bq678 Privacy Policy

1.1  bq678 collects personal data from you when you register an account, use Platform features, make deposits or withdrawals, contact our support team, or interact with promotional offers. The categories of data we collect, the specific data points within each category, and the purpose and legal basis for collecting them are set out below.

1.2  bq678 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data. If any such data is incidentally included in documents you submit during KYC (for example, visible in a national identity card), it will not be processed for any purpose beyond identity and age verification, and it will be stored with the same security controls as all other KYC documentation.

1.3  Where you provide personal data relating to third parties — for example, referral details — you confirm that you have obtained the necessary consent from those individuals to share their data with bq678 for the stated purpose.

2.1  bq678 processes your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the original purpose for which it was collected. The primary purposes for which bq678 uses your personal data are as follows:

• Account Administration: Creating and maintaining your bq678 account, authenticating your identity on login, managing your account preferences, and processing account closure requests.
• Payment Processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card payment methods. Ver ifying payment method ownership as part of the withdrawal approval process.
• Identity and Age Verification (KYC): Confirming that you are 18 years of age or older, verifying that the identity you registered with is accurate, and ensuring payment methods are legitimately yours.
• Fraud Prevention and Security: Detecting and investigating suspicious account activity, identifying duplicate accounts, preventing unauthorised access, monitoring for money laundering indicators, and protecting the integrity of the platform.
• Responsible Gaming: Monitoring your betting behaviour for patterns that may indicate problem gambling, enforcing self-exclusion and deposit limit settings you have activated, and reaching out proactively where our systems flag potential gambling harm.
• Customer Support: Responding to your queries, resolving disputes, processing complaints, and maintaining records of interactions for quality assurance and regulatory purposes.
• Legal and Regulatory Compliance: Meeting our obligations under applicable anti-money laundering (AML) regulations, retaining financial records as required by law, and responding to lawful requests from regulatory authorities or law enforcement.
• Platform Improvement: Analysing aggregated, anonymised usage data to understand how players use bq678, identify features that need improvement, and develop new products and services.
• Marketing Communications (with your consent): Sending you promotional offers, bonus notifications, and platform updates via email or SMS — but only where you have explicitly opted in. You may withdraw this consent at any time.

2.2  bq678 does not use automated decision-making processes — including profiling — that produce legal or similarly significant effects on you without human review. Where automated systems flag an account for investigation (for example, fraud detection or responsible gaming monitoring), a human member of the bq678 team reviews the case before any action is taken that materially affects your account.

3.1  bq678 does not sell your personal data to any third party. We share your data only in the limited circumstances described below, and only to the extent necessary for the specified purpose.

3.2 Payment Service Providers

To process your deposits and withdrawals, bq678 shares relevant financial and identity data with the payment providers you select — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard. These providers receive only the data required to complete your transaction and are contractually obligated to handle it securely and in accordance with their own privacy policies.

3.3 Identity Verification Partners

bq678 may use third-party KYC and identity verification service providers to assist in processing the identity documents you submit. These providers are given access to your KYC documents solely for verification purposes and are bound by strict data processing agreements that prohibit any secondary use of your information.

3.4 Technology and Infrastructure Providers

bq678 relies on cloud hosting, database management, and cybersecurity service providers to operate the platform. These providers may have access to personal data stored on bq678 infrastructure as a technical necessity of providing their services. All such providers are contractually required to implement appropriate security measures and to process personal data only on bq678's instructions.

3.5 Game Software Providers

Casino game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive anonymised or pseudonymised session data (such as game round outcomes and bet amounts) for the purpose of game operation, auditing, and fairness certification. These providers do not receive directly identifiable personal data such as your name, contact details, or payment information.

3.6 Legal and Regulatory Disclosure

bq678 may disclose your personal data to law enforcement agencies, financial regulators, courts, or government authorities where required to do so by applicable law, valid legal process, or to protect the rights, property, or safety of bq678, its players, or the public. Such disclosures are made only to the extent legally required and, where permitted, bq678 will notify you of such a disclosure.

4.1  bq678 uses cookies and similar tracking technologies (including local storage and session storage) to operate the platform, maintain your login session, remember your preferences, and collect internal analytics data. This section explains what types of cookies we use and how you can control them.

4.2 Types of Cookies Used by bq678

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, store your language preference, and enable core features such as game loading and deposit processing. These cookies cannot be disabled without breaking the platform's core functionality.
• Performance and Analytics Cookies: bq678 uses first-party analytics cookies to understand how players navigate the platform — which pages are most visited, where sessions typically end, and how features are used. This data is aggregated and anonymised and is used solely to improve the platform. bq678 does not use Google Analytics or any other third-party analytics platform that transmits your data to external servers.
• Functional Cookies: These cookies remember your preferences — such as your preferred deposit method, interface settings, and notification preferences — so you do not need to reconfigure them on each visit.
• Security Cookies: Short-lived cookies used to support security features such as CSRF (Cross-Site Request Forgery) protection and session integrity verification. These are strictly necessary and cannot be disabled.

4.3  bq678 does not use third-party advertising cookies, retargeting pixels, social media tracking scripts, or any cross-site tracking technology. You will not see bq678-targeted advertisements on third-party websites as a result of visiting bq678.app.

4.4 Managing Cookies

You can control and delete cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies on a per-site basis. Please note that disabling strictly necessary cookies will impair your ability to use bq678 — you may be unable to log in, load games, or process transactions. Disabling performance or functional cookies will not prevent you from using the platform but may affect your experience.

4.5  bq678's cookies do not contain personally identifiable information in plain text. Session identifiers stored in cookies are encrypted tokens that have no meaning outside of bq678's own server-side session management system.

5.1  bq678 retains your personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to any overriding legal, regulatory, or contractual retention obligations. The following retention periods apply to the main categories of data held by bq678:

5.2  All personal data held by bq678 is stored on secure servers. Access to stored personal data is restricted to bq678 personnel and authorised service providers who have a legitimate need to access it for the purposes described in this policy. Access controls are reviewed regularly and access logs are maintained.

5.3  When your data reaches the end of its retention period, it is securely deleted or irreversibly anonymised so that it can no longer be linked back to you as an individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

5.4  bq678's primary data storage infrastructure is located in secure data centres. Where data is processed by third-party service providers, bq678 ensures that appropriate data processing agreements are in place that require equivalent standards of security and data handling.

6.1  As a bq678 player, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request". We will verify your identity before processing any request and aim to respond within 30 calendar days.

6.2  Please note that some rights are subject to limitations. For example, bq678 cannot delete financial transaction records that it is legally required to retain under AML regulations, even if you submit a deletion request. Where we are unable to fully comply with a rights request due to a legal obligation, we will explain this to you in our response.

6.3  bq678 will not charge a fee for processing a rights request unless the request is manifestly unfounded or excessive. In such cases, we may charge a reasonable administrative fee or refuse to act on the request, and we will explain our decision in writing.

7.1  bq678 takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to:

• TLS/SSL Encryption: All data in transit between your browser or app and bq678 servers is encrypted using Transport Layer Security (TLS). The bq678.app domain enforces HTTPS at all times.
• Data Encryption at Rest: Sensitive personal data — including KYC documents, payment details, and account credentials — is encrypted at rest in bq678's storage infrastructure using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorised bq678 personnel on a need-to-know basis. Role-based access controls and multi-factor authentication are enforced for all staff accounts with access to production systems.
• Intrusion Detection: bq678's infrastructure is monitored continuously for signs of unauthorised access, anomalous behaviour, and potential security incidents using automated intrusion detection systems.
• Penetration Testing: bq678 conducts periodic security assessments and penetration testing of its platform and infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Staff Training: All bq678 staff with access to personal data receive regular data protection and security training to ensure they understand their obligations and the risks of mishandling player data.
• Incident Response: bq678 maintains a data breach response procedure. In the event of a confirmed breach that is likely to result in a risk to affected players, bq678 will notify impacted players and relevant authorities as required by applicable law.

7.2  While bq678 takes all reasonable precautions to protect your data, no internet-based platform can guarantee absolute security. You also have a role to play in keeping your account secure — use a strong, unique password, enable two-factor authentication, and never share your login credentials with any third party.

8.1  bq678 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal obligations. When material changes are made, we will notify registered players via the email address associated with their account or via a prominent notice on the bq678 platform. The effective date at the top of this policy will be updated to reflect the date of the most recent revision.

8.2  Continued use of bq678 after a Privacy Policy update constitutes your acceptance of the revised policy. If you do not agree with the changes, you should stop using the platform and contact [email protected] to close your account. Your account balance will be returned to your registered payment method following the standard withdrawal process, subject to KYC verification being complete.

8.3  We encourage you to review this Privacy Policy periodically to stay informed about how bq678 is protecting your personal data. The current version of the policy is always accessible at bq678.app/privacy-policy.

8.4 Contact for Privacy Matters

If you have any questions, concerns, or complaints regarding this Privacy Policy, the way bq678 handles your personal data, or if you wish to exercise any of your data rights, please contact the bq678 privacy team using the details below. All privacy-related communications will be handled in English.

Email: [email protected]
Subject line: "Privacy Enquiry" or "Data Rights Request"
Response time: Within 30 calendar days of receipt of a verifiable request
Support availability: 24 hours a day, 7 days a week

8.5  This Privacy Policy is written in English and the English-language version is the sole authoritative version. bq678 does not accept liability for any misunderstanding arising from unofficial translations of this document.