688bd Privacy Policy — How We Collect, Use, and Safeguard Your Personal Data

688bd operates the online betting and casino platform accessible at 688bd.io (the "Platform"). References to "688bd", "we", "us", and "our" throughout this Privacy Policy refer to the operator of the 688bd Platform, including its parent entities, subsidiaries, and authorised affiliates.

688bd serves the Bangladesh market, offering sports betting, live casino, slots, and virtual game products to eligible players aged 21 and above. As the operator of a platform that processes personal and financial data, 688bd acts as the data controller in respect of personal information collected from registered users and site visitors.

If you have any questions about how 688bd handles your personal data, or wish to exercise any of your rights described in this policy, you may contact our data team at [email protected]. We aim to respond to all privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6).

688bd collects personal data through several distinct channels: directly from you when you register or interact with the Platform, automatically as you browse and play, and occasionally from trusted third-party verification partners. The specific categories of data we collect are set out in the table below.

688bd uses your personal data for the following specific purposes. We do not use your data for purposes incompatible with those stated here without first seeking your consent or identifying a separate legitimate basis.

• Account Registration & Management: To create and maintain your 688bd account, verify your identity, manage your Wallet, and process your login credentials securely.
• Service Delivery: To accept and settle bets, process casino game rounds, calculate and credit winnings, and deliver all core Platform functionality.
• Payment Processing: To process deposits via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, and Mastercard, and to execute withdrawal requests to your registered payment method.
• Identity Verification (KYC): To verify your age (minimum 21 years), confirm your identity, and comply with anti-money laundering obligations by checking your submitted documents against third-party verification databases.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, bonus abuse, and other forms of prohibited conduct described in the Terms & Conditions.
• Responsible Gaming: To monitor betting and gaming patterns for indicators of problem gambling behaviour, enforce deposit and loss limits you set, and action self-exclusion requests.
• Customer Support: To respond to your queries, complaints, and dispute requests via live chat and email, and to maintain records of those interactions for quality assurance and compliance purposes.
• Marketing Communications: To send you promotional offers, bonus notifications, and seasonal promotions (BPL, Eid, Pohela Boishakh specials) where you have consented to receive marketing. You may withdraw consent at any time via your account settings.
• Platform Improvement: To analyse usage data in aggregate form in order to optimise the Platform's performance, design new features, and improve the overall player experience.
• Legal Compliance: To meet applicable legal and regulatory obligations, including record-keeping requirements and responses to lawful requests from competent authorities.

688bd processes your personal data on one or more of the following legal bases, depending on the specific purpose of processing:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions agreement you entered into when registering your 688bd account — including account management, bet settlement, and payment processing.
• Legal Obligation: Processing required to comply with applicable law, including anti-money laundering regulations, age verification requirements, and lawful data requests from relevant authorities.
• Legitimate Interests: Processing necessary for 688bd's legitimate interests where those interests are not overridden by your fundamental rights — including fraud prevention, security monitoring, responsible gaming oversight, and platform analytics. We conduct a balancing assessment before relying on this basis.
• Consent: Processing based on your freely given, specific, informed consent — principally in the context of direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

688bd uses cookies and similar tracking technologies to ensure the Platform functions correctly, to remember your preferences, and to understand how users navigate our site. The categories of cookies we deploy are:

• Strictly Necessary Cookies: Essential for core Platform functions such as maintaining your login session, securing your account, and processing transactions. These cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: Allow the Platform to remember your preferences — such as preferred language, odds format, and display settings — across sessions.
• Analytics Cookies: Collect anonymised or pseudonymised data about how visitors interact with the Platform, which pages are most popular, and where errors occur. This data is used to improve Platform performance. We use only privacy-respecting analytics solutions for this purpose.
• Marketing Cookies: Used to deliver relevant promotional content and to measure the effectiveness of marketing campaigns. These are deployed only where you have given consent.

You may manage your cookie preferences at any time through your browser settings. Note that disabling strictly necessary cookies will affect your ability to log in and use the 688bd Platform. Disabling analytics or marketing cookies will not affect core Platform functionality.

688bd does not sell your personal data to third-party companies for their own commercial purposes. We share personal data only in the following limited circumstances and only with parties bound by appropriate data protection obligations:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, and Mastercard receive the transaction data strictly necessary to process your deposits and withdrawals. Each processor operates under its own regulatory framework.
• Identity Verification Partners: Third-party KYC providers receive identity documents and verification data to confirm your age and identity. These providers are contractually prohibited from using your data for any purpose other than the specific verification task.
• Game Studio Providers: Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, and other certified studios receive the minimum data necessary to initiate, run, and settle game rounds — typically a session token and wallet balance reference, not your full identity profile.
• Customer Support Tools: Our live chat and email support infrastructure is provided by third-party helpdesk platforms. Support conversation data is stored on those platforms under strict data processing agreements.
• Analytics & Security Providers: We use third-party analytics and fraud detection services that may process Technical and Usage Data in aggregated or pseudonymised form. These providers are contractually restricted from identifying individual users.
• Legal Authorities: We will disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by applicable law, a valid court order, or a lawful regulatory directive. We will notify affected users where legally permitted to do so.

All third parties that process personal data on 688bd's behalf are required to implement adequate technical and organisational security measures and to handle data solely in accordance with 688bd's documented instructions.

688bd retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by applicable law. Our general retention principles are as follows:

At the end of a retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

As a 688bd user, you have the following rights in respect of your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Rights Request" and we will respond within 5 business days (BST).

688bd strictly prohibits access to its Platform by any person under the age of 21. The Platform is designed and marketed exclusively for adults aged 21 and above in Bangladesh.

We do not knowingly collect personal data from individuals under the age of 21. All registration applications are subject to age verification checks. Where 688bd discovers, or is notified, that a registered account belongs to an individual under 21, the account will be immediately suspended, all balances will be frozen pending investigation, and all personal data associated with that account will be deleted except where retention is required for legal purposes.

If you believe that a minor has registered an account on the 688bd Platform, please notify us immediately at [email protected]. We treat all such reports with the utmost seriousness and will act within 24 hours of a credible report.

688bd implements a layered security architecture to protect your personal and financial data. Our technical and organisational measures include:

• TLS 1.3 Encryption: All data transmitted between your device and 688bd servers is encrypted using Transport Layer Security version 1.3, preventing interception in transit.
• Encrypted Data Storage: Sensitive fields — including identity document data, payment method details, and authentication credentials — are encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within 688bd's internal systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and subject to regular review.
• Two-Factor Authentication: 688bd supports two-factor authentication (2FA) for user accounts. We strongly encourage all players to enable 2FA from within their account security settings.
• Security Monitoring: Our infrastructure is monitored continuously for anomalous activity, intrusion attempts, and data exfiltration indicators. Security incidents are escalated and investigated under a documented incident response procedure.
• Penetration Testing: 688bd conducts regular security assessments, including third-party penetration testing, to identify and remediate vulnerabilities before they can be exploited.

Despite our best efforts, no system is completely immune to security risks. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, 688bd will notify affected users promptly and take all reasonable steps to contain and remediate the incident.

The 688bd Platform integrates with third-party game studios and payment providers as described in this policy. The Platform may, in some contexts, display informational references to external organisations such as sporting bodies (ICC, BCB, FIFA) for the purpose of contextualising betting markets. 688bd does not control the privacy practices of any third-party organisation and is not responsible for their data handling.

This Privacy Policy applies exclusively to the 688bd Platform and the personal data we collect and process. If you access any third-party service in connection with your use of 688bd, we recommend that you review that party's privacy policy independently before sharing any personal information with them.

688bd reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, changes in our data processing practices, or improvements to our Platform and services. We will always publish the revised policy at 688bd.io/privacy-policy with an updated "Last Reviewed" date at the top of the page.

Where a change is material — meaning it significantly affects your rights or the way we process your personal data — we will notify registered users via email and/or a prominent notice on the Platform at least 14 days before the change takes effect. Continued use of the 688bd Platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms.

We encourage you to review this Privacy Policy periodically so that you remain informed about how 688bd protects your data. If you disagree with any changes to this policy, you may close your account by contacting our support team prior to the effective date of the change.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 688bd handles your personal data, please reach out through any of the following channels. All privacy communications are handled by our dedicated data team, which operates on Bangladesh Standard Time (BST, UTC+6).

• Email: [email protected] — use the subject line "Privacy Enquiry" for fastest routing
• Live Chat: Available 24 hours a day, 7 days a week directly on the 688bd Platform
• Phone / WhatsApp: +880 1700-688688 — available during BST business hours

We are committed to resolving all privacy-related queries within 5 business days. For formal data subject rights requests (access, erasure, portability, objection), please submit your request in writing to [email protected] so that we can verify your identity and track the request appropriately.