bd657 Privacy Policy

When you register for and use a bd657 account, bd657 collects certain categories of personal data. The data collected depends on how you interact with the platform. The principal categories of personal data that bd657 may collect are set out below.

Registration & Identity Data

When you create a bd657 account, you provide the following registration data:

• Full legal name (as it appears on your government-issued identification)
• Date of birth (used to verify that you meet the 18+ age requirement)
• Email address
• Mobile phone number registered in Bangladesh
• Residential address in Bangladesh (city, district, and postal code)
• Account username and encrypted password

Identity Verification Data

To comply with Know Your Customer (KYC) obligations and to verify player age, bd657 may request and store copies of the following identity documents:

• National Identity Card (NID)
• Passport (biographical data page)
• Birth certificate (for age verification purposes where NID is unavailable)
• Proof of address documents (utility bills, bank statements)

Payment & Financial Data

bd657 collects the minimum payment data necessary to process deposits and withdrawals. This includes:

• bKash, Nagad, Rocket , and Upay mobile wallet numbers associated with your account
• Bank account details (account number, bank name, branch) where bank transfer is selected as the payment method
• Visa and Mastercard details (card number last four digits, expiry date) where card payment is used — full card numbers are never stored by bd657
• Transaction history including deposit amounts, withdrawal amounts, dates, and reference numbers
• Bonus fund balances and wagering progress records

Technical & Usage Data

When you access bd657, certain technical data is collected automatically by our servers and analytics systems:

• IP address and approximate geographic location derived from it
• Device type, operating system, and browser version
• Session timestamps (login time, session duration, logout time)
• Pages visited, games played, bet amounts, and game session duration
• Referral source (how you arrived at bd657)
• Error logs and crash reports generated during gameplay

Communications Data

If you contact the bd657 support team by email or live chat, bd657 retains a record of those communications, including the content of your messages, timestamps, and the resolution reached. This data is used to track complaint history, improve support quality, and comply with regulatory record-keeping obligations.

bd657 uses the personal data it collects for specific, clearly defined purposes. The table below summarises the primary purposes, the categories of data used for each, and the lawful basis on which bd657 processes that data.

Purpose	Data Used	Lawful Basis
Account registration and management	Identity, contact, login credentials	Contractual necessity
Age and identity verification (KYC)	Identity documents, date of birth	Legal obligation
Processing deposits and withdrawals	Payment data, transaction records	Contractual necessity
Fraud detection and prevention	Technical, financial, identity data	Legitimate interest
Anti-money laundering compliance	Identity, financial, transaction data	Legal obligation
Responsible gaming monitoring	Usage, financial, session data	Legitimate interest / legal obligation
Customer support and complaint handling	Communications, account data	Contractual necessity
Platform analytics and improvement	Technical, usage data (anonymised)	Legitimate interest
Promotional communications (opted-in)	Contact data, game preferences	Consent

Promotional Communications

bd657 will only send you marketing emails, SMS messages, or in-platform notifications about bonuses, promotions, and new games if you have explicitly opted in to receive such communications during registration or subsequently via your account settings. You may withdraw your marketing consent at any time by contacting [email protected] or by updating your notification preferences in your account dashboard. Withdrawal of marketing consent does not affect your ability to use the bd657 platform.

Automated Decision-Making

bd657 uses automated systems to screen transactions and account behaviour for fraud indicators and responsible gaming triggers. Where an automated check results in an account action — such as a temporary deposit limit reduction or a flagged withdrawal — you have the right to request a manual review by the bd657 compliance team. Contact [email protected] to exercise this right.

bd657 does not sell, rent, or share your personal data with third parties for their own marketing or commercial purposes. bd657 may share personal data with the following categories of trusted third parties strictly as required to operate the platform and meet legal obligations:

Payment Service Providers

To process your deposits and withdrawals, bd657 shares the minimum necessary payment data with the relevant payment service providers, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard. These providers operate under their own privacy policies and are contractually obligated to process your data only for the specific transaction for which it was shared.

Game Software Providers

bd657 integrates game content from third-party software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game powered by a third-party provider, that provider's game server may receive your player session identifier and game activity data. This data is used solely to render the game and to verify game outcomes. bd657 ensures that game providers are bound by confidentiality agreements and data processing terms.

Identity Verification Partners

bd657 may use third-party KYC and identity verification service providers to assist in verifying the identity and age of players. Where such a provider is used, your identity document data is shared under a strict data processing agreement and is not retained by the verification provider beyond the period necessary to complete the check.

Legal and Regulatory Authorities

bd657 may be required to disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies in Bangladesh or applicable jurisdictions in response to lawful requests, court orders, or to comply with anti-money laundering, counter-terrorism financing, or other applicable legal obligations. bd657 will notify you of any such disclosure to the extent permitted by law.

Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of the assets of the entity operating bd657, player data may be transferred to the acquiring entity as part of that transaction. bd657 will provide advance notice via the platform website before any such transfer takes place and will ensure that the acquiring entity is bound by privacy terms no less protective than those in this policy.

bd657 uses cookies and similar tracking technologies on the platform to provide a functional, secure, and personalised experience. This section explains what cookies bd657 uses, why they are used, and how you can manage your cookie preferences.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits, remember your preferences, and analyse how the site is being used. Cookies themselves do not contain executable code and cannot access other files on your device.

Types of Cookies Used by bd657

Cookie Type	Purpose	Duration
Strictly Necessary	Session management, login authentication, security tokens, CSRF protection	Session / 24 hours
Functional	Remembering language preferences, game lobby settings, last-visited game category	30 days
Analytics	Aggregated, anonymised platform usage statistics used to identify performance issues and improve user experience	90 days
Responsible Gaming	Tracking session duration to trigger responsible gaming reminders as configured in your account settings	Session

Managing Your Cookie Preferences

Strictly necessary cookies cannot be disabled as they are essential for the secure operation of the bd657 platform. You may opt out of functional and analytics cookies by adjusting your account settings or by configuring your browser to block or delete cookies. Note that disabling functional cookies may affect your ability to use certain platform features, such as saved game preferences. Your browser's help documentation will explain how to manage cookie settings for your specific browser version.

bd657 implements a range of technical and organisational security measures designed to protect your personal data from unauthorised access, disclosure, alteration, and destruction. The following security controls are applied across the bd657 platform:

Technical Security Measures

• SSL/TLS Encryption: All data transmitted between your device and bd657 servers is encrypted using TLS 1.2 or higher. The padlock icon visible in your browser address bar when visiting bd657 confirms that your connection is encrypted.
• Password Hashing: Account passwords are never stored in plain text. bd657 uses industry-standard cryptographic hashing algorithms to store password credentials securely.
• Two-Factor Authentication (2FA): bd657 supports optional two-factor authentication via OTP (one-time password) sent to your registered mobile number. bd657 strongly recommends enabling 2FA on your account.
• Firewall and Intrusion Detection: bd657 infrastructure is protected by network-level firewalls and intrusion detection systems that monitor for anomalous access patterns in real time.
• Payment Data Tokenisation: Full payment card numbers are never stored on bd657 servers. Where card payments are processed, card data is tokenised by the payment processor before reaching bd657 systems.

Organisational Security Measures

• Access to player personal data is restricted to bd657 staff members who require it to perform their job functions (principle of least privilege).
• All bd657 staff who handle personal data are subject to confidentiality obligations as a condition of their engagement.
• Third-party service providers who process data on bd657's behalf are required to demonstrate adequate security standards before onboarding and are subject to ongoing security review.
• bd657 conducts periodic internal security reviews to assess the effectiveness of existing data protection measures.

Data Breach Response

In the event of a personal data breach that is reasonably likely to result in a risk to affected players, bd657 will notify affected players without undue delay via the email address registered on their bd657 account. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures bd657 has taken or proposes to take to address the breach.

bd657 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply to the principal categories of personal data held by bd657:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years post-closure	Regulatory record-keeping
Identity verification documents	Duration of account + 5 years post-closure	AML / KYC legal obligation
Transaction records	7 years from transaction date	Financial record-keeping obligations
Support communications	3 years from last interaction	Dispute resolution, quality assurance
Technical / session logs	90 days	Security monitoring, fraud detection
Analytics data (anonymised)	2 years	Platform performance improvement
Marketing consent records	Until consent withdrawn + 2 years	Proof of consent

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual player. Where data must be retained beyond the standard period due to an ongoing legal dispute, regulatory investigation, or court order, bd657 will retain the relevant data until that matter is fully resolved.

As a bd657 player whose personal data is processed by bd657, you have the following privacy rights. bd657 is committed to honouring these rights promptly and without undue obstacle.

Right of Access

You have the right to request a copy of the personal data that bd657 holds about you. bd657 will provide a structured summary of your data free of charge within 30 days of receiving a valid access request.

Right to Rectification

If any personal data that bd657 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For basic account details such as your email address or phone number, corrections can be made directly via your account settings. For identity data (such as name or date of birth), contact [email protected] with supporting documentation.

Right to Erasure

You may request that bd657 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other lawful basis applies), or where the data has been processed unlawfully. Note that bd657 may be unable to erase certain categories of data where retention is required by law — such as transaction records and identity verification documents held for AML compliance purposes. Where erasure is not possible in full, bd657 will explain the reason and delete or anonymise all data that can lawfully be removed.

Right to Restrict Processing

In certain circumstances — for example, where you contest the accuracy of your data or where you have objected to processing pending verification of bd657's legitimate interests — you may request that bd657 restrict the processing of your data while the matter is resolved.

Right to Object

You have the right to object to the processing of your personal data where that processing is based on bd657's legitimate interest. You also have an unconditional right to object to the use of your data for direct marketing purposes, which will be honoured immediately upon receipt of your objection.

Right to Data Portability

Where processing is based on your consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to request that bd657 transmit that data directly to another data controller where technically feasible.

To exercise any of the rights described above, contact the bd657 data team at [email protected] with the subject line "Privacy Rights Request". Please include sufficient information to allow bd657 to identify your account. bd657 will respond within 30 days of receipt of a complete and valid request. In complex cases, this period may be extended by a further 30 days, in which case bd657 will notify you of the extension and the reason for it.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bd657 handles your personal data, please contact the bd657 support team using the details below.

Primary Contact

All privacy-related enquiries, rights requests, and data complaints should be sent by email to:

Email: [email protected]
Subject line: Privacy Enquiry / Privacy Rights Request / Data Complaint
Response time: Within 2 business days for general enquiries; within 30 days for formal rights requests

Privacy Policy Updates

bd657 may update this Privacy Policy from time to time to reflect changes in the platform's data practices, applicable law, or regulatory guidance. When material changes are made, bd657 will notify registered players via a prominent notice on the bd657 website and, where appropriate, via email to the address registered on your account. The updated Privacy Policy will take effect from the date indicated in the "Effective Date" field at the top of this page. Your continued use of bd657 after the effective date of an updated Privacy Policy constitutes your acknowledgement of the changes.

Previous Versions

Archived versions of previous Privacy Policy documents are available on request by contacting [email protected]. Please specify the version date you require in your request.