668bd Privacy Policy — How We Handle Your Data

1 Introduction

668bd ("we", "us", "our", "the Platform") is committed to safeguarding the privacy and personal data of every individual who accesses or uses the 668bd online betting and casino platform. This Privacy Policy sets out in clear, accessible terms the categories of personal data we collect from players based in Bangladesh and internationally, the purposes for which that data is processed, the legal bases upon which processing is carried out, and the rights available to data subjects under applicable privacy legislation.

The 668bd Platform serves players primarily located in Bangladesh and processes all personal data with reference to the data protection standards relevant to this jurisdiction. We operate under a principle of data minimisation — collecting only what is strictly necessary for the delivery of our services, regulatory compliance, and the prevention of fraud and money laundering.

This Privacy Policy should be read together with the 668bd Terms & Conditions and our Responsible Gaming Policy, both of which form part of the overall framework governing your relationship with the 668bd Platform.

2 Data We Collect

668bd collects personal data across several categories depending on the nature of your interaction with the Platform. The following outlines each category and the specific data points collected within it:

Identity & Registration Data

• Full legal name, date of birth, and gender as provided during account registration.
• National ID number, passport number, or other government-issued identification documents submitted during KYC verification.
• Username and encrypted account password.
• Profile photograph where submitted as part of KYC documentation.

Contact Data

• Mobile phone number (required for account registration and OTP-based two-factor authentication).
• Email address used for account communications, promotional messages (where consented), and formal correspondence.
• Residential address, including district and division within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh), or international address where applicable.

Financial & Transaction Data

• bKash wallet numbers, Nagad account details, Rocket account references, Upay credentials, and Dutch-Bangla Bank, City Bank, or BRAC Bank account details used for deposits and withdrawals.
• Transaction history including deposit amounts, withdrawal requests, bonus credits, and net gaming activity expressed in Bangladeshi Taka (BDT).
• Source of funds declarations submitted during enhanced due diligence reviews.
• We do not store full bKash PINs, Nagad authentication codes, or complete bank card numbers on our servers at any time.

Technical & Usage Data

• IP address, device type, operating system, browser type and version, and screen resolution.
• Session duration, login timestamps, pages visited, game titles played, bet amounts, and in-platform navigation patterns.
• Error logs, crash reports, and performance telemetry data used to diagnose and improve Platform stability.
• Geolocation data at the region or city level, derived from IP address, to assist with fraud detection and regulatory compliance.

Communications Data

• Records of all support interactions including live chat transcripts, email correspondence, and any formal dispute submissions.
• Feedback, survey responses, and any unsolicited communications you send to the 668bd support team.

3 How We Collect Data

668bd collects personal data through the following channels and mechanisms:

• Direct provision: Data you enter voluntarily during account registration, KYC submission, deposit and withdrawal requests, support contact, and promotional opt-ins.
• Automated collection: Technical and usage data collected automatically through cookies, web beacons, server logs, and analytics tools when you interact with the Platform.
• Third-party payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and banking partners upon completion or failure of a payment instruction.
• Identity verification services: Data returned by third-party KYC and anti-money laundering (AML) screening services used to verify the identity and risk profile of registered players.
• Game studio data feeds: Anonymised game outcome and session data provided by game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe, and others integrated into the 668bd Platform.
• Publicly available sources: In certain fraud investigation or AML screening scenarios, 668bd may review publicly available information including sanctions lists, adverse media databases, and court records.

4 Purpose of Processing

668bd processes personal data for the following clearly defined purposes:

• Account management: Creating, maintaining, and securing your 668bd player account, including authentication, password recovery, and session management.
• Service delivery: Processing deposits and withdrawals, settling bets, crediting bonuses, and delivering the full range of betting and casino services available on the Platform.
• Identity verification (KYC): Verifying your identity and age to comply with regulatory requirements and to prevent underage gambling. All players must be 21 years of age or older.
• Fraud prevention and AML compliance: Detecting, investigating, and preventing fraudulent transactions, money laundering, and other financial crimes in accordance with applicable anti-money laundering obligations.
• Responsible gaming: Monitoring gaming behaviour to identify signs of problem gambling, applying self-exclusion restrictions, enforcing deposit limits, and facilitating access to responsible gaming tools.
• Customer support: Responding to queries, resolving disputes, processing complaints, and providing technical assistance to players via the support team.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates via email or SMS to players who have provided explicit consent to receive such communications. You may withdraw marketing consent at any time.
• Platform improvement: Analysing aggregated and anonymised usage data to improve game performance, user experience, navigation, and the overall quality of the 668bd Platform.
• Legal and regulatory compliance: Meeting obligations imposed by applicable law, responding to lawful requests from regulatory or law enforcement authorities, and maintaining records as required by financial regulations.

5 Legal Basis for Processing

668bd relies on the following legal bases when processing your personal data:

• Contractual necessity: Processing required to fulfil the contract between you and 668bd as set out in the Terms & Conditions — including account creation, transaction processing, and game settlement.
• Legal obligation: Processing required to comply with applicable laws, including KYC verification, AML screening, age verification, and record-keeping obligations.
• Legitimate interests: Processing carried out for the legitimate interests of 668bd, including fraud detection, platform security, responsible gaming monitoring, and business analytics — provided these interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, informed consent — principally for direct marketing communications and optional cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Data Sharing & Disclosure

668bd does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Personal data is shared only in the following limited and controlled circumstances:

• Payment processors: Transaction data is shared with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank solely for the purpose of processing deposit and withdrawal instructions initiated by you.
• KYC and AML service providers: Identity and documentation data is shared with certified third-party identity verification and sanctions screening providers for the purposes of regulatory compliance.
• Game studio providers: Limited technical session data is shared with game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe, and others) as necessary to deliver their games through the 668bd Platform.
• IT and infrastructure service providers: Hosting, cloud storage, cybersecurity, and customer support technology providers who access data only under strict data processing agreements and solely to deliver services on behalf of 668bd.
• Regulatory and law enforcement authorities: Where 668bd is legally required to disclose data in response to a valid court order, regulatory demand, or law enforcement request, we will comply with such obligation and, where permitted, notify the affected player.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of 668bd's assets, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained.

All third-party processors engaged by 668bd are contractually bound to process personal data only on 668bd's documented instructions, to maintain appropriate technical and organisational security measures, and to delete or return data upon termination of the processing relationship.

7 Data Retention

668bd retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained throughout the duration of your active relationship with 668bd, including any dormancy periods during which your account remains open.
• Post-closure retention: Following account closure, identity, transaction, and KYC records are retained for a minimum of five (5) years to satisfy anti-money laundering record-keeping requirements.
• Support and communications records: Retained for a minimum of three (3) years from the date of the last interaction, to support dispute resolution and regulatory audit requirements.
• Marketing consent records: Retained for the duration of your consent and for three (3) years after withdrawal, as evidence of consent management.
• Technical and usage logs: Retained for up to twelve (12) months for Platform performance and fraud investigation purposes, then deleted or anonymised.

Where retention beyond these periods is required by a specific legal obligation, regulatory investigation, or ongoing dispute, 668bd will retain the relevant data until that obligation or proceeding is resolved. At the end of any retention period, data is securely deleted or irreversibly anonymised.

8 Security Measures

668bd implements a multi-layered technical and organisational security framework to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures in place include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the 668bd Platform is protected by industry-standard 256-bit SSL/TLS encryption, preventing interception in transit.
• Encrypted data storage: Sensitive personal data stored in 668bd's systems — including identity documents, KYC records, and financial data — is encrypted at rest using AES-256 encryption standards.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Internal access controls, role-based permissions, and audit logging are enforced across all systems that handle personal data.
• OTP and two-factor authentication: Player accounts are protected by OTP-based login verification. Additional authentication layers are available to players through account security settings.
• Penetration testing and security audits: 668bd conducts regular security assessments, including third-party penetration testing and vulnerability scanning, to identify and remediate security weaknesses proactively.
• Incident response procedures: In the event of a personal data breach that poses a risk to affected individuals, 668bd maintains documented incident response procedures to contain the breach, assess its scope, notify affected players where required, and report to relevant authorities within applicable timeframes.

9 Cookies & Tracking Technologies

668bd uses cookies and similar tracking technologies to provide essential Platform functionality, analyse usage patterns, and deliver a personalised experience. The following cookie categories are used on the Platform:

• Strictly necessary cookies: Required for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without impairing core Platform functionality.
• Functional cookies: Store your preferences such as language settings, preferred display options, and recently visited game categories to enhance your experience on return visits.
• Analytics cookies: Collect anonymised data about how players navigate the Platform — including pages visited, session duration, and game interactions — to help 668bd improve Platform performance and content relevance.
• Marketing and targeting cookies: Used (with your consent) to deliver relevant promotional content and to measure the effectiveness of 668bd's marketing campaigns. These cookies do not track your activity on third-party websites.

You may manage your cookie preferences through your browser settings at any time. Note that disabling certain categories of cookies may affect the functionality or performance of the 668bd Platform. Strictly necessary cookies cannot be disabled through browser settings as they are essential for the Platform's operation.

10 Your Data Rights

As a data subject, you hold a number of rights in relation to the personal data 668bd holds about you. The table below summarises each right and how to exercise it:

668bd will respond to all data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, in which case you will be notified of the extension and the reasons for it. 668bd will not charge a fee for processing data rights requests unless a request is manifestly unfounded or excessive.

11 Children's Privacy

The 668bd Platform is strictly intended for adults aged 21 years and above. 668bd does not knowingly collect, process, or retain personal data relating to any individual under the age of 21. Age verification is a mandatory component of the 668bd KYC process, and accounts where the holder is found to be under 21 will be immediately suspended and any funds returned to the original payment source.

12 International Data Transfers

668bd's primary data processing infrastructure is located in secure data centres serving the Asia-Pacific region. In certain circumstances — for example, where a third-party service provider operates infrastructure outside Bangladesh — personal data may be transferred to and processed in countries other than Bangladesh.

Where such transfers occur, 668bd ensures that appropriate safeguards are in place to protect your data, including contractual data protection clauses, data processing agreements, and, where applicable, adequacy assessments of the destination jurisdiction's data protection framework. 668bd will not transfer personal data to any jurisdiction that does not provide an adequate level of protection for personal data without first implementing appropriate technical and contractual safeguards.

13 Changes to This Privacy Policy

668bd reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. When material changes are made, 668bd will notify registered players via their registered email address and display a prominent notice on the Platform prior to the changes taking effect.

The effective date displayed at the top of this page will be updated whenever substantive changes are made. We encourage you to review this Privacy Policy periodically. Your continued use of the 668bd Platform after any revision constitutes your acknowledgement of the updated Privacy Policy. If you do not agree with any revision, you must discontinue use of the Platform and contact our support team to request account closure.

14 Contact Our Data Protection Team

If you have any questions about this Privacy Policy, wish to exercise a data right, or have concerns about how 668bd handles your personal data, please contact our Data Protection team using the details below. All privacy-related enquiries are handled with strict confidentiality.

For general account support, bonus queries, or payment issues, please use the same email address and our support team will route your enquiry to the appropriate team. All correspondence is handled in English.