bd681 Privacy Policy — How We Protect Your Personal Data

Definitions

In this Privacy Policy, the following terms carry the meanings set out below unless the context expressly requires otherwise:

• "bd681", "we", "us", "our" refers to the bd681 platform, its operators, and all authorised representatives responsible for processing personal data.
• "Player", "you", "your" refers to any individual who accesses, registers, or uses the bd681 platform in any capacity.
• "Personal Data" means any information that identifies or can identify a living individual, either directly or in combination with other data held by bd681.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transmission, or deletion.
• "KYC" means Know Your Customer — the identity and age verification process required to activate and maintain a bd681 account.
• "Platform" refers to the bd681 website, mobile interface, and all associated services accessible via bd681.io.
• "BDT" means Bangladeshi Taka, the currency in which all bd681 transactions are denominated, denoted by the symbol ৳.
• "Cookie" means a small text file placed on your device by the bd681 platform to enable certain technical and analytical functions.

Who We Are

bd681 is an online casino and sports betting platform serving players in Bangladesh. The platform provides cricket betting, live casino games, slots, table games, and related services, with all transactions processed in Bangladeshi Taka via locally trusted payment providers including bKash, Nagad, Rocket, and Upay.

bd681 is the data controller responsible for the personal data of all registered account holders. This means that bd681 determines the purposes for which your personal data is collected and the manner in which it is processed. If you have any questions about how bd681 handles your data, contact information is provided in Section 16 of this policy.

Personal Data We Collect

bd681 collects the following categories of personal data from players, either at the point of registration, during ongoing use of the platform, or as part of our legal compliance obligations:

bd681 does not collect special category data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data used for identification purposes) except where a selfie photograph is submitted for the sole purpose of matching it to a presented identity document during KYC. That photograph is not used for any other purpose and is not retained beyond what is necessary for the KYC process.

How We Collect Your Data

bd681 collects personal data through the following channels and mechanisms:

• Direct submission: Data you provide when creating an account, completing KYC verification, making a deposit or withdrawal request, contacting support, or updating your account profile.
• Automated technical collection: Data collected automatically when you visit or use the platform, including IP addresses, device identifiers, session data, and browser behaviour, via cookies and server logs.
• Payment providers: Confirmation data received from bKash, Nagad, Rocket, Upay, and banking partners when a deposit or withdrawal transaction is processed. bd681 does not receive full payment account credentials from these providers — only the reference data necessary to reconcile the transaction.
• Identity verification services: Where bd681 uses a third-party KYC verification service to validate National ID documents, that service may return a verification result and a match confidence score to bd681.
• Game providers: Aggregated session and outcome data passed from third-party game studios (such as Evolution Gaming, Pragmatic Play, NetEnt, and Spribe) to settle bets and calculate account balances. This data is used solely for transaction purposes.

Legal Basis for Processing

bd681 processes your personal data on one or more of the following legal grounds, depending on the specific purpose of the processing activity:

• Contractual necessity: Processing required to open and operate your account, process deposits and withdrawals in BDT, settle bets, and provide the services you have requested by registering with bd681.
• Legal obligation: Processing required to comply with applicable legal requirements, including anti-money laundering (AML) obligations, age verification requirements (21+), and fraud prevention duties.
• Legitimate interests: Processing carried out in bd681's legitimate interest to prevent fraud, maintain platform security, improve the player experience, and manage the ongoing business relationship — where those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent — principally for the sending of marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting any other processing.

How We Use Your Personal Data

bd681 uses the personal data described in Section 3 for the following specific purposes:

• Account creation and management: To register your account, verify your identity and age (21+), maintain your account settings, and communicate important account-related notifications.
• Transaction processing: To process deposits and withdrawals in BDT via your chosen payment method, reconcile transactions with payment partners, and maintain accurate account balances.
• Bet settlement: To record wagers placed on sports events (including cricket BPL, IPL, T20 World Cup, and Bangladesh Tigers fixtures) and casino games, and to credit winnings to your account.
• KYC and compliance: To verify your identity, age, and payment method ownership in fulfilment of our legal obligations, and to maintain the records required under applicable law.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and unauthorised account access.
• Platform improvement: To analyse aggregated behavioural data in order to improve game selection, interface design, performance, and the overall player experience on bd681.
• Customer support: To respond to your enquiries, resolve disputes, and maintain records of communications where necessary.
• Responsible gaming: To monitor betting patterns for signs of problem gambling behaviour and to facilitate the use of self-exclusion, deposit limit, and cooling-off tools where requested.
• Marketing communications (with consent): To send you promotional offers, bonus notifications, and seasonal promotions by SMS or in-platform notification, where you have provided consent to receive such communications.

Sharing Your Personal Data

bd681 does not sell or rent your personal data to any third party. We share personal data only in the following limited circumstances and only to the extent strictly necessary for the stated purpose:

• Payment providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank receive the data necessary to process your deposit or withdrawal transaction. Each provider is bound by its own privacy and security obligations.
• Game studios: Third-party game providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe receive session data required to run games and return outcomes. These providers do not receive your identity or contact data.
• KYC verification services: Where a third-party identity verification provider is engaged to assist with KYC, your submitted identity document and photograph are shared with that provider solely for the purpose of verification. All such providers are contractually bound to process this data only for the stated purpose.
• Legal and regulatory authorities: bd681 may disclose personal data to competent authorities where required to do so by law, court order, or in connection with the prevention or investigation of financial crime.
• Platform infrastructure providers: Cloud hosting, data storage, and security service providers who process data on bd681's behalf as data processors, under contractual obligations that prohibit independent use of the data.

No personal data is transferred to or processed in a jurisdiction outside of the operational territory without appropriate safeguards in place. All third-party processors engaged by bd681 are required to process personal data only on documented instructions from bd681 and to maintain appropriate technical and organisational security measures.

Cookies & Tracking Technologies

bd681 uses cookies and similar tracking technologies on the platform for the following purposes:

• Essential cookies: Required for the platform to function correctly. These include session authentication cookies that keep you logged in during your visit and security cookies that help detect fraudulent activity. These cookies cannot be disabled without affecting platform functionality.
• Functional cookies: Remember your account preferences such as language settings, notification preferences, and game history display options.
• Analytical cookies: Collect anonymised data about how players use the platform — such as which pages are visited most frequently and where errors occur — to help bd681 improve the service. These cookies do not identify individual players.
• Session tracking: bd681 records session start and end times, game interactions, and bet placement activity as part of platform logging. This data is used for account security, dispute resolution, and responsible gaming monitoring.

You can manage non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling essential cookies will affect your ability to log in and use the bd681 platform.

Data Security

bd681 implements a layered approach to data security designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. The key security measures in place include:

• Transport encryption: All data transmitted between your browser or mobile device and the bd681 platform is encrypted using 256-bit SSL/TLS protocols. The padlock icon in your browser's address bar confirms that an encrypted connection is active.
• Data-at-rest encryption: Sensitive personal data — including National ID details, payment method references, and KYC documentation — is stored in encrypted form using industry-standard encryption algorithms.
• Access controls: Access to personal data within bd681's systems is restricted on a need-to-know basis. Staff who handle personal data receive mandatory data protection training and are bound by confidentiality obligations.
• Two-factor authentication: bd681 supports SMS OTP-based two-factor authentication for player accounts. We strongly encourage all players to enable this feature.
• Intrusion detection: bd681 operates continuous monitoring systems to detect and respond to anomalous access patterns, attempted breaches, and suspicious activity in real time.
• Incident response: In the event of a personal data breach that poses a risk to players' rights and freedoms, bd681 will notify affected players promptly and take immediate remedial steps to contain the breach.

While bd681 takes all reasonable steps to protect your personal data, no digital platform can guarantee absolute security. You also bear responsibility for maintaining the security of your account credentials as described in the bd681 Terms & Conditions.

Data Retention

bd681 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active account data: Retained for the duration of your account relationship with bd681 plus a minimum of five (5) years following permanent account closure, to meet anti-money laundering record-keeping obligations.
• KYC documentation: Identity documents and verification records are retained for a minimum of five (5) years following the date of the most recent transaction on the account, in accordance with financial crime prevention requirements.
• Transaction records: Individual deposit, withdrawal, and betting transaction records are retained for a minimum of five (5) years.
• Support communications: Live chat transcripts and email correspondence are retained for a period of two (2) years from the date of the communication, or longer if the communication is relevant to an ongoing dispute or investigation.
• Technical and session logs: Server logs and session data are retained for up to ninety (90) days for security and debugging purposes, after which they are deleted or fully anonymised.
• Marketing consent records: Records of consent given or withdrawn for marketing communications are retained for the duration of your account relationship plus two (2) years.

When personal data is no longer required, bd681 securely deletes or irreversibly anonymises it so that it can no longer be associated with any individual.

Your Rights Over Your Personal Data

As a bd681 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact bd681 support using the details in Section 16. bd681 will respond to all verified requests within thirty (30) days.

• Right of access: You have the right to request a copy of the personal data that bd681 holds about you, together with information about how it is used.
• Right to rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. For name and National ID corrections, additional documentary evidence will be required.
• Right to erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. This right is subject to bd681's legal obligation to retain certain data as described in Section 10.
• Right to restriction: You have the right to request that bd681 restrict the processing of your personal data in certain circumstances, such as while a dispute about the accuracy of the data is being resolved.
• Right to object: You have the right to object to processing of your personal data where bd681 relies on legitimate interests as the legal basis. You also have an unconditional right to object to processing for direct marketing purposes.
• Right to data portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.

Marketing Communications

With your consent, bd681 may send you promotional communications relating to bonuses, seasonal offers (such as Eid promotions, Pohela Boishakh specials, and BPL cricket season offers), new game launches, and platform features. These communications may be delivered via SMS to your registered mobile number or via in-platform notifications.

bd681 does not send marketing emails as a primary channel and does not share your contact details with third-party marketers for their own promotional use.

You can manage your marketing preferences at any time in the following ways:

• Log in to your bd681 account and navigate to Notification Preferences in your account settings.
• Reply "STOP" to any promotional SMS received from bd681.
• Contact bd681 support at [email protected] with the subject line "Unsubscribe".

Opting out of marketing communications has no effect on your ability to use your bd681 account or receive essential account notifications such as deposit confirmations, withdrawal updates, or security alerts.

Children's Privacy

The bd681 platform is strictly intended for adults aged 21 (twenty-one) years and above. bd681 does not knowingly collect personal data from individuals under the age of 21. If bd681 discovers or has reason to believe that a player is under the age of 21, the account will be immediately suspended, all funds will be withheld pending investigation, and the relevant records will be preserved in accordance with our legal obligations.

If you believe that a minor has gained access to or registered an account on the bd681 platform, please contact support immediately at [email protected]. bd681 takes underage gambling extremely seriously and will act swiftly on any such report.

Third-Party Links

The bd681 platform does not contain outbound links to third-party websites as a matter of policy. However, in the event that any informational or resource link to an external site appears on the platform, bd681 wishes to make clear that this Privacy Policy applies only to data processed by bd681 and does not extend to any third-party website or service. bd681 accepts no responsibility for the privacy practices or data handling of any third party.

Payment providers such as bKash, Nagad, and Rocket have their own privacy policies governing the data you share with them directly when completing a payment transaction via their respective apps or interfaces. bd681 encourages players to review those policies independently.

Updates to This Privacy Policy

bd681 may update this Privacy Policy from time to time to reflect changes in data processing practices, legal requirements, or platform features. When material changes are made, bd681 will notify active players via SMS to their registered mobile number or via an in-platform notification at least seven (7) days before the updated policy takes effect.

The effective date at the top of this policy will be updated with each revision. The current version of this Privacy Policy is always accessible from the footer of the bd681 platform. Your continued use of the platform following the effective date of an updated policy constitutes your acknowledgment of the changes.

For significant changes that affect the legal basis on which bd681 processes your personal data, or that materially expand the scope of data collected, bd681 will seek fresh consent where this is the appropriate legal basis for the processing in question.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bd681 handles your personal data, please get in touch using one of the following channels:

• Privacy enquiries email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" as appropriate.
• Live chat: Available 24 hours a day, 7 days a week, from within your bd681 account dashboard. Ideal for urgent account-security concerns.

bd681 aims to acknowledge all privacy-related written requests within 24 hours (Bangladesh Standard Time, UTC+6) and to resolve the majority of requests within 30 calendar days. Where a request is complex or requires additional verification, the resolution period may be extended by a further 30 days, with notification to you of the extension and the reason for it.