67bd9 Privacy Policy — How We Collect, Use, and Protect Your Data

1. About This Policy

This Privacy Policy ("Policy") describes how 67bd9 ("we", "us", "our") collects, uses, stores, shares, and protects personal data relating to individuals ("you", "your", "user") who access or use the 67bd9 online betting and gaming platform at https://67bd9.io ("Platform").

67bd9 is committed to handling your personal data responsibly and in accordance with applicable data protection principles. This Policy is designed to give you full visibility into our data practices so that you can make informed decisions about using the Platform.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are accessible on the Platform. In the event of a conflict between this Policy and another document, the terms of this Policy shall prevail with respect to privacy and data protection matters.

This Policy was last reviewed and updated on 1 January 2026. We recommend checking back periodically for updates.

2. Data We Collect

67bd9 collects several categories of personal data depending on how you interact with the Platform. The categories and examples of data within each are described below.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health records, unless explicitly required by law or provided voluntarily by you in a support context (for example, disclosing a gambling-related health concern to our responsible gaming team).

3. How We Collect Your Data

67bd9 collects personal data through the following channels and mechanisms:

• Direct submission: When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in a promotion, you provide data to us directly via online forms and document uploads.
• Automated collection: When you access the Platform, our servers automatically collect technical data including your IP address, device identifiers, browser characteristics, and session activity. This data is collected via server logs, cookies, and similar tracking technologies described further in Section 7.
• Third-party sources: We may receive data about you from KYC verification partners (who verify identity documents), payment processors (who confirm transaction status), and fraud prevention services (who flag suspicious activity patterns). This supplementary data is used solely for verification and security purposes.
• Game providers: Game studios such as Evolution Gaming, Pragmatic Play, and NetEnt may provide session-level data (game rounds played, wager amounts, session duration) to 67bd9 for account management and responsible gaming monitoring purposes.

4. How We Use Your Data

67bd9 uses your personal data for the following purposes:

• Account creation and management: To register your account, verify your identity, maintain your account balance, and process your betting and gaming activity on the Platform.
• Payment processing: To process deposits via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and Visa/Mastercard, and to process withdrawal requests to your nominated payment method.
• Legal and regulatory compliance: To fulfil our obligations under applicable anti-money-laundering (AML), counter-terrorist financing (CTF), and Know Your Customer (KYC) regulations, including maintaining transaction records for the periods required by law.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, multi-accounting, and other breaches of our Terms & Conditions. This includes automated screening of account behaviour patterns and cross-referencing of device and payment data.
• Responsible gaming: To monitor account activity for indicators of problem gambling behaviour, to administer responsible gaming tools (deposit limits, self-exclusion, cooling-off periods), and to comply with player protection obligations.
• Customer support: To respond to your queries, investigate complaints, and maintain records of support interactions for quality assurance and dispute resolution purposes.
• Platform improvement: To analyse aggregated, anonymised usage data in order to improve Platform performance, fix technical issues, and enhance the user experience for players across Bangladesh.
• Promotional communications: Where you have opted in to receive marketing communications, to send you relevant promotions, bonus offers, and platform updates by email or SMS. You may opt out of marketing communications at any time by contacting [email protected] or following the unsubscribe link in any marketing email.

5. Legal Basis for Processing

67bd9 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted at registration, including account management, payment processing, and bet settlement.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML/KYC requirements and record-keeping obligations.
• Legitimate interests: Processing necessary for 67bd9's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving the Platform — where those interests are not overridden by your rights and interests.
• Consent: Where you have given explicit, freely withdrawable consent, for example when opting in to receive marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing and Disclosure

67bd9 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We may share your personal data only in the following circumstances:

• Payment processing partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, and Mastercard — to facilitate your deposit and withdrawal transactions. These partners process your financial data under their own privacy policies and are bound by contractual data protection obligations.
• KYC and identity verification providers: Specialised third-party services that verify the authenticity of identity documents submitted during account verification. These providers process your identity data solely for verification purposes under strict confidentiality agreements.
• Fraud prevention and AML services: Providers that screen transaction patterns and account behaviour against known fraud and money-laundering indicators. Data shared with these providers is used for protective purposes only.
• Game providers: Studios such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, Play'n GO, and Hacksaw Gaming receive session-level data as technically necessary to operate their games within the 67bd9 Platform. These providers are certified by independent testing laboratories and are contractually prohibited from using your data for any purpose beyond game operation.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory direction, 67bd9 may disclose your personal data to the relevant authority. We will notify you of any such disclosure to the extent permitted by law.
• Business transfers: In the event that 67bd9 undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any resulting change to this Privacy Policy.

7. Cookies and Tracking Technologies

67bd9 uses cookies and similar technologies (such as local storage and session tokens) to operate the Platform and improve your experience. The categories of cookies we use are as follows:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They maintain your login session, preserve your account balance display, and ensure the security of your account. These cookies cannot be disabled without impairing core Platform functionality.
• Performance and analytics cookies: These cookies collect anonymised data about how users navigate the Platform, which pages are visited most frequently, and where errors occur. This data helps us optimise Platform performance and user experience. These cookies do not identify you personally.
• Functionality cookies: These cookies remember your preferences, such as your preferred language, display settings, and timezone, so that you do not need to reconfigure them on each visit.

67bd9 does not use third-party advertising cookies, cross-site tracking pixels, or social media tracking tags on the Platform. You can manage cookie settings through your browser preferences. Note that disabling strictly necessary cookies will prevent you from logging in to your 67bd9 account.

8. Data Retention

67bd9 retains your personal data for only as long as is necessary for the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following general retention periods apply:

• Active account data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, to comply with AML record-keeping requirements.
• Transaction records: Financial transaction data, including deposit and withdrawal records, is retained for a minimum of seven (7) years in accordance with applicable financial regulations.
• KYC verification documents: Identity documents are retained for the period required by applicable KYC and AML regulations, typically five (5) years following the end of the business relationship.
• Support communications: Customer support records, including live chat transcripts and email correspondence, are retained for three (3) years following the resolution of the relevant enquiry, for dispute resolution and quality assurance purposes.
• Marketing opt-in records: Records of your marketing consent preferences are retained for as long as you are a registered user plus three (3) years, to demonstrate compliance with consent obligations.

When data is no longer required and no legal retention obligation applies, we securely delete or anonymise it so that it can no longer be linked to any individual.

9. Your Rights

As a data subject, you have the following rights in relation to the personal data that 67bd9 holds about you. To exercise any of these rights, contact us at [email protected] with the subject line "Data Subject Request — [Your Account Username]". We will acknowledge your request within 5 business days and respond fully within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data 67bd9 holds about you, along with information about how it is being used and with whom it has been shared.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where you object to processing based on legitimate interests. Note that this right is not absolute — we may be required to retain certain data to comply with legal obligations even after an erasure request is received.
• Right to Restriction of Processing: You may request that we restrict processing of your data (i.e., store it but not actively use it) in certain circumstances, for example while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling for responsible gaming purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based solely on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

10. Children's Privacy

The 67bd9 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by a person under 21, we will promptly delete that data and close the associated account.

If you believe that a minor has registered on the Platform or provided personal data to 67bd9, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

We employ age verification measures during the registration process and KYC review to detect and prevent underage access. These measures include verification of date of birth against government-issued identity documents.

11. Security Measures

67bd9 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Encryption in transit: All data transmitted between your device and our servers is protected using 256-bit SSL/TLS encryption, ensuring that your login credentials, financial data, and personal information cannot be intercepted during transmission.
• Encryption at rest: Sensitive data stored on our servers, including identity documents and financial records, is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data is restricted to 67bd9 employees and contractors who need that data to perform their specific job functions. All such personnel are subject to strict confidentiality obligations and receive regular data protection training.
• Intrusion detection and monitoring: Our systems are continuously monitored for unusual access patterns, brute-force login attempts, and other indicators of compromise. Automated alerts trigger rapid investigation by our security team.
• Two-factor authentication: 67bd9 encourages and supports two-factor authentication (2FA) on all user accounts, providing an additional layer of protection beyond your password.
• Regular security audits: We conduct periodic security reviews and penetration testing to identify and remediate potential vulnerabilities in the Platform before they can be exploited.

While we take every reasonable precaution to protect your data, no security system is entirely infallible. In the event of a data breach that poses a risk to your rights and interests, 67bd9 will notify you promptly by email and will take immediate steps to contain and investigate the incident.

12. Third-Party Services

The 67bd9 Platform integrates with third-party services that are essential to its operation, including game providers, payment gateways, and analytics tools. When you interact with these third-party components (for example, when launching a live casino game powered by Evolution Gaming or making a deposit via bKash), some data may be processed directly by those third parties under their own privacy policies.

67bd9 carefully selects third-party partners and requires them to maintain data protection standards consistent with this Policy. However, once data is transferred to a third party for processing, that party's privacy policy and practices govern the use of that data. We recommend reviewing the privacy policies of payment providers such as bKash and Nagad if you have concerns about how they handle your financial data.

The 67bd9 Platform does not contain links to external websites. All content and functionality remain within the 67bd9 domain. This Policy does not extend to any third-party website that you may access independently via your browser.

13. International Data Transfers

67bd9 primarily serves players in Bangladesh. Some of our technical infrastructure, third-party service providers, and game studios may be located outside Bangladesh. Where your personal data is transferred internationally (for example, to a KYC verification provider or a game studio operating servers in another country), we ensure that appropriate safeguards are in place to protect your data in transit and at the destination.

Such safeguards may include contractual data protection clauses agreed with the receiving party, or transfers to parties that operate under recognised security and privacy certification frameworks. Where we cannot implement adequate safeguards for an international transfer, we will not make that transfer.

14. Changes to This Policy

67bd9 reserves the right to update or amend this Privacy Policy at any time. Material changes — those that meaningfully affect your rights or how we use your data — will be communicated to you by email to the address registered to your account, no less than 14 days before the changes take effect.

Minor clarifications or non-material updates may be made without advance notice, though the "last updated" date at the top of this Policy will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to stay informed of our data practices.

Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the updated Policy, you should stop using the Platform and request account closure by contacting [email protected].

15. Contact and Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or about how 67bd9 handles your personal data, please contact our dedicated privacy team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: "Privacy Enquiry" or "Data Subject Request — [Your Account Username]"
• Response Time: Acknowledgement within 5 business days; full response within 30 calendar days
• Support Hours: 24 hours a day, 7 days a week, 365 days a year

Please include your full name, registered email address, and a clear description of your enquiry or request. We may need to verify your identity before processing your request to ensure that we do not disclose your personal data to an unauthorised third party.

If you are not satisfied with our response to your privacy complaint, you have the right to escalate the matter to the appropriate data protection authority or dispute resolution body in your jurisdiction. 67bd9 will provide details of available escalation channels upon request.