bo678 Privacy Policy — Your Data, Your Rights, Our Responsibilities

1. Introduction

bo678 operates the online betting and casino platform accessible at bo678.io, serving registered players across Bangladesh including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh. As the operator of this platform, bo678 acts as the data controller responsible for the personal data of its players.

This Privacy Policy sets out in full detail the types of personal data bo678 collects from players and visitors to the platform, the purposes for which that data is processed, the legal basis for each category of processing, the circumstances under which data may be shared with third parties, the security measures bo678 applies to protect that data, the period for which data is retained, and the rights available to players in relation to their personal data.

This policy applies to all personal data collected through the bo678 website, mobile-optimised site, any bo678 applications, and all communications between bo678 and its players. It should be read together with the bo678 Terms & Conditions.

2. Data We Collect

2.1 Registration Data

When you create a bo678 Account, we collect the following information that you provide directly:

• Full legal name
• Date of birth (required for age verification — bo678 is 21+ only)
• Residential address, including city and division within Bangladesh
• Email address
• Mobile phone number
• Chosen username and encrypted password

2.2 Identity Verification (KYC) Data

To comply with our Know Your Customer obligations and to verify that all players meet the minimum age requirement of 21 years, bo678 may request and collect copies of the following documents:

• National Identity Card (NID)
• Valid passport
• Driver's licence
• Utility bills or bank statements as proof of address

2.3 Financial Data

When you make deposits or withdrawals on bo678 via payment methods including bKash, Nagad, Rocket, Upay, Visa, or Mastercard, we collect transaction records including payment method identifiers, transaction amounts in BDT (৳), transaction timestamps, and transaction reference numbers. bo678 does not store full card numbers or mobile banking PINs; sensitive payment credentials are handled directly by our certified payment processors.

2.4 Usage and Activity Data

bo678 automatically collects data about how you use the platform, including:

• Betting and gaming history, including markets wagered on, stakes placed, and outcomes
• Login timestamps and session duration
• Pages visited and features accessed within the bo678 platform
• Bonus and promotional activity
• Responsible gaming tool usage (deposit limits, self-exclusion requests)

2.5 Technical Data

When you access the bo678 platform, our systems automatically record certain technical information, including your IP address, device type and model, operating system, browser type and version, and general geographic location derived from IP data. This data is used for security, fraud prevention, and platform optimisation purposes.

2.6 Communications Data

If you contact bo678 support via live chat, email, or any other channel, we retain records of those communications including the content of messages, the date and time of contact, and the resolution of any queries raised. This data is used to improve our service and to maintain an accurate record of support interactions.

3. How We Use Your Data

bo678 uses the personal data collected from players for the following purposes:

Purpose	Data Categories Used
Creating and managing your bo678 Account	Registration data, KYC data
Verifying your age and identity (21+ requirement)	Registration data, KYC documents
Processing deposits and withdrawals	Financial data, registration data
Delivering betting and casino services	Usage data, activity data
Preventing fraud and ensuring platform security	Technical data, financial data, usage data
Responsible gaming monitoring and intervention	Usage data, activity data, registration data
Sending service communications (account alerts, transaction confirmations)	Registration data, communications data
Providing customer support	Communications data, registration data, activity data
Improving platform performance and user experience	Technical data, usage data
Complying with legal and regulatory obligations	All categories as required

4. Legal Basis for Processing

bo678 processes personal data on the following legal bases:

• Contractual necessity: Processing required to create and manage your Account, process transactions, and deliver the betting and casino services you have requested.
• Legal obligation: Processing required to comply with applicable legal requirements, including anti-money laundering obligations, age verification requirements, and fraud prevention duties.
• Legitimate interests: Processing carried out in furtherance of bo678's legitimate business interests, including fraud detection, security monitoring, and platform improvement, where those interests do not override your rights.
• Consent: Where you have given explicit consent, such as opting in to receive promotional communications from bo678. You may withdraw consent at any time by contacting our support team.

5. Data Sharing with Third Parties

5.1 Payment Processors

To facilitate deposits and withdrawals, bo678 shares necessary transaction data with payment service providers including bKash, Nagad, Rocket, Upay, and card processing partners. These providers process data solely for the purpose of completing your requested transactions and are bound by strict data processing agreements.

5.2 Game and Content Providers

Casino game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data necessary to deliver their games to your device. These providers do not receive your full personal profile or payment details.

5.3 Identity Verification Services

Where required for KYC purposes, bo678 may share submitted identity documents with third-party identity verification specialists. Such providers are contractually obligated to process data only for the verification purpose and to maintain appropriate security standards.

5.4 Legal and Regulatory Disclosure

bo678 may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required by applicable law, a valid legal process, or where disclosure is necessary to protect the rights and safety of bo678, its players, or the public.

5.5 No Sale of Data

bo678 does not sell, rent, lease, or otherwise transfer your personal data to any third party for commercial or marketing purposes. Any third party that receives data from bo678 does so strictly under the terms of a data processing agreement and solely for the defined purpose disclosed in this policy.

6. Cookies and Tracking Technologies

The bo678 platform uses cookies and similar tracking technologies to operate the site, remember your preferences, maintain your session, and analyse platform performance. The categories of cookies used by bo678 are as follows:

• Strictly necessary cookies: Essential for the bo678 platform to function. These cannot be disabled. They include session management cookies that keep you logged in during your visit.
• Functional cookies: Used to remember your preferences such as language settings and display options to improve your experience on bo678.
• Analytics cookies: Used to collect anonymised data on how players use the bo678 platform, which pages are visited most frequently, and how platform performance can be improved. No personally identifiable information is collected through analytics cookies.
• Security cookies: Used to detect and prevent fraudulent activity, protect player accounts, and identify unusual access patterns.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the bo678 platform.

7. Data Security

bo678 applies industry-standard technical and organisational security measures to protect all personal data held on the platform. These measures include:

• 256-bit SSL (Secure Sockets Layer) encryption for all data in transit between your device and bo678's servers.
• Encryption of sensitive data at rest, including passwords (stored as salted cryptographic hashes) and KYC documents.
• Strict access controls limiting data access to authorised personnel on a need-to-know basis, with role-based permissions and audit logging.
• Regular security assessments and penetration testing of bo678's platform infrastructure.
• Secure data centre facilities with physical access controls, redundancy, and continuous monitoring.
• Incident response procedures to identify, contain, and report data security incidents in a timely manner.

While bo678 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are also responsible for maintaining the security of your own Account credentials. Please contact our support team immediately if you suspect that your Account has been compromised.

8. Data Retention

bo678 retains personal data for the periods described below, after which data is securely deleted or anonymised:

• Active Account data: Retained for the duration of your Account's active status on bo678 plus a period of five (5) years following Account closure, to satisfy legal and regulatory record-keeping obligations.
• Transaction records: Retained for a minimum of seven (7) years from the date of each transaction in accordance with standard financial record-keeping requirements.
• KYC documents: Retained for five (5) years following Account closure or the completion of the KYC process, whichever is later.
• Support communications: Retained for three (3) years from the date of the interaction.
• Technical and usage data: Retained in identifiable form for up to two (2) years, after which it is anonymised for aggregate analytics purposes.

9. Your Data Rights

As a bo678 player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team using the details in Section 13.

• Right of access: You may request a copy of all personal data bo678 holds about you. We will provide this within 30 days of a verified request.
• Right to rectification: If any personal data bo678 holds about you is inaccurate or incomplete, you have the right to request that it be corrected.
• Right to erasure: In certain circumstances, you may request that bo678 delete your personal data. Note that this right is subject to legal retention obligations — bo678 may be required to retain certain records even following an erasure request.
• Right to restriction of processing: You may request that bo678 limit the processing of your data in certain defined circumstances, such as while a rectification request is being assessed.
• Right to data portability: You may request a copy of data you have provided to bo678 in a structured, machine-readable format for transfer to another service provider.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing that took place before withdrawal.
• Right to object: You may object to processing carried out on the basis of legitimate interests. bo678 will cease such processing unless compelling legitimate grounds exist that override your interests.

10. Children's Privacy and the 21+ Rule

The bo678 platform is strictly intended for adults aged 21 years and above. bo678 does not knowingly collect personal data from individuals under the age of 21. If bo678 discovers or has reason to believe that personal data has been collected from a person under 21, the relevant Account will be immediately suspended, the data deleted, and any funds forfeited pending further review.

If you are a parent or guardian and believe that a minor has registered an Account on bo678, please contact our support team immediately so that appropriate action can be taken.

11. Third-Party Links

The bo678 platform may contain references or links to third-party services, such as payment method providers. bo678 is not responsible for the privacy practices of any third-party websites or services. We encourage you to review the privacy policies of any third-party services you access in connection with your use of bo678.

12. Updates to This Privacy Policy

bo678 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, the revised policy will be posted on this page with an updated effective date. Where practicable, registered players will be notified of significant changes via the email address associated with their Account or via an in-platform notification. Continued use of the bo678 platform following the posting of an updated Privacy Policy constitutes acceptance of the revised terms.

We encourage you to review this page periodically to stay informed about how bo678 protects your personal data.

13. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the personal data bo678 holds about you, please reach out to our support team:

• Email: support@bo678.io (plain text — not a clickable link)
• Live Chat: Available 24/7 via the bo678 platform
• Response Time: Data rights requests will be acknowledged within 5 business days and fulfilled within 30 calendar days.

bo678 serves players across all regions of Bangladesh. Our support team is available around the clock and is equipped to assist with all privacy-related enquiries in English.