bd5678 Privacy Policy

01. Who We Are

1.1 bd5678 is an online casino and sports betting platform accessible at bd5678.app, offering live casino games, slots, crash games, and cricket and sports betting markets to players in Bangladesh and other permitted territories. References in this Privacy Policy to "bd5678", "we", "us", or "our" refer to the platform operator responsible for the processing of your personal data.

1.2 For the purposes of this Privacy Policy, bd5678 acts as the data controller in respect of the personal data you provide when registering, depositing, playing games, or contacting our support team. This means that bd5678 determines the purposes for which your data is collected and the manner in which it is processed.

1.3 Our designated data contact point for all privacy-related queries, requests, and complaints is reachable at [email protected]. All privacy enquiries are reviewed by our compliance team within ten (10) business days of receipt.

02. Data We Collect

2.1 bd5678 collects personal data across several categories depending on how you interact with the platform. The categories of data collected are detailed below.

2.1 Registration & Account Data

When you create a bd5678 account, we collect the personal details you provide during registration, including: full legal name, date of birth, residential address, email address, and the mobile phone number associated with your preferred payment method (e.g., the bKash or Nagad number you register with us).

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we collect copies of identity documents you submit for verification purposes. These may include: your Bangladesh National Identity Card (NID), passport bio page, driver's licence, and proof of residential address (such as a utility bill or bank statement). We also collect the mobile financial service account name associated with your payment method to confirm that deposits and withdrawals are made from accounts registered in your own name.

2.3 Financial & Transaction Data

We record all financial transactions conducted through your bd5678 account, including deposit amounts and timestamps, withdrawal requests and statuses, bet placements and settlements, bonus awards and wagering activity, and the payment method identifiers (e.g., bKash account number, Nagad mobile number, DBBL account reference) associated with each transaction. We do not store full bank account numbers or full payment card details on our servers.

2.4 Technical & Device Data

When you access bd5678.app from a browser or mobile device, we automatically collect certain technical information including: IP address, browser type and version, operating system, device type (desktop, tablet, mobile), session start and end times, pages visited and navigation path within the platform, and referral URL (the page from which you arrived at bd5678.app). This data is used for security monitoring, fraud detection, and platform performance optimisation.

2.5 Communications Data

If you contact our support team via email or live chat, we retain records of those communications — including the content of your messages and any attachments — for quality assurance, dispute resolution, and regulatory compliance purposes. We may also retain records of promotional communications sent to you and your response preferences (e.g., opt-in or opt-out status for marketing emails).

2.6 Responsible Gaming Data

If you use bd5678's responsible gaming tools — such as deposit limits, session time limits, cooling-off periods, or self-exclusion — we record the settings you choose and the dates on which they were applied or modified. This data is retained to ensure compliance with your self-imposed restrictions, including across any future re-registration attempts following a self-exclusion period.

03. How We Use Your Data

3.1 bd5678 uses the personal data we collect for the following specific purposes:

• Account Management: To create, maintain, and administer your bd5678 account, including processing login requests, updating account details, and resetting credentials.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and approved bank partners, and to maintain accurate financial records of all transactions.
• Identity Verification: To verify your age (18+) and identity in compliance with our KYC obligations, and to confirm that payment methods are registered in your own name.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multi-account registration, and other breaches of our Terms & Conditions.
• Legal Compliance: To comply with applicable laws and regulations, including anti-money laundering (AML) obligations, financial record-keeping requirements, and any lawful requests from competent authorities.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the performance, security, and user experience of bd5678.app. No individual user is identified or profiled in this analysis.
• Customer Support: To respond to your enquiries, resolve disputes, and maintain records of support interactions for quality assurance purposes.
• Responsible Gaming: To enforce self-imposed account restrictions (deposit limits, cooling-off periods, self-exclusion) and to monitor account activity for indicators of gambling-related harm.
• Promotional Communications: To send you information about promotions, bonuses, and platform updates — but only if you have explicitly opted in to receive such communications. You may opt out at any time by contacting [email protected].

04. Legal Basis for Processing

4.1 bd5678 processes your personal data on the following legal bases, depending on the nature and purpose of the processing activity:

• Contractual Necessity: Processing your registration data, transaction data, and KYC documents is necessary to perform our contractual obligations to you under the bd5678 Terms & Conditions — specifically, to provide access to games, process your deposits and withdrawals, and manage your account.
• Legal Obligation: Processing for AML compliance, identity verification, financial record retention, and responses to lawful authority requests is required by applicable law and cannot be refused or waived by the user.
• Legitimate Interest: Processing of technical and device data for fraud prevention, security monitoring, and platform performance optimisation is carried out on the basis of bd5678's legitimate interest in maintaining a safe, fair, and stable platform for all users. This interest has been assessed and does not override your fundamental privacy rights.
• Consent: Processing for optional promotional communications is carried out solely on the basis of your explicit, freely given consent. You have the right to withdraw this consent at any time without affecting the lawfulness of prior processing.

05. Data Sharing & Disclosure

5.1 bd5678 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Personal data is shared only in the following circumstances and only to the extent strictly necessary:

• Payment Service Providers: Your name, mobile number, and transaction amounts are shared with bKash, Nagad, Rocket, Upay, and approved bank partners solely to process your deposits and withdrawals. These providers process data under their own privacy policies and applicable financial regulations.
• Identity Verification Providers: KYC documents may be processed by authorised third-party identity verification service providers acting as data processors on bd5678's behalf under strict contractual data processing agreements.
• Fraud Prevention Agencies: In cases of suspected fraud, money laundering, or bonus abuse, relevant data may be shared with fraud intelligence networks or prevention agencies to prevent harm to the platform and its users.
• Legal & Regulatory Authorities: bd5678 will disclose personal data to law enforcement, financial intelligence units, or other competent regulatory authorities where required to do so by applicable law or in response to a valid legal order.
• Game Content Providers: When you play a game provided by a studio such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, a unique anonymised session token is passed to the provider's game server. No personally identifiable information (name, email, payment details) is shared with game studios.

06. Cookies & Tracking Technologies

6.1 bd5678.app uses cookies and similar technologies to ensure the platform functions correctly and to maintain the security of your session. The types of cookies we use are described below:

• Strictly Necessary Cookies: These cookies are essential for the platform to operate. They manage your login session, maintain your account balance display, and prevent cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without breaking core platform functionality.
• Security Cookies: These cookies support our fraud detection systems by assigning a unique, anonymised fingerprint to your browsing session. They help us identify suspicious activity such as session hijacking or multiple simultaneous logins from different locations.
• Performance Cookies: We may use anonymised, aggregated analytics data to understand how users navigate bd5678.app and to identify pages or features that cause difficulty. This data is never tied to an individual user's identity.

6.2 bd5678 does not use advertising cookies, retargeting pixels, social media tracking scripts, or any third-party marketing tags. You will not be tracked across other websites as a result of visiting bd5678.app.

6.3 You can control and delete cookies at any time through your browser settings. Disabling strictly necessary cookies may prevent you from logging in or using certain features of the platform. For guidance on managing cookies in your specific browser, please refer to your browser's help documentation.

07. Data Security

7.1 bd5678 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• TLS 1.3 encryption for all data transmitted between your device and bd5678.app.
• AES-256 encryption for personal data stored at rest on our servers.
• Role-based access control (RBAC) ensuring that only personnel with a legitimate operational need can access personal data.
• Multi-factor authentication (MFA) required for all staff accessing internal systems containing personal data.
• Regular security audits, penetration testing, and vulnerability assessments of the bd5678 platform infrastructure.
• Automatic session timeout after a period of inactivity to protect unattended devices.
• Intrusion detection systems and 24/7 monitoring of platform infrastructure for anomalous activity.

7.2 In the event of a data breach that poses a risk to your rights and freedoms, bd5678 will notify affected users without undue delay and will take all reasonable steps to contain the breach and mitigate its impact. We will also notify the relevant authorities where required by applicable law.

7.3 While bd5678 takes all commercially reasonable precautions to protect your data, no internet transmission or electronic storage system is entirely secure. You play a role in your own data security: use a strong, unique password for your bd5678 account, do not share your credentials with anyone, and log out when using a shared device.

08. Data Retention

8.1 bd5678 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to the minimum retention periods required by applicable law. The table below summarises our standard retention periods by data category:

8.2 Upon the expiry of the applicable retention period, personal data is securely and permanently deleted or anonymised such that it can no longer be attributed to any individual. Anonymised, aggregated data that cannot identify any individual may be retained indefinitely for statistical and business analysis purposes.

09. Your Rights

9.1 As a user of bd5678, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and a clear description of your request. We will respond within ten (10) business days.

• Right of Access: You have the right to request a copy of all personal data that bd5678 holds about you, along with information about the purposes for which it is processed, the categories of data held, and the third parties with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to our legal retention obligations — we cannot delete data that we are required by law to retain.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your data in certain circumstances — for example, while the accuracy of the data is being contested, or where processing is unlawful but you prefer restriction over deletion.
• Right to Data Portability: Where processing is based on your consent or on a contractual basis and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another data controller.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to Object: You have the right to object to processing of your personal data that is carried out on the basis of legitimate interest, including profiling. bd5678 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for legal claims.

10. Children's Privacy

10.1 bd5678 is an online gambling platform intended exclusively for adults aged 18 and above. We do not knowingly collect, store, or process personal data from any individual under the age of 18. Registration on bd5678.app is strictly prohibited for minors.

10.2 If bd5678 becomes aware — through our KYC process or any other means — that personal data has been collected from a person under the age of 18, we will immediately close the relevant account, forfeit any associated balance in accordance with our Terms & Conditions, and securely delete all personal data associated with that account as soon as legally permissible.

10.3 If you are a parent or guardian and you believe that a minor in your care has registered an account on bd5678, please contact us immediately at [email protected]. We will investigate and take appropriate action within 48 hours of receiving your report.

11. International Data Transfers

11.1 bd5678 primarily operates servers and processes personal data within the geographic region serving Bangladesh. However, certain third-party service providers — including game content studios (Pragmatic Play, Evolution Gaming, NetEnt, Spribe, and others) — may operate servers located in other countries or regions.

11.2 Where any personal data is transferred internationally, bd5678 ensures that such transfers are subject to appropriate contractual safeguards, including data processing agreements that require the recipient to apply security standards and data protection obligations equivalent to those described in this Privacy Policy.

11.3 As noted in Section 5, only anonymised session tokens are passed to game provider servers during gameplay. No personally identifiable information is transmitted to game studios in the course of normal platform use.

12. Third-Party Links

12.1 bd5678.app does not include links to external third-party websites. All navigation on the platform stays within the bd5678 domain. In the event that any reference to an external resource appears — for example, within a game interface provided by a third-party studio — bd5678 has no control over the privacy practices of that third party's website or application.

12.2 We encourage users to review the privacy policies of any third-party service they interact with independently, as those policies govern the processing of personal data on those external platforms.

13. Updates to This Privacy Policy

13.1 bd5678 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform. The current version of the Privacy Policy is always available at bd5678.app/privacy-policy, with the effective date displayed at the top of the document.

13.2 For material changes that significantly affect the way we process your personal data, we will notify registered account holders via the email address associated with their account prior to the change taking effect. For minor or clarificatory changes, publication of the updated policy on bd5678.app constitutes sufficient notice.

13.3 Continued use of the bd5678 platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any material changes, you should stop using the platform and may request account closure in accordance with our Terms & Conditions.

14. Contact & Complaints

14.1 If you have any questions, concerns, or requests relating to this Privacy Policy or to the way bd5678 processes your personal data, please contact our privacy compliance team using the details below. All contact information is provided as plain text and is not a clickable link.

• Email: [email protected]
• Subject Line: Privacy Enquiry / Data Rights Request
• Response Time: Within 10 business days of receipt
• Languages: English and Bengali
• Support Hours: 24 hours a day, 7 days a week

14.2 If you are not satisfied with our response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection authority or consumer protection body in your jurisdiction. bd5678 is committed to resolving all privacy complaints in good faith and in a transparent manner.