bt678 Privacy Policy

bt678 ("we", "us", "our", or "the Platform") is committed to protecting the privacy and personal data of every individual who visits, registers on, or interacts with the bt678 platform. This Privacy Policy sets out in clear, formal terms how we collect personal information, the purposes for which we use it, how long we retain it, the parties with whom we may share it, and the rights you hold in relation to your data.

This Privacy Policy applies to all bt678 products and services, including cricket betting, bt678 Casino live dealer games, slot games, Dragon Fishing, Kalaka Bingo, customer support interactions, promotional communications, and all bt678 Login account activity. By registering an account or continuing to use the platform after the effective date shown above, you acknowledge that you have read and understood this Privacy Policy in its entirety.

If you have questions regarding this policy or wish to exercise any of your data rights, you may contact the bt678 Data Protection team at [email protected], marking the subject line as "Privacy Enquiry".

For the purposes of this Privacy Policy, bt678 acts as the data controller in respect of the personal data it processes about registered players and visitors. As data controller, bt678 determines the purposes for which and the means by which personal data is processed.

All data protection enquiries, access requests, and deletion requests should be directed in writing to:

• Platform: bt678
• Website: https://bt678.lat
• Contact: [email protected] (Subject: "Privacy Enquiry")

bt678 collects only the personal data that is necessary to provide our services, comply with legal obligations, and maintain a safe and secure platform for all players in Bangladesh. The categories of personal data we collect are described in the table below.

bt678 collects personal data through the following channels:

• Direct submissions: Data you provide when registering a bt678 Login account, completing identity verification, making a deposit or withdrawal request, contacting customer support, or submitting a complaint.
• Automated technologies: Data collected automatically when you access the bt678 platform, including your IP address, device identifiers, browser fingerprint, and session activity logs. This data is collected via server logs, cookies, and similar tracking technologies described further in Section 7 of this policy.
• Third-party sources: Data received from identity verification providers, payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), fraud detection services, and publicly available sources such as sanctions screening databases, where required to meet our compliance obligations.
• Responsible gaming tools: Data generated when you interact with self-exclusion, deposit limit, or session time-limit features within your bt678 account settings.

bt678 processes your personal data only where a valid legal basis exists. The primary purposes for which we process personal data, along with the corresponding legal basis for each, are set out below.

• Account creation and management: Processing is necessary to perform the contract between you and bt678 (i.e., providing the betting and gaming services you have registered to use).
• Identity and age verification: Processing is necessary to comply with legal obligations, including the requirement to verify that all registered players are aged 21 or above.
• Processing financial transactions: Processing is necessary for the performance of the contract and to comply with anti-money laundering (AML) regulatory obligations.
• Fraud prevention and platform security: Processing is necessary for the legitimate interests of bt678 in maintaining a secure, fair, and fraud-free gaming environment for all players.
• Responsible gaming monitoring: Processing is necessary for the legitimate interests of bt678 in identifying and protecting players who may be at risk of problem gambling behaviours.
• Marketing communications: Processing is based on your freely given consent, which you may withdraw at any time by contacting [email protected] or updating your preferences in account settings.
• Legal and regulatory compliance: Processing is necessary to comply with applicable laws, regulations, and lawful requests from competent authorities.

bt678 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:

• Active account data: Retained for the full duration of your bt678 account and for a period of five (5) years following permanent account closure, in order to satisfy AML record-keeping obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction in accordance with financial record-keeping requirements.
• Identity verification documents: Retained for five (5) years following account closure. Certified copies of NID or other identification documents are stored in encrypted form.
• Customer support communications: Retained for three (3) years from the date of the final communication in each support interaction.
• Technical and usage data (logs): Typically retained for twelve (12) months, after which logs are anonymised or securely deleted unless required for an ongoing investigation.
• Marketing consent records: Retained for as long as your consent is active and for one (1) year following any withdrawal of consent, to demonstrate compliance.

When the applicable retention period expires, bt678 will securely delete or anonymise the personal data in question so that it can no longer be associated with you as an individual.

bt678 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data with third parties only in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — solely to process deposit and withdrawal transactions on your behalf.
• Identity verification providers: Third-party KYC (Know Your Customer) service providers engaged by bt678 to verify the identity and age of account holders as required by our internal compliance programme.
• Game technology providers: Game studios and platform providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised or pseudonymised session data necessary to deliver the game content and resolve technical disputes.
• Fraud prevention and security partners: Third-party fraud detection services that help bt678 identify and investigate suspicious activity, account takeover attempts, and AML risk indicators.
• Legal and regulatory authorities: bt678 may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we are legally required to do so or where disclosure is necessary to protect the rights, property, or safety of bt678, its players, or the public.
• Professional advisors: Lawyers, auditors, and accountants acting in their professional capacity who are bound by confidentiality obligations.

All third-party service providers who process personal data on bt678's behalf are required to do so under contractual arrangements that impose data protection obligations at least equivalent to those applied by bt678.

bt678 uses cookies and similar technologies (including session tokens, local storage, and pixel tags) to operate the platform, maintain session security, analyse usage patterns, and deliver relevant content. The categories of cookies we use are described below.

• Strictly Necessary Cookies: Essential to the operation of the bt678 platform. These cookies enable your bt678 Login session, maintain your authentication state, and prevent cross-site request forgery. They cannot be disabled without preventing core platform functions from working.
• Performance & Analytics Cookies: Collect anonymised data about how visitors use the platform — including which pages are most visited, how long sessions last, and where users navigate from. This data is used to improve platform performance and user experience.
• Functional Cookies: Remember your preferences and settings (such as language and odds format preferences) so that you do not have to re-enter them on each visit.
• Marketing Cookies: Used only with your explicit consent to track your interactions with bt678 promotional content. You may withdraw consent for marketing cookies at any time via your account settings or by contacting [email protected].

You may configure your browser to refuse or delete non-essential cookies. Please note that disabling strictly necessary cookies will impair the functionality of the bt678 platform, and you may be unable to access certain features or maintain a logged-in session.

bt678 applies a layered approach to data security, employing a combination of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Key security measures in place at bt678 include:

• SSL/TLS Encryption: All data transmitted between your device and the bt678 platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. This ensures that your login credentials, financial details, and personal information cannot be intercepted in transit.
• Password Hashing: Account passwords are stored using bcrypt hashing with a per-user salt. bt678 staff cannot retrieve or view your password in plain text form under any circumstances.
• Access Controls: Access to personal data within bt678's internal systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of data access required to perform their specific job function.
• Session Management: bt678 Login sessions are protected by rotating session tokens and automatic session expiry after a defined period of inactivity, reducing the risk of session hijacking.
• Fraud Monitoring: bt678 employs real-time fraud detection systems that continuously monitor account activity for patterns consistent with account takeover, AML risk, or systematic bonus abuse.
• Data Minimisation: bt678 collects only the minimum personal data necessary for each specific processing purpose and does not retain data beyond its defined retention period.

While bt678 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security against all conceivable threats. You are encouraged to use a strong, unique password for your bt678 Login account and to report any suspected unauthorised access immediately to [email protected].

As a registered bt678 player, you hold the following rights in relation to your personal data. bt678 is committed to honouring these rights promptly and transparently.

• Right of Access: You have the right to request a copy of the personal data bt678 holds about you. We will respond to verified access requests within thirty (30) days of receipt.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain details directly within your bt678 account settings.
• Right to Erasure: You may request that bt678 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our obligations to retain data under applicable AML and financial regulations.
• Right to Restrict Processing: You may request that bt678 temporarily restrict the processing of your personal data — for example, while you contest the accuracy of data we hold or object to a processing activity.
• Right to Data Portability: Where processing is based on your consent or on a contractual basis, you may request that bt678 provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though bt678 may be able to demonstrate compelling grounds to continue processing in certain circumstances.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request". bt678 may ask you to verify your identity before processing any data rights request to ensure that personal data is not disclosed to an unauthorised party.

The bt678 platform is strictly intended for adults aged 21 years and above. bt678 does not knowingly collect, store, or process the personal data of individuals under the age of 21. If bt678 becomes aware that personal data has been collected from an individual under the age of 21, the relevant account will be suspended immediately and all associated personal data will be securely deleted, with the exception of any records required to be retained to demonstrate that the underage account was identified and closed.

If you have reason to believe that a person under the age of 21 has registered an account or submitted personal data to bt678, please notify us immediately at [email protected]. bt678 takes the protection of minors extremely seriously and will act on all such reports without delay.

The bt678 platform integrates third-party game content from providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game provided by a third-party studio, that provider's own data processing practices may apply to the data generated within the game session. bt678 recommends that you review the privacy documentation of game providers if you have specific concerns about in-game data handling.

bt678 is not responsible for the privacy practices of any third-party service whose content is embedded within or accessible from the bt678 platform. This Privacy Policy applies solely to data collected and processed directly by bt678 in connection with platform operations and registered player accounts.

bt678 reserves the right to update or amend this Privacy Policy at any time. The effective date displayed at the top of this page will be updated whenever material changes are made. Where changes significantly affect the way in which bt678 handles your personal data, we will notify registered players via their registered email address at least seven (7) days before the amended policy takes effect.

We encourage you to review this Privacy Policy periodically to stay informed about how bt678 protects your personal data. Your continued use of the bt678 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised policy, you must cease using the platform and may request account closure by contacting [email protected].