bd689 Privacy Policy — How We Protect Your Data

This Privacy Policy ("Policy") describes how bd689 ("bd689", "we", "us", "our") collects, uses, stores, shares, and protects the personal information of users ("Player", "User", "you", "your") who access or register on the bd689 platform at bd689.io. By creating a bd689 account or otherwise using the platform, you confirm that you have read this Policy and consent to the data practices described herein. If you do not agree to this Policy, you must not use the bd689 platform.

1. Introduction

1.1 bd689 is committed to protecting the privacy and personal data of every registered player. This Policy sets out our obligations and your rights in relation to the personal information that bd689 processes in the course of operating its online betting and casino platform.

1.2 bd689 acts as the data controller in respect of all personal data collected from players through the bd689 platform. As data controller, bd689 is responsible for determining the purposes for which, and the means by which, personal data is processed.

1.3 This Policy should be read alongside the bd689 Terms & Conditions, which incorporate this Policy by reference. In the event of any inconsistency between this Policy and the Terms & Conditions in relation to a data-specific matter, the terms of this Policy shall prevail.

1.4 This Policy is written in formal English and applies to all use of the bd689 platform by players in Bangladesh. All references to data protection obligations are intended to reflect responsible and transparent data handling practices appropriate to a player-facing online gaming platform.

2. Data We Collect

2.1 bd689 collects the following categories of personal data from players:

Data Category	Examples	Purpose
Identity Data	Full legal name, date of birth, National ID / passport number	Account registration, KYC verification, age verification
Contact Data	Mobile number, email address, district / division (e.g. Dhaka, Chittagong)	Account communications, support, responsible gaming alerts
Financial Data	bKash / Nagad / Rocket wallet numbers, transaction amounts in ৳, deposit and withdrawal history	Payment processing, withdrawal verification, anti-money laundering checks
Account Data	Username, account balance, betting history, game session records, bonus usage	Platform operation, dispute resolution, responsible gaming monitoring
Technical Data	IP address, browser type, operating system, device identifier, session timestamps	Security, fraud detection, platform optimisation
KYC Documents	Scanned NID, passport copy, proof-of-address document, payment method verification	Identity verification, regulatory compliance
Communication Data	Support chat logs, email correspondence, complaint records	Support delivery, quality assurance, dispute resolution

2.2 bd689 does not collect special categories of sensitive personal data (such as racial or ethnic origin, health data, or biometric data) except where a player voluntarily discloses such information in the context of a responsible gaming self-exclusion or support request, in which case such data is processed solely for the purpose of delivering the requested support service.

3. How We Collect Data

3.1 Directly from you — when you register a bd689 account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a responsible gaming questionnaire.

3.2 Automatically — through cookies, server logs, and similar tracking technologies as you interact with the bd689 platform. This includes IP address, device type, browser version, pages visited, and session duration. See Section 9 for more detail on cookies.

3.3 From third parties — including identity verification service providers used during the KYC process, payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) for transaction confirmation, and fraud prevention services used to protect the integrity of the platform.

4. How We Use Your Data

4.1 bd689 uses personal data collected from players for the following purposes:

• Account management — creating and maintaining your bd689 account, verifying your identity, and providing access to platform features.
• Payment processing — facilitating deposits and withdrawals in Bangladeshi Taka (৳) via your chosen payment method, and maintaining accurate financial records.
• KYC compliance — verifying your identity and age (21+) as required by our responsible gaming and anti-money laundering obligations.
• Platform security — detecting and preventing fraud, bonus abuse, collusion, money laundering, underage gambling, and other prohibited activities.
• Responsible gaming — monitoring gaming patterns to identify signs of problem gambling and delivering self-exclusion, deposit limit, and cooling-off tools where requested or where bd689 identifies a concern.
• Customer support — handling account queries, processing complaints, and resolving disputes.
• Platform improvement — analysing aggregated, anonymised usage data to improve the bd689 user experience, game offering, and payment options.
• Marketing communications — sending promotional offers and updates to players who have opted in to receive them (see Section 14).
• Legal obligations — retaining records and cooperating with law enforcement or regulatory authorities where required by applicable law.

5. Legal Basis for Processing

5.1 bd689 processes your personal data on the following legal bases:

• Contractual necessity — processing is necessary to perform the contract between you and bd689 (i.e., to operate your account, process payments, and deliver the betting and gaming services you have requested).
• Legal obligation — processing is necessary to comply with applicable legal requirements, including KYC, anti-money laundering record-keeping, and cooperation with law enforcement.
• Legitimate interests — processing is necessary for bd689's legitimate interests in preventing fraud, maintaining platform security, and improving the player experience, where those interests are not overridden by your data protection rights.
• Consent — where we rely on your consent (for example, for optional marketing communications), you may withdraw that consent at any time by updating your account settings or contacting support.

6. Data Sharing

6.1 bd689 does not sell, rent, or trade your personal data to third parties for their own marketing purposes under any circumstances.

6.2 bd689 may share your personal data with the following categories of third parties, solely to the extent necessary for the stated purpose:

• Payment processors — bKash, Nagad, Rocket, Upay, Visa, and Mastercard, for the purpose of executing deposits and withdrawals requested by you.
• KYC verification providers — third-party identity verification services used to authenticate player identity documents and confirm age eligibility.
• Fraud and security providers — specialist services used to detect suspicious activity, unauthorised account access, and platform integrity threats.
• Game providers — licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, which operate games accessible through the bd689 platform and may receive technical session data required for game delivery.
• Legal and regulatory authorities — law enforcement agencies and regulatory bodies where bd689 is required by applicable law to disclose information.
• Professional advisers — legal counsel, auditors, and compliance consultants, bound by confidentiality obligations, where necessary to obtain professional advice in relation to bd689's operations.

6.3 All third-party service providers engaged by bd689 are subject to data processing agreements that restrict their use of personal data to the specific purpose for which it was shared and require them to implement appropriate technical and organisational security measures.

7. Payment Data

7.1 All financial transactions on the bd689 platform are processed in Bangladeshi Taka (৳). bd689 does not store full card numbers, CVV codes, or mobile banking PINs on its servers. Payment credentials are handled directly by the respective payment provider (bKash, Nagad, Rocket, Upay, Visa, or Mastercard) using their own secure, encrypted infrastructure.

7.2 bd689 retains a record of transaction amounts, timestamps, payment method type (e.g., bKash), and transaction reference numbers for account management, dispute resolution, and financial compliance purposes.

7.3 Withdrawals are processed exclusively to the payment method registered and verified in the KYC-confirmed account holder's name. bd689 does not process withdrawals to third-party accounts, which is a critical measure in preventing financial fraud and money laundering.

8. KYC & Identity Verification Data

8.1 As part of bd689's mandatory Know Your Customer (KYC) process, players are required to submit identity documents including a National Identity Card, passport, or other government-issued photo identification, together with proof-of-address documentation.

8.2 KYC documents are used solely for the purpose of verifying player identity, confirming minimum age eligibility (21+), and complying with applicable anti-money laundering obligations. These documents are processed by bd689's internal compliance team and, where applicable, by our authorised third-party identity verification provider.

8.3 KYC documents are stored securely using access-controlled, encrypted document storage. Access to KYC documents is restricted to authorised compliance and support personnel on a strict need-to-know basis.

8.4 bd689 retains KYC documentation for a minimum of five years following account closure, in accordance with standard financial compliance record-keeping requirements.

9. Cookies & Tracking Technologies

9.1 The bd689 platform uses cookies and similar tracking technologies to operate certain platform features, maintain your login session, and gather anonymised analytics data to improve the player experience.

9.2 The following categories of cookies are used on the bd689 platform:

• Essential cookies — required for the platform to function correctly, including session authentication, account security tokens, and load balancing. These cookies cannot be disabled without impairing platform functionality.
• Analytics cookies — used to collect anonymised data about how players interact with the bd689 platform, including page views, session duration, and navigation paths. This data helps bd689 identify usability improvements. Individual players are not identifiable from this data.
• Preference cookies — used to remember your platform settings and preferences, such as language preferences and display options, so that you do not need to re-configure them on each visit.

9.3 bd689 does not use third-party advertising or retargeting cookies that would allow external advertisers to track your activity across other websites following a visit to the bd689 platform.

9.4 You may configure your browser to refuse or delete cookies. Please note that disabling essential cookies will affect platform functionality and may prevent you from accessing certain features, including account login. Disabling analytics or preference cookies will not impair your access to core platform features.

10. Data Security

10.1 bd689 implements industry-standard technical and organisational measures to protect the personal data of registered players against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between player devices and bd689 servers.
• Encryption of sensitive personal data at rest within bd689's database infrastructure.
• Role-based access controls ensuring that personnel can access personal data only to the extent required by their specific operational function.
• Routine security auditing and penetration testing of the bd689 platform and backend infrastructure.
• Multi-factor authentication requirements for administrative access to systems holding personal data.

10.2 In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, bd689 will notify affected players via their registered contact details as promptly as is practicable following discovery of the breach.

10.3 Players are responsible for maintaining the security of their own bd689 account credentials. bd689 strongly advises players to use a unique, strong password for their bd689 account and to avoid sharing login details with any third party. If you believe your account has been compromised, contact [email protected] (plain text — not a clickable link) immediately.

11. Data Retention

11.1 bd689 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to the following minimum retention periods:

• Account data — retained for the duration of the account's active life and for a minimum of five years following account closure.
• Financial transaction records — retained for a minimum of five years following the date of the transaction.
• KYC documentation — retained for a minimum of five years following account closure.
• Support and complaint records — retained for a minimum of three years following resolution of the relevant matter.
• Marketing preferences — retained until you withdraw consent or close your account, whichever is earlier.

11.2 Following the expiry of the applicable retention period, bd689 will securely delete or irreversibly anonymise personal data so that it can no longer be associated with an identified or identifiable individual.

12. Your Data Rights

12.1 As a registered bd689 player, you have the following rights in relation to your personal data:

• Right of access — you may request a copy of the personal data that bd689 holds about you.
• Right to rectification — you may request that inaccurate or incomplete personal data held about you be corrected or completed.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to bd689's legal retention obligations.
• Right to restrict processing — you may request that bd689 limit the processing of your personal data in certain circumstances, such as while a correction request is being assessed.
• Right to data portability — you may request a copy of personal data you have provided to bd689 in a structured, commonly used, machine-readable format.
• Right to object — you may object to processing of your personal data where bd689 is relying on legitimate interests as the legal basis, subject to bd689's ability to demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent — where bd689 is relying on your consent (e.g., for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

12.2 To exercise any of the above rights, please contact bd689 support by writing to [email protected] (plain text — not a clickable link). bd689 will respond to all valid data rights requests within 30 days of receipt. Complex requests may require additional time, in which case bd689 will notify you of the extended response period.

12.3 bd689 may need to verify your identity before processing a data rights request to ensure that personal data is not disclosed to or acted upon at the direction of an unauthorised party.

13. Minors & Age Restriction

13.1 The bd689 platform is strictly for adults aged 21 and above. bd689 does not knowingly collect personal data from individuals under the age of 21. If bd689 becomes aware that personal data has been collected from a person under 21, that data will be deleted and the account will be permanently closed.

13.2 If you are a parent or guardian and believe that a person under 21 in your care has created a bd689 account, please contact [email protected] (plain text — not a clickable link) immediately and we will investigate and take appropriate action as a matter of priority.

14. Marketing Communications

14.1 bd689 may send promotional communications — including information about bonuses, new games, seasonal offers tied to events such as Eid, Pohela Boishakh, or BPL cricket season — to players who have opted in to receive marketing messages during registration or through their account settings.

14.2 bd689 will only use your contact details for marketing purposes where you have given clear, affirmative consent to receive such communications. We will not send unsolicited marketing messages.

14.3 You may opt out of marketing communications at any time by updating your communication preferences in your bd689 account settings or by contacting [email protected] (plain text — not a clickable link). Opt-out requests will be processed within 5 business days. Please note that opting out of marketing communications does not affect the delivery of transactional communications (such as deposit confirmations, withdrawal notifications, or KYC status updates), which are sent as part of the service.

15. Changes to This Privacy Policy

15.1 bd689 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, operational requirements, or applicable legal obligations. The current version of this Policy will always be accessible on the bd689 platform at bd689.io/privacy-policy.

15.2 Where material changes are made to this Policy, bd689 will notify registered players via their registered contact details with reasonable advance notice before the changes take effect. Continued use of the bd689 platform following the effective date of any revised Policy constitutes acceptance of the updated terms.

15.3 The "Last Updated" date displayed at the top of this document indicates when the most recent revision was made. Players are encouraged to review this Policy periodically to remain informed of how bd689 handles personal data.

16. Contact Us

16.1 If you have any questions, concerns, or requests relating to this Privacy Policy or to bd689's data processing practices, please contact our support team. All privacy-related enquiries are handled in English during Bangladesh Standard Time (BST, UTC+6) business hours.

16.2 Data enquiries contact: [email protected] (plain text — this is not a clickable link; please copy the address manually into your email client).

16.3 bd689 aims to acknowledge all privacy-related enquiries within 24 hours of receipt and to resolve them within 30 days. Where a request is complex or involves multiple data categories, we will notify you of the anticipated response timeline.