bk678 Privacy Policy

bk678 ("we", "us", "our") operates the online casino and sports betting platform accessible at https://bk678.app. This Privacy Policy ("Policy") describes how bk678 collects, processes, stores, discloses, and protects the personal data of individuals ("you", "Player", "User") who access or use the bk678 platform, including its website, mobile browser interface, games, sports betting markets, payment features, and customer support channels.

This Policy applies to all personal data collected from Players based in Bangladesh and any other jurisdiction from which the platform is accessed. It applies regardless of the device used to access the platform — desktop, mobile, or tablet. By using bk678, you confirm that you are at least 18 years of age and that you consent to the practices described in this Policy.

This Policy should be read alongside the bk678 Terms and Conditions. In the event of any conflict between this Policy and the Terms and Conditions on a matter relating to personal data, this Policy shall prevail. For any other matter, the Terms and Conditions shall govern.

bk678 is committed to handling personal data responsibly, securely, and transparently. We do not sell your personal data to third parties for their own marketing purposes, and we do not engage in unauthorised data brokerage. All data processing activities described in this Policy are carried out for legitimate, clearly defined purposes that are necessary to provide you with a safe, personalised, and compliant gaming experience.

bk678 collects personal data through several channels: directly from you when you register, verify your identity, make transactions, or contact support; automatically through the platform as you navigate and play; and from trusted third-party service providers. The categories of personal data we collect are described below.

2.1 Registration and Account Data

When you create a bk678 account, we collect the following information:

• Full legal name (as it appears on your government-issued identity document);
• Date of birth (to verify you meet the 18+ age requirement);
• Bangladeshi mobile phone number (used as your primary account identifier and for SMS verification);
• Account username and hashed password;
• City or district of residence within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna).

2.2 Identity Verification Data

To comply with our identity verification requirements, we may collect:

• A copy or photograph of your Bangladesh National Identity Card (NID), passport, or other accepted government-issued identification document;
• A selfie or live photograph for biometric comparison against your identity document;
• Your National ID number (for verification matching purposes only — stored in encrypted form);
• Any additional documentation requested to satisfy enhanced due diligence requirements.

Identity verification documents are handled with the highest level of data protection measures. Access to these documents is restricted to authorised compliance personnel only.

2.3 Payment and Transaction Data

When you deposit or withdraw funds, we collect:

• Your bKash, Nagad, Rocket, Upay, or SureCash mobile wallet number;
• Card number (last four digits only — we do not store full card numbers), card type, and expiry date for Visa and Mastercard transactions;
• Transaction reference numbers, timestamps, and transaction amounts in Bangladeshi Taka (BDT);
• Deposit and withdrawal history associated with your account.

Full payment credentials are processed by our payment service providers and are never stored in plain text on bk678 servers. We retain transaction records for audit, dispute resolution, and anti-fraud purposes.

2.4 Usage and Gameplay Data

As you use the bk678 platform, we automatically collect:

• IP address and approximate geolocation (city/district level);
• Device type, operating system, browser type and version;
• Pages and game screens visited, session duration, and clickstream data;
• Game participation records, bet amounts, wagering history, and game outcomes;
• Login timestamps and session activity logs.

This data is used for platform security, fraud prevention, responsible gaming monitoring, and improving the overall player experience.

2.5 Customer Support Communications

When you contact bk678 support, we collect and retain:

• The content of your messages, emails, and any attached documents;
• The date, time, and method of your communication;
• Any account information you provide in the course of resolving your query.

Support communications are retained for a minimum of two years for quality assurance, training, and dispute resolution purposes.

2.6 Data Collected Through the Table Below

The following table summarises the key categories of data we collect, the legal basis for collection, and the primary purpose:

bk678 uses the personal data we collect solely for the purposes described in this Policy. We do not process your data in ways that are incompatible with the purposes for which it was originally collected. Our primary uses of your personal data are as follows:

3.1 Account and Platform Operations

Your registration data, login credentials, and session information are used to create, maintain, and secure your bk678 account; to authenticate your identity when you log in; to process your deposits and withdrawals accurately and promptly; and to provide you with access to all games, betting markets, and features available on the platform.

3.2 Identity Verification and Compliance

bk678 is required to verify the identity of its Players before processing certain transactions. We use your identity verification documents to confirm your legal name, date of birth, and residency, and to screen against any applicable watchlists or regulatory obligations. This process is a prerequisite for withdrawal processing and ongoing account maintenance.

3.3 Fraud Prevention and Security

We analyse device data, IP addresses, transaction patterns, and login behaviour to detect and prevent fraudulent activity, money laundering, multi-accounting, and other forms of platform abuse. Where suspicious activity is identified, we may suspend an account and conduct a detailed review before allowing access to be restored. This processing is carried out in the legitimate interests of bk678 and its genuine Player community.

3.4 Responsible Gaming Monitoring

bk678 uses your wagering history, deposit frequency, session duration, and account activity data to monitor for signs of problem gambling behaviour. Where such indicators are identified, bk678 may reach out proactively to offer support resources, suggest responsible gaming tools such as deposit limits or cooling-off periods, or restrict certain platform features in the Player's best interests. This processing is carried out both as a contractual obligation and in the legitimate interests of Player welfare.

3.5 Customer Support

When you contact our support team, we use your account data and communication history to resolve your query efficiently and accurately. Support interaction records are retained to improve our service quality and as evidence in the event of a dispute.

3.6 Platform Improvement and Analytics

Aggregated and anonymised usage data is used to analyse platform performance, identify technical issues, understand Player behaviour patterns, and inform decisions about new features, game offerings, and promotional campaigns. No individually identifiable data is used for analytics purposes beyond what is necessary for the specific legitimate interest described.

3.7 Promotional Communications

Where you have opted in to receive promotional communications, bk678 may use your contact details and gameplay preferences to send you personalised offers, bonus notifications, and platform updates via SMS or in-platform messaging. You may opt out of promotional communications at any time by contacting [email protected]. Opting out does not affect the delivery of transactional or account-related communications, which are always sent regardless of marketing preferences.

bk678 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. Cookies allow the platform to recognise your device, remember your preferences, keep you securely logged in, and collect anonymised analytics data.

4.1 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They manage your login session, maintain your account security, and ensure the platform loads correctly. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: These cookies remember your preferences — such as your preferred language setting, display preferences, and last-played game — to provide a more personalised experience. They do not track your activity across third-party websites.
• Analytics Cookies: We use anonymised analytics data to understand how Players interact with the platform, which pages are visited most frequently, and where technical issues occur. This data is processed in aggregate and does not identify individual Players.
• Security Cookies: These cookies support our fraud detection systems by fingerprinting device characteristics and flagging anomalous login patterns. They are placed on your device in our legitimate interest of maintaining platform security.

4.2 Managing Your Cookie Preferences

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the bk678 platform, including your ability to remain logged in or access certain features. Strictly necessary cookies cannot be disabled via browser settings without disrupting your session entirely. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

4.3 Third-Party Tracking

bk678 does not permit third-party advertising networks to place tracking cookies on the platform. Any third-party scripts integrated into the platform — such as those provided by game studios or payment processors — operate under their own privacy policies and are bound by contractual data processing agreements with bk678 that restrict their use of your data to the specific service they provide.

bk678 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your personal data only in the limited circumstances described below, and only to the extent necessary for each specific purpose.

5.1 Payment Service Providers

To process your deposits and withdrawals, bk678 shares the minimum required payment information with our authorised payment partners, including bKash, Nagad, Rocket, Upay, SureCash, and card processing services for Visa and Mastercard transactions. These providers are bound by strict data processing agreements and industry-standard security requirements. They are not permitted to use your data for any purpose other than facilitating your bk678 transactions.

5.2 Game Content Providers

bk678 integrates game content from licensed third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others. These providers may receive anonymised session tokens or game-specific parameters to deliver game content to your device. They do not receive your full personal profile, payment details, or identity documents.

5.3 Identity Verification Services

Where required by our Know Your Customer (KYC) process, bk678 may share copies of your identity documents with a trusted third-party identity verification service provider. This service provider processes verification data solely for the purpose of confirming your identity on bk678's behalf and does not retain or reuse your data independently.

5.4 Legal and Regulatory Disclosures

bk678 may disclose your personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or courts of competent jurisdiction where we are legally required to do so, or where we reasonably believe that disclosure is necessary to prevent fraud, illegal activity, or harm to any individual. We will notify you of any such disclosure where we are legally permitted to do so.

5.5 Business Transfers

In the event that bk678 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may form part of the transferred assets. In such circumstances, we will take reasonable steps to ensure that your data continues to be protected in accordance with this Privacy Policy, and we will notify you of any material change to the identity of the data controller prior to the transfer taking effect.

bk678 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The retention periods set out below represent our standard data lifecycle commitments. Where a legal or regulatory obligation requires a longer retention period, that obligation will take precedence.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised so that it can no longer be associated with you as an individual. If you request account closure, bk678 will begin the deletion process for non-mandatory data within 30 days of processing your closure request, subject to any ongoing legal holds or outstanding disputes.

6.1 Data Storage Location

bk678 stores player data on servers that meet industry-standard security certifications. Data may be processed by service providers operating across multiple geographic regions. In all cases, data transfers are governed by appropriate contractual safeguards, and the level of protection applied to your data is consistent with the standards described in this Policy regardless of where the data is physically stored.

bk678 implements a layered approach to data security, combining technical, organisational, and procedural controls to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures in place include the following:

• TLS/SSL Encryption: All data transmitted between your device and the bk678 platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. This protects your login credentials, payment details, and personal information in transit.
• Password Hashing: Account passwords are stored using a strong one-way cryptographic hashing algorithm. bk678 staff cannot retrieve your plain-text password — if you forget it, a reset process is used rather than recovery of the original credential.
• Access Controls: Access to personal data within bk678's internal systems is restricted on a strict need-to-know basis. Staff are granted the minimum level of data access required for their role, and all access events are logged and audited.
• Two-Factor Authentication (2FA): Players are encouraged to enable two-factor authentication on their bk678 accounts. Internal administrative access to sensitive Player data systems requires mandatory multi-factor authentication.
• Security Monitoring: bk678 operates continuous security monitoring on its platform infrastructure. Anomalous activity patterns — including brute-force login attempts, unusual transaction volumes, and suspicious IP activity — trigger automated alerts and review processes.
• Incident Response: In the event of a confirmed data security incident affecting your personal data, bk678 will notify affected Players without undue delay and will take immediate remediation steps. A summary of the incident, its likely impact, and the measures taken will be communicated via the contact details registered to your account.

While bk678 takes all reasonable and practicable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials, and bk678 accepts no liability for losses arising from your failure to do so.

As a Player on the bk678 platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with your account details and a clear description of your request. bk678 will respond within 30 days of receiving a valid request.

The bk678 platform is strictly intended for adults aged 18 years and over. We do not knowingly collect personal data from individuals under the age of 18. Our registration process requires confirmation of age, and all accounts are subject to identity verification that includes date-of-birth validation.

If bk678 discovers or has reasonable grounds to suspect that a registered account belongs to a person under 18, we will immediately suspend that account, void any game activity, and return any deposited real-money funds to the payment method from which they originated. All personal data associated with the under-age account will be securely deleted, except to the extent that retention is required for legal or regulatory purposes.

If you are a parent or guardian and believe that your child may have registered on bk678, please contact us immediately at [email protected] with the relevant account details so we can take prompt action. bk678 takes its obligations regarding the protection of minors extremely seriously and cooperates fully with any legitimate investigation into underage access.

bk678 reserves the right to update or revise this Privacy Policy at any time. Updates may be made to reflect changes in our data processing practices, changes in applicable law, the introduction of new platform features, or feedback from our Player community. The "Effective Date" displayed at the top of this document will always reflect the date on which the most recent version came into effect.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — bk678 will provide advance notice to registered Players via SMS notification to the mobile number associated with their account, or via an in-platform notice displayed upon their next login. Minor clarifications and formatting changes may be made without specific notice.

Your continued use of the bk678 platform after any revised Privacy Policy has taken effect constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must cease using the platform and request account closure by contacting [email protected]. The most current version of this Policy is always accessible at https://bk678.app/privacy-policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way bk678 processes your personal data, please contact our data protection team using the details below. We are committed to addressing your query promptly and transparently.