667bd Privacy Policy — How We Collect, Protect, and Manage Your Personal Data

1. Introduction and Scope

This Privacy Policy (hereinafter "Policy") applies to all personal data collected and processed by 667bd (hereinafter "667bd", "we", "us", or "our") in connection with the operation of the 667bd online betting and casino platform, accessible at https://667bd.io and any associated domains or mobile interfaces. This Policy applies to all registered players, prospective players who interact with the platform without completing registration, and individuals who contact 667bd's customer support team.

This Policy should be read alongside the 667bd Terms and Conditions, which govern your use of the platform as a whole. In the event of any conflict between this Policy and the Terms and Conditions with respect to the handling of personal data, this Policy shall take precedence.

667bd is committed to handling all personal data responsibly, transparently, and in accordance with applicable data protection principles. We recognise the sensitivity of the personal and financial data that players entrust to us, and we take our obligations to protect that data seriously.

2. Data Controller Information

For the purposes of this Privacy Policy, 667bd acts as the data controller in respect of all personal data collected from players through the 667bd platform. As data controller, 667bd determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

If you have any questions about how 667bd processes your personal data, or if you wish to exercise any of the data rights described in Section 9 of this Policy, you may contact the 667bd data team at the following address:

3. Personal Data We Collect

667bd collects the following categories of personal data from players and prospective players:

3.1 Registration and Identity Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (used to verify that you meet the 21+ age requirement)
• Residential address in Bangladesh
• Email address
• Mobile phone number as registered with your bKash, Nagad, Rocket, or other payment account
• Username and encrypted password

3.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (Bangladesh National ID Card, passport, or driving licence)
• Proof of address documents (utility bills, bank statements, or official correspondence dated within three months)
• Proof of payment method ownership (for bKash or Nagad, account holder screenshots; for bank accounts, a statement showing your name and account number)
• Selfie or live photo where required for enhanced verification

3.3 Financial and Transaction Data

• Deposit transaction records including amount, date, time, and payment method reference
• Withdrawal request records including amount, destination method, and processing status
• Account balance history
• Bonus and promotional credit records
• Win and loss records across all games and betting markets

3.4 Technical and Device Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser version
• Device identifier and fingerprint data used for fraud detection and duplicate account identification
• Session timestamps, login history, and session duration
• Cookie and tracking technology data (see Section 7)

3.5 Communications Data

• Records of all customer support interactions, including live chat transcripts, email correspondence, and support ticket history
• Feedback, complaints, and dispute records
• Responses to surveys or promotional communications where you have opted in

3.6 Responsible Gambling Data

• Self-exclusion requests and self-exclusion status
• Deposit limit settings and modification history
• Session time limit configurations
• Cooling-off period records
• Responsible gambling assessments where completed voluntarily

4. How We Collect Your Data

667bd collects personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, place a bet, contact customer support, or update your account settings.
• Automatically: Through cookies, server logs, and tracking technologies when you visit and interact with the 667bd website or platform interface. See Section 7 for details.
• From payment providers: When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, or BRAC Bank, we receive transaction confirmation and reference data from those providers.
• From KYC and fraud detection partners: Where 667bd uses third-party identity verification or fraud detection services, those partners may provide data points about the documents or identities submitted for verification.
• From publicly available sources: In certain fraud investigation or compliance scenarios, 667bd may cross-reference data against publicly available records.

5. Purposes and Legal Bases for Processing

667bd processes personal data for specific, legitimate purposes. The table below sets out the main processing activities, the purpose for each, and the legal basis on which processing is carried out.

6. Sharing Your Personal Data

667bd does not sell or rent your personal data to third parties for their own commercial or marketing purposes. Your data may be shared in the following limited and controlled circumstances:

6.1 Payment Service Providers

When you make a deposit or withdrawal, 667bd shares the minimum necessary payment data with the relevant provider — bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, or BRAC Bank — to process the transaction. These providers act as independent data controllers for the data they hold within their own systems and are subject to their own privacy policies.

6.2 KYC and Identity Verification Partners

667bd may use third-party identity verification services to assist with KYC processing. Where this occurs, only the specific documents and data required for verification are shared with those partners. All KYC partners are contractually bound to process data solely for the purposes of identity verification and to maintain appropriate security standards.

6.3 Fraud Detection and Security Services

To protect the platform and its players, 667bd may share device fingerprint data, IP addresses, and transaction patterns with fraud detection service providers. These services help 667bd identify duplicate accounts, detect unusual betting patterns, and prevent unauthorised account access.

6.4 Game Providers

When you play games provided by third-party studios — including Evolution Gaming, Pragmatic Play Live, Ezugi, NetEnt, Microgaming, and Spribe — limited session and transaction data is shared with those providers for the purposes of game delivery, round settlement, and fair-play auditing. Game providers do not receive your full identity or payment details.

6.5 Legal and Regulatory Disclosures

667bd may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other authorities where required to do so by applicable law, court order, or lawful authority request. 667bd will notify you of such disclosures where it is legally permitted to do so.

6.6 Business Transfers

In the event that 667bd undergoes a merger, acquisition, restructuring, or sale of assets, player data may be transferred as part of that transaction. In such circumstances, 667bd will notify affected players in advance and ensure that the receiving entity is bound by data protection obligations at least equivalent to those set out in this Privacy Policy.

7. Cookies and Tracking Technologies

667bd uses cookies and similar tracking technologies to operate, secure, and improve the platform. A cookie is a small text file stored on your device when you visit a website. 667bd uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are required for the platform to function. They manage your login session, maintain your account authentication state, and enable core security features such as CSRF protection. These cookies cannot be disabled without impairing platform functionality.
• Functional Cookies: These cookies remember your preferences such as language settings, display preferences, and responsible gambling tool configurations. They improve your experience on the platform but are not essential to its core operation.
• Analytics Cookies: These cookies collect anonymised data about how players navigate and interact with the platform. The data is used in aggregate form to understand which features are most used, identify technical issues, and guide platform improvements. Individual players are not identified through analytics data.
• Fraud Detection Cookies: These cookies assist in identifying suspicious login patterns, duplicate account attempts, and unusual session behaviour. They form part of 667bd's fraud prevention infrastructure and are processed on the basis of legitimate interest.

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the 667bd platform. Disabling analytics or functional cookies will not prevent you from using core platform features but may reduce the quality of your experience.

8. Data Retention

667bd retains personal data for as long as it is necessary for the purpose for which it was collected, or for as long as required by applicable law. The following retention periods apply:

• Active account data: Retained for the duration of your account relationship with 667bd and for a minimum of five years following account closure, to meet anti-money-laundering, fraud prevention, and dispute resolution obligations.
• KYC verification documents: Retained for a minimum of five years following the completion of verification, or for five years following account closure, whichever is later.
• Transaction records: Retained for a minimum of five years following each transaction, in accordance with financial record-keeping obligations.
• Customer support records: Retained for three years following the resolution of the relevant support interaction, unless the matter relates to a dispute or legal claim, in which case retention is extended to five years from resolution.
• Marketing preferences: Opt-out records are retained indefinitely to ensure that opted-out players are not contacted in the future. Opt-in records are retained for the duration of the marketing relationship.
• Technical and device data: Retained for twelve months in rolling logs for security and fraud detection purposes.

When data is no longer required and the applicable retention period has expired, it is securely deleted or anonymised in accordance with 667bd's data destruction procedures.

9. Your Data Rights

As a player on the 667bd platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact 667bd at [email protected] with your full name, registered email address, and a description of the right you wish to exercise. 667bd will respond within 30 days of receiving your request.

• Right of Access: You have the right to request a copy of the personal data 667bd holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data 667bd holds about you. For account details, many corrections can be made directly through your account settings.
• Right to Erasure: In certain circumstances, you have the right to request that 667bd delete your personal data. Note that this right is subject to limitations where 667bd is required by law to retain data — for example, KYC and transaction records subject to anti-money-laundering retention obligations cannot be erased on request.
• Right to Restriction: You may request that 667bd restrict the processing of your data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing and a determination is pending.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interest, including direct marketing. All marketing opt-out requests will be actioned within 30 days.
• Right to Data Portability: Where processing is based on your consent or on contract performance and is carried out by automated means, you may request that your data be provided in a structured, commonly used, and machine-readable format.

10. Children and Minors

The 667bd platform is strictly intended for adults aged 21 years and above. 667bd does not knowingly collect personal data from any individual under the age of 21. If 667bd becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted without delay, the associated account will be permanently closed, and any deposits made will be returned to the source payment method where technically feasible.

If you are a parent or guardian and believe that a minor in your care has registered an account with 667bd, please contact us immediately at [email protected] so that the account can be closed and the matter handled promptly.

11. Security of Your Data

667bd implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the 667bd platform
• Encryption of sensitive data fields (including passwords, which are hashed using industry-standard algorithms and never stored in plain text) in the 667bd database
• Role-based access controls ensuring that 667bd staff can only access player data that is necessary for their specific function
• Firewalls, intrusion detection systems, and regular penetration testing of the platform infrastructure
• Regular security training for all 667bd staff who handle personal data
• Documented procedures for identifying, assessing, and responding to suspected data security incidents

Despite these measures, no online platform can guarantee absolute security. If you suspect that your 667bd account has been accessed without your authorisation, you should change your password immediately and notify our support team at [email protected] without delay.

12. International Data Transfers

667bd's primary player base is located in Bangladesh. Where personal data is processed by third-party service providers — such as game providers, KYC partners, or fraud detection services — that are located outside Bangladesh, 667bd ensures that appropriate contractual safeguards are in place to protect the data during transfer and processing. These safeguards include standard contractual clauses requiring the recipient to process data in accordance with data protection standards equivalent to those described in this Privacy Policy.

13. Marketing Communications

667bd may, with your prior consent, send you marketing communications about promotions, bonuses, new games, and platform updates. Your consent to receive marketing communications is obtained at the time of registration or through your account communication preferences. Marketing communications from 667bd are sent to your registered email address or mobile number.

You may withdraw your consent to receive marketing communications at any time by contacting 667bd at [email protected] or by updating your communication preferences in your account settings. Opt-out requests will be actioned within 30 days. Note that even after opting out of marketing, you will continue to receive essential service communications — such as deposit confirmations, withdrawal notifications, and account security alerts — as these are necessary for the operation of your account.

14. Third-Party Links and Services

The 667bd platform may contain references to third-party payment providers and game studios. 667bd's Privacy Policy applies solely to data processed by 667bd in connection with the 667bd platform. Where you interact with third-party services — such as your bKash app, your bank's internet banking portal, or a game studio's help documentation — the privacy practices of those third parties govern the data they collect. 667bd is not responsible for the privacy practices of any third party and encourages players to review the privacy policies of any external services they use in connection with their 667bd account.

15. Changes to This Policy

667bd reserves the right to update or replace this Privacy Policy at any time. Material changes — that is, changes that significantly affect the way we collect, use, or share your personal data — will be communicated to registered players by email to the address on record for their account at least 7 days before the revised Policy takes effect. Non-material changes (such as corrections to typographical errors or clarifications that do not alter the substance of the Policy) may be made without advance notice. The updated Policy will always be available on this page with a revised "Last Updated" date at the top. Continued use of the 667bd platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy.

16. Contact and Complaints

If you have any questions, concerns, or complaints about how 667bd processes your personal data, or if you wish to exercise any of the data rights described in Section 9, please contact the 667bd support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)
• Response Time: General privacy queries within 24 hours; formal data rights requests within 30 days

667bd treats all privacy complaints seriously and will endeavour to resolve them promptly and fairly. If you are not satisfied with the outcome of a privacy complaint handled by 667bd, you may have the right to escalate the matter to a relevant supervisory authority in your jurisdiction.