bd679 Privacy
Policy

1 Introduction & Scope

This Privacy Policy describes how bd679 collects, uses, stores, shares, and protects the personal data of individuals who register for, access, or otherwise interact with the bd679 online casino and sports betting platform, available at bd679.io (the "Platform").

This policy applies to all bd679 players, prospective players who browse the Platform without registering, and individuals who communicate with bd679 through our support channels. It covers all personal data processing activities carried out in connection with the provision of bd679's services to the Bangladesh market and internationally.

By registering a player account with bd679 or by continuing to use the Platform after this policy has been published or updated, you acknowledge that you have read and understood the contents of this Privacy Policy. If you do not agree with any part of this policy, you should not use the bd679 platform and should contact us to close your account.

This policy should be read together with the bd679 Terms & Conditions, which set out the overall contractual framework governing your use of the Platform. Capitalised terms used but not defined in this policy carry the same meaning given to them in the Terms & Conditions.

2 Data Controller

bd679 acts as the data controller in respect of the personal data it collects and processes about you. As data controller, bd679 determines the purposes for which and the means by which your personal data is processed.

For any questions, concerns, or requests relating to the processing of your personal data, you may contact our data protection team directly using the contact details provided in Section 14 of this policy. We are committed to responding to all data-related enquiries in a timely and transparent manner.

3 Legal Basis for Processing

bd679 processes your personal data only where a lawful basis exists to do so. The primary legal bases upon which bd679 relies are as follows:

• Performance of a Contract: Processing is necessary to create and manage your player account, process deposits and withdrawals, resolve disputes, and deliver the gaming and betting services you have requested from bd679.
• Legitimate Interests: Processing is necessary for bd679's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving the quality of our services, provided those interests are not overridden by your fundamental rights and freedoms.
• Legal Obligation: Processing is necessary to comply with applicable legal obligations, including anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and financial record-keeping obligations.
• Consent: Where we rely on your consent as the legal basis — most commonly for direct marketing communications — you retain the right to withdraw that consent at any time without detriment to your account standing or service access.

4 How We Use Your Data

bd679 uses the personal data it collects for the following specific purposes:

• Account Registration & Management: To create, maintain, and authenticate your bd679 player account, including verifying your identity, age (21+ requirement), and contact details.
• Payment Processing: To process deposits via bKash, Nagad, Rocket, Upay, and other supported Bangladeshi payment methods, and to facilitate withdrawals back to your verified payment accounts.
• KYC & AML Compliance: To fulfil our legal obligations under applicable anti-money laundering and Know Your Customer frameworks, including verifying the source of funds and screening against relevant watchlists.
• Customer Support: To respond to your queries, resolve disputes, investigate complaints, and provide ongoing assistance via live chat and email.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling behaviour, to enforce self-exclusion and deposit limit requests, and to fulfil our obligations under our Responsible Gaming policy.
• Fraud & Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, cheating, bonus abuse, and other prohibited conduct on the Platform.
• Platform Improvement: To analyse usage data and player feedback in order to enhance the bd679 user experience, optimise game performance, and develop new features.
• Marketing (with consent): To send you promotional offers, bonus notifications, and seasonal promotions (such as BPL season offers, Eid promotions, or Pohela Boishakh campaigns) where you have opted in to receive such communications.
• Legal Compliance: To maintain financial and transactional records as required by applicable law, and to respond to lawful requests from competent authorities.

5 Cookies & Tracking Technologies

5.1 What Are Cookies. Cookies are small text files placed on your device when you visit the bd679 Platform. They help us recognise your browser, remember your preferences, maintain your session, and gather aggregate usage statistics.

5.2 Types of Cookies Used. bd679 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, load-balancing cookies, and security tokens. They cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Allow us to remember your preferences such as language settings, display options, and recently played games to enhance your experience across sessions.
• Analytics Cookies: Used to collect aggregate, anonymised data about how players interact with the Platform — which pages are visited most, where sessions end, and how features are used. This helps us improve the Platform continuously.
• Marketing Cookies (opt-in only): Used to deliver relevant promotional content based on your interests and browsing behaviour on the Platform. These are only activated where you have provided explicit consent.

5.3 Managing Cookies. You can control non-essential cookies through your browser settings. Most modern browsers allow you to block, delete, or restrict cookies. Please note that disabling certain cookies may affect the functionality of the bd679 Platform, including your ability to log in or maintain a session.

5.4 Do Not Track. bd679 respects browser-level Do Not Track (DNT) signals where technically feasible. Where a DNT signal is detected, bd679 will limit tracking to strictly necessary cookies only.

6 Third-Party Data Sharing

bd679 does not sell your personal data. We share personal data with third parties only in the following limited, controlled circumstances:

• Payment Processors: bKash, Nagad, Rocket, Upay, and other Bangladeshi financial service providers require certain account and transaction data to process payments and verify fund sources on our behalf.
• KYC & Identity Verification Providers: Specialist third-party services assist bd679 in verifying player identities and documents. These providers act under strict data processing agreements and are only permitted to use your data for the verification purpose.
• Game Software Providers: Providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical identifiers (such as anonymised player IDs and session tokens) to deliver game content and maintain game integrity. They do not receive your full personal profile.
• Analytics & Performance Platforms: Aggregate, anonymised usage data may be processed by third-party analytics tools to help bd679 understand Platform performance. No personally identifiable data is shared in this context.
• Legal & Regulatory Authorities: bd679 will disclose personal data to competent government bodies, law enforcement agencies, or regulatory authorities where required to do so by applicable law or a lawful order, and where permitted under applicable data protection law.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of bd679's business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third parties with whom bd679 shares personal data are required to maintain appropriate technical and organisational security measures and to use the data solely for the specified purpose.

7 International Data Transfers

bd679 operates internationally and some of our service providers and technology partners are located outside Bangladesh. As a result, your personal data may be transferred to, stored in, or processed in countries other than Bangladesh.

Where such transfers occur, bd679 takes appropriate steps to ensure that your personal data receives a level of protection consistent with this Privacy Policy, including through the use of contractual safeguards with receiving parties and by selecting service providers that maintain internationally recognised security standards.

By using the bd679 Platform, you acknowledge and agree that your personal data may be transferred internationally in the manner described in this section.

8 Data Retention

bd679 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to any applicable legal requirements that mandate longer retention periods. The key retention periods applied by bd679 are as follows:

• Active Account Data: Retained for the full duration of your account relationship with bd679, plus a minimum of five (5) years following account closure to satisfy financial record-keeping and AML obligations.
• KYC & Identity Documents: Retained for a minimum of five (5) years from the date of verification or from the date of the last transaction, whichever is later, in line with standard AML compliance requirements.
• Transaction Records: Deposit, withdrawal, and betting records are retained for a minimum of five (5) years from the date of each transaction.
• Support Communications: Live chat transcripts and support emails are retained for a minimum of two (2) years from the date of the interaction, or longer if the communication relates to an open dispute or legal matter.
• Marketing Data: Where processing is based on consent, marketing preference data is retained until consent is withdrawn. Following withdrawal, data is deleted or anonymised within thirty (30) days.
• Technical & Log Data: Server logs and session data are typically retained for ninety (90) days, unless flagged for retention in connection with an active security investigation.

At the end of any applicable retention period, bd679 will securely delete or irreversibly anonymise the relevant data.

9 Security Measures

bd679 maintains a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• TLS 1.3 Encryption: All data in transit between your device and bd679 servers is encrypted using Transport Layer Security protocol version 1.3.
• Encryption at Rest: Sensitive stored data — including hashed passwords, financial identifiers, and identity document references — is encrypted at rest using AES-256 or equivalent standards.
• Access Controls: Access to personal data within bd679's systems is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and regular security training.
• Intrusion Detection & Monitoring: bd679's infrastructure is monitored continuously for anomalous activity, attempted breaches, and other security events. Alerts are investigated promptly.
• Regular Security Assessments: bd679 conducts periodic security reviews and engages independent specialists to assess the effectiveness of our security controls.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, bd679 will notify affected individuals and relevant authorities within the timeframes prescribed by applicable law.

While bd679 takes all reasonable steps to protect your personal data, no system is entirely immune to security threats. You are responsible for maintaining the confidentiality of your account credentials and for notifying bd679 immediately if you suspect any unauthorised use of your account.

10 Your Rights

As a player on the bd679 platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our support team at the details provided in Section 14. We will respond to all rights requests within thirty (30) days of receipt.

• Right of Access: You have the right to request a copy of the personal data bd679 holds about you, together with information about how it is used and shared.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing has been unlawful. Note that certain data must be retained to meet our legal obligations and this right does not apply absolutely to such data.
• Right to Restrict Processing: In certain circumstances, you may request that bd679 restricts the processing of your data — for example, while you contest the accuracy of the data or object to our use of it.
• Right to Data Portability: Where processing is based on your consent or on a contractual necessity, you may request that we provide your personal data to you in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your data based on legitimate interests, including profiling. You also have an unconditional right to object to the processing of your personal data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

11 Children & Minors

The bd679 platform is strictly intended for individuals who are 21 years of age or older. bd679 does not knowingly collect, process, or retain personal data from any person under the age of 21. Registration and use of the Platform by minors is expressly prohibited.

If bd679 discovers or is notified that a player account has been opened by, or on behalf of, a person under 21 years of age, all personal data associated with that account will be deleted promptly, the account will be permanently suspended, and any deposited funds will be returned to the payment source used during registration.

If you believe that bd679 may have collected data from a minor, please contact us immediately at the details provided in Section 14 so that we can take appropriate action without delay.

12 Marketing Communications

bd679 sends promotional emails, SMS notifications, and in-platform messages to players who have opted in to receive marketing communications. These may include welcome bonuses, reload offers, seasonal promotions (such as Eid specials, BPL cricket season offers, and Pohela Boishakh campaigns), and platform news.

You may opt out of marketing communications at any time by:

• Updating your communication preferences in your bd679 account dashboard;
• Clicking the "Unsubscribe" link in any marketing email sent by bd679; or
• Contacting our support team at [email protected] with your opt-out request.

Please note that opting out of marketing communications does not affect the delivery of essential service communications, such as deposit confirmations, withdrawal updates, security alerts, or KYC-related notices. These transactional communications are necessary for the operation of your account and cannot be disabled.

13 Changes to This Privacy Policy

bd679 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or business operations. When material changes are made, bd679 will notify registered players via email or a prominent notice on the Platform at least seven (7) days before the revised policy takes effect.

The "Last updated" date at the top of this page indicates when the most recent revision was made. We encourage you to review this policy periodically to stay informed about how bd679 protects your personal data. Continued use of the Platform after the effective date of a revised policy constitutes your acceptance of the updated terms.

14 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a complaint about how bd679 has handled your personal data, please contact our data protection team:

• Email: [email protected] — Subject line: "Privacy Request" or "Data Complaint"
• Support Hours: 24 hours a day, 7 days a week
• Response Time: We aim to acknowledge all privacy requests within 48 hours and provide a full response within 30 days of receipt
• Timezone: Bangladesh Standard Time (BST, UTC+6)

bd679 takes all privacy complaints seriously and will investigate each one thoroughly. If you are dissatisfied with our response, you may escalate your complaint by resubmitting it with the subject line "Formal Privacy Complaint" and a senior member of our team will review and provide a final written response within fifteen (15) business days.