bo678 Privacy Policy

This Privacy Policy ("Policy") sets out how bo678 ("the Platform", "we", "us", "our") collects, processes, stores, and protects the personal information of players and visitors who access the bo678 website and its associated services ("the Services"). It applies to all registered players across Bangladesh, including those accessing bo678 from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

By registering a player account with bo678, by making a deposit or withdrawal, or simply by visiting and navigating the bo678 website, you acknowledge that you have read this Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the bo678 platform.

bo678 is committed to processing personal data responsibly, transparently, and in accordance with broadly recognised data protection principles. While Bangladesh's data protection framework continues to develop, bo678 voluntarily aligns its data handling practices with internationally recognised standards, including those set out in the General Data Protection Regulation (GDPR), to ensure the highest level of care for our players' information.

This Policy should be read alongside the bo678 Terms & Conditions and the Responsible Gaming Policy, both of which contain provisions that interact with how we collect and use player data.

bo678 collects personal data in several ways: directly from you when you register or use our Services, automatically through your use of the platform, and occasionally from third-party verification providers as part of our identity and age verification (KYC) processes. The table below summarises the categories of data we collect and the primary source of each.

bo678 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, genetic data, or biometric data beyond what is strictly necessary for identity verification purposes. We do not collect data from children. The bo678 platform is strictly for adults aged 18 and above, and we take active steps to prevent the collection of data from minors.

bo678 processes personal data only for legitimate, specified purposes. We do not process data in ways that are incompatible with the purposes described below. The following are the primary reasons we collect and use your information:

bo678 does not use your personal data for automated decision-making that produces legal or similarly significant effects, except where automated checks are applied as part of fraud detection and anti-money-laundering (AML) screening. Where such automated processes affect your account, you have the right to request human review of the decision by contacting our support team.

bo678 does not sell, rent, or otherwise trade your personal data with third parties for commercial or advertising purposes under any circumstances. Data sharing is limited to the categories described below, and only to the extent necessary for the stated purpose.

• Payment Providers: When you make a deposit or withdrawal, the transaction data necessary to complete that payment (including your mobile wallet number or bank details) is shared with the relevant payment provider — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, or Sonali Bank — as required to process the transaction. These providers are bound by their own privacy and data security obligations.
• Identity Verification Partners: Where KYC verification is required, your identity documents may be shared with our third-party verification provider. This provider processes your data solely for the purpose of confirming your identity and age on bo678's behalf and is contractually prohibited from using your data for any other purpose.
• Game Software Providers: Game session data (such as bet amounts, game outcomes, and session timestamps) may be shared with game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi for the purpose of game auditing, fairness verification, and technical support. No personally identifying information beyond a pseudonymous player ID is shared with game providers.
• Legal & Regulatory Obligations: bo678 may disclose personal data to law enforcement authorities, regulatory bodies, or courts when required to do so by applicable law, court order, or where such disclosure is necessary to protect the rights, property, or safety of bo678, our players, or the public.
• Anti-Fraud & AML Screening: In the course of our legal obligations related to anti-money-laundering (AML) compliance, certain data may be checked against screening databases. This is a legally required process and is handled with strict confidentiality.

In all cases where data is shared with third parties, bo678 requires those parties to implement appropriate technical and organisational security measures to protect your personal data and to process it only in accordance with our instructions.

bo678 uses cookies and similar tracking technologies (including local storage and session tokens) to operate the platform effectively, to remember your preferences, and to analyse how players interact with the site so we can continuously improve the experience. The following categories of cookies are used on the bo678 platform:

bo678 does not use advertising cookies, third-party retargeting pixels, social media tracking scripts, or any cookies that build a profile of your browsing behaviour across other websites. You may disable non-essential cookies through your browser settings at any time, though doing so may affect the functionality of some features on the bo678 platform. Strictly necessary and security cookies cannot be disabled as they are integral to the platform's operation.

bo678 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, to comply with applicable legal obligations, or to resolve disputes and enforce our agreements. The following general retention periods apply to the main categories of player data:

• Account and Identity Data: Retained for the duration of your active account and for a minimum of five (5) years following account closure. This period is maintained to satisfy AML and financial record-keeping obligations.
• Transaction Records (Deposits & Withdrawals in BDT): Retained for a minimum of seven (7) years in accordance with standard financial record-keeping requirements applicable to platforms operating in Bangladesh.
• KYC Verification Documents: Retained for the duration of your account and for five (5) years post-closure. Documents are stored in encrypted form and access is restricted to authorised personnel only.
• Communication Data (Live Chat, Email): Support interactions are retained for three (3) years to support dispute resolution and quality assurance processes.
• Game Session and Betting History: Retained for five (5) years post-activity. This data may be used to respond to disputes regarding game outcomes or wager settlements.
• Technical and Log Data (IP addresses, device logs): Retained for up to twelve (12) months, after which it is anonymised or deleted unless required for an active security investigation.

When a retention period expires and no overriding legal obligation requires continued storage, bo678 will securely delete or anonymise the relevant personal data so that it can no longer be attributed to you as an individual. If you request early deletion of your data (see Section 7 below), bo678 will evaluate the request against any competing legal obligations before acting.

As a bo678 player, you hold a number of rights in relation to the personal data we hold about you. bo678 respects these rights and will respond to all valid requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, and we will notify you if an extension is required.

To exercise any of the rights listed above, please contact the bo678 support team via live chat or by emailing [email protected]. We may need to verify your identity before processing a data subject request to ensure that information is not disclosed to or acted upon by an unauthorised party.

bo678 implements a layered approach to data security, combining technical controls, operational procedures, and staff training to protect the personal data of our players at every stage of its lifecycle. The key security measures in place include:

• TLS 1.3 Encryption in Transit: All data transmitted between your device and the bo678 platform is encrypted using TLS 1.3, preventing interception or tampering in transit. The padlock icon in your browser confirms this secure connection is active.
• AES-256 Encryption at Rest: Sensitive personal data stored on bo678 servers — including identity documents and financial records — is encrypted using AES-256 encryption, one of the strongest commercially available encryption standards.
• Access Controls: Access to personal player data is restricted to bo678 personnel who require it to perform their specific role. All staff with data access are subject to confidentiality obligations and undergo regular data protection training.
• Two-Factor Authentication (2FA): bo678 supports SMS-based two-factor authentication for player accounts. We strongly recommend all players activate 2FA to add an additional layer of protection to their account.
• Intrusion Detection & Monitoring: The bo678 platform is monitored continuously for suspicious activity, including anomalous login patterns, unusual transaction behaviour, and potential security breaches. Automated alerts are reviewed by our security team in real time.
• Secure Payment Processing: Financial transactions via bKash, Nagad, Rocket, Upay, and supported banks are processed through secured API integrations. Raw payment credential data is never stored on bo678's own servers beyond the immediate processing window.

Despite these measures, no internet-connected platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, bo678 will notify affected players without undue delay and will take immediate remediation steps.

The bo678 platform may occasionally contain references to third-party services such as mobile banking providers (bKash, Nagad, Rocket, Upay), banking institutions (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank), or game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi). Where such references involve navigating away from the bo678 website to a third-party platform or application, bo678's Privacy Policy no longer applies.

Each third-party service you access operates under its own privacy policy and data handling procedures. bo678 has no control over and accepts no responsibility for the privacy practices of third-party platforms. We encourage you to review the privacy policy of any third-party service before submitting your personal data to them.

Within the bo678 platform itself, all pages and features are governed exclusively by this Privacy Policy. bo678 does not embed third-party advertising scripts, social media widgets, or external tracking tools that would allow third parties to collect your personal data through our platform without your awareness.

bo678 reviews and updates this Privacy Policy periodically to reflect changes in our data handling practices, to address new regulatory requirements, or to improve clarity for our players. The effective date displayed at the top of this page indicates when the current version came into force.

Where changes to this Policy are material — meaning they significantly affect how we collect, use, or share your personal data — bo678 will notify registered players via SMS to their registered Bangladeshi mobile number or via email, at least seven (7) days before the changes take effect. This advance notice gives you the opportunity to review the updated terms and decide whether to continue using the platform.

For minor, administrative, or clarifying amendments — such as updating contact details, correcting typographical errors, or adding more specific examples to existing provisions — changes take effect immediately upon publication without prior individual notice. Your continued use of the bo678 platform after any updated Privacy Policy has been published constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you should close your account and cease using the platform. Account closure requests can be submitted to our support team via live chat or by emailing [email protected].