Privacy Policy for bd680

bd680 ("bd680", "we", "us", "our") operates bd680.io, an English-language online sports betting and casino platform built specifically for players in Bangladesh. This Privacy Policy sets out in clear, accessible English how bd680 collects, uses, stores, discloses, and protects personal data belonging to registered players, prospective players who interact with the platform without completing registration, and visitors who browse the public-facing areas of bd680.io.

Privacy is not an afterthought at bd680 — it is a foundational element of the platform's design. Every data-handling decision is evaluated against the question of whether it genuinely serves the player's experience or the platform's legitimate operational requirements. Data that does not serve a defined purpose is not collected.

This policy is written in plain, formal English and is intended to be read and understood by players based across Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. If any part of this policy is unclear, bd680's customer support team is available 24/7 via live chat to answer questions in English.

bd680 is the data controller for all personal data collected through the bd680.io platform. As the data controller, bd680 determines the purposes and means of processing your personal data and is responsible for ensuring that all processing activities comply with applicable data protection obligations.

bd680 is an online betting and gaming platform dedicated to the Bangladesh market. The platform offers sports betting — with particular depth across cricket markets including the BPL (Bangladesh Premier League), Bangladesh Tigers international fixtures, the IPL, T20 World Cup, and ICC tournaments — as well as live dealer casino games powered by Evolution Gaming and Ezugi, slot titles from Pragmatic Play, NetEnt, Microgaming, and Spribe, and additional wagering products. All transactions are processed in Bangladeshi Taka (BDT).

For all privacy-related inquiries, data subject access requests, and complaints regarding the processing of your personal data, bd680 can be contacted via the details provided in Section 14 of this policy.

bd680 collects personal data in two principal ways: data you provide directly during registration and account use, and data collected automatically as you interact with the platform. The following table summarises the categories of personal data bd680 collects, the context in which each category is gathered, and the primary purpose it serves.

bd680 does not collect data from children under the age of 21. If we become aware that personal data has been submitted by a person under 21, that data will be deleted promptly and the associated account will be closed. See Section 10 for bd680's full policy on minors.

bd680 uses your personal data only for the purposes set out in this policy. The following list describes the specific activities for which personal data is processed and the data categories involved in each activity:

• Account Registration and Management: Identity data, contact data, and address data are used to create and maintain your bd680 account, communicate security alerts, and administer your account settings including responsible gaming tools such as deposit limits, session limits, and self-exclusion requests.
• Identity Verification (KYC): Identity data, address data, and verification documents are processed to confirm that you are who you say you are, that you are aged 21 or above, and that you are the legitimate owner of the payment methods linked to your account. This process is a standard requirement for responsible operation of an online betting platform and helps protect all players from fraud.
• Payment Processing: Financial data is used to process your deposits and withdrawals via the supported payment methods — bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer — and to maintain accurate transaction records on your account.
• Fraud Prevention and Security: Device and technical data, financial data, and usage data are analysed to detect and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and unauthorised access to player accounts.
• Responsible Gaming Monitoring: Usage and behavioural data — including session length, betting frequency, deposit patterns, and loss levels — is monitored by bd680's responsible gaming systems to identify accounts that may exhibit signs of problem gambling behaviour, enabling bd680 to intervene proactively where necessary.
• Customer Support: Communications data — including live chat transcripts and email correspondence — is used to respond to your support queries, resolve disputes, and maintain a record of interactions for quality assurance and staff training purposes.
• Platform Analytics and Improvement: Aggregated and anonymised usage data and cookie data are used to analyse how players interact with bd680, identify technical issues, and prioritise improvements to the platform's performance and user experience.
• Legal and Compliance Obligations: Financial data, identity data, and communications data may be retained and disclosed where required by applicable legal obligations, including anti-money laundering (AML) compliance requirements, and where bd680 is required to cooperate with lawful requests from relevant authorities.

bd680 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual Necessity: Processing is necessary to perform the contract between you and bd680 — that is, to operate your account, process your deposits and withdrawals, resolve disputes, and deliver the betting and gaming services you have registered to use.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory obligations, including know-your-customer (KYC) requirements, anti-money laundering (AML) obligations, and any lawful requests from authorities with jurisdiction over bd680's operations.
• Legitimate Interests: Processing is necessary for bd680's legitimate business interests, provided those interests are not overridden by your rights and interests. Legitimate interests pursued by bd680 include fraud detection and prevention, platform security, responsible gaming monitoring, and platform analytics. bd680 conducts a balancing assessment for each legitimate interest processing activity to confirm that the player's rights are appropriately protected.
• Consent: Where processing is based on your consent — such as the use of non-essential cookies — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent for essential cookies or core account-related communications may impair bd680's ability to deliver services to you.

bd680 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Your personal data is shared externally only in the limited circumstances described below, and in each case only to the extent strictly necessary for the relevant purpose:

• Payment Service Providers: Financial data and identity data are shared with the payment service providers that process your transactions — including bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks — to the extent required to authorise and settle your deposits and withdrawals. Each payment provider processes data under its own privacy policy and is independently responsible for data it holds in its own systems.
• Identity Verification Partners: Identity data and verification documents may be shared with specialist KYC and identity verification service providers engaged by bd680 to assist with the player verification process. These providers are contractually prohibited from using your data for any purpose other than the specific verification service they provide to bd680.
• Game Content Providers: When you play casino games or slot titles on bd680, limited technical data — such as your session token and stake data — is transmitted to the relevant game provider (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) to facilitate game play and RNG integrity. These providers operate under their own data agreements and do not receive your personal identity data from bd680.
• Technology and Infrastructure Partners: bd680 uses trusted third-party technology providers for hosting, cybersecurity, and platform infrastructure. These partners process data strictly as data processors acting on bd680's instructions and are bound by data processing agreements that prohibit use of the data for any other purpose.
• Legal and Regulatory Authorities: bd680 may disclose personal data to relevant authorities, law enforcement agencies, or regulatory bodies where required by applicable law or in response to a valid legal request. In such cases, bd680 will disclose only the minimum data required to comply with the legal obligation.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of bd680's business, player data may be transferred to the acquiring entity as part of that transaction, subject to the same privacy protections described in this policy. bd680 will notify registered players via email of any such transfer that materially affects the processing of their personal data.

bd680 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or for as long as required by applicable legal, regulatory, or compliance obligations. The following retention periods apply to the principal data categories held by bd680:

When the applicable retention period expires, bd680 will securely delete or anonymise the relevant personal data. Where data is anonymised rather than deleted, the resulting anonymised data set does not constitute personal data and may be retained indefinitely for statistical and analytical purposes.

If you exercise your right to erasure (see Section 8), bd680 will delete your personal data to the extent it is not required to retain it for the compliance and legal purposes described above. In that case, bd680 will inform you of which data it is required to retain and for how long.

As a registered bd680 player, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact bd680 in writing using the contact details provided in Section 14. bd680 will acknowledge receipt of your request promptly and aim to provide a substantive response within 30 calendar days.

• Right of Access: You have the right to request a copy of all personal data bd680 holds about you, along with information about the purposes for which it is processed, the categories of data held, and the recipients to whom it has been disclosed. This is known as a Data Subject Access Request (DSAR).
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by bd680. Where the inaccuracy relates to core identity data on your account, bd680 may require you to provide supporting documentation before making the correction.
• Right to Erasure ("Right to Be Forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent on which processing is based, or where you object to processing and there are no overriding legitimate grounds. This right is subject to bd680's legal and compliance retention obligations, as described in Section 7.
• Right to Restriction of Processing: You have the right to request that bd680 restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you have objected to processing and the assessment of overriding grounds is pending.
• Right to Data Portability: Where processing is based on your consent or on contract performance, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to have that data transmitted to another controller where technically feasible.
• Right to Object: You have the right to object to processing based on bd680's legitimate interests at any time. bd680 will cease that processing unless it can demonstrate compelling legitimate grounds that override your rights and interests.
• Rights Related to Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects. As noted in Section 4, bd680 does not make such decisions without a human review stage.

bd680 uses cookies and similar technologies — including local storage objects and session identifiers — to operate the platform, maintain your logged-in session, remember your preferences, and analyse how the platform is used. The following categories of cookies are used on bd680.io:

• Strictly Necessary Cookies: These cookies are essential for the bd680 platform to function. They enable core features including login session maintenance, security token validation, and cashier session integrity. These cookies cannot be disabled without impairing your ability to use the platform. No consent is required for strictly necessary cookies.
• Functional Cookies: These cookies remember your preferences — such as your selected display settings or the last game category you browsed — to provide a more personalised experience. They are not essential but improve convenience. You may disable these cookies via your browser settings; doing so will not prevent you from using the platform but may result in some preferences being reset.
• Performance and Analytics Cookies: These cookies collect aggregated, anonymised data about how visitors interact with bd680.io — including page visit frequency, time spent on pages, and navigation paths. This data is used to identify areas for improvement and to optimise the platform's structure and performance. Individual users cannot be identified from this data.
• Session Security Cookies: Short-lived cookies used to validate your identity within an active session and protect your account against cross-site request forgery (CSRF) and session hijacking attacks. These are strictly necessary and cannot be disabled.

bd680 does not use third-party advertising cookies or tracking pixels that build profiles of your browsing behaviour for external advertising networks. No personal data collected via cookies on bd680.io is transmitted to advertising technology platforms.

Managing Cookies: You can manage, restrict, or delete cookies at any time through your browser's settings or preferences panel. The process for managing cookies varies by browser; please refer to your browser's help documentation. Note that disabling functional or analytics cookies does not affect the core betting, casino, or cashier functions of bd680.

bd680 operates an absolute minimum age requirement of 21 years for all registered players. The platform does not knowingly collect, store, or process personal data belonging to any individual under the age of 21. All registration flows include a date-of-birth verification step, and bd680 reserves the right to conduct documentary age verification on any account at any time.

If bd680 becomes aware — through its own monitoring or through a report by a parent, guardian, or third party — that personal data has been submitted by or on behalf of a person under 21 years of age, the following actions will be taken without delay:

• The account will be immediately suspended pending investigation.
• All personal data associated with the underage account will be permanently deleted following confirmation of the individual's age, except where a record of the violation must be retained for legal or compliance purposes.
• Any funds deposited to the account will be returned to the payment source after identity confirmation, in accordance with bd680's anti-money laundering procedures.
• No winnings generated during the period of underage use will be paid out under any circumstances.

If you believe that an individual under 21 has registered on bd680 using false information, please report this immediately to bd680's customer support team via live chat or email. bd680 takes all such reports seriously and will investigate them promptly.

bd680 applies a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. The following security measures are in place across the bd680 platform at all times:

• SSL/TLS Encryption : All data transmitted between your browser and bd680.io is encrypted using industry-standard SSL/TLS protocols. The padlock indicator in your browser's address bar confirms that your connection is secured.
• Password Hashing: Account passwords are stored using one-way cryptographic hashing algorithms. No bd680 employee or system can retrieve or view your password in plain text. If you lose your password, it must be reset — it cannot be recovered.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Only staff members whose job function requires access to specific categories of personal data are granted that access, and all such access is logged and audited.
• Two-Factor Authentication: bd680 supports and encourages the use of two-factor authentication (2FA) on player accounts to provide an additional layer of security beyond the username and password combination.
• Intrusion Detection and Monitoring: bd680's infrastructure is monitored continuously for signs of unauthorised access, unusual activity patterns, and potential security incidents. Automated alerting systems escalate anomalies to bd680's security team for immediate review.
• Secure Data Storage: Personal data at rest is stored in encrypted form on secure, access-controlled infrastructure. Verification documents and sensitive identity data are stored in isolated, restricted-access storage environments.
• Penetration Testing: bd680 conducts regular security assessments and penetration tests on its platform infrastructure to identify and remediate potential vulnerabilities before they can be exploited.

While bd680 takes all reasonable technical and organisational steps to protect your data, no online platform can guarantee absolute security. You are encouraged to use a strong, unique password for your bd680 account, enable two-factor authentication, and contact bd680 support immediately if you suspect any unauthorised activity on your account.

The bd680.io website may, on occasion, reference or mention third-party services — such as payment providers, game studios, or sports organisations — in its content. While bd680 endeavours to reference only reputable third parties, bd680 has no control over, and accepts no responsibility for, the privacy practices of any third-party website or service.

If you navigate away from bd680.io to a third-party website — for example, by accessing your bKash or Nagad mobile banking app to complete a deposit — that third party's own privacy policy governs the collection and processing of your data during that interaction. bd680 strongly recommends that you review the privacy policy of any third-party service you use in connection with your bd680 account.

bd680.io does not embed third-party advertising networks, social media tracking pixels, or cross-site tracking technologies that would allow external parties to build a profile of your browsing behaviour across different websites.

bd680 reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable legal requirements, or improvements to the platform. The revised policy will be published on this page at bd680.io/privacy-policy with an updated "Last Updated" date prominently displayed at the top of the document.

For material changes — that is, changes that significantly affect how your personal data is collected, used, or shared — bd680 will provide advance notice to registered players via the email address associated with their account, with a minimum of 14 calendar days' notice before the changes take effect. Continued use of the bd680 platform following the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated terms.

If you disagree with a material change to this Privacy Policy, you have the right to close your account before the effective date and to request deletion of your personal data in accordance with Section 8, subject to the retention obligations described in Section 7.

bd680 recommends that you review this Privacy Policy periodically to remain informed about how your personal data is being handled. The most current version of the policy is always accessible at bd680.io/privacy-policy without requiring you to log in.

For all privacy-related inquiries, data subject access requests, requests to exercise any of your rights under Section 8, or complaints regarding the handling of your personal data, please contact bd680 using the following details:

When submitting a data rights request, please include the following information to allow bd680 to locate your records and verify your identity before processing the request:

• Your registered bd680 account username or registered email address
• A clear description of the right you wish to exercise (e.g., access, rectification, erasure, portability)
• Any relevant supporting information that may help bd680 locate the specific data you are inquiring about

bd680 is committed to resolving all privacy inquiries fairly, transparently, and within the timelines described in this policy. If you are not satisfied with bd680's response to your privacy inquiry, you have the right to escalate your complaint through the appropriate channels available in your jurisdiction.