bf678 Privacy Policy — How We Protect Your Personal Data

bf678 is an online casino and sports betting platform operating primarily for the Bangladesh market. The bf678 platform is accessible at bf678.io and includes all subpages, features, games, and services available under that domain. This Privacy Policy applies to all users of the Platform, including registered account holders, visitors who browse without registering, and any individual who contacts bf678's customer support team.

This Policy should be read alongside bf678's Terms & Conditions and Responsible Gaming policy, both of which contain additional provisions relevant to how your account is managed and how your data may be used in the context of responsible gaming obligations.

bf678 acts as the data controller in respect of the personal information processed under this Policy. This means we determine the purposes for which and the means by which your personal data is processed. We are committed to processing your data lawfully, fairly, and transparently.

This Policy was last reviewed and updated on 1 January 2026. The most current version of this Policy will always be available at bf678.io/privacy-policy.

2.1 Identity Data. When you register for a bf678 account, we collect personal identification information including your full legal name, date of birth, and government-issued identification number (such as your National Identity Card number or passport number). This data is required to verify your identity and confirm that you meet the minimum age requirement of 21 years.

2.2 Contact Data. We collect your email address, mobile phone number, and residential address. This information is used to communicate with you about your account, deliver support, send transaction confirmations, and where applicable, provide promotional communications you have opted into.

2.3 Financial Data. To process your deposits and withdrawals, bf678 collects financial account details relevant to your chosen payment method — such as your bKash, Nagad, or Rocket mobile banking number, or your bank account details. We also maintain a record of all financial transactions conducted through your bf678 account, as required for accounting, fraud prevention, and anti-money laundering compliance.

2.4 Gaming Activity Data. We collect detailed records of your activity on the Platform, including all games played, bets placed, wagers settled, winnings received, and session durations. This data is used to manage your account, detect signs of problematic gambling, resolve disputes, and fulfil regulatory reporting obligations where applicable.

2.5 Technical Data. When you access bf678, our servers automatically collect certain technical information, including your IP address, device identifiers, browser type and version, operating system, referring URL, and the date and time of each visit. This data is used for platform security, fraud detection, load balancing, and general service performance monitoring.

2.6 Communications Data. If you contact bf678 via live chat, email, or any other support channel, we retain records of those communications, including the content of messages and the outcome of any enquiry or complaint. This data is retained for quality assurance, staff training, and dispute resolution purposes.

2.7 Sensitive Data. bf678 does not intentionally collect sensitive personal data (also known as special category data) such as health information, religious beliefs, or biometric data. However, if you contact us in relation to responsible gaming support, we may record limited information about your self-reported gambling behaviour patterns in order to provide appropriate assistance.

3.1 Directly From You. The majority of the personal data we hold is provided directly by you — at the point of registration, when you update your account profile, when you complete KYC verification, when you make a deposit or withdrawal, or when you contact our customer support team.

3.2 Automatically. Certain technical and usage data is collected automatically as you interact with the Platform. This includes data collected via cookies, web beacons, log files, and similar tracking technologies. For more information about automated data collection, see Section 5 (Cookies & Tracking) below.

3.3 Third Parties. bf678 may receive data about you from third-party sources, including:

• Payment processors (such as bKash, Nagad, Rocket, Upay, Visa, and Mastercard) — who may confirm transaction status, flag suspicious activity, or provide chargeback information.
• Identity verification providers — who assist in confirming the validity of identity documents submitted during KYC.
• Fraud prevention agencies — who may share information about individuals associated with fraudulent activity on other platforms.
• Game studios and providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) — who may report game session data and outcomes for reconciliation and dispute resolution purposes.

Any third-party data received by bf678 is handled under the same security and confidentiality standards applied to data collected directly from you.

bf678 uses the personal data we collect for the following purposes:

• Account creation and management: To register your account, verify your identity, maintain your profile, and provide you with access to all Platform features.
• Transaction processing: To process your deposits, withdrawals, and any bonus credits or adjustments to your account balance.
• Customer support: To respond to your enquiries, resolve complaints, and provide technical assistance when you contact our support team.
• Legal and regulatory compliance: To fulfil our obligations under applicable anti-money laundering laws, age verification requirements, and any other regulatory obligations applicable to our operation in the Bangladesh market.
• Fraud and security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, bonus abuse, and other activities that may harm you, other players, or the Platform.
• Responsible gaming: To monitor for signs of problem gambling behaviour, enforce self-exclusion or deposit limit requests, and contact you with responsible gaming resources where appropriate.
• Platform improvement: To analyse usage patterns, identify technical issues, and improve the performance, security, and user experience of the Platform.
• Marketing (with consent): Where you have opted in to receive promotional communications, to send you personalised offers, bonus notifications, and news about new games or features available on bf678. You may withdraw your consent to marketing communications at any time by contacting support.

bf678 will not use your personal data for any purpose that is incompatible with the purposes described above without first notifying you and, where required, obtaining your consent.

5.1 What Are Cookies. Cookies are small text files placed on your device by the websites you visit. They are widely used to make websites function efficiently, to remember your preferences, and to provide information to the owners of the site about how visitors use it.

5.2 Cookies Used by bf678. The bf678 platform uses the following categories of cookies:

• Strictly necessary cookies: These are essential for the Platform to function. They enable core features such as account login sessions, security tokens, and navigation between pages. These cookies cannot be disabled without significantly impairing your ability to use the Platform.
• Performance and analytics cookies: These collect anonymised information about how visitors use bf678 — such as which pages are visited most often, how long sessions last, and where errors occur. This data is used to improve the Platform.
• Functional cookies: These remember your preferences — such as your selected language, display settings, or recently played games — to provide a more personalised experience.
• Session cookies: Temporary cookies that expire when you close your browser. These are used primarily to maintain the integrity of your active gaming or betting session.

5.3 Managing Cookies. You can manage cookie preferences through your browser settings. Most browsers allow you to refuse new cookies, accept or reject specific cookies, and delete cookies already stored on your device. Please note that disabling cookies may affect the functionality of certain features of the bf678 platform. Detailed guidance on cookie management is available from your browser's help documentation.

5.4 No Third-Party Advertising Cookies. bf678 does not use third-party advertising networks or allow external advertising platforms to set tracking cookies on our pages. We do not participate in cross-site behavioural advertising.

bf678 does not sell, rent, or trade your personal data. We may share your data with third parties only in the following limited circumstances:

6.1 Service Providers. We engage trusted third-party service providers to support the operation of the Platform. These include payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard), identity verification services, IT infrastructure providers, and customer support tooling providers. All service providers are contractually required to process your data only on our instructions and to maintain security standards equivalent to those applied by bf678.

6.2 Game Providers. To facilitate gameplay, technical session data is exchanged with licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. This data exchange is limited to what is necessary for game delivery, fairness certification, and dispute resolution.

6.3 Legal and Regulatory Authorities. bf678 may disclose personal data to law enforcement agencies, regulatory bodies, or other public authorities where we are legally required or permitted to do so — for example, in response to a court order, a legal investigation into money laundering or fraud, or a mandatory reporting obligation.

6.4 Business Transfers. In the event that bf678 undergoes a merger, acquisition, or sale of all or part of its business assets, personal data held by bf678 may be transferred to the acquiring entity as part of that transaction. Affected players will be notified prior to any such transfer, and the receiving entity will be required to honour the commitments made in this Privacy Policy.

6.5 Fraud Prevention. Where bf678 has reasonable grounds to suspect fraudulent activity, we may share relevant data with other gaming operators, payment processors, or fraud prevention agencies to prevent further harm. Such sharing is conducted on a strictly need-to-know basis.

The bf678 platform serves players primarily located in Bangladesh. Some of our service providers and game studio partners are located in other countries. Where your personal data is transferred outside of Bangladesh, bf678 takes steps to ensure that adequate protections are in place to safeguard your data during and after the transfer.

These protections may include contractual data processing agreements that impose data protection standards equivalent to those described in this Policy on all recipients of your personal data outside Bangladesh. bf678 does not transfer your data to any jurisdiction where we cannot establish that appropriate safeguards exist.

If you have questions about the specific safeguards applied to any international transfer of your data, you may contact us at [email protected].

bf678 retains your personal data for as long as your account remains active and for a defined period thereafter, as described below:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, consistent with applicable financial record-keeping obligations.
• Gaming activity data: Retained for three (3) years from the date of each session, or longer where required for an ongoing dispute or regulatory investigation.
• Customer support communications: Retained for two (2) years from the date of the last communication in each support thread.
• Technical and log data: Retained for a maximum of twelve (12) months, after which it is deleted or permanently anonymised.
• Marketing preference data: Retained until you withdraw consent or close your account, after which opt-in records are retained for evidence purposes for two (2) years.

When the applicable retention period expires, bf678 will securely delete or permanently anonymise the relevant data. Data that has been fully anonymised — meaning it can no longer be linked to any identifiable individual — is not subject to the deletion requirement and may be retained for statistical and analytical purposes indefinitely.

bf678 is committed to maintaining the security of your personal data. We implement the following technical and organisational measures to protect your information against unauthorised access, disclosure, alteration, or destruction:

• SSL/TLS encryption: All data transmitted between your device and the bf678 platform is encrypted using industry-standard SSL/TLS protocols. This applies to every page of the Platform, not just login and payment pages.
• Encrypted data storage: Sensitive personal data, including identity documents and financial account details, is stored in encrypted form on our servers. Encryption keys are managed separately from the encrypted data.
• Access controls: Access to personal data held by bf678 is restricted to employees and contractors who require it to perform their job functions. All staff with access to personal data are subject to strict confidentiality obligations.
• Regular security audits: bf678's platform and data infrastructure are subject to periodic security reviews and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a data security incident that may affect your personal data, bf678 has an incident response procedure in place. Affected players will be notified without undue delay where the incident poses a risk to their rights and interests.

While bf678 takes all reasonable steps to protect your data, no security system is completely impenetrable. You also have a role to play in keeping your account secure — use a strong, unique password for your bf678 account and never share your login credentials with anyone.

As an individual whose personal data is processed by bf678, you hold the following rights. To exercise any of these rights, contact us at [email protected] with your full name, registered email address, and a clear description of your request. We will respond within a reasonable timeframe and may ask you to verify your identity before processing your request.

10.1 Right of Access. You have the right to request a copy of the personal data bf678 holds about you, along with information about how it is being processed. This is sometimes referred to as a "Subject Access Request" or SAR.

10.2 Right to Rectification. If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.

10.3 Right to Erasure. Under certain circumstances, you may request that bf678 delete your personal data. This right applies where the data is no longer necessary for the purpose it was collected, where you have withdrawn consent (and no other legal basis for processing exists), or where the data has been unlawfully processed. Note that this right is not absolute — we may be required to retain certain data to comply with legal obligations, even following a valid erasure request.

10.4 Right to Restriction of Processing. You may request that bf678 restrict the processing of your personal data in certain circumstances — for example, while we verify the accuracy of data you have disputed, or where processing is unlawful but you prefer restriction over erasure.

10.5 Right to Object. Where bf678 processes your data on the basis of legitimate interests, you have the right to object to that processing. We will stop processing your data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

10.6 Right to Withdraw Consent. Where processing is based on your consent (for example, marketing communications), you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of any processing carried out before the withdrawal.

10.7 Right to Data Portability. Where we process your data by automated means on the basis of contract or consent, you may request that we provide your personal data in a structured, commonly used, and machine-readable format so that you can transfer it to another service provider.

bf678 is strictly an adult platform. You must be at least 21 years of age to register and use the Platform. bf678 does not knowingly collect personal data from individuals under the age of 21.

If we discover that personal data has been collected from a person under 21 — whether through misrepresentation at registration or any other means — we will immediately close the relevant account, delete all associated personal data, and reverse any financial transactions where technically possible.

If you believe that a minor may have created an account on bf678 using false information, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

The bf678 platform may contain references or links to third-party websites or services — for example, information pages maintained by game providers or payment partners. This Privacy Policy applies exclusively to the bf678 platform and does not cover the data practices of any third-party website, even where a link to that website is accessible from within bf678.

bf678 has no control over and accepts no responsibility for the privacy practices, security standards, or content of any third-party website. We recommend that you review the privacy policy of any third-party website you visit independently of bf678.

bf678 reserves the right to update this Privacy Policy at any time. Where changes are material — meaning they meaningfully affect your rights, the types of data we collect, or the way we use your data — we will notify registered players via email and display a prominent notice on the Platform prior to the changes taking effect.

Minor, non-material updates — such as corrections to typographical errors, clarifications that do not alter the substance of any provision, or formatting changes — may be made without advance notice. The effective date shown at the top of this document will be updated to reflect the date of the most recent revision.

Your continued use of bf678 following notification of any material update to this Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you should discontinue use of the Platform and contact support to close your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bf678 processes your personal data, please contact our support team using the details below:

When contacting us about a data rights request, please include your full name, your registered email address, and a clear description of your request. We may ask you to provide proof of identity before we can action your request, to ensure we do not disclose or alter personal data belonging to another individual.

bf678 takes all privacy enquiries seriously and is committed to resolving any concerns in a fair, timely, and transparent manner. If you are unsatisfied with our response, you retain the right to escalate your concern to an appropriate supervisory authority.