Bd678 Privacy Policy – Our Commitment to Protecting Your Personal Data

This Privacy Policy ("Policy") describes how bd678 ("Platform", "we", "us") collects, uses, stores, discloses, and protects your personal information when you use the bd678-bangla.com website and all related services.

Bd678 is committed to respecting and protecting the privacy of every member in Malaysia. We understand that your trust depends on how we handle the information you entrust to us — and we do not take that responsibility lightly. Every decision we make regarding your personal data is evaluated through the lens of one question: does this serve the best interests of our members?

This Policy applies to all users of the bd678 platform, including unregistered visitors, registered members, and former members whose accounts remain within the data retention period. By accessing or using the bd678 platform, you confirm that you have read and understood this Privacy Policy.

Bd678 collects several categories of information depending on how you interact with our platform. Overall, the data we collect falls into three main categories:

Bd678 does not collect special category data such as health information, religious beliefs, or political affiliations. We also do not collect credit card information directly — all financial transactions are processed through verified payment processors including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX via Maybank2u or CIMB Clicks.

Bd678 uses your personal information only for legitimate and necessary purposes. The following are the primary ways we use the data we collect:

• Service Provision: To manage your account, process deposit and withdrawal transactions, provide access to Live Casino, baccarat, blackjack, slots, and Sports Betting, and ensure the platform operates correctly.
• Identity Verification (KYC): To meet anti-money laundering (AML) regulatory requirements and to verify that all members meet the minimum age requirement of 18 years.
• Account Security: To detect and prevent unauthorised access, fraudulent activity, bonus abuse, and any attempts to exploit the bd678 platform.
• Service Communications: To send important account-related notifications such as transaction confirmations, security alerts, terms changes, and relevant system updates.
• Platform Improvements: To analyse usage patterns in aggregate (not at an individual level) in order to understand how members interact with the platform and identify opportunities to enhance the user experience.
• Responsible Gaming: To monitor activity patterns that may indicate problem gambling and to enforce self-imposed limits set by members through bd678's self-exclusion tools.
• Legal Compliance: To fulfil applicable legal and regulatory obligations, including reporting requirements to the relevant authorities where required by law.

Bd678 does not sell, rent, or permit member personal data to be used by any third party for their own commercial purposes. However, there are specific situations where we may need to share your information with selected third parties:

• Payment Processors: Information required to process transactions is shared with approved payment processors such as Touch 'n Go, GrabPay, and the FPX network. These processors are bound by strict industry security standards and confidentiality agreements with bd678.
• Support Service Providers: In certain cases, we engage authorised third-party service providers for technical functions such as server infrastructure, security analytics, and customer support tools. All providers are thoroughly vetted and bound by strict data protection agreements.
• Legal Requirements: bd678 will disclose your personal information to the relevant authorities when required by Malaysian law or a valid court order — for example, in connection with money laundering or financial fraud investigations.
• bd678 Rights Protection: We reserve the right to disclose information as necessary to protect the legal rights, property, or safety of bd678, our members, or the public from harm.

In all of the above cases, bd678 ensures that only the minimum necessary information is shared, and that recipients are bound by data protection obligations equivalent to or stricter than those set out in bd678's Privacy Policy.

Protecting your personal data is not merely a legal obligation for bd678 — it is a moral responsibility we take very seriously. The bd678 platform implements a range of technical and organisational security measures to safeguard your data against unauthorised access, alteration, disclosure, or destruction.

• Encryption in Transit: All data transmitted between your device and bd678's servers is protected by 256-bit TLS/SSL encryption — ensuring no third party can intercept or read your data in transit.
• Encryption at Rest: Sensitive data stored in bd678's databases is encrypted using industry-standard encryption to ensure it cannot be read, even by staff who do not have the appropriate access permissions.
• Layered Access Controls: Access to member personal data is restricted on a need-to-know basis — only staff with specific roles and responsibilities that require such access are permitted, and every access instance is recorded in an audit log.
• Continuous Monitoring: bd678's security systems monitor for suspicious activity in real time — including unusual login attempts, abnormal access patterns, and any anomalies that may indicate a breach.
• Regular Security Assessments: bd678 conducts regular penetration testing and security audits carried out by independent cybersecurity experts to identify and address any vulnerabilities before they can be exploited.

While no security system can guarantee 100% protection against every evolving cyber threat, bd678 is committed to maintaining security standards that meet or exceed industry benchmarks. In the event of a security breach affecting your data, we will notify you within 72 hours of the incident being confirmed.

Bd678 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyze how the platform is used. Cookies are small text files stored on your device when you visit the bd678 website.

Types of cookies used by bd678:

• Essential Cookies: Required for core platform functions such as maintaining your login session, processing transactions, and keeping your account secure. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Saves your preferences such as language settings, display options, and game preferences to provide a more personalized experience on your next visit.
• Analytics Cookies: This helps bd678 understand how members use the platform — which pages are visited most frequently, how long members spend in each section, and where they encounter difficulties. This data is analysed in aggregate and used to improve the platform.
• Security Cookies: Helps detect and prevent fraudulent activity, unauthorized access, and other security threats to your account.

You can manage cookie settings through your web browser's preferences. However, disabling essential cookies may affect the functionality of the bd678 platform and your gaming experience. For more information on managing cookies in your browser, please refer to the official documentation for the browser you are using.

Bd678 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable laws and regulatory obligations.

Bd678's general data retention guidelines are as follows:

• Active Account Data: Retained for the duration of your active account and any additional period required following account closure in accordance with regulatory requirements.
• Financial Transaction Records: Retained for a minimum of seven years in accordance with Malaysian financial legislation and tax reporting requirements.
• Security Logs: Retained for 12 months to support investigations in the event of a security incident or dispute.
• Support Communication Data: Support chat logs and emails are retained for 24 months for quality control purposes and future reference should the same issue arise again.
• Inactive User Data: Accounts that have been inactive for more than 24 consecutive months are subject to data archiving procedures. Members will be notified before their data is archived.

Once the retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be linked to you as an individual. The deletion process follows security standards that ensure the data cannot be recovered.

As a bd678 member, you have certain rights regarding the personal data we hold about you. bd678 respects these rights and provides straightforward channels through which you can exercise them:

To exercise any of the rights above, contact the bd678 privacy team by email at support@bd678-bangla.com with the subject line "Privacy Rights Request", or reach us via 24/7 live chat. Please include your account number and a clear description of your request. We will verify your identity before processing any request and will respond within 14 business days.

Bd678 is strictly for users aged 18 and above. bd678 does not knowingly collect or process personal data from individuals under the age of 18. If we discover that personal data of anyone under 18 has been collected inadvertently, we will take immediate steps to delete that data and close the associated account.

If you believe a minor has registered on the bd678 platform or that a child's data has been collected inadvertently, please contact us immediately at support@bd678-bangla.com. We will investigate and take appropriate action within 24 hours.

Bd678 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new regulatory requirements, or new platform features. The "Last Updated" date at the top of this page indicates when the Policy was most recently reviewed.

For material changes — that is, changes that significantly affect how we use your personal data — bd678 will notify you at least 7 days before the changes take effect via in-platform notifications, email, or SMS to your registered number. You will be asked to confirm your acceptance of the updated policy upon your next login.

Your continued use of the bd678 platform after any changes take effect constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account and request a withdrawal of all valid balances before the changes come into force.

If you have any questions, concerns, or requests regarding this Privacy Policy or how bd678 handles your personal data, our privacy team is ready to assist:

• Live Chat: Available 24/7 directly within the bd678 platform — response time under 3 minutes for all inquiries, including privacy matters.
• Privacy Email: support@bd678-bangla.com — use the subject line "Privacy Enquiry" or "Privacy Rights Request" to ensure your email is promptly routed to the right team.
• WhatsApp: Available to VIP members and cases requiring priority attention — the number can be found in your account settings.

The bd678 privacy team handles all privacy-related inquiries within 14 business days. For complex matters requiring document review or thorough investigation, we will keep you updated on the progress at regular intervals until the case is resolved.