obd678 Privacy Policy

Your Privacy at a Glance

The cards below summarise the most important aspects of how obd678 handles your personal data. The full legal detail for each topic is set out in the numbered sections that follow. In any conflict between this summary and the full text, the full text governs.

1 Who We Are

obd678 is an online gaming and sports betting platform serving players in Bangladesh. When this Privacy Policy refers to "obd678", "we", "us", or "our", it means the operator of the obd678 platform accessible at obd678.bet.

We act as the data controller in respect of all personal data collected through the obd678 Platform. This means we determine the purposes and means by which your personal data is processed. Any questions regarding this Privacy Policy or our data practices should be directed to our support team at [email protected].

2 Personal Data We Collect

We collect personal data from you in several ways — directly when you register and use the Platform, automatically through technical systems, and occasionally from third-party sources such as identity verification providers. The categories of data we collect are set out below.

Data you provide directly:

• Registration data: Full legal name, date of birth, residential address, email address, and mobile phone number submitted when you open an obd678 account.
• Identity verification data: Copies of government-issued identification (National ID card, passport, or driving licence) and proof of address documents submitted during the Know Your Customer (KYC) process.
• Financial data: Payment method details, including bKash/Nagad/Rocket/Upay mobile wallet numbers, bank card digits (we store only the last four digits and expiry date — never the full card number), and bank account information where applicable.
• Communications data: The content of messages you send to our customer support team via email or live chat, including any attachments or documents you share with us.
• Preference data: Responsible gaming settings you configure, including deposit limits, session time-outs, and self-exclusion elections.

Data collected automatically:

• Device and technical data: IP address, browser type and version, operating system, device identifiers, screen resolution, and time zone.
• Usage and gaming data: Pages visited, games played, bet amounts and outcomes, session start and end times, features accessed, and navigation paths through the Platform.
• Cookie data: Data collected via cookies, pixels, and similar tracking technologies as described in Section 7 of this Policy.

Data from third parties:

• Identity verification partners: Confirmation or flags from third-party KYC services regarding the authenticity of documents and the results of sanctions screening.
• Payment processors: Transaction status, confirmation codes, and fraud-risk indicators returned by payment service providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank).
• Responsible gaming registers: Information about existing self-exclusion elections you may have registered with third-party schemes before joining obd678.

3 How We Use Your Data

obd678 uses your personal data only for the purposes listed below. We rely on one or more lawful bases for each type of processing activity.

• Account creation and management: To register your account, verify your identity, maintain your account settings, and provide customer support. Lawful basis: performance of a contract.
• Payment processing: To process deposits and withdrawals via your chosen payment method, reconcile transactions, and investigate payment disputes. Lawful basis: performance of a contract.
• Legal and regulatory compliance: To fulfil our obligations under applicable anti-money laundering (AML) requirements, including transaction monitoring, suspicious activity reporting, and record retention. Lawful basis: legal obligation.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, and other prohibited conduct. Lawful basis: legitimate interest.
• Responsible gaming: To implement deposit limits, self-exclusion, and other player-protection tools you request, and to monitor gaming patterns for signs of problem gambling. Lawful basis: legal obligation and legitimate interest.
• Platform improvement: To analyse aggregated usage data and improve the design, performance, and content of the obd678 Platform. Lawful basis: legitimate interest.
• Marketing communications: To send you promotional offers, bonus notifications, and news about new games or features — but only where you have opted in to receive such communications. Lawful basis: consent. You may withdraw consent at any time by contacting [email protected].
• Age verification: To confirm that all players are at least 21 years of age before permitting real-money gaming. Lawful basis: legal obligation and legitimate interest.

4 Sharing Your Data

obd678 does not sell, rent, or trade your personal data to unrelated third parties for their own marketing purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for the specified purpose.

All third-party service providers acting on obd678's behalf are required to process personal data solely in accordance with our instructions and to maintain appropriate security measures. They are not permitted to use your data for their own independent purposes.

5 Data Retention

obd678 retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulation. The following general retention periods apply.

• Active account data: Retained for the full duration of your account relationship with obd678 and for a minimum of five years following account closure, to satisfy anti-money laundering record-keeping obligations.
• Transaction records: All deposit, withdrawal, and betting transaction records are retained for a minimum of five years from the date of the transaction.
• Identity verification documents: Copies of KYC documents are retained for five years after the end of the account relationship or the date of the last transaction, whichever is later.
• Customer support communications: Correspondence is retained for three years from the date of the last interaction, unless the communication relates to an ongoing dispute or legal matter.
• Marketing consent records: Records of consent to receive marketing communications are retained for as long as you hold an obd678 account, plus three years after account closure.
• Cookie and analytics data: Aggregated analytics data is retained for up to 26 months. Raw session logs are retained for no longer than 90 days unless required for an investigation.

When personal data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

6 Data Security

Protecting the personal data of our players is a core responsibility of obd678. We implement a layered approach to information security that encompasses technical, organisational, and procedural controls.

• Encryption in transit: All data transmitted between your device and the obd678 Platform is protected using Transport Layer Security (TLS 1.2 or higher), commonly indicated by the padlock icon in your browser's address bar.
• Encryption at rest: Sensitive data stored on obd678 servers — including payment details and identity documents — is encrypted using industry-standard algorithms.
• Access controls: Access to personal data within obd678's systems is restricted on a strict need-to-know basis. Staff members are granted the minimum level of access required to perform their role, and all access is logged and audited.
• Secure infrastructure: obd678's Platform is hosted on secure server infrastructure with firewall protection, intrusion detection systems, and regular vulnerability assessments.
• Password security: Passwords are stored as salted cryptographic hashes — they are never stored in plain text, and obd678 staff cannot retrieve your password. If you forget your password, you must reset it through the official account recovery process.
• Incident response: In the event of a personal data breach that poses a risk to your rights and freedoms, obd678 will notify affected players without undue delay and take immediate remedial action.

7 Cookies & Tracking Technologies

obd678 uses cookies and similar technologies to enable core Platform functionality, analyse usage patterns, and improve your experience. A cookie is a small text file placed on your device when you visit our site.

You can manage or delete cookies at any time through your browser's privacy settings. Please note that disabling essential cookies will affect your ability to log in and use the obd678 Platform. Most browsers provide guidance on cookie management in their help documentation.

8 Your Data Rights

As a player on the obd678 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request — [Your Username]".

• Right of access: You have the right to request a copy of the personal data obd678 holds about you, along with information about how it is being used.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to obd678's legal record-keeping obligations (which may require us to retain certain data for up to five years).
• Right to restrict processing: In certain circumstances, you may request that we limit the processing of your personal data (for example, while you contest its accuracy).
• Right to data portability: Where processing is based on your consent or the performance of a contract and is carried out by automated means, you may request that we provide your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where obd678 processes your data on the basis of consent (e.g., for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object: You may object to processing based on legitimate interests (e.g., direct marketing analytics) where your individual circumstances warrant it.

obd678 will respond to all data rights requests within 30 days of receipt. Where a request is complex or we receive a high volume of requests, we may extend this period by a further 60 days and will notify you accordingly.

9 Minors & Age Restriction

The obd678 Platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If you believe that a person under 21 has provided us with their personal data or created an obd678 account, please notify us immediately at [email protected].

10 Updates to This Policy

obd678 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform features. When we make material changes, we will notify registered players by email and by displaying a prominent notice on the Platform.

• The effective date at the top of this page will always reflect the date of the most recent revision.
• Continued use of the obd678 Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms.
• If you disagree with any material change to this Policy, you may close your account by contacting [email protected] before the effective date of the change.
• We recommend reviewing this Privacy Policy periodically so you remain informed about how we protect your information.