bd658 Privacy Policy — How We Collect, Use and Protect Your Personal Data

1 Introduction

bd658 ("we", "us", "our") is the operator of the online betting and casino platform accessible at bd658.io and all associated subdomains and mobile-optimised pages (collectively the "Platform"). We are committed to protecting the privacy and personal data of every user who accesses the Platform, whether as a registered account holder or as an anonymous visitor.

This Privacy Policy ("Policy") describes: the categories of personal data we collect; the lawful bases on which we process that data; the purposes for which your data is used; how long we retain your data; the circumstances under which data may be shared with third parties; and the rights you have regarding your personal information. This Policy applies to all individuals who interact with the bd658 Platform, including players registered from any region of Bangladesh — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur and Mymensingh.

This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gaming Policy. By creating a bd658 account or continuing to use the Platform after this Policy has been published or updated, you confirm your acceptance of the practices described herein.

2 Personal Data We Collect

bd658 collects only the personal data that is necessary to operate a safe, compliant and functional online betting and casino service. The categories of personal data we collect are as follows:

Category	Examples	Purpose
Identity Data	Full legal name, date of birth, NID / passport number, selfie photograph	KYC verification, age verification, fraud prevention
Contact Data	Bangladeshi mobile number, email address	Account communication, two-factor authentication, support
Financial Data	bKash / Nagad / Rocket account number, bank account details, transaction history	Payment processing, withdrawal verification, AML compliance
Account Activity Data	Betting history, game session records, bonus redemptions, login timestamps	Account management, responsible gaming monitoring, dispute resolution
Technical Data	IP address, device type, operating system, browser type, session duration	Security monitoring, fraud detection, platform optimisation
Communications Data	Live chat transcripts, email correspondence, support ticket content	Customer support, complaint handling, service improvement
Preference Data	Favourite game categories, preferred payment method, language settings, marketing consent flags	Personalisation, targeted promotions (where consented), UX improvement

bd658 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond the identity photograph required for KYC) or health information, except where a player voluntarily discloses health-related information in the context of a responsible gaming self-exclusion request, in which case that information is handled with the highest level of confidentiality.

3 How We Collect Your Data

3.1 Data You Provide Directly

The majority of personal data bd658 holds about you is information you provide directly during the following interactions:

• Account Registration: When you create a bd658 account you provide your name, mobile number, date of birth and chosen password.
• KYC Verification: When you submit identity documents (National ID Card, passport, selfie) to complete the verification process required before withdrawals are processed.
• Payment Transactions: When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay or bank transfer, your payment account details and transaction amounts are recorded.
• Support Communications: When you contact bd658 via live chat or email, the content of your message and any attachments you provide are stored as part of our support records.
• Responsible Gaming Requests: When you voluntarily set deposit limits, request a self-exclusion or activate a session time limit, the details of your request are recorded and retained for the duration of the restriction period.

3.2 Data Collected Automatically

When you access the bd658 Platform, certain technical and behavioural data is collected automatically through server logs, cookies and similar tracking technologies. This includes your IP address, the pages you visit within the Platform, the games you view or play, the duration of your session and the device and browser you are using. This data is used for security monitoring, fraud detection and platform performance analysis. It is not used to build advertising profiles for third-party marketing purposes.

3.3 Data From Third Parties

bd658 may receive personal data about you from the following third-party sources in limited circumstances: payment service providers (e.g., bKash, Nagad) who confirm the status of your registered mobile wallet; identity verification services used to cross-check KYC documents; and fraud-prevention databases used to screen for known fraudulent account patterns. Data received from these sources is used solely to validate the information you have already provided to bd658 and is not retained beyond what is necessary for that validation purpose.

4 How We Use Your Personal Data

bd658 processes your personal data on the following lawful bases and for the following specific purposes:

• Contract Performance: To create and maintain your bd658 account; to process deposits and withdrawals; to deliver betting and gaming services; to issue and administer bonuses and promotions.
• Legal Obligation: To conduct KYC identity verification; to comply with anti-money laundering (AML) obligations; to maintain transaction records required by applicable financial regulations; to respond to lawful requests from regulatory authorities or law enforcement.
• Legitimate Interests: To detect and prevent fraud, account abuse and money laundering; to monitor betting patterns for responsible gaming purposes; to analyse Platform usage to improve performance and user experience; to maintain the security and integrity of the Platform's technical infrastructure.
• Consent: To send you promotional communications about bd658 offers, new games, seasonal promotions (e.g., Eid special bonuses, BPL cricket promotions, Pohela Boishakh offers) and other marketing content — but only where you have explicitly opted in to receive such communications. You may withdraw your marketing consent at any time by contacting [email protected].

5 Data Sharing and Disclosure

5.1 Service Providers

bd658 shares personal data with carefully selected third-party service providers who process data on our behalf and strictly in accordance with our instructions. These include: payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank); identity verification and KYC service providers; game software studios (Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Habanero) to the extent required to deliver game services; cloud hosting and infrastructure providers; and customer support software platforms. All third-party service providers are contractually bound to process your data only for specified purposes and to implement appropriate technical and organisational security measures.

5.2 Legal and Regulatory Disclosure

bd658 may disclose your personal data to regulatory authorities, law enforcement agencies, courts or other government bodies where we are required to do so by applicable law, court order or regulatory directive, or where disclosure is necessary to protect the legal rights, safety or property of bd658, its players or the public.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or a material part of bd658's business assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer via a notice on the Platform, and the successor entity will be required to honour the terms of this Privacy Policy.

5.4 What We Will Never Do

bd658 will never: sell your personal data to data brokers or advertising networks; share your data with third parties for their own unrelated marketing purposes; provide your data to other online gambling operators without your express consent; or transfer your data to jurisdictions that do not provide an adequate level of data protection without appropriate safeguards in place.

6 Data Retention

bd658 retains your personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory or contractual obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction.
• KYC Documents: Retained for five (5) years following account closure or the completion of the business relationship, whichever is later.
• Support Communications: Retained for three (3) years from the date of the communication, unless the communication relates to an ongoing dispute, in which case it is retained until the dispute is fully resolved plus one (1) additional year.
• Technical and Log Data: Retained for a maximum of twelve (12) months from the date of collection, unless retained for longer as evidence in relation to a fraud or security investigation.
• Marketing Preference Data: Retained until you withdraw your consent or for two (2) years of inactivity, whichever occurs first.

When your personal data is no longer required, bd658 will securely delete or anonymise it in a manner that prevents reconstruction or identification.

7 Data Security

bd658 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. Key security measures in place include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the bd658 Platform is encrypted in transit using industry-standard 256-bit SSL/TLS protocols.
• Encrypted Data Storage: Sensitive data fields — including identity document copies and financial account references — are stored in encrypted form at rest.
• Access Controls: Access to personal data within bd658's internal systems is restricted to authorised personnel only, on a need-to-know basis, and is protected by strong authentication requirements.
• Fraud Monitoring Systems: Real-time transaction monitoring and anomaly detection systems are used to identify suspicious account activity and protect players from unauthorised access to their accounts.
• Regular Security Reviews: bd658 conducts periodic internal security assessments of its data handling practices and technical infrastructure.

While bd658 takes all reasonable precautions to secure your data, no online platform can guarantee absolute security against all possible threats. You are responsible for maintaining the confidentiality of your own login credentials and for notifying bd658 immediately if you suspect any unauthorised access to your account.

8 Cookies and Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. bd658 uses cookies and similar tracking technologies (such as local storage objects and session identifiers) to operate the Platform, maintain your login session, remember your preferences and monitor Platform performance.

8.2 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function correctly. These include session authentication cookies that keep you logged in during a betting session and security tokens that protect against cross-site request forgery. These cannot be disabled without preventing the Platform from working.
• Functional Cookies: Used to remember your preferences, such as your chosen language setting or preferred payment method, so you do not need to re-enter them on each visit.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate the Platform, which pages are most visited and where technical errors occur. This data is used solely to improve the Platform and is not shared with third-party advertising networks.

8.3 Managing Cookies

You may control the use of non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies via the browser's privacy or settings menu. Please note that disabling essential cookies will impair your ability to use the bd658 Platform, including your ability to log in and place bets. bd658 does not use third-party advertising or retargeting cookies.

9 Your Data Rights

You have the following rights with respect to the personal data bd658 holds about you. To exercise any of these rights, please contact bd658 at [email protected] with a clear description of your request. bd658 will respond within a reasonable timeframe, typically within 30 days of receipt of a valid request.

• Right of Access: You may request a copy of the personal data bd658 holds about you, along with information about how it is being used.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to bd658's legal retention obligations. Note that data required for AML compliance cannot be deleted before the applicable mandatory retention period has expired.
• Right to Restrict Processing: You may request that bd658 restrict the processing of your data in certain circumstances, for example while the accuracy of data is disputed.
• Right to Data Portability: You may request a copy of the data you have provided to bd658 in a structured, commonly used and machine-readable format.
• Right to Withdraw Consent: Where bd658 processes your data on the basis of your consent (e.g., for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Object: You may object to the processing of your data where bd658 relies on legitimate interests as the lawful basis, unless bd658 can demonstrate compelling legitimate grounds that override your interests.

10 Minors and Age Restriction

The bd658 Platform is strictly intended for adults aged 21 years and above. bd658 does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the bd658 KYC process, and accounts found to be registered by individuals under the minimum age will be immediately and permanently closed, with all balances voided.

If you are a parent or guardian and believe that a minor in your care has registered an account with bd658, please contact us immediately at [email protected]. We will investigate the matter promptly and take appropriate action, including permanent account closure and data deletion, to the extent permitted by applicable legal obligations.

11 Third-Party Links and Game Providers

The bd658 Platform contains games and content delivered by third-party game studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming and Habanero. When you launch a game from within the bd658 Platform, limited technical data (such as your session token, game ID and stake amount) may be transmitted to the relevant game provider's servers to deliver the game experience. Each game provider operates under its own privacy and data protection framework. bd658 is not responsible for the privacy practices of third-party game providers, and we encourage you to review their respective policies if you have concerns about how they handle your data. bd658 ensures that all game providers with whom we partner are contractually required to process player data only for the purpose of delivering the game service and to implement appropriate security standards.

12 Changes to This Privacy Policy

bd658 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements or the services we offer. When material changes are made, bd658 will post a notice on the Platform and update the "Last Updated" date at the top of this Policy. Where changes are significant, bd658 will endeavour to provide additional notice via email to your registered address. Your continued use of the Platform following the publication of any revised Policy constitutes your acceptance of those changes. We encourage you to review this Policy periodically to stay informed about how we protect your data.

13 Contact and Data Enquiries

If you have any questions, concerns or requests relating to this Privacy Policy or the way bd658 handles your personal data, please contact our data team at: [email protected]. Our team operates 24 hours a day, 7 days a week, and aims to respond to all data-related enquiries within 5 business days. For formal data subject access requests, please include "Data Request" in the subject line of your email and provide sufficient information to identify your account.