obd678 Privacy Policy

1 Information We Collect

When you use the obd678 platform, we may collect the following categories of personal information. We collect only what is necessary to provide our services, comply with legal obligations, and ensure a safe and fair gaming environment for all players in Bangladesh.

1.1 Information you provide directly:

• Registration data: Full legal name, date of birth, email address, mobile phone number, and any other information provided during account creation.
• Identity verification documents: Copies of government-issued photo identification (e.g., National ID card, passport, driver's licence), proof of address documents, and payment method verification materials submitted during KYC processes.
• Payment information: Mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers), bank account details, and card information where applicable. Full card numbers are never stored on obd678 servers — payment card processing is handled by our PCI-DSS compliant payment partners.
• Communications: Messages, emails, and live chat transcripts sent to the obd678 support team, including any personal information you choose to include in those communications.
• Responsible gaming data: Self-exclusion requests, deposit limit preferences, time-out elections, and any other responsible gaming tool settings you configure within your account.

1.2 Information collected automatically:

• Device and technical data: IP address, browser type and version, operating system, device type (mobile, tablet, desktop), screen resolution, and device identifiers.
• Usage data: Pages visited, games played, bets placed, session duration, click and navigation patterns, and features accessed within the obd678 platform.
• Geolocation data: General geographic location derived from your IP address (country and region level). obd678 does not use GPS or precise device location tracking.
• Cookies and tracking technologies: Data collected via first-party cookies, session cookies, and similar technologies. See Section 5 for full details.

2 How We Use Your Data

obd678 uses the personal data we collect for specific, documented purposes. We do not use your data for any purpose incompatible with the reason it was originally collected. The primary purposes for which we process personal data are as follows:

obd678 does not use personal data to make fully automated decisions that produce significant legal effects on individual players without human review. Any account restriction or closure decision is reviewed by a member of our operations team before being finalised.

3 Legal Basis for Processing

obd678 processes personal data on the following legal bases, consistent with applicable data protection principles:

• Contract performance: Processing is necessary to deliver the services you have requested — including account management, game access, and payment processing. Without this data, we cannot fulfil our obligations under the obd678 Terms and Conditions.
• Legal obligation: Certain processing activities are required by law. These include Know Your Customer (KYC) identity verification, anti-money-laundering (AML) record-keeping, age verification, and responsible gaming obligations. We are required to retain certain records for defined statutory periods regardless of your account status.
• Legitimate interest: obd678 processes some data based on legitimate business interests, including fraud detection, platform security, system analytics, and responsible gaming monitoring. We apply a balancing test to ensure that our legitimate interests do not override your fundamental privacy rights.
• Consent: Where we process data on the basis of your consent — most notably for marketing communications and optional analytics cookies — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. You can manage communication preferences in your account settings or by contacting our support team.

4 Data Sharing & Third Parties

obd678 does not sell, rent, lease, or trade your personal data to any third party for commercial marketing purposes. Data sharing is limited to the following categories of recipients, and only to the extent strictly necessary:

• Payment service providers: To process your deposits and withdrawals, we share necessary payment data with our payment processing partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and card payment processors. These partners are contractually bound to handle your data securely and use it only to process transactions on our behalf.
• Game providers: When you play games hosted by third-party providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — a session token and minimal technical data is passed to that provider to load and run the game. Game providers do not receive your full personal profile or financial data.
• Identity verification services: To meet KYC and age verification obligations, obd678 may use trusted third-party identity verification platforms. These services receive only the data required to complete the verification process and are prohibited from using it for any other purpose.
• Fraud and security services: obd678 uses third-party fraud detection and cybersecurity tools that may process IP addresses, device fingerprints, and behavioural data to identify suspicious activity and protect the platform from abuse.
• Analytics providers: Anonymised or aggregated usage data may be shared with analytics platforms to help us understand how players interact with the obd678 platform and identify areas for improvement. No personally identifiable information is included in these analytics data sets.
• Legal and regulatory authorities: obd678 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities when required to do so by law, court order, or in response to a lawful request in connection with suspected criminal activity, fraud, or money laundering investigations.

All third parties with whom obd678 shares personal data are required to maintain appropriate technical and organisational security measures and to process data only in accordance with our documented instructions and applicable data protection requirements.

5 Cookies & Tracking Technologies

obd678 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit our website. We use the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your login session, remember your account preferences, enable secure payment flows, and ensure that responsible gaming tools such as session limits operate correctly. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: These cookies remember your preferences — such as your preferred game lobby view, language settings, and display preferences — to personalise your experience across sessions. They are not used for tracking or advertising.
• Performance and analytics cookies: These cookies collect anonymised data about how you interact with the obd678 platform, such as which pages are visited most frequently and how long sessions last. This information helps us identify and fix performance issues and improve the user experience. No personally identifiable information is captured via these cookies.
• Security cookies: Used to detect and prevent fraudulent account access attempts, bot activity, and other security threats. They help us distinguish legitimate human users from automated systems.

obd678 does not use advertising cookies, retargeting pixels, social media tracking cookies, or any cross-site behavioural profiling technology. We do not allow third-party advertising networks to place cookies on the obd678 platform.

Most web browsers allow you to control cookies through their settings. You can configure your browser to refuse cookies, delete existing cookies, or alert you when a cookie is being set. Please note that disabling strictly necessary cookies will impair your ability to use the obd678 platform, including the ability to log in and maintain a session.

6 Data Retention

obd678 retains personal data only for as long as it is needed to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or anti-money-laundering obligations. The following retention periods apply:

• Active account data: Personal information associated with an active obd678 account is retained for the full duration of the account's active status and for a period thereafter to meet post-closure legal obligations.
• KYC and identity verification records: Identity documents and verification records are retained for a minimum of five years following account closure in compliance with anti-money-laundering record-keeping requirements.
• Financial transaction records: Deposit, withdrawal, and betting transaction records are retained for a minimum of five years following the transaction date for audit, regulatory, and dispute resolution purposes.
• Support communications: Customer support chat logs and email correspondence are retained for up to three years following the date of the communication, unless a longer period is required for ongoing dispute or legal proceedings.
• Marketing consent records: Records of your marketing consent — including the date, time, and method of consent — are retained for as long as we continue to send you marketing communications, and for a reasonable period thereafter to demonstrate compliance.
• Anonymised analytics data: Anonymised or aggregated usage data that cannot be linked back to any individual may be retained indefinitely for platform improvement and research purposes.

When personal data reaches the end of its applicable retention period, obd678 will either securely delete it from our systems or anonymise it in such a way that it can no longer be associated with you as an individual.

7 Data Security

obd678 takes the security of your personal data very seriously. We have implemented a comprehensive set of technical and organisational security measures designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• Transport layer encryption: All data transmitted between your device and obd678 servers is protected by 256-bit SSL/TLS encryption. Our entire platform is served exclusively over HTTPS.
• Data encryption at rest: Sensitive personal data, including identity documents and financial records, is encrypted when stored in our database systems.
• Access controls: Access to personal data within obd678's internal systems is strictly limited to personnel who require it to perform their specific job functions. Role-based access controls and audit logging are applied to all systems containing personal data.
• Secure payment processing: Payment card data is processed exclusively by PCI-DSS certified payment processors. obd678 does not store full card numbers, CVV codes, or card PINs on our servers.
• Vulnerability management: obd678 conducts regular security assessments and vulnerability scans of our platform infrastructure. Known vulnerabilities are patched promptly in accordance with a defined security maintenance schedule.
• Incident response: In the event of a data security incident that poses a risk to your personal data, obd678 will take immediate containment action and notify affected individuals in a timely manner in accordance with applicable notification obligations.

While obd678 takes all reasonable steps to protect your data, no digital system is entirely immune to risk. You play an important role in keeping your account secure: use a strong and unique password, do not share your login credentials, and contact us immediately at [email protected] if you suspect any unauthorised access to your obd678 account.

8 Your Privacy Rights

obd678 is committed to respecting and facilitating the exercise of your privacy rights. As a user of the obd678 platform, you have the following rights with respect to your personal data:

• Right of access: You have the right to request a copy of the personal data that obd678 holds about you. We will provide this in a clear, readable format within a reasonable timeframe following receipt of a valid request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account information directly in your account settings, or contact support for assistance with more complex corrections.
• Right to erasure: You may request that obd678 delete your personal data in certain circumstances — for example, if the data is no longer necessary for the purposes it was collected, or if you withdraw the consent on which processing was based. Please note that this right is subject to overriding legal obligations: we cannot delete data that we are legally required to retain (such as KYC and transaction records).
• Right to restriction of processing: In certain circumstances, you have the right to request that obd678 restrict the processing of your personal data — for example, while a dispute about the accuracy of your data is being resolved.
• Right to data portability: Where processing is based on your consent or on a contract, you may request that obd678 provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to object: You have the right to object at any time to processing of your personal data that is based on obd678's legitimate interests, including for direct marketing purposes. Where you object to marketing, we will stop sending you marketing communications immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing conducted prior to withdrawal.

To exercise any of the above rights, please contact the obd678 data protection team by emailing [email protected]. Please include your registered account email address and a brief description of your request. We aim to respond to all privacy rights requests within 30 days. In complex cases we may extend this period by up to a further 30 days, in which case we will notify you of the extension and the reason for it.

9 Children's Privacy

The obd678 platform is strictly intended for adults aged 18 and above. obd678 does not knowingly collect, store, or process personal data belonging to any person under the age of 18.

All prospective players are required to confirm their age during the registration process. obd678 additionally conducts age verification checks as part of our KYC process and may request documentary proof of age at any point. If obd678 discovers or is notified that personal data has been collected from a person under 18, we will take immediate steps to delete that data and close the associated account in accordance with our responsible gaming obligations.

If you are a parent or guardian and you believe that a minor in your care has created an obd678 account or has otherwise provided personal information to obd678, please contact us immediately at [email protected]. We will investigate promptly and take appropriate action.

We strongly recommend that parents and guardians make use of parental control software to restrict minors' access to online gambling platforms. Organisations such as GamCare and BeGambleAware also provide free resources and guidance on keeping young people safe in relation to gambling content.

10 Contact & Data Protection

If you have any questions, concerns, or requests relating to this Privacy Policy or the way obd678 handles your personal data, please do not hesitate to get in touch with our team. We are committed to addressing all privacy-related enquiries promptly and transparently.

You can reach the obd678 data protection and privacy team through the following channel:

• Email: [email protected] — please use the subject line "Privacy Enquiry" to ensure your message is routed to the correct team.
• Live chat: Available 24 hours a day, 7 days a week directly within the obd678 platform. Live chat is the fastest way to reach our English-speaking support team for urgent account or data concerns.
• Response time: We aim to acknowledge all privacy-related email enquiries within 48 hours and to provide a full response within 30 days of receipt of a valid, clearly described request.

This Privacy Policy was last reviewed and updated on 1 January 2026. obd678 reserves the right to update this policy at any time to reflect changes in our data practices, legal obligations, or platform functionality. When material changes are made, we will notify registered players via their registered email address and display a prominent notice on the obd678 website. Continued use of the platform following the effective date of any update constitutes acceptance of the revised Privacy Policy.

The most current version of this Privacy Policy is always available at obd678.net/privacy-policy and supersedes all previously published versions.