sd678 Privacy Policy

When you create an sd678 account or use our services, we collect the following categories of personal data:

1.1 Registration & Identity Data

When you register an account on sd678.app, you are required to provide: your full legal name, date of birth, residential address (including division and district within Bangladesh, e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh), mobile phone number, and email address. You may also be asked to provide a username of your choice. This information is used to create and manage your account and to verify your identity in accordance with our age verification obligations.

1.2 Identity Verification Documents

In order to comply with our Know Your Customer (KYC) obligations and to process withdrawal requests above certain thresholds, sd678 may request copies of identity documents. Accepted documents include a valid Bangladesh National Identity Card (NID), a valid passport, or a valid driving licence issued by the Bangladesh Road Transport Authority (BRTA). These documents are used solely for identity verification and are not retained beyond the legally mandated minimum retention period.

1.3 Financial & Transaction Data

When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, Sonali Bank, BRAC Bank, Islami Bank, Visa, or Mastercard, sd678 records the transaction amount, currency (BDT / ৳), timestamp, payment method reference, and transaction outcome. Full payment credential details (such as card numbers or mobile banking PINs) are never stored by sd678 — these are handled exclusively by the respective payment service providers under their own security standards.

1.4 Usage & Technical Data

When you access sd678.app, our systems automatically collect certain technical information including: your IP address, device type and model, operating system and version, browser type and version, screen resolution, session start and end times, pages visited, games played, bet amounts and outcomes, and referring URL. This data is used for platform security, fraud detection, and to improve the overall user experience on the sd678 platform.

1.5 Communications Data

When you contact sd678's support team via live chat or email ([email protected]), we retain a record of the conversation content, the date and time of contact, and the resolution outcome. This data is used for quality assurance, dispute resolution, and to improve our customer support service.

sd678 processes your personal data only for the purposes described in this Privacy Policy and only where we have a lawful basis for doing so. The lawful bases on which sd678 relies include: performance of a contract (providing the gaming service you have registered for), compliance with legal obligations (KYC, anti-money laundering, age verification), legitimate interests (platform security, fraud prevention, service improvement), and, where required, your explicit consent.

The specific purposes for which sd678 uses your personal data are as follows:

• Account management: Creating, maintaining, and securing your sd678 account; processing login and session authentication; communicating important account notifications such as deposit confirmations and withdrawal processing updates.
• Identity & age verification: Confirming that you meet the 18+ age requirement before allowing gameplay; verifying your identity against submitted documents as part of KYC procedures; satisfying anti-money laundering (AML) screening requirements.
• Payment processing: Executing deposits and withdrawals via your chosen payment method; matching payment records to your account; detecting and preventing fraudulent or unauthorised transactions.
• Responsible gaming: Monitoring gameplay patterns to identify potential signs of problem gambling; delivering self-exclusion and deposit limit features; responding to responsible gaming requests submitted via your account settings or support contact.
• Platform security: Detecting, investigating, and preventing unauthorised access, account takeover, bonus abuse, collusion, and other forms of fraudulent or prohibited conduct on the sd678 platform.
• Customer support: Responding to your enquiries, resolving disputes, and improving the quality of our support service based on interaction history and outcomes.
• Platform improvement: Analysing aggregated and anonymised usage data to understand how players interact with sd678's games and features, in order to improve platform performance, game selection, and user experience.
• Legal compliance: Meeting sd678's obligations under applicable law, including responding to lawful requests from law enforcement or regulatory authorities, and maintaining records required by financial crime prevention regulations.

sd678 does not use your personal data for automated decision-making that produces significant legal effects without human review. Where automated processes flag an account for investigation (for example, a fraud detection algorithm), a human member of the sd678 compliance team reviews the flag before any account action is taken.

sd678 may share your personal data with the following categories of third parties, strictly limited to the purposes described below:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, Sonali Bank, BRAC Bank, Islami Bank, and card networks (Visa, Mastercard) receive only the minimum data necessary to process your deposit or withdrawal transaction. These providers operate under their own privacy policies and are subject to their own regulatory obligations.
• Identity verification services: Where sd678 uses a third-party KYC or document verification service to assist in confirming player identity, your submitted identity documents and associated personal data are shared with that provider solely for verification purposes. Such providers are bound by strict data processing agreements with sd678.
• Game software providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data (such as game round IDs and outcomes) for the purposes of game auditing and fairness certification. No personally identifiable information is shared with game providers unless required to resolve a specific dispute.
• IT infrastructure and hosting providers: sd678 uses third-party cloud infrastructure and hosting services to operate the sd678 platform. These providers store and process data on sd678's behalf and are contractually bound to process data only in accordance with sd678's instructions and this Privacy Policy.
• Law enforcement and regulatory authorities: sd678 will disclose personal data to government bodies, law enforcement agencies, or financial intelligence units where required to do so by a valid legal order or where sd678 reasonably believes disclosure is necessary to prevent or detect crime, money laundering, or fraud. sd678 will notify affected players of such disclosures where legally permitted to do so.
• Professional advisors: sd678's legal counsel, auditors, and compliance consultants may access limited personal data in the course of providing professional services to sd678. These parties are subject to professional confidentiality obligations.

sd678 requires all third-party data processors to implement appropriate technical and organisational security measures that meet or exceed the standards applied by sd678 itself. Data processing agreements are in place with all third-party processors who handle personal data on sd678's behalf. In the event that sd678 undergoes a business merger, acquisition, or asset sale, personal data may be transferred to the successor entity subject to equivalent privacy protections remaining in place.

sd678.app uses cookies and similar client-side storage technologies to deliver core platform functionality, maintain session security, and gather anonymised analytics data. A cookie is a small text file placed on your device by your browser when you visit a website. Cookies are widely used across the web and are essential to many standard platform features such as keeping you logged in between pages and remembering your language preference.

sd678 uses the following categories of cookies:

sd678 does not use third-party advertising or behavioural targeting cookies. We do not allow advertising networks to place cookies on sd678.app. The analytics data collected via cookies is aggregated and anonymised before review — it is not used to build individual player profiles for marketing purposes.

You can manage cookie settings through your browser's built-in privacy controls. Most modern browsers allow you to view, delete, and block cookies on a per-site basis. Note that disabling essential or fraud-detection cookies may prevent you from logging in or using certain security-dependent features of the sd678 platform. For guidance on managing cookies in your specific browser, refer to your browser's official help documentation.

sd678 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. The following retention periods apply to the main categories of data held by sd678:

• Account and identity data: Retained for the duration of the active account relationship, plus a minimum of 5 years following account closure. This retention period reflects standard financial record-keeping obligations applicable to online gaming platforms.
• Transaction records: All deposit and withdrawal records are retained for a minimum of 5 years following the date of each transaction, consistent with anti-money laundering record-keeping requirements.
• Identity verification documents: Copies of NID, passport, or driving licence submitted for KYC purposes are retained for a minimum of 5 years following account closure or the date of submission, whichever is later.
• Gameplay logs: Individual game round records, including bet amounts, game outcomes, and session timestamps, are retained for a minimum of 3 years following the date of each gaming session.
• Support communications: Live chat transcripts and email correspondence with sd678's support team are retained for a minimum of 2 years following the date of the interaction.
• Technical and usage logs: IP address logs and device access logs are retained for a maximum of 12 months, after which they are deleted or fully anonymised.

Where sd678 is required by a court order, regulatory directive, or ongoing investigation to retain specific data beyond the standard retention period, sd678 will comply with that requirement and retain the relevant data until the legal hold is lifted. Once a retention period expires and no legal hold applies, data is securely deleted using industry-standard methods that prevent reconstruction or recovery.

sd678 takes the security of your personal data seriously and maintains a comprehensive set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption in transit: All connections between your device and sd678.app are encrypted using TLS 1.2 or higher with 256-bit key length. HTTPS is enforced across all pages and API endpoints.
• Encryption at rest: Sensitive data fields in sd678's databases, including identity document references, payment method identifiers, and authentication credentials, are stored using AES-256 encryption.
• Access controls: Access to production systems containing personal data is restricted to authorised sd678 personnel whose role requires it. Multi-factor authentication is mandatory for all staff with system access. Access events are logged and reviewed.
• Password security: Player passwords are never stored in plain text. sd678 uses a strong cryptographic hashing algorithm with per-user salting to store password credentials.
• Penetration testing and audits: sd678 conducts regular security assessments of its platform infrastructure, including periodic penetration tests by independent security specialists.
• Incident response: sd678 maintains a documented data breach response plan. In the event of a data breach that is likely to result in a risk to player rights, sd678 will notify affected players via their registered contact details without undue delay.

While sd678 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security against all possible threats. Players are responsible for maintaining the security of their own login credentials and devices. If you suspect that your sd678 account has been accessed without your authorisation, contact [email protected] immediately.

As a registered player on the sd678 platform, you hold the following rights in relation to your personal data. sd678 is committed to honouring these rights promptly and without unnecessary friction. To exercise any of the rights below, contact sd678's privacy team at [email protected] with the subject line "Privacy Rights Request" and a description of the specific right you wish to exercise.

• Right to access: You may request a copy of the personal data that sd678 holds about you, together with an explanation of the purposes for which it is being processed. sd678 will provide this information within 30 days of receiving a verified request.
• Right to rectification: If any personal data that sd678 holds about you is inaccurate or incomplete, you may request that it be corrected. Minor updates (such as a change of contact number or email address) can be made directly via your account profile settings.
• Right to erasure: In certain circumstances, you may request that sd678 delete your personal data. This right is subject to limitations where sd678 is required by law to retain specific data (for example, transaction records and identity verification records that are subject to mandatory retention periods). Where a deletion request cannot be fulfilled in full, sd678 will explain which data cannot be deleted and why.
• Right to restrict processing: Where you contest the accuracy of data held about you, or where you have raised an objection to processing, you may request that sd678 restrict its use of that data while the matter is being resolved.
• Right to data portability: You may request that sd678 provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider. This right applies to data that you have provided to sd678 and that is processed on the basis of your consent or contractual performance.
• Right to object: You may object at any time to the processing of your personal data for purposes based on sd678's legitimate interests (such as analytics or fraud pattern monitoring), unless sd678 can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where sd678 processes your data on the basis of your consent (for example, for the purpose of sending you promotional communications), you may withdraw that consent at any time by updating your marketing preferences in your account settings or by contacting [email protected].

sd678 will not charge a fee for handling privacy rights requests submitted in good faith. Where a request is manifestly unfounded or excessive, sd678 reserves the right to charge a reasonable administrative fee or decline to act on the request, with a written explanation provided to the requestor. Identity verification may be required before sd678 can process a request, to ensure that data is not disclosed to or acted upon at the instruction of an unauthorised party.

sd678 reviews this Privacy Policy periodically to ensure that it accurately reflects the platform's data practices and remains consistent with applicable law. The most current version of this Privacy Policy will always be published at sd678.app/privacy-policy. The "Effective" date at the top of this document indicates when the current version came into force.

Where changes to this Privacy Policy are material — for example, where a new category of data is collected, a new category of third party is introduced as a data recipient, or player rights are substantively affected — sd678 will make reasonable efforts to notify registered players of the change via their registered email address or via a prominent notice on the sd678 platform prior to the change taking effect.

Continued use of the sd678 platform following the publication of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree with any changes to this Privacy Policy, you should stop using the sd678 platform and may request account closure by contacting [email protected].

For all privacy-related enquiries, data subject rights requests, or concerns about sd678's data handling practices, please contact the sd678 privacy team using the details below. All correspondence is handled in English and will receive an initial acknowledgement within 24 hours and a substantive response within 30 days.

• Email: [email protected] (subject line: "Privacy Rights Request")
• Live Chat: Available 24/7 via the Help icon inside your sd678 account dashboard (response: 2–5 minutes)
• Response time for privacy requests: Acknowledgement within 24 hours; substantive response within 30 days

This Privacy Policy is written in English and shall be interpreted according to its plain English meaning. sd678 is committed to operating as a safe and reliable platform with genuine respect for the privacy of every player in Bangladesh. All players must be aged 18 or above to register and use the sd678 platform. Please gamble responsibly.