Privacy Policy — Your Data at 678bd4

This Privacy Policy ("Policy") describes how 678bd4 ("Platform", "We", "Us", "Our") collects, uses, stores, shares, and protects personal data provided by or collected about users ("You", "Player", "User") of the 678bd4 website at https://678bd4.app and all associated services. This Policy forms an integral part of the Terms and Conditions of 678bd4. By registering an account or continuing to use the platform, you confirm that you have read and understood this Policy and consent to the practices described herein.

678bd4 takes the privacy and security of your personal information seriously. We collect only the data that is necessary for the legitimate operation of a safe, responsible, and compliant online gambling platform serving players across Bangladesh. This Policy is written in plain English so that every player can understand, without legal expertise, exactly how their data is handled.

1. Who We Are and How to Contact Us

678bd4 operates the online casino and sports betting platform accessible at https://678bd4.app. For all privacy-related queries, requests, or complaints, you may contact us using the details below. All contact must be made in writing. Our support team operates on Bangladesh Standard Time (BST, UTC+6), seven days a week.

2. What Personal Data We Collect

678bd4 collects personal data in the following categories. The table below summarises the specific data points collected, the source of collection, and the primary purpose for which each category is used.

2.1 We do not knowingly collect or process the personal data of individuals under 21 years of age. If we become aware that a minor has provided personal data to 678bd4, we will delete that data immediately and close the associated account.

2.2 We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or biometric data for identification purposes, except where a government-issued identification document incidentally contains such information and its collection is strictly necessary for age and identity verification purposes.

3. How We Use Your Personal Data

678bd4 uses the personal data we collect for the following specific and legitimate purposes:

• Account registration and management: To create and administer your player account, verify your identity and age, and maintain accurate account records.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank accounts, and to maintain transaction records for accounting and audit purposes.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, multi-accounting, bonus abuse, and other prohibited conduct on the platform.
• Responsible gaming: To monitor player behaviour for signs of problem gambling, to enforce self-exclusion and deposit limit settings, and to comply with our duty of care obligations.
• Customer support: To respond to your enquiries, complaints, and support requests in a timely and accurate manner.
• Legal compliance: To comply with applicable laws, regulations, court orders, and lawful requests from government authorities.
• Platform improvement: To analyse aggregated, anonymised usage data in order to improve the performance, stability, and user experience of the 678bd4 platform.
• Marketing communications (opt-in only): To send promotional offers, bonus announcements, tournament invitations, and seasonal campaigns (such as Eid specials or BPL promotions) where you have explicitly opted in to receive such communications.

3.1 678bd4 will not use your personal data for any purpose that is materially incompatible with the purposes listed above without first obtaining your explicit consent.

4. Legal Bases for Processing

678bd4 processes your personal data on the following legal bases:

• Contractual necessity: Processing that is required to fulfil the contractual obligations set out in our Terms and Conditions — including account creation, payment processing, and service delivery.
• Legitimate interests: Processing that is necessary for the legitimate interests of 678bd4, such as fraud prevention, platform security, and general business analytics, provided those interests are not overridden by your data protection rights.
• Legal obligation: Processing that is required to comply with applicable laws, including anti-money-laundering regulations, age verification requirements, and any lawful order from a competent authority.
• Consent: Processing that is based on your freely given, specific, and informed consent — most notably the sending of direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Sharing Your Personal Data

5.1 678bd4 does not sell, rent, or share your personal data with unaffiliated third parties for their own commercial or marketing purposes. We may share your personal data with the following categories of recipients only where strictly necessary:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and other payment partners require transaction data to process deposits and withdrawals.
• Identity verification services: Third-party Know Your Customer (KYC) providers who assist in verifying your identity and age as part of our onboarding process.
• Game technology providers: Licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical data necessary to deliver their games within the 678bd4 platform.
• IT and security service providers: Hosting providers, content delivery networks, cybersecurity vendors, and anti-fraud technology partners who process data on our behalf under strict data processing agreements.
• Legal and regulatory authorities: Government bodies, courts, law enforcement agencies, or regulatory authorities where disclosure is required by applicable law or a lawful court order.
• Professional advisers: Lawyers, auditors, accountants, and insurers who provide professional services to 678bd4 and are bound by duties of confidentiality.

5.2 Where we engage third-party service providers to process personal data on our behalf, we require them to handle that data in accordance with this Policy and to implement appropriate technical and organisational security measures.

5.3 In the event that 678bd4 undergoes a business reorganisation, merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you of any such change via a platform announcement or email before your data is transferred and becomes subject to a different privacy policy.

6. Cookies and Tracking Technologies

6.1 678bd4 uses cookies and similar tracking technologies (including pixel tags and local storage) on its website to ensure the platform functions correctly, to remember your preferences, to keep your session secure, and to analyse how players use the platform.

6.2 The cookies used by 678bd4 fall into the following categories:

• Strictly necessary cookies: Essential for the platform to operate. They enable core functions such as session management, authentication, and security. These cookies cannot be disabled.
• Functional cookies: Used to remember your preferences, such as your preferred language, currency display, and responsible gaming settings, so that you do not have to reset them each time you visit.
• Analytics cookies: Used to collect aggregated, anonymised information about how players navigate and interact with the platform. This data helps us identify areas for improvement.
• Marketing cookies: Used to deliver promotional content that is relevant to your interests, based on your past interactions with the platform. These are only active where you have given consent.

6.3 You can manage cookie preferences through your device's browser settings. Please be aware that disabling certain cookies may affect the functionality of the 678bd4 platform, including your ability to log in or complete transactions.

7. Data Security

7.1 678bd4 implements a range of technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and our servers.
• Encrypted storage of sensitive account and payment data at rest.
• Role-based access controls that limit access to personal data to authorised personnel only, on a strict need-to-know basis.
• Regular security assessments, vulnerability scanning, and penetration testing of platform infrastructure.
• Two-factor authentication options available to all registered players.
• Comprehensive staff training on data protection obligations and information security best practices.

7.2 While 678bd4 takes every reasonable precaution to protect your data, no method of electronic transmission or storage is completely secure. In the event of a data breach that is likely to result in a risk to your rights, 678bd4 will notify affected users without undue delay via email or platform notification.

7.3 You are responsible for maintaining the confidentiality of your own account credentials. Please use a strong, unique password for your 678bd4 account and do not share it with anyone. If you suspect your account has been compromised, contact us immediately at [email protected].

8. Data Retention

8.1 678bd4 retains personal data for as long as your account remains active and for a defined period after account closure, as described below:

8.2 Where personal data is no longer required for the purposes for which it was collected, 678bd4 will securely delete or anonymise it in accordance with our internal data lifecycle management procedures.

9. Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data held by 678bd4. To exercise any of these rights, please send a written request to [email protected]. We will respond within 30 calendar days of receiving a valid request.

• Right of access: You may request a copy of all personal data that 678bd4 holds about you, along with information about how it is being used.
• Right to rectification: You may ask us to correct any inaccurate or incomplete personal data held in your account at any time.
• Right to erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restriction: You may ask us to restrict the processing of your personal data in certain circumstances, for example while a complaint is being investigated.
• Right to data portability: Where processing is based on your consent or contractual necessity, you may request that we provide your personal data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including direct marketing. Where you object to marketing, we will cease processing immediately.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

9.1 Please note that certain rights may be limited where 678bd4 is required to retain or process your data to comply with a legal obligation, to defend a legal claim, or to prevent fraud.

10. International Data Transfers

10.1 In the course of providing its services, 678bd4 may transfer your personal data to service providers or technology partners whose infrastructure is located outside Bangladesh. Where such transfers occur, 678bd4 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy.

10.2 These safeguards may include data processing agreements incorporating standard contractual clauses, or reliance on the recipient's participation in a recognised data protection framework. If you would like further information about the specific safeguards in place for any particular transfer, please contact us at [email protected].

11. Children's Privacy

678bd4 is strictly an adults-only platform. Players must be at least 21 years of age to register and use the platform. We do not knowingly collect, solicit, or retain personal data from individuals under the age of 21. If you believe that a person under the age of 21 has provided personal data to 678bd4, please notify us immediately at [email protected] and we will take prompt action to delete that data and close any associated account.

Account holders are responsible for ensuring that minors in their household do not access their 678bd4 account or the platform. We recommend using device-level parental control software to help prevent underage access.

12. Changes to This Privacy Policy

678bd4 reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will post the revised Policy on this page with an updated effective date and, where appropriate, notify registered players by email or via an in-platform notification. We encourage you to review this Policy periodically to stay informed about how we protect your information. Your continued use of the platform after the effective date of any revision constitutes your acceptance of the updated Policy.

13. Complaints

If you are unhappy with the way 678bd4 has handled your personal data, we ask that you first contact us directly at [email protected] so that we have the opportunity to resolve your concern. We will acknowledge your complaint within 5 business days and aim to provide a substantive response within 30 calendar days.

If you are not satisfied with our response, you may have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.