sd678 Privacy Policy

2.1Registration Data

When you register an account on sd678, we collect your registered mobile number, chosen username, date of birth, and the Bangladesh Standard Time (BST, UTC+6) timestamp of account creation. This information is used to create and manage your account, verify your identity, and communicate with you about your account.

2.2KYC Verification Data

When sd678 requests identity verification, you may be asked to provide a copy of your National Identity Card (NID), passport, or other government-issued identification. This information is used solely for identity verification, fraud prevention, and compliance with applicable KYC obligations. KYC documents are stored securely and are not shared with third parties except as required by law or as described in Section 5 of this Policy.

2.3Automatically Collected Data

When you use the sd678 Platform, we automatically collect certain technical information including your device's IP address, browser type and version, operating system, screen resolution, referring URL, pages visited, time spent on each page, and the date and time of your visits. This data is collected using cookies and similar tracking technologies as described in Section 6 of this Policy.

3.1Account Management

We use your registration data to create, maintain, and manage your sd678 account. This includes processing logins, managing account settings, responding to account-related support queries, verifying your identity, and facilitating account recovery in the event of lost access credentials.

3.2Payment Processing

Your payment data is used to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and other supported payment methods. Transaction data is stored to maintain accurate account balances, process withdrawal requests, generate statements, and comply with financial record-keeping requirements.

3.3Fraud Prevention and Security

sd678 uses device data, IP address information, and usage patterns to detect and prevent fraudulent activity, money laundering, account takeover attempts, and other prohibited conduct as defined in our Terms and Conditions. Where suspicious activity is detected, we may flag the account for review and, if necessary, report the matter to relevant financial institutions.

3.4Responsible Gaming

We monitor gameplay data including session duration, deposit frequency, and betting patterns to identify players who may be exhibiting signs of problem gambling. This data is used to offer appropriate responsible gaming tools such as deposit limits, session reminders, and self-exclusion, and to fulfil our obligations under our Responsible Gaming Policy.

3.5Service Improvement

Aggregated and anonymised usage data is used to analyse Platform performance, identify technical issues, improve game loading times, optimise the user experience for Bangladesh mobile users, and inform decisions about new features, game additions, and payment method expansions.

5.1Payment Partners

To process your deposits and withdrawals, sd678 shares the minimum necessary payment information with our payment processing partners, including mobile wallet operators (bKash, Nagad, Rocket, Upay) and banking partners (Dutch-Bangla Bank, BRAC Bank, and others). These partners process your payment data solely to facilitate the transaction and are bound by strict data handling obligations.

5.2Game Providers

When you play games on sd678, your gameplay data (such as game session ID and bet history) is processed by the relevant game provider (for example, Pragmatic Play, Evolution Gaming, or Spribe) in order to deliver the game, calculate results, and generate auditable game records. Game providers are contractually obligated to process this data only for game delivery purposes and not to use it for independent marketing or profiling of sd678 players.

5.3Legal and Regulatory Authorities

sd678 may disclose your personal data to law enforcement agencies, financial intelligence units, regulatory authorities, or courts where we are legally required to do so, or where disclosure is necessary to investigate or prevent fraud, money laundering, or other criminal activity involving your account.

5.4Business Transfers

In the event of a merger, acquisition, reorganisation, or sale of all or substantially all of sd678's assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer via a notice posted on the Platform, and the successor entity will be bound by the terms of this Policy.

6.1Essential Cookies

Essential cookies are strictly necessary for the Platform to function. They enable core features such as session management, login authentication, security token validation, and remembering your language preference. You cannot opt out of essential cookies while using the Platform, as they are required for the site to operate correctly.

6.2Analytics Cookies

sd678 uses analytics cookies to collect aggregated, anonymised data about how players navigate the Platform — including which pages are visited most frequently, how long sessions last, and which games are most popular among players from Dhaka, Chittagong, Sylhet, and other regions of Bangladesh. This data helps us improve the Platform experience. Analytics cookies do not identify you personally.

6.3Managing Cookies

You can control non-essential cookies by adjusting your browser settings. Most modern mobile browsers (including Chrome for Android and Safari for iOS) allow you to block or delete cookies through the browser's privacy or settings menu. Please note that disabling certain cookies may affect the functionality of the Platform, including the ability to maintain your login session across page loads.

7.1Data Breach Response

In the event of a personal data breach that is likely to result in a high risk to your rights, sd678 will notify affected players without undue delay, explaining the nature of the breach, the categories of data affected, the likely consequences, and the measures taken to address it. Notification will be sent to the registered mobile number associated with the affected account.

7.2Your Responsibility

The security of your sd678 account also depends on your own actions. You are responsible for keeping your login credentials confidential, not sharing your account details with anyone, and logging out of your account after each session — particularly when using a shared or public device. If you believe your account has been compromised, contact sd678 support immediately.

8.1Active Accounts

sd678 retains your personal data for as long as your account remains active and for a period of five years following account closure, unless a longer retention period is required by applicable law. This retention period is necessary to resolve disputes, enforce our Terms and Conditions, comply with financial record-keeping requirements, and respond to any regulatory enquiries relating to your account activity.

8.2KYC Documents

KYC verification documents (including copies of identity cards and passports) are retained for a minimum of five years from the date of verification, or longer if required by applicable anti-money laundering regulations. After the applicable retention period has expired, KYC documents are securely deleted or destroyed in accordance with our data disposal procedures.

Your rights include:

• Right of access — you may request a copy of the personal data sd678 holds about you
• Right to rectification — you may request correction of inaccurate or incomplete personal data
• Right to erasure — you may request deletion of your personal data, subject to legal retention requirements
• Right to restrict processing — you may request that we limit how we use your data in certain circumstances
• Right to data portability — you may request your data in a structured, machine-readable format
• Right to withdraw consent — you may withdraw your consent to data processing at any time, without affecting the lawfulness of processing based on consent before withdrawal

11.1Mobile Wallet Data

When you make a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, sd678 records the mobile wallet number and transaction reference number associated with the transaction. This information is used solely to reconcile your account balance, process withdrawal requests back to the same wallet, and respond to transaction disputes. sd678 does not store full PIN codes, one-time passwords (OTPs), or other authentication credentials associated with your mobile wallet.

11.2Bank Transfer Data

For deposits or withdrawals processed via Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, or other banking partners, sd678 records the bank account details provided, the transfer reference, and the transaction amount. This data is used solely to process the transaction and to maintain accurate financial records. Bank account details are stored with encryption and are accessible only to authorised payment processing staff.