bd667 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes the data practices of bd667, the online casino and sports betting platform available at https://bd667.io ("the Platform", "we", "us", or "our"). It applies to all personal data collected from users who visit, register on, or interact with the bd667 platform, including through the website, mobile interfaces, live chat, and email correspondence.

We are committed to handling your personal data lawfully, transparently, and in strict accordance with the principles of data minimisation, purpose limitation, and storage limitation. Our platform serves players across Bangladesh — from Dhaka and Chittagong to Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh — and we recognise the responsibility that comes with holding sensitive financial and identity data for a large, geographically distributed player base.

Please read this Policy carefully. If you have questions or concerns about any aspect of our data practices, you may contact us at any time using the details provided in Section 15.

2 Data Controller

For the purposes of this Privacy Policy, bd667 acts as the data controller in respect of all personal data collected from registered players and site visitors. As data controller, bd667 determines the purposes and means of processing personal data in connection with the operation of the Platform.

Where bd667 engages third-party service providers to process personal data on our behalf — such as payment processors, identity verification services, or analytics platforms — those providers act as data processors and are bound by contractual obligations that restrict their use of your data to the specific purposes for which it was shared.

3 Personal Data We Collect

bd667 collects the following categories of personal data, which vary depending on your level of engagement with the Platform:

bd667 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data, except where health-related information is voluntarily provided in the context of a responsible gaming or self-exclusion request.

4 How We Collect Your Data

bd667 collects personal data through the following channels:

• Directly from you: when you complete the registration form, submit KYC documents, make a deposit or withdrawal, contact customer support, or interact with any platform feature that requires input.
• Automatically: through server logs, cookies, and analytics tools that record technical data about your device and session each time you access the Platform.
• From third-party payment providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard may transmit confirmation and status data to bd667 in connection with processing your transactions. bd667 does not receive full card numbers or mobile banking PINs through this channel.
• From identity verification partners: where bd667 uses a third-party KYC service to cross-reference submitted documents against public records databases, that service may return a verification result and risk score to bd667.
• From fraud detection tools: automated systems may flag unusual account behaviour or IP-based risk signals, which are logged and reviewed by our compliance team.

5 Purposes & Legal Basis for Processing

bd667 processes your personal data only where a lawful basis exists. The table below sets out each processing purpose, the data categories involved, and the applicable legal basis:

bd667 does not use your personal data for automated individual decision-making that produces legal or similarly significant effects, other than standard fraud-detection rules that may temporarily flag an account pending manual review.

6 Sharing Your Personal Data

bd667 shares personal data only with the categories of recipients listed below, and only to the extent strictly necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the transaction data necessary to initiate and confirm deposits and withdrawals. These providers operate under their own privacy policies and are responsible for data they hold in their own systems.
• Identity verification providers: Third-party KYC services receive copies of identity documents submitted during the verification process. These providers are contractually restricted from using this data for any purpose other than completing the verification request.
• Fraud and risk management partners: Anonymised or pseudonymised behavioural and technical data may be shared with fraud detection platforms to identify patterns associated with money laundering, multi-accounting, or payment fraud.
• Game software providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, PG Soft, Spribe, Ezugi, and other licensed studios may receive anonymised session data necessary to provide their games and calculate game-level RTP metrics. These providers do not receive identifiable personal data unless you interact directly with their live dealer environments.
• Legal and regulatory authorities: bd667 may disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by applicable law or in response to a valid legal process.
• Business successors: In the event of a merger, acquisition, or sale of all or part of bd667's business, personal data held at the time of transfer may form part of the transferred assets. Affected players will be notified prior to any such transfer where practicably possible.

7 Payment Data & Financial Transactions

bd667 processes financial data in connection with deposits and withdrawals in Bangladeshi Taka (৳ BDT). The specific handling of payment data is as follows:

• bd667 does not store full mobile banking credentials, PIN numbers, or complete card numbers on its own servers. All sensitive payment credentials are handled exclusively by the relevant payment provider using their own encrypted infrastructure.
• bd667 retains a masked record of the payment method used (for example, the last four digits of a card number or the first and last three digits of a mobile wallet number) for the purposes of withdrawal verification and fraud prevention.
• Transaction history — including deposit amounts, withdrawal amounts, dates, and method used — is retained for the full duration of your account and for a period thereafter in accordance with the retention schedule in Section 10.
• Financial transaction data may be disclosed to regulatory authorities or law enforcement where required by applicable law, including in the context of anti-money laundering (AML) investigations.

8 Cookies & Tracking Technologies

bd667 uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to understand how players engage with different sections of the site. The following categories of cookies are used:

• Essential cookies: These are strictly necessary for the platform to function. They maintain your login session, remember your account state between page loads, and prevent cross-site request forgery. Essential cookies cannot be disabled without breaking core platform functionality.
• Preference cookies: These remember your platform settings, such as your preferred language display and notification preferences. They do not track your activity outside of bd667.
• Analytics cookies: bd667 uses aggregated, anonymised analytics to understand which sections of the platform receive the most engagement, how long sessions last, and where users experience navigation difficulties. This data is used solely to improve the platform and is not linked to individual player identities.

bd667 does not deploy third-party advertising cookies, retargeting pixels, or social media tracking scripts on the Platform. You may manage cookie preferences through your browser settings. Note that disabling essential cookies may impair your ability to log in and use the Platform.

9 Data Security

bd667 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption on all data transmissions between player devices and bd667 servers.
• Encryption at rest for all databases containing personally identifiable information.
• Role-based access controls ensuring that only authorised bd667 personnel with a legitimate operational need can access player data.
• Regular security assessments and vulnerability testing of the Platform infrastructure.
• Intrusion detection systems and 24/7 monitoring of server logs for anomalous access patterns.
• Secure deletion protocols for data that has reached the end of its retention period.

While bd667 takes all reasonable technical and organisational measures to protect your data, no system can guarantee absolute security. In the unlikely event of a data breach that poses a risk to player rights or freedoms, bd667 will notify affected players and relevant authorities in accordance with applicable obligations and as promptly as practicably possible.

10 Data Retention

bd667 retains personal data only for as long as necessary to fulfil the purpose for which it was collected and to meet applicable legal, regulatory, and operational obligations. The following retention periods apply as a general guide:

• Active account data (identity, contact, financial, account activity): retained for the full duration of account activity.
• KYC documents: retained for a minimum period following account closure to satisfy anti-money laundering and record-keeping obligations.
• Transaction records: retained for a minimum period post-transaction to satisfy financial reporting obligations.
• Customer support communications: retained for up to three years following resolution of the relevant support case, or longer if the matter relates to an ongoing dispute or investigation.
• Technical and analytics data: typically anonymised or aggregated within 90 days of collection; raw technical logs are deleted on a rolling basis.
• Marketing consent records: retained for as long as you hold an active account, or until you withdraw consent, whichever comes first.

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Once anonymised, data no longer constitutes personal data and may be retained indefinitely for statistical purposes.

11 Your Data Rights

As a registered player on the bd667 platform, you hold the following rights in respect of your personal data. These rights may be subject to certain limitations where they conflict with bd667's legal obligations or the rights of other individuals:

• Right of access: You may request a copy of the personal data that bd667 holds about you at any time. bd667 will respond to verified access requests within 14 calendar days.
• Right of rectification: If any personal data held by bd667 is inaccurate or incomplete, you may request that it be corrected. Corrections to KYC-sensitive fields may require re-verification.
• Right of erasure: You may request that bd667 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding retention obligations. bd667 cannot delete data that it is legally required to retain.
• Right to restrict processing: You may request that bd667 temporarily suspend the active processing of your data in certain circumstances, for example while an accuracy dispute is being resolved.
• Right to data portability: You may request that bd667 provide your personal data in a structured, commonly used, machine-readable format suitable for transfer to another service provider.
• Right to withdraw consent: Where data is processed on the basis of your consent (such as for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to processing carried out on the basis of legitimate interests. bd667 will cease that processing unless compelling legitimate grounds exist that override your objection.

To exercise any of these rights, please contact bd667 customer support using the contact details in Section 15. All requests will be handled confidentially and responded to within 14 calendar days of receipt. bd667 may require identity verification before processing data rights requests to prevent unauthorised access to another player's information.

12 Children's Privacy

The bd667 platform is strictly intended for adults aged 21 years and above. bd667 does not knowingly collect, process, or retain personal data from individuals under the age of 21. The Platform employs age verification measures during registration to prevent underage access.

If bd667 becomes aware that personal data has been collected from an individual who is under 21, that data will be deleted from our systems promptly and the associated account will be permanently closed. If you have reason to believe that a minor has registered on the bd667 platform, please notify us immediately using the contact details in Section 15.

13 Marketing Communications

bd667 may send promotional communications, bonus offer notifications, tournament announcements, and seasonal promotions to players who have provided explicit opt-in consent to receive such communications. Marketing messages may be delivered by email or via on-platform notification.

You may opt out of marketing communications at any time by updating your notification preferences from within your account settings, or by contacting customer support and requesting removal from marketing lists. Opting out of marketing does not affect your ability to use the platform or receive essential service communications such as account security alerts, transaction confirmations, and KYC request notices.

bd667 does not share your contact information with third-party marketing organisations. All promotional communications originate directly from bd667 and relate exclusively to the bd667 platform. If you receive marketing communications purporting to be from bd667 through a channel you did not consent to, please report it to our support team immediately.

14 Changes to This Privacy Policy

bd667 reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. All revisions will be published on this page with an updated effective date at the top of the document.

Where a revision constitutes a material change to how we handle your personal data, bd667 will provide advance notice to registered players via on-platform notification or email where practicably possible. Your continued use of the Platform following the revised effective date constitutes your acknowledgement of the updated Policy.

Players are encouraged to review this Privacy Policy periodically to remain informed of how bd667 handles their data. The version of this Policy bearing the most recent effective date is the governing version.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or bd667's data practices — including requests to exercise your data rights under Section 11 — please contact the bd667 data support team through any of the following channels:

• Live chat: Available 24 hours a day, 7 days a week, directly through the bd667 platform after logging in.
• Email: [email protected] (plain text — not a clickable link). Please include your registered username and a clear description of your request or concern in all written correspondence.

bd667 takes all privacy concerns seriously. If you are unsatisfied with our response to a privacy-related complaint, you may escalate the matter through independent dispute resolution channels as appropriate to your jurisdiction.