Privacy Policy – Your Data at 675bd

Who We Are

This Privacy Policy is published by 675bd ("the Platform", "we", "us", "our"), the operator of the online betting and casino website located at https://675bd.io. 675bd operates as a data controller in respect of the personal data it collects from users ("you", "your") who access, register, or interact with the platform in any capacity.

675bd provides online sports betting, live casino games, slot games, and related account management services primarily to users based in Bangladesh. All services are delivered in English, and all data handling practices described in this Policy apply uniformly to every user of the platform regardless of their location, unless a specific geographic exception is noted.

Data We Collect

675bd collects personal data from you in three primary ways: data you provide directly during registration and use of the platform; data generated automatically by your interaction with the platform; and data received from third-party service providers such as payment processors and KYC verification partners.

2.1 Data You Provide Directly

• Registration data: Full legal name, date of birth, email address, mobile phone number, and residential address in Bangladesh.
• Identity verification (KYC) documents: Copies of your Bangladesh National Identity Card (NID), passport, or other government-issued photo ID; proof of address documents; and payment method verification documents where required.
• Financial data: Your preferred payment method (bKash, Nagad, Rocket, Upay, bank account details), transaction amounts, deposit and withdrawal history, and balance information.
• Communications data: Any messages, emails, or live chat transcripts exchanged between you and the 675bd support team.
• Responsible gaming data: Self-imposed deposit limits, loss limits, session time limits, cooling-off periods, and self-exclusion requests you submit through your account settings.

2.2 Data Collected Automatically

• Technical data: IP address, browser type and version, operating system, device type, screen resolution, and time zone setting.
• Usage data: Pages visited, games played, bets placed, session duration, click-stream data, search queries, and feature interactions within the platform.
• Cookie data: Session cookies, preference cookies, analytics cookies, and security cookies as described in Section 5 of this Policy.
• Location data: Approximate geographic location derived from your IP address, used solely to verify that you are accessing the platform from a permitted jurisdiction.

2.3 Data Received from Third Parties

• Payment providers: Transaction confirmation data, payment status updates, and fraud screening results from bKash, Nagad, Rocket, Upay, and banking partners.
• KYC and identity verification partners: Identity verification outcomes, document authenticity assessments, and sanctions or politically exposed person (PEP) screening results.
• Game providers: Game session records, round outcomes, RTP data, and bonus eligibility data from providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi.
• Fraud and AML monitoring services: Risk scores and transaction pattern alerts from third-party anti-money laundering compliance tools.

How We Use Your Data

675bd processes personal data for specific, documented purposes. We do not use your data for any purpose that is incompatible with the purpose for which it was originally collected. The primary purposes for which 675bd uses personal data are as follows:

• Account registration and management: To create and maintain your 675bd account, verify your identity, and keep your profile information accurate and up to date.
• Service delivery: To process bets, settle game outcomes, credit winnings, process deposits, and execute withdrawal requests via your chosen payment method.
• Identity and age verification: To verify that you are at least 21 years of age and are who you claim to be, in compliance with our Know Your Customer (KYC) obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover, and other illegal or prohibited conduct on the platform.
• Responsible gaming compliance: To apply the deposit limits, loss limits, time-out settings, and self-exclusion measures that you have requested, and to monitor for signs of problem gambling behaviour.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance.
• Legal and regulatory compliance: To fulfil record-keeping, reporting, and audit obligations required under applicable anti-money laundering, counter-terrorist financing, and financial services laws.
• Platform improvement: To analyse usage patterns, test new features, fix bugs, and improve the overall user experience on the 675bd platform.
• Marketing communications: To send you promotional offers, bonus notifications, and news about new games or features — but only where you have opted in to receive such communications and only via the channel you selected during registration.

Legal Bases for Processing

675bd processes your personal data under the following legal bases, depending on the specific processing activity:

• Contract performance: Processing that is necessary to fulfil our contractual obligations to you under the 675bd Terms & Conditions — including account management, payment processing, and bet settlement.
• Legal obligation: Processing that is required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and financial record-keeping obligations.
• Legitimate interests: Processing that is necessary for 675bd's legitimate business interests, including fraud detection, platform security, abuse prevention, and service improvement — provided that these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing that is carried out on the basis of your freely given, specific, and informed consent — most notably for marketing communications and for the placement of non-essential cookies. You may withdraw consent at any time.

Cookies & Tracking Technologies

675bd uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse site performance, and maintain session security. The following categories of cookies are used:

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during a visit and security tokens that protect against cross-site request forgery (CSRF). These cookies cannot be disabled without impairing the functionality of the platform.
• Preference cookies: Store settings you have chosen, such as your preferred language, odds format, and notification preferences, so that you do not need to reconfigure them on each visit.
• Analytics cookies: Allow 675bd to understand how users navigate the platform — which pages are most visited, where users drop off, and how features are used. This data is aggregated and anonymised where possible. Analytics cookies are placed only with your consent.
• Security and fraud prevention cookies: Help 675bd identify unusual activity patterns that may indicate account takeover attempts, bot activity, or other security threats. These are treated as essential for platform integrity.

You can manage your cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging in to your 675bd account. 675bd does not use third-party advertising or retargeting cookies.

Third-Party Data Sharing

675bd does not sell, rent, or exchange your personal data with third parties for their own commercial purposes. We share personal data with third parties only in the following limited and documented circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive transaction data that is necessary to process your deposits and withdrawals. Each of these providers operates under its own privacy policy and data security obligations.
• KYC and identity verification partners: Third-party KYC service providers receive copies of your identity documents and perform verification checks on our behalf. These providers act as data processors under contract and are prohibited from using your data for any other purpose.
• Game content providers: Game session data (player ID, round outcomes, bet amounts) is shared with providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to facilitate game play and resolve disputes. No personally identifying data beyond a pseudonymous player reference is shared with game providers.
• Fraud and AML compliance tools: Aggregated transaction and behavioural data may be shared with third-party anti-money laundering screening services to identify and prevent financial crime.
• Law enforcement and regulatory authorities: 675bd will disclose personal data to competent governmental or regulatory authorities where required to do so by a valid legal obligation, court order, or regulatory direction. We will notify you of such disclosure where we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of assets involving 675bd, your personal data may be transferred to the acquiring entity, which will be required to honour this Privacy Policy or provide you with notice of any material changes.

Payment Data

675bd treats financial and payment data with a heightened level of care. When you make a deposit or request a withdrawal, the transaction is processed via your chosen payment provider (bKash, Nagad, Rocket, Upay, or a linked bank account). 675bd does not store your full mobile banking PIN, full card number, or online banking password at any point.

675bd retains records of transaction amounts, timestamps, payment methods used, and transaction reference numbers for a minimum of seven years in accordance with financial record-keeping requirements. These records may be accessed by the 675bd compliance team and disclosed to authorities as required by law. They are used solely for fraud prevention, dispute resolution, AML compliance, and audit purposes — not for marketing.

All payment data in transit between your device and 675bd's payment processing infrastructure is encrypted using TLS 1.3. Payment data at rest is stored on access-controlled, encrypted storage systems with restricted access logs maintained for security audit purposes.

Data Retention

675bd retains personal data for the minimum period necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. The following retention periods apply as a general guide:

• Active account data: Retained for the duration of your active account relationship with 675bd, plus a minimum of five years following account closure.
• KYC and identity documents: Retained for a minimum of five years after the end of the business relationship, in compliance with anti-money laundering record-keeping obligations.
• Transaction and payment records: Retained for a minimum of seven years following each transaction date.
• Customer support communications: Retained for three years from the date of the last interaction, for dispute resolution and quality assurance purposes.
• Analytics and usage data: Retained in anonymised or aggregated form indefinitely for platform improvement purposes; individually identifiable usage data is retained for a maximum of 24 months.
• Marketing consent records: Retained for as long as your marketing consent is active, plus one year following any withdrawal of consent.

When personal data is no longer required and no legal retention obligation applies, 675bd securely destroys or permanently anonymises the data in accordance with our internal data disposal procedures.

Data Security

675bd implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS 1.3 encryption for all data in transit between your device and our servers.
• AES-256 encryption for all personally identifiable data stored on 675bd servers.
• Role-based access controls that limit access to personal data to authorised personnel with a documented business need.
• Multi-factor authentication (MFA) requirements for all internal staff accessing production systems containing user data.
• Regular third-party security audits, penetration testing, and vulnerability assessments.
• Real-time intrusion detection and prevention systems (IDS/IPS) monitoring all network traffic.
• Immutable audit logs of all access to and modifications of personally identifiable data.
• A documented incident response plan that specifies notification timelines and responsibilities in the event of a data breach.

Your Rights

As a 675bd user, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact the 675bd support team at support@675bd.io with the subject line "Data Rights Request". We will respond within five business days.

Children & Minors

The 675bd platform is strictly intended for adults aged 21 and above. 675bd does not knowingly collect, process, or retain personal data from any individual under the age of 21. If you believe that a minor has registered or attempted to register an account with 675bd, please contact us immediately at support@675bd.io. Any account found to belong to a person under 21 years of age will be closed immediately, all bets voided, all deposits returned (net of any withdrawals already made), and all associated personal data securely deleted.

Age verification is performed as part of the mandatory KYC process that every account holder must complete. 675bd uses government-issued identity documents to confirm date of birth and will decline to process any account where the holder cannot be confirmed as 21 years of age or older.

International Data Transfers

675bd's primary user base is in Bangladesh and the platform is operated with Bangladesh Standard Time (BST, UTC+6) as its operational reference. However, some of the third-party service providers used by 675bd — including game providers and technical infrastructure partners — may process data on servers located outside Bangladesh.

Where personal data is transferred outside Bangladesh, 675bd takes steps to ensure that an equivalent level of data protection is maintained. This is achieved through the inclusion of binding data transfer clauses in all contracts with international service providers, requiring them to apply technical and organisational security measures that meet or exceed the standards described in this Privacy Policy.

If you would like more information about the specific transfer safeguards applicable to any particular third-party processor, please contact us at support@675bd.io.

Updates to This Privacy Policy

675bd reviews this Privacy Policy periodically to ensure it remains accurate, complete, and aligned with any changes in our data processing activities, applicable law, or regulatory guidance. When material changes are made, we will notify you by email to your registered address at least 14 days before the updated Policy takes effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Continued use of the 675bd platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree with the updated terms, you should close your account prior to the effective date of the change.

We recommend that you review this page each time you access the platform to stay informed about how 675bd is protecting your data. Past versions of this Policy are available on request by contacting the support team.

Contact & Complaints

If you have any questions, concerns, or complaints about the way 675bd handles your personal data, or if you wish to exercise any of your data rights described in Section 10, please contact us using the following details. All correspondence should be in English:

Email: support@675bd.io (subject line: "Privacy Enquiry" or "Data Rights Request")

Response time: Within 5 business days (Bangladesh Standard Time, UTC+6)

Platform: https://675bd.io

675bd is committed to resolving all privacy concerns promptly and transparently. If you are not satisfied with the outcome of an internal complaint, you retain the right to escalate the matter to a competent supervisory authority in your jurisdiction. 675bd will cooperate fully with any such authority in the course of a legitimate investigation.