2bd678 Privacy Policy

1. Data We Collect

1.1 Information You Provide Directly

When you register an account on 2bd678, make a deposit or withdrawal, contact our support team, or participate in any promotional activity, you voluntarily provide personal information that we collect and process. This includes, but is not limited to, the categories described below.

1.2 Information Collected Automatically

When you access and use the 2bd678 platform, certain technical data is collected automatically by our systems. This automatic collection is necessary for the platform to function correctly, to maintain security, and to detect fraudulent or suspicious activity. Automatically collected data includes:

• IP address and approximate geographic location derived from it
• Device type, operating system, and browser version
• Session timestamps, page visit sequences, and duration of visits
• Game session logs, including bet amounts, outcomes, and timestamps
• Referral source (the URL or channel through which you arrived at 2bd678)
• Cookie identifiers and similar session tokens (see the Cookies section for full detail)

1.3 Information from Third Parties

In limited circumstances, 2bd678 may receive personal information about you from third parties. This occurs primarily in the context of payment processing — for example, when a mobile banking operator such as bKash or Nagad confirms a transaction — and in the context of fraud prevention, where third-party verification services may cross-reference the information you have provided against their databases to confirm your identity. In all such cases, 2bd678 uses the information received only for the specific purpose for which it was obtained and does not retain it beyond that purpose.

2. How We Use Your Data

2.1 Core Platform Operations

The primary purpose for which 2bd678 collects and processes your personal data is to provide and operate the gaming and betting services you have signed up for. Without access to your identity and contact information, we would be unable to maintain your account, verify your eligibility to play, process deposits and withdrawals, or communicate with you about your account status.

2.2 Specific Processing Purposes

The table below summarises the specific purposes for which 2bd678 processes your personal data and the legal or operational basis for each:

2.3 Marketing Communications

2bd678 sends promotional emails, SMS messages, and in-platform notifications to players who have opted in to receive them. These communications may include information about new games, bonus offers, seasonal promotions (such as those tied to BPL, IPL, T20 World Cup, Eid, or Pohela Boishakh), and VIP Club updates. You may withdraw your consent to receive marketing communications at any time by updating your notification preferences within your account settings or by contacting 2bd678 support directly. Opting out of marketing communications does not affect transactional notifications related to your account, such as deposit confirmations or security alerts.

3. Data Sharing & Third Parties

3.1 Our Principle: No Data Selling

2bd678 does not sell, rent, lease, or otherwise commercially transfer your personal data to any third party. The only circumstances in which your data is shared with external parties are those strictly necessary to deliver our services, comply with legal obligations, or protect the security of the platform and its users.

3.2 Categories of Third-Party Recipients

In the normal course of operating the 2bd678 platform, your personal data may be shared with the following categories of third parties:

• Payment processors: bKash, Nagad, Rocket, Upay, and other payment partners receive the minimum information necessary to process your deposit or withdrawal transaction. These partners are subject to their own data protection obligations.
• Identity verification services: Third-party KYC providers may process your identity documents and biometric data solely to confirm your eligibility to play. These providers are bound by strict data handling agreements with 2bd678.
• Game content providers: Game studios such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming may receive session-level data (such as player ID and stake amounts) to deliver their game content and settle outcomes. No directly identifying personal data such as your name or NID is shared with game providers.
• Fraud prevention and security vendors: Specialised security service providers may process technical and behavioural data to identify and prevent fraudulent activity, money laundering, and account takeover attempts.
• Legal and regulatory authorities: In response to a valid legal order, court order, or regulatory request from a competent authority, 2bd678 may be required to disclose player information. We will notify affected players of such disclosures to the extent permitted by law.

3.3 International Data Transfers

As an internationally operated platform, some of the third parties with whom 2bd678 shares data may be located outside of Bangladesh. In all such cases, 2bd678 takes reasonable steps to ensure that appropriate data protection safeguards are in place, including contractual clauses that impose obligations on recipient parties equivalent to those described in this Privacy Policy.

4. Cookies & Tracking

4.1 What Are Cookies

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites function correctly, remember your preferences, and provide site operators with aggregate information about how their platforms are used. The 2bd678 platform uses cookies in a limited and transparent manner, as described below.

4.2 Types of Cookies Used by 2bd678

4.3 Cookies We Do Not Use

2bd678 does not place third-party advertising cookies, cross-site tracking pixels, or social media retargeting tags on the platform. We do not participate in behavioural advertising networks. Our analytics data is aggregated and anonymised; it is not linked back to individual player identities.

4.4 Managing Your Cookie Preferences

Most modern web browsers allow you to control cookie behaviour through browser settings. You may choose to block all cookies, accept only first-party cookies, or delete existing cookies at any time. Please note that disabling essential cookies will prevent you from logging into your 2bd678 account and using core platform features. Disabling functional cookies will cause your preferences to reset on each visit. Disabling analytics cookies will not affect your ability to use any part of the platform.

5. Data Security

5.1 Technical Security Measures

2bd678 implements a multi-layered security architecture to protect your personal data from unauthorised access, accidental loss, disclosure, alteration, or destruction. Our technical security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and 2bd678 servers
• AES-256 encryption for sensitive data fields stored in our databases, including financial account identifiers
• Multi-factor authentication (MFA) options for player accounts and mandatory MFA for all internal administrative access
• Continuous intrusion detection and prevention systems (IDS/IPS) monitoring platform traffic in real time
• Regular third-party penetration testing and security audits of platform infrastructure
• Isolated storage environments for KYC documents, accessible only by verified compliance personnel

5.2 Organisational Security Measures

Beyond technical controls, 2bd678 enforces strict organisational policies governing how employees and contractors handle player data. Access to personal data is granted on a need-to-know basis only. All staff with access to personal data undergo regular data protection training. Any suspected data breach or security incident is subject to an immediate internal review process, and affected players will be notified in a timely manner where there is a material risk to their privacy or security.

5.3 Your Responsibility

While 2bd678 takes extensive measures to protect your data on our side, the security of your account also depends on the steps you take to protect your own login credentials. You are responsible for keeping your 2bd678 username, password, and any two-factor authentication codes confidential. We strongly recommend using a unique, strong password for your 2bd678 account and enabling two-factor authentication in your account security settings. Do not share your login details with any third party under any circumstances.

6. Data Retention

6.1 Retention Principles

2bd678 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as required by applicable legal or regulatory obligations. Once the applicable retention period has expired and there is no ongoing legitimate reason to retain your data, it is securely deleted or anonymised in accordance with our internal data destruction procedures.

6.2 Standard Retention Periods

6.3 Account Closure and Data

When a 2bd678 account is closed — whether voluntarily by the player or by 2bd678 — the player's personal data is not immediately deleted. Retention continues for the periods specified in the table above to meet legal, regulatory, and dispute resolution obligations. After the applicable retention period has expired with no outstanding legal hold, the data is purged from active systems and, where technically feasible, from backup archives as they are cycled.

7. Your Privacy Rights

7.1 Rights Available to You

As a player on the 2bd678 platform, you have the following rights with respect to your personal data. These rights can be exercised by contacting the 2bd678 data protection team at [email protected] with the subject line "Privacy Rights Request".

• Right of access: You may request a copy of the personal data that 2bd678 holds about you, along with information about how it is being processed.
• Right to rectification: If any personal data held by 2bd678 is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to erasure: Subject to applicable legal retention obligations, you may request that 2bd678 delete your personal data. Erasure requests will be assessed individually; data that must be retained to comply with legal obligations cannot be deleted before the applicable retention period expires.
• Right to restrict processing: In certain circumstances, you may request that 2bd678 restrict the processing of your personal data — for example, while a dispute about data accuracy is being resolved.
• Right to data portability: You may request a structured, machine-readable copy of the personal data you have provided to 2bd678, where processing is based on consent or contractual necessity.
• Right to withdraw consent: Where 2bd678 processes your data on the basis of consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
• Right to object: You may object to 2bd678 processing your personal data where we rely on legitimate interest as our legal basis, unless our compelling legitimate grounds override your interests.

7.2 How to Exercise Your Rights

To exercise any of the rights listed above, please submit a written request to [email protected] with the subject line "Privacy Rights Request". Please include your registered email address, your 2bd678 username, and a clear description of the right you wish to exercise. 2bd678 will respond to all verified privacy rights requests within 30 days of receipt. In complex or high-volume cases, we may extend this period by up to an additional 30 days, in which case we will notify you of the extension within the initial 30-day window.

8. Policy Updates & Contact

8.1 Updates to This Privacy Policy

2bd678 may update this Privacy Policy from time to time to reflect changes in platform operations, applicable law, or industry best practices. When material changes are made to the Policy, we will notify active players via email to the registered account address and display a prominent notice on the 2bd678 platform for a period of at least 14 days following the update. The effective date at the top of this page will always reflect when the current version of the Policy came into force. We encourage you to review this page periodically so that you remain informed about how 2bd678 handles your data.

8.2 Contacting 2bd678 About Privacy

If you have any questions, concerns, or complaints about this Privacy Policy, about how 2bd678 handles your personal data, or about a privacy rights request you have submitted, please contact us using the details below. We are committed to addressing all privacy-related enquiries in a timely, respectful, and transparent manner.

• Email: [email protected] (subject: "Privacy Enquiry")
• Live chat: Available 24/7 via the 2bd678 platform
• Response time target: Within 2 business days for general enquiries; within 30 days for formal rights requests

8.3 Responsible Gaming and Privacy

2bd678's responsible gaming tools — including deposit limits, time-out periods, and self-exclusion — involve processing your gaming activity data to monitor for signs of problem gambling. This processing is carried out in your interest and in fulfilment of our duty of care obligations. If you wish to understand more about how your data is used in the context of responsible gaming, please visit our Responsible Gaming page or contact support. If you believe your gambling is becoming problematic, please reach out — our support team is available around the clock and all conversations are handled with complete confidentiality.