bf678 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how bf678 collects, processes, stores, and protects personal data provided by users ("you" or "the Player") of the bf678 platform, accessible at https://bf678.bet. bf678 is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles. By registering an account on bf678, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein.

This Policy applies to all players, visitors, and users who interact with the bf678 platform, whether via a web browser on a mobile device or desktop. It covers all data collected through the platform itself, as well as data collected when you contact bf678 support, participate in promotions, or communicate with bf678 through any other channel. This Policy should be read alongside the bf678 Terms and Conditions.

2. Personal Data We Collect

bf678 collects personal data that is necessary to provide a secure, compliant, and high-quality gaming service. The categories of personal data we collect are set out below. We do not collect personal data beyond what is required for the purposes described in this Policy.

3. How We Use Your Personal Data

bf678 uses the personal data it collects solely for lawful purposes directly connected to the operation of the platform and the delivery of services to players. The specific purposes for which we process personal data are listed below.

• To create and manage your player account, verify your identity and age during the KYC process, and maintain the integrity of your account record throughout your time on the platform.
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and other accepted payment methods, and to maintain accurate transaction records for each account.
• To fulfil our legal and regulatory obligations, including anti-money laundering checks, fraud prevention, responsible gaming compliance, and age verification requirements.
• To provide customer support services, including responding to account queries, payment questions, technical issues, and responsible gaming requests submitted via in-platform chat or email.
• To send you transactional communications relevant to your account activity, including deposit confirmations, withdrawal status updates, KYC request notifications, and security alerts.
• To send promotional communications about bonuses, seasonal offers, and platform updates where you have opted in to receive such communications. You may opt out of marketing communications at any time by contacting [email protected].

bf678 does not use personal data for automated decision-making that produces legal or similarly significant effects on players, beyond standard fraud-detection and responsible gaming monitoring tools that are integral to the safe operation of a gaming platform.

4. Legal Basis for Processing

bf678 processes personal data only where there is a valid legal basis for doing so. The legal bases on which we rely are as follows:

• Contract performance: processing that is necessary to provide you with the services you have requested by registering a bf678 account, including account management, payment processing, game access, and customer support.
• Legal obligation: processing that is required for bf678 to comply with its legal and regulatory obligations, including KYC and anti-money laundering requirements, age verification, and reporting obligations to competent authorities.
• Legitimate interests: processing that is necessary for bf678's legitimate interests in operating a secure, fair, and commercially viable gaming platform, including fraud prevention, security monitoring, and platform analytics — provided those interests are not overridden by your rights and interests.
• Consent: processing of data for marketing communications, where you have given your explicit consent to receive such communications at the time of registration or subsequently through your account settings. Consent may be withdrawn at any time.

5. KYC and Identity Verification

bf678 is required to verify the identity and age of all players before processing withdrawal requests. The KYC process involves the collection and review of identity documents, which may include a National Identity Card (NID), a valid passport, or a driving licence issued by the relevant Bangladesh authority. KYC documentation is handled with the highest level of care and is accessed only by authorised bf678 personnel involved in the verification process.

KYC documentation is stored securely using encrypted storage. Documents are retained for as long as required by applicable law and are not used for any purpose other than identity and age verification and fulfilment of our anti-money laundering obligations. If you have questions about how your KYC documents are handled, please contact [email protected].

6. Sharing Your Personal Data

bf678 does not sell, rent, or trade personal data to third parties. Personal data is shared with external parties only where strictly necessary for the operation of the platform and the delivery of services, or where required by law.

Service Providers

bf678 works with a limited number of trusted third-party service providers who process personal data on our behalf to deliver specific services. These providers include:

• Payment processing partners, including mobile wallet operators and bank transfer intermediaries, who require transaction data to execute and verify payment instructions. These partners are bound by their own data protection obligations and do not receive data beyond what is required to process the specific transaction.
• KYC and identity verification service providers who assist bf678 in fulfilling its age and identity verification obligations. These providers are authorised to review identity documents and return a verification result — they do not retain documents beyond what is required for the verification purpose.
• Game content providers, including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming, who may receive anonymised session and gameplay data for game performance and fairness auditing purposes. These providers do not receive personally identifiable information.

Legal and Regulatory Disclosure

bf678 may disclose personal data to regulatory authorities, law enforcement agencies, or other competent bodies where required to do so by applicable law, court order, or regulatory obligation. In such cases, bf678 will disclose only the minimum data required to satisfy the legal obligation and, where lawful to do so, will notify the affected player of the disclosure.

7. Cookies and Tracking Technologies

bf678 uses cookies and similar tracking technologies on the platform to maintain session security, enable core platform functionality, and improve the overall player experience. The following types of cookies are used:

• Essential cookies: these are required for the platform to function and cannot be disabled. They enable session management, account authentication, and security features. Without essential cookies, the platform cannot be used.
• Functional cookies: these allow the platform to remember your preferences, such as language settings, and personalise your experience within the platform. These cookies do not track your activity across other websites.
• Analytics cookies: these collect anonymised data about how players use the platform — which features are used most frequently, where players encounter difficulties, and how session flows can be improved. Analytics data is reviewed in aggregate and is not linked to individual player accounts.

Most mobile browsers allow you to control cookie settings through the browser's privacy or settings menu. Please note that disabling essential cookies will prevent you from using the bf678 platform. If you have questions about the cookies bf678 uses, contact [email protected].

8. Data Retention

bf678 retains personal data only for as long as is necessary for the purposes set out in this Policy or as required by applicable law. The following retention periods apply as a general guide: account data and transaction records are retained for a minimum of five years following the closure of an account, in order to satisfy anti-money laundering record-keeping requirements; KYC identity documents are retained for five years from the date of verification; marketing preference records are retained until you withdraw consent or close your account, whichever comes first.

Where bf678 no longer has a legitimate need to retain personal data, the data is securely deleted or anonymised so that it can no longer be linked to an individual player. If you wish to request deletion of your personal data, please review the Your Rights section below and contact [email protected].

9. How We Protect Your Data

bf678 implements a range of technical and organisational security measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These measures include SSL encryption for all data transmitted between your device and the bf678 platform, encrypted storage for sensitive personal data including KYC documents and financial records, access controls that restrict personal data to authorised personnel only, and regular security reviews of platform infrastructure.

While bf678 takes data security seriously and applies industry-standard protections, no platform can guarantee absolute security against all possible threats. Players are encouraged to use strong, unique passwords for their bf678 account, to keep their login credentials confidential, and to contact support immediately at [email protected] if they suspect any unauthorised access to their account.

10. Your Data Protection Rights

You have the following rights in relation to the personal data bf678 holds about you. To exercise any of these rights, please contact bf678 at [email protected]. bf678 will respond to data rights requests within a reasonable timeframe and in any event within 30 days of receipt.

• 👁️

  Right of Access

  You have the right to request a copy of the personal data bf678 holds about you, together with information about how that data is being processed. This is sometimes referred to as a Subject Access Request (SAR).

• ✏️

  Right to Rectification

  You have the right to request correction of any personal data bf678 holds about you that is inaccurate or incomplete. For example, if your name or address on file is incorrect, you may request that it be updated.

• 🗑️

  Right to Erasure

  You have the right to request deletion of your personal data where bf678 no longer has a lawful basis for retaining it. Please note that this right is subject to bf678's legal obligations — where data must be retained to comply with anti-money laundering or other regulatory requirements, erasure cannot be actioned until those obligations are fulfilled.

• ⏸️

  Right to Restrict Processing

  You have the right to request that bf678 restricts the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved, or where you have objected to processing based on legitimate interests.

• 📦

  Right to Data Portability

  Where processing is based on your consent or on contract performance, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, so that it can be transferred to another service provider if you wish.

To exercise any of the rights listed above, or if you have any questions about how bf678 handles your personal data, please contact the bf678 data team at [email protected]. Include your full name and registered mobile number in your request so that we can identify your account and respond efficiently.

11. Children and Minors

The bf678 platform is strictly for adults aged 21 and above. bf678 does not knowingly collect personal data from individuals under the age of 21. If bf678 becomes aware that personal data has been collected from a person under 21, such data will be deleted promptly and the associated account will be closed. If you believe that a minor may have registered on the platform, please contact [email protected] immediately so that the matter can be investigated and resolved without delay.

12. Third-Party Links

The bf678 platform does not contain links to external third-party websites for commercial purposes. Where references to payment partners or game providers appear in platform content, these are informational only and do not constitute outbound links to those parties' own websites. bf678 is not responsible for the privacy practices of any third-party service providers it works with, though all service providers are required to adhere to data protection obligations consistent with those described in this Policy.

13. Changes to This Privacy Policy

bf678 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we begin collecting a new category of personal data or change how existing data is used — bf678 will notify registered players via their registered contact details at least 7 days before the changes take effect.

The version of this Privacy Policy currently published on the bf678 website is the version in force. Your continued use of the bf678 platform after any amendment constitutes your acceptance of the revised Policy. If you do not agree with any amendment, you must stop using the platform and close your account by contacting [email protected].

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bf678 handles your personal data, please contact the bf678 support and data team. We aim to respond to all privacy-related enquiries within 5 business days. For urgent account or security concerns, our support team is available 24 hours a day, 7 days a week.

Email: [email protected]