Privacy Policy — How bdj678 Protects Your Data

bdj678 operates as the data controller for all personal information collected through the bdj678 platform. As data controller, bdj678 determines the purposes and means by which personal data is processed. All data processing activities described in this Policy are carried out under the authority and responsibility of bdj678.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, you may contact the bdj678 data team at any time using the details below:

• Platform: bdj678 — https://bdj678.com
• Contact Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week, in English
• Market: Bangladesh (all regions including Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh, and Cox's Bazar)

All privacy-related enquiries should be submitted with the subject line "Privacy Enquiry" to ensure they are routed to the appropriate team. bdj678 acknowledges all privacy correspondence within 48 hours and aims to provide a substantive response within 10 business days (Bangladesh Standard Time, UTC+6).

bdj678 collects personal information from users through several means: information you provide directly during registration and ongoing account use, information generated automatically through your interaction with the platform, and information received from trusted third-party service providers. The categories of data we collect are described below.

Information You Provide Directly:

• Registration Data: Full legal name, date of birth, residential address, email address, and mobile phone number provided when creating your bdj678 account.
• Identity Verification (KYC) Data: Copies of government-issued photo identification (National ID Card, passport, or driving licence), selfie photographs, and proof of payment method ownership submitted during the Know Your Customer (KYC) verification process.
• Financial Data: Payment method details including bKash wallet numbers, Nagad wallet numbers, Rocket numbers, Upay details, and bank account information provided for deposits and withdrawals. bdj678 does not store full card numbers; card data is processed directly by PCI-DSS compliant payment processors.
• Communications Data: Records of all correspondence you send to bdj678 via email or live chat, including support requests, dispute submissions, and feedback. This includes the content of messages and any attachments.
• Preference Data: Account settings, notification preferences, responsible gaming limit settings, and marketing communication preferences you configure in your account dashboard.

Information Collected Automatically:

• Usage Data: Pages visited on the bdj678 platform, features accessed, games played, bets placed, session duration, click-path data, and search queries entered within the platform.
• Device and Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Transaction Data: Complete records of all deposits, withdrawals, bets, game rounds, bonus activations, and balance movements on your account, including timestamps in Bangladesh Standard Time (BST, UTC+6).
• Location Data: Approximate geographic location derived from your IP address, used for fraud prevention and compliance purposes. bdj678 does not request or use precise GPS location data.
• Cookies and Tracking Data: Data collected via cookies and similar tracking technologies as described in Section 6 of this Policy.

Information Received from Third Parties:

• Payment Processor Confirmations: Transaction status and reference data received from payment processors including bKash, Nagad, Rocket, Upay, and banking partners to confirm the status of deposits and withdrawals.
• Identity Verification Partners: Verification status and flag data returned by third-party KYC service providers used to assist with identity document authentication.
• Fraud Prevention Services: Risk signals and fraud indicators provided by third-party fraud detection services to protect the integrity of the bdj678 platform and its users.

bdj678 processes your personal data on one or more of the following legal grounds, depending on the specific purpose for which the data is being used:

• Contractual Necessity: Processing is necessary to enter into and perform the contract between you and bdj678 — that is, to provide you with account registration, gaming services, deposits, withdrawals, and customer support. Without this processing, bdj678 cannot deliver the services you have requested.
• Legal Obligation: Processing is necessary for bdj678 to comply with applicable legal obligations, including anti-money laundering (AML) requirements, Know Your Customer (KYC) obligations, fraud prevention duties, and record-keeping requirements imposed by applicable law.
• Legitimate Interests: Processing is necessary for bdj678's legitimate business interests, provided those interests are not overridden by your rights and interests. Legitimate interests relied upon by bdj678 include: platform security, fraud detection and prevention, responsible gaming monitoring, business analytics, and improving the platform experience for all users.
• Consent: Where bdj678 relies on your consent as the legal basis for processing — for example, for optional marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent for marketing communications, update your preferences in the account dashboard or contact [email protected].

bdj678 does not make automated decisions that produce legal or similarly significant effects about you without human review. Where automated monitoring flags an account for review (for example, as part of our responsible gaming or AML systems), a member of the bdj678 compliance team will review the flagged case before any account action is taken.

bdj678 uses the personal data it collects for specific, defined purposes only. We do not use your data for any purpose that is incompatible with the purpose for which it was originally collected without your explicit consent. The primary purposes for which bdj678 uses your data are:

• Account Creation and Management: To register your account, verify your identity through the KYC process, manage your account settings and preferences, and maintain accurate records of your account history.
• Service Delivery: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and banking partners; to record and settle bets; to award bonus credits; to run game sessions; and to deliver all other core platform functions.
• Customer Support: To respond to your support requests, investigate complaints and disputes, and provide assistance with account queries. Support correspondence is retained to maintain a clear record of interactions and to improve service quality.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct as described in the bdj678 Terms & Conditions. This includes monitoring for unusual account activity, multiple-account detection, and IP analysis.
• Responsible Gaming Compliance: To monitor gambling patterns for signs of problem gambling, to enforce self-exclusion requests, to apply deposit and loss limits set by the player, and to carry out responsible gaming outreach as required.
• Legal and Regulatory Compliance: To meet KYC, AML, and other compliance obligations, to respond to lawful requests from competent authorities, and to maintain records required by applicable law.
• Platform Improvement: To analyse aggregated usage data, identify technical issues, test new features, and improve the overall performance and user experience of the bdj678 platform. Analytics data used for this purpose is aggregated and de-identified where possible.
• Marketing Communications (with consent): To send you promotional offers, bonus notifications, tournament announcements, and seasonal promotions (such as Eid, BPL, and IPL season offers) via email or SMS, where you have opted in to receive such communications. You may opt out at any time through your account dashboard or by contacting support.

bdj678 does not sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes. Your data is shared only in the limited circumstances described below, and only to the extent necessary for the specified purpose.

Service Providers and Data Processors: bdj678 engages third-party service providers to assist with specific operational functions. These providers process your data on bdj678's behalf, under contractual obligations that require them to protect your data and use it only for the purposes for which it was shared. Categories of service providers include:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank — to process deposit and withdrawal transactions.
• Identity Verification Providers: Third-party KYC service providers engaged to assist with the authentication of identity documents during the verification process.
• Game Studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to deliver licensed game content. These studios may receive technical session data necessary to run games but do not receive your full personal profile.
• Fraud Detection Services: Third-party fraud prevention tools that analyse risk signals associated with account activity. These tools receive technical data (such as IP address and device fingerprint) but not your full personal profile.
• Cloud and Infrastructure Providers: Hosting, storage, and infrastructure providers used to operate the bdj678 platform securely.

Legal Disclosures: bdj678 may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other competent authorities where required to do so by applicable law, a court order, or a lawful regulatory request. In all such cases, bdj678 will disclose only the minimum amount of data necessary to satisfy the legal obligation and will, where legally permitted, notify you of the disclosure.

Business Transfers: In the event of a merger, acquisition, or sale of all or a material portion of bdj678's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such an event, bdj678 will notify affected users via the registered email address and the updated entity will be bound by the terms of this Privacy Policy with respect to pre-transfer data.

Aggregate and Anonymised Data: bdj678 may share aggregated, anonymised, or de-identified statistical data with analytics partners, industry bodies, or for research purposes. This data cannot be used to identify any individual user and is not subject to the protections applicable to personal data.

bdj678 uses cookies and similar tracking technologies to operate the platform, remember your preferences, keep your session active, and gather analytics data that helps us improve the platform experience. This section explains what cookies we use and why.

What Are Cookies? Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and to store information about your interaction with the site. Cookies do not contain executable code and cannot access other files on your device.

Types of Cookies Used by bdj678:

Managing Cookies: Most web browsers allow you to control cookie behaviour through their settings. You can configure your browser to block all cookies, accept only first-party cookies, or notify you when a cookie is being set. Please note that disabling strictly necessary cookies will significantly impair your ability to use the bdj678 platform and may prevent login functionality from working correctly. Instructions for managing cookies are available in the help section of your browser.

Third-Party Cookies: Some third-party services integrated into the bdj678 platform — such as game studios and fraud prevention tools — may place their own cookies on your device. These cookies are subject to the respective third party's own privacy and cookie policies. bdj678 does not control third-party cookies and is not responsible for their content.

bdj678 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, as described in this Policy, or as required by applicable law. The following retention periods apply to the main categories of personal data held by bdj678:

When the applicable retention period expires, bdj678 will securely delete or irreversibly anonymise the relevant data. Anonymised data (which can no longer be linked to any individual) may be retained indefinitely for statistical and analytical purposes.

Where bdj678 is required by a competent authority to preserve specific data beyond the standard retention period — for example, in connection with an ongoing legal investigation — that data will be held until the authority confirms that preservation is no longer required, and then deleted in accordance with the standard schedule.

bdj678 respects your rights over your personal data. The following rights are available to all bdj678 users with respect to the personal data we hold about them. To exercise any of these rights, contact the bdj678 data team at [email protected] with the subject line "Privacy Rights Request".

• Right of Access: You have the right to request a copy of the personal data bdj678 holds about you, along with information about how it is being used. bdj678 will provide this information within 30 days of receiving a valid request.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data held about you be corrected. For standard account details (email address, mobile number, address), updates can be made directly via the account dashboard after submitting supporting documentation to [email protected].
• Right to Erasure ("Right to be Forgotten"): You may request that bdj678 delete your personal data. This right is subject to limitations — bdj678 is required to retain certain data for legal and compliance purposes (see Section 7), and such data cannot be deleted on request. Where deletion is possible, bdj678 will confirm completion within 30 days.
• Right to Restriction of Processing: In certain circumstances (for example, while a dispute about data accuracy is being resolved), you may request that bdj678 restrict its processing of your data to storage only, pausing any active use of the data until the matter is resolved.
• Right to Data Portability: You may request a copy of the personal data you have provided to bdj678 in a structured, commonly used, machine-readable format (such as CSV or JSON), to the extent that such data is processed on the basis of your consent or contractual necessity.
• Right to Object: You have the right to object to the processing of your personal data where bdj678 relies on legitimate interests as the legal basis. bdj678 will assess the objection and cease processing unless there are compelling legitimate grounds that override your interests. You have an unconditional right to object to processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without penalty. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.

bdj678 will respond to all valid privacy rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 30 days, in which case bdj678 will notify you of the extension and the reason for it. bdj678 does not charge a fee for handling privacy rights requests unless requests are manifestly unfounded or excessive, in which case a reasonable administrative fee may be applied.

bdj678 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures are reviewed and updated regularly in line with evolving security standards.

Technical Measures:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the bdj678 platform is encrypted using industry-standard 256-bit Secure Sockets Layer (SSL) / Transport Layer Security (TLS) protocols. The padlock icon in your browser address bar confirms an active encrypted connection.
• Data Encryption at Rest: Sensitive personal data stored in bdj678 databases — including KYC documents and financial data — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within bdj678's internal systems is restricted on a strict need-to-know basis. Staff access rights are reviewed regularly and revoked immediately upon change of role or departure.
• Two-Factor Authentication: bdj678 supports and recommends 2FA on all player accounts to add a second layer of protection beyond password credentials.
• Intrusion Detection and Monitoring: bdj678's infrastructure is monitored continuously for suspicious access patterns, intrusion attempts, and anomalous activity. Automated alerts escalate detected threats to the security team in real time.
• PCI-DSS Compliant Payment Handling: Payment card and mobile wallet transaction data is processed by PCI-DSS compliant payment processors. bdj678 does not store full payment card numbers on its own servers.

Organisational Measures:

• All bdj678 staff who handle personal data are subject to contractual confidentiality obligations and receive data protection training relevant to their role.
• Third-party service providers with access to personal data are subject to data processing agreements that impose appropriate security and confidentiality obligations.
• bdj678 maintains an incident response plan for data security events. In the event of a data breach that poses a risk to affected users, bdj678 will notify impacted users without undue delay and will take immediate steps to contain and remediate the breach.

While bdj678 takes all reasonable steps to protect your data, no internet transmission or electronic storage system is completely immune to risk. Users are encouraged to protect their own accounts by choosing strong, unique passwords, enabling two-factor authentication, and contacting [email protected] immediately if they suspect any unauthorised access to their account.

bdj678 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, platform features, applicable law, or regulatory guidance. The most current version of this Policy will always be available at https://bdj678.com/privacy-policy, with the effective date clearly noted at the top of the document.

When changes to this Policy are material — meaning they significantly affect how your data is collected, used, or shared — bdj678 will notify registered users via email to the address on file at least 7 days before the updated Policy comes into effect. For minor or clarifying updates that do not materially alter your rights or bdj678's data practices, the Policy will be updated without prior individual notification.

Your continued use of the bdj678 platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should cease using the platform and submit an account closure request to [email protected] prior to the effective date of the updated Policy.

bdj678 recommends that all users review this Privacy Policy periodically — at minimum once per quarter — to stay informed of any changes. The version history of this Policy, including a summary of material changes, is available upon request by contacting [email protected] with the subject line "Privacy Policy Version History".