve (12) months for security monitoring and fraud detection purposes.

When personal data is no longer required, bd676 will securely delete or anonymise it in accordance with our internal data destruction procedures.

10. Cookies and Tracking Technologies

bd676 uses cookies, web beacons, local storage, and similar tracking technologies on the Platform. A cookie is a small text file placed on your device by a web server when you visit a website. Cookies serve a range of functions essential to the operation of the bd676 Platform.

10.1 Types of Cookies Used by bd676

• Essential / Strictly Necessary Cookies: Required for the Platform to function. These include session cookies that maintain your logged-in state, security tokens that prevent cross-site request forgery, and load-balancing cookies that distribute server traffic. These cookies cannot be disabled without significantly impairing Platform functionality.
• Functional / Preference Cookies: Used to remember your preferences, such as your display language settings, last visited game category, and responsible gaming tool configurations.
• Analytics Cookies: Used to collect anonymised or aggregated data about how players navigate and interact with the Platform, enabling bd676 to improve usability, page performance, and content relevance. Analytics data does not directly identify individual players.
• Marketing / Targeting Cookies: Used, where you have provided consent, to deliver promotional content relevant to your interests and to measure the effectiveness of bd676's marketing activities. These cookies may track your activity across sessions.

10.2 Managing Your Cookie Preferences

You can manage and control cookie settings through your browser's privacy or security settings. Most modern browsers allow you to block cookies, delete existing cookies, or receive a notification before a cookie is set. Please note that disabling essential cookies will impair your ability to use key Platform features, including maintaining a login session.

11. Your Rights as a Data Subject

Subject to applicable data protection legislation and any limitations required by bd676's legal obligations, you have the following rights in respect of your personal data held by bd676:

• Right of Access: You have the right to request a copy of the personal data bd676 holds about you, together with information about how that data is being used.
• Right to Rectification: You have the right to request the correction of any inaccurate or incomplete personal data held about you. Some corrections can be made directly from your account settings.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to exceptions where bd676 is required to retain data to comply with legal obligations or to establish, exercise, or defend legal claims.
• Right to Restriction of Processing: You may request that bd676 restrict the processing of your personal data in certain circumstances, such as while the accuracy of data is under dispute.
• Right to Data Portability: Where processing is carried out on the basis of consent or contractual necessity, and by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where bd676 relies on its legitimate interests as the legal basis for processing. You also have an unconditional right to object to the use of your data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please submit a written request to the bd676 support team at [email protected]. bd676 will acknowledge your request within five (5) business days and aims to fulfil all valid requests within thirty (30) calendar days. In complex cases, this period may be extended by a further thirty (30) days, and you will be notified of any such extension.

bd676 may need to verify your identity before processing a data rights request to ensure that personal data is not disclosed to an unauthorised party.

12. Data Security

bd676 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and bd676 servers
• Encryption of sensitive data at rest within bd676's database systems
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Regular security audits, vulnerability assessments, and penetration testing of Platform infrastructure
• Multi-factor authentication requirements for internal system access by bd676 personnel
• Incident response procedures and data breach notification protocols

Notwithstanding these measures, no method of internet transmission or electronic storage is entirely free from risk. bd676 cannot guarantee the absolute security of your data, and you are encouraged to take appropriate precautions to protect your own account credentials, including choosing a strong and unique password and enabling any available security features on your bd676 account.

In the event of a personal data breach that is likely to result in a significant risk to your rights and freedoms, bd676 will notify affected players in accordance with its legal obligations and without undue delay.

13. Children's Privacy

bd676 strictly prohibits access to or use of the Platform by individuals under the age of 21. bd676 does not knowingly collect personal data from anyone under the age of 21. If bd676 becomes aware that it has collected personal data from a person under this age threshold, it will take immediate steps to delete that data and close any associated account.

If you are a parent or guardian and have reason to believe that a minor in your care has provided personal data to bd676 or accessed the Platform, please contact bd676 immediately at [email protected] so that appropriate action can be taken.

14. Changes to This Privacy Policy

bd676 reserves the right to update or amend this Privacy Policy at any time to reflect changes in its data practices, applicable law, or operational requirements. When material changes are made, bd676 will update the effective date at the top of this page and, where appropriate, notify registered players via email or an in-platform notification.

Your continued use of the bd676 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised practices described therein. bd676 encourages you to review this Policy periodically to remain informed of how your personal data is being handled.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by bd676, please contact our support team using the following details:

• Email: [email protected] (plain text only — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week
• Response Time: bd676 aims to respond to all privacy-related enquiries within five (5) business days (Bangladesh Standard Time, UTC+6)
• Language: English support is available at all times

For general platform queries unrelated to privacy, you may also consult the bd676 FAQ page at /faq or review the Terms & Conditions at /terms-conditions.