78bdt Privacy Policy — Your Data, Handled With Care

78bdt ("we", "us", "our") operates the online betting and casino platform accessible at https://78bdt.io (the "Platform"). 78bdt serves the Bangladesh market, providing cricket betting, live casino games, and certified slot machine content to registered players aged 21 and above.

For the purposes of this Privacy Policy, 78bdt is the data controller — meaning we determine the purposes and means by which your personal data is collected and processed. We are responsible for ensuring that personal data entrusted to us is handled lawfully, fairly, and transparently at all times.

If you have any questions about who controls your data or how it is processed, you may contact our dedicated support team at any time. Contact details are provided in Section 15 of this Policy.

78bdt collects personal data across several categories depending on the stage of your interaction with the Platform. The following table summarises the categories of data collected and representative examples within each category:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is required for mandatory identity document verification.

78bdt collects personal data through the following channels:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting support, or responding to promotions.
• Automated technical collection: Data collected automatically as you navigate the Platform, including IP address, device identifiers, session data, and clickstream behaviour via server logs and first-party cookies.
• Payment providers: Confirmation data returned by bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank when processing transactions. 78bdt does not receive or store full card numbers or full mobile financial service PINs.
• Identity verification partners: Where automated identity document verification is used during KYC, data is processed by a verified third-party KYC provider operating under confidentiality agreements with 78bdt.
• Game providers: Aggregated game session outcome data (round results, bet amounts, win/loss records) returned by game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi for purposes of account statement accuracy and dispute resolution.

78bdt processes your personal data for the following defined purposes. Data is not used for any purpose beyond those listed here without your prior informed consent:

• Account creation and management: To register your account, authenticate your identity at login, maintain your account settings, and provide access to all Platform features.
• Age and identity verification (KYC): To confirm you meet the 21+ age requirement and to verify your identity in compliance with responsible gaming and anti-money-laundering obligations.
• Payment processing: To facilitate deposits and withdrawals in Bangladeshi Taka (৳) via your chosen payment method, and to maintain accurate financial records of all transactions.
• Fraud prevention and AML compliance: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct described in the Terms & Conditions.
• Platform personalisation: To display your betting history, account balance, active bonuses, and relevant promotions within your account dashboard.
• Customer support: To respond to enquiries, process complaints, manage disputes, and facilitate account closure or self-exclusion requests.
• Responsible gaming compliance: To implement and enforce deposit limits, session reminders, cooling-off periods, and self-exclusion measures you have activated on your account.
• Service improvement: To analyse aggregated, anonymised usage patterns that inform platform improvements, new feature development, and the overall player experience.
• Legal and regulatory compliance: To retain records as required by applicable law and to respond to lawful requests from regulatory authorities, law enforcement agencies, or courts.

78bdt processes your personal data on one or more of the following legal bases depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between you and 78bdt — including account registration, payment processing, and game access — is necessary to deliver the service you have requested.
• Legal obligation: Certain processing activities — including KYC identity verification, anti-money-laundering record-keeping, and age verification — are required by law and cannot be waived by either party.
• Legitimate interests: Processing for fraud prevention, platform security, service improvement based on anonymised analytics, and responsible gaming enforcement is carried out on the basis of 78bdt's legitimate interests, balanced against your privacy rights.
• Consent: Where 78bdt sends optional marketing communications about promotions, seasonal offers (e.g., Eid, Pohela Boishakh, BPL season specials), or new game launches, this is done only on the basis of your opt-in consent, which you may withdraw at any time by contacting support.

78bdt does not sell, rent, or trade your personal data to any third party. Data is shared only in the limited circumstances described below, and only to the extent necessary for the specific purpose:

• Payment processing partners: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank receive the minimum transaction data necessary to process your deposits and withdrawals. Each of these partners operates under their own privacy and data security policies.
• KYC and identity verification providers: Identity document data submitted for verification is processed by authorised KYC service providers operating under strict data processing agreements with 78bdt. These providers do not retain your identity documents beyond the period required for verification.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other listed game studios receive anonymised session identifiers to facilitate game delivery and dispute resolution. They do not receive your full name, contact details, or financial account information.
• Legal and regulatory authorities: 78bdt may disclose personal data in response to a valid court order, law enforcement request, regulatory inquiry, or as otherwise required by applicable law. We will notify affected players of any such disclosure to the extent permitted by law.
• Professional advisers: Lawyers, auditors, and compliance consultants engaged by 78bdt may access personal data on a strictly need-to-know basis and are bound by professional confidentiality obligations.

All third parties with whom 78bdt shares personal data are required to implement appropriate technical and organisational security measures and to process data only for the specific purposes for which it was shared.

78bdt treats financial data with the highest level of security and confidentiality. The following specific protections apply to payment-related personal data:

• 78bdt does not store full credit or debit card numbers. Card transactions are tokenised by the payment gateway and only the last four digits and card type are retained for reference purposes.
• Mobile financial service (bKash, Nagad, Rocket, Upay) wallet numbers are stored in encrypted form. PINs, OTPs, and authentication credentials for these services are never transmitted to or stored by 78bdt.
• Bank account details provided for withdrawal purposes are stored with AES-256 encryption at rest and are masked in all user-facing account screens.
• All payment transactions are conducted over TLS 1.3 encrypted connections. No payment data is transmitted over unencrypted channels.
• Deposits and withdrawals follow a return-to-source policy in line with AML best practice — funds are returned to the same payment method from which they originated wherever technically possible.

78bdt uses cookies and similar tracking technologies to operate the Platform effectively and to provide a secure, personalised user experience. The following categories of cookies are used:

78bdt does not use third-party advertising cookies, retargeting pixels, or cross-site tracking technologies. You may manage functional and analytics cookies through your browser settings. Disabling strictly necessary cookies will prevent you from logging in to the Platform.

78bdt retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the lifetime of the active account plus a minimum of 5 years following account closure to meet AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of 7 years from the date of each transaction in accordance with financial record-keeping standards.
• KYC documents: Retained for the duration of the account relationship plus 5 years post-closure. Originals are securely destroyed following verification; encrypted copies are retained for audit purposes only.
• Support communications: Retained for 3 years from the date of the communication, unless the communication relates to a dispute or legal matter, in which case it is retained until that matter is fully resolved.
• Technical and session data (logs): Retained for 12 months, after which logs are anonymised or deleted.
• Responsible gaming records: Self-exclusion and cooling-off records are retained for the full duration of the exclusion period plus 5 years to prevent re-registration in breach of an active exclusion.
• Marketing consent records: Retained for as long as you hold an active account, or until you withdraw consent, plus 3 years thereafter as evidence of the consent decision.

When a retention period expires, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to an identifiable individual.

78bdt employs a layered security architecture designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Key technical and organisational measures include:

• Encryption in transit: All data exchanged between your browser or app and the 78bdt Platform is encrypted using TLS 1.3, the current industry standard for transport layer security.
• Encryption at rest: Sensitive personal data and financial records stored on 78bdt servers are encrypted using AES-256, ensuring that even in the unlikely event of a storage breach, data remains unreadable without the appropriate decryption keys.
• Access controls: Internal access to personal data is governed by a strict role-based access control (RBAC) policy. Only personnel who require access to specific data categories to perform their job functions are granted access. All access events are logged and regularly audited.
• Intrusion detection: 78bdt operates automated intrusion detection and anomaly monitoring systems that alert our security team to suspicious access patterns or potential data exfiltration attempts in real time.
• Two-factor authentication (2FA): All internal 78bdt administrative systems require multi-factor authentication. Players are strongly encouraged to enable 2FA on their own accounts via the account security settings.
• Third-party security assessments: 78bdt engages qualified third-party security specialists to conduct periodic penetration tests and vulnerability assessments of the Platform's infrastructure.

As a 78bdt player, you hold the following rights in respect of your personal data. All requests are handled by our support team and will receive a substantive response within 30 calendar days of receipt:

• Right of access: You may request a copy of all personal data 78bdt holds about you, along with information about how it is being processed. This is provided free of charge in a structured, machine-readable format.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. Where data has been shared with third parties, we will inform them of the correction where feasible.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that legal retention obligations (Section 9) may limit the scope of erasure requests.
• Right to restriction: You may request that processing of your personal data be temporarily suspended — for example, while a rectification request is being evaluated or while you contest the legal basis for processing.
• Right to data portability: You may request that personal data you have provided to 78bdt be returned to you in a structured, commonly used, machine-readable format (such as JSON or CSV) so that it can be transferred to another service provider.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including direct marketing communications. Objections to marketing are actioned immediately; other objections are evaluated against the specific processing activity.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without detriment to your account status or your ability to use the Platform.

To exercise any of the above rights, please contact 78bdt support at [email protected] with the subject line "Data Rights Request" and a description of the right you wish to exercise. We may ask you to verify your identity before processing any data rights request to protect your privacy.

78bdt is strictly an adult platform. The minimum age for registration and use of any Platform service is 21 years. The Platform is not directed at, and does not knowingly collect personal data from, individuals under the age of 21.

If 78bdt becomes aware that personal data has been collected from an individual who is under 21, that account will be permanently closed immediately, all associated data will be deleted to the extent not required for legal record-keeping, and any deposited funds will be returned to the originating payment method following identity confirmation with the account holder's parent or guardian where applicable.

Parents or guardians who believe a minor may have created an account on the 78bdt Platform should contact support immediately at [email protected]. Such reports are treated as high-priority and actioned within 4 hours of receipt.

The 78bdt Platform may contain references to third-party game providers, payment services, and other partners in the course of delivering the service. This Privacy Policy applies exclusively to data processed directly by 78bdt. 78bdt is not responsible for the privacy practices of third-party services, even where those services are accessed through the Platform.

Players are encouraged to review the privacy policies of any third-party service they interact with — including mobile financial services such as bKash and Nagad — to understand how those services handle their personal data independently of 78bdt.

78bdt reviews this Privacy Policy regularly to ensure it accurately reflects current data processing practices and remains aligned with applicable legal obligations. When material changes are made — such as the introduction of a new category of data collection, a new third-party sharing arrangement, or a significant change to retention periods — 78bdt will:

• Update the "Last Updated" and "Effective Date" fields at the top of this page.
• Send a notification to your registered email address summarising the key changes, at least 14 days before the updated Policy takes effect.
• Display a notice on the Platform at login prompting you to review the updated Policy.

Minor amendments — such as corrections of typographical errors, rewording for clarity, or updates to reflect changes in game provider partnerships — may be made without advance notice but will be reflected in an updated version date.

Continued use of the Platform following the effective date of a revised Privacy Policy constitutes acceptance of the revised terms. If you do not agree with any material change, you may request voluntary account closure before the effective date and your verified Real Money Balance will be returned in full.

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data 78bdt holds about you, please contact our support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data rights requests: "Data Rights Request"
• Subject line for privacy concerns: "Privacy Policy Enquiry"
• Support hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Response time: Data rights requests within 30 calendar days; general privacy enquiries within 5 business days

78bdt is committed to resolving all privacy-related concerns fairly and transparently. If you submit a data rights or privacy request and are not satisfied with the initial response, you may request escalation to a senior review, which will be completed within 14 business days of the escalation request.