bq678 Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how bq678 ("bq678", "we", "us", "our") collects, uses, discloses, stores, and protects personal information obtained from users ("you", "your", "Player", "Member") of the bq678 website located at bq678.io and all associated betting services including cricket betting, casino games, slots, live dealer tables, and payment processing (collectively, the "Services").

By creating an account, accessing the bq678 website, or using any bq678 Services, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy. If you do not agree with our privacy practices, you must immediately discontinue use of bq678 Services and refrain from providing any personal information.

This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your overall use of bq678 Services. We reserve the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. The "Last Updated" date at the top of this document indicates when this Policy was most recently revised. Continued use of bq678 Services following any changes constitutes your acceptance of the updated Privacy Policy.

2. Information We Collect

2.1 Personal Information You Provide

When you register for a bq678 account, we collect personal information that you voluntarily provide, including but not limited to:

• Identity Information: Full legal name, date of birth, gender, National ID number or passport number, and copies of government-issued identification documents submitted during account verification.
• Contact Information: Email address, mobile phone number, residential address including city, postal code, and country.
• Account Credentials: Username, password (stored in encrypted format), and security questions/answers used for account recovery.
• Financial Information: Mobile banking account details for bKash, Nagad, Rocket, or Upay; transaction history including deposit amounts, withdrawal requests, and payment method identifiers.
• Communication Records: Support tickets, live chat transcripts, emails exchanged with bq678 customer service, and feedback or complaints submitted through our platform.

2.2 Information Automatically Collected

When you access bq678 Services, we automatically collect certain technical and usage information through cookies, log files, and similar tracking technologies:

• Device Information: Device type (smartphone, tablet, desktop), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution, and unique device identifiers.
• Connection Data: IP address, internet service provider, approximate geographic location based on IP (city and country level, not precise GPS coordinates), connection timestamps, and network performance metrics.
• Usage Analytics: Pages visited, time spent on each page, click patterns, navigation paths through the website, search queries entered, games played, bet amounts, win/loss records, and session duration.
• Referral Sources: The website or link you clicked to reach bq678, including affiliate codes, marketing campaign identifiers, and social media referrals.

2.3 Information From Third Parties

We may receive additional information about you from third-party sources to verify your identity, prevent fraud, and comply with legal obligations:

• Payment Processors: Transaction confirmation data from bKash, Nagad, Rocket, and Upay including payment success/failure status, transaction IDs, and account verification results.
• Identity Verification Services: Age verification results, address confirmation, and identity authentication data from third-party verification providers used to comply with know-your-customer (KYC) and anti-money laundering (AML) requirements.
• Fraud Prevention Tools: Risk scores, device fingerprints, and behavioral analysis data from security partners used to detect and prevent fraudulent account creation, bonus abuse, and payment fraud.

3. How We Use Your Information

bq678 uses the personal information we collect for the following purposes:

3.1 Account Management and Service Delivery

• Creating and maintaining your bq678 account, authenticating your identity during login, and managing your account settings and preferences.
• Processing deposits, withdrawals, and other financial transactions; maintaining accurate account balance records; and issuing payment confirmations.
• Enabling you to place bets on cricket matches, play casino games, access live dealer tables, and participate in all bq678 betting services.
• Calculating winnings, settling bets according to official game and sports results, and crediting payouts to your account balance.

3.2 Legal and Regulatory Compliance

• Verifying that you meet the minimum age requirement of 21 years to legally use bq678 Services.
• Conducting identity verification, address confirmation, and source-of-funds checks to comply with international anti-money laundering (AML) and know-your-customer (KYC) regulations.
• Detecting and preventing fraudulent activity, bonus abuse, collusion, and other prohibited behaviors outlined in our Terms and Conditions.
• Responding to legal requests, court orders, subpoenas, or government inquiries requiring disclosure of user information.

3.3 Customer Support and Communication

• Responding to your support inquiries via email, live chat, or other communication channels; troubleshooting technical issues; and resolving disputes related to bets, payments, or account access.
• Sending transactional emails such as account registration confirmation, password reset instructions, deposit/withdrawal confirmations, and important account security alerts.
• Providing updates about changes to our Terms and Conditions, Privacy Policy, or other platform policies that affect your use of bq678 Services.

3.4 Marketing and Promotions (With Your Consent)

• Sending promotional emails, SMS messages, or push notifications about new games, special bonuses, cricket tournament betting markets, seasonal promotions, and exclusive offers tailored to your interests.
• Displaying personalized banner ads, in-app messages, and content recommendations based on your betting history, game preferences, and previous interactions with bq678 Services.
• Inviting you to participate in player surveys, feedback requests, or loyalty programs designed to improve your bq678 experience.

Opt-Out Rights: You may unsubscribe from marketing communications at any time by clicking the "Unsubscribe" link in promotional emails, adjusting notification preferences in your account settings, or contacting [email protected] to request removal from marketing lists. Opting out of marketing does not affect transactional or account security communications, which are necessary for platform operation.

3.5 Platform Improvement and Analytics

• Analyzing user behavior, betting patterns, game popularity, and feature usage to improve bq678 Services, optimize user experience, and develop new products.
• Conducting A/B testing of website layouts, promotional offers, and game interfaces to determine which versions perform best for player engagement and satisfaction.
• Monitoring platform performance, identifying technical bugs or glitches, and ensuring system reliability, security, and fast loading times especially on mobile devices.

4. Legal Basis for Processing (GDPR and International Standards)

Under international data protection laws including the General Data Protection Regulation (GDPR), bq678 processes your personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our Terms and Conditions contract with you, including account creation, bet processing, payment handling, and service delivery.
• Legal Obligation: Processing is required to comply with legal and regulatory requirements such as age verification, AML/KYC checks, fraud prevention, and responding to lawful government requests.
• Legitimate Interests: Processing serves bq678's legitimate business interests in platform security, fraud detection, customer support, analytics, and operational improvements, provided these interests do not override your fundamental privacy rights.
• Consent: For marketing communications and non-essential cookies, we rely on your explicit consent, which you may withdraw at any time without affecting the lawfulness of processing based on consent before withdrawal.

5. How We Share Your Information

bq678 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your information with trusted service providers and partners in the following circumstances:

5.1 Payment Processors

We share necessary financial information with bKash, Nagad, Rocket, and Upay to process deposits and withdrawals. These payment partners receive only the minimum data required to complete transactions, such as your mobile banking account identifier and transaction amount. Payment processors are contractually obligated to handle your data securely and may not use it for unrelated purposes.

5.2 Identity Verification and Fraud Prevention Services

To verify your age, identity, and address during account registration and withdrawal processing, we share personal information with third-party verification providers. These services perform background checks, document authentication, and fraud risk scoring on bq678's behalf. They are bound by strict data protection agreements and retain information only as long as necessary to complete verification.

5.3 Technology and Hosting Providers

We use third-party cloud hosting services, content delivery networks (CDNs), and technical infrastructure providers to store data, deliver website content, and ensure platform availability. These providers have access to user data only to the extent necessary to perform their technical functions and are contractually required to maintain confidentiality and security.

5.4 Game Providers and Live Dealer Studios

When you play casino games or live dealer tables powered by external studios such as Pragmatic Play, Evolution Gaming, NetEnt, or Ezugi, your gameplay data (bets placed, game outcomes, session duration) may be shared with these game providers for the purpose of operating their games and generating fair, verifiable results. Game providers do not receive your identity or payment information.

5.5 Legal and Regulatory Authorities

We may disclose your personal information to law enforcement agencies, courts, regulators, or government bodies if required by law, court order, subpoena, or other legal process. We will also disclose information if necessary to protect bq678's legal rights, enforce our Terms and Conditions, investigate fraud or security incidents, or prevent harm to users or the public.

5.6 Business Transfers

In the event of a merger, acquisition, bankruptcy, or sale of all or part of bq678's assets, your personal information may be transferred to the acquiring entity or successor organization. You will be notified via email and a prominent notice on our website if such a transfer occurs, and the new entity will be bound by this Privacy Policy unless you are provided with an opportunity to consent to a new policy.

6. Data Security Measures

bq678 employs industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All sensitive data transmitted between your device and bq678 servers is encrypted using 256-bit SSL/TLS encryption. Passwords are hashed using strong cryptographic algorithms and are never stored in plain text.
• Access Controls: Personal information is accessible only to authorized bq678 employees and contractors who require access to perform their job functions. Access is granted on a need-to-know basis and is regularly audited.
• Secure Infrastructure: bq678 servers are hosted in secure data centers with physical security controls, redundant power supplies, fire suppression systems, and 24/7 monitoring. Regular security updates and patches are applied to all systems.
• Fraud Detection Systems: Automated monitoring tools detect suspicious account activity, unusual betting patterns, and potential security breaches. Accounts flagged for suspicious behavior may be temporarily suspended pending investigation.
• Regular Security Audits: bq678 conducts periodic internal and third-party security assessments to identify vulnerabilities, test incident response procedures, and ensure compliance with data protection best practices.

While we implement robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials and for notifying bq678 immediately if you suspect unauthorized access to your account.

7. Data Retention

bq678 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements:

• Active Accounts: Personal information associated with active accounts is retained for the duration of your account's active status plus six years following account closure or your last login, whichever is later. This retention period is necessary to comply with financial record-keeping requirements and to resolve potential disputes.
• Transaction Records: Deposit, withdrawal, and betting transaction records are retained for a minimum of six years after the transaction date to comply with anti-money laundering regulations and tax reporting obligations.
• Communication Records: Support tickets, live chat transcripts, and email correspondence are retained for two years to maintain customer service quality and resolve recurring issues.
• Marketing Consent Records: Records of your marketing preferences and consent status are retained for three years after you withdraw consent to demonstrate regulatory compliance.

After the applicable retention period expires, personal information is securely deleted or anonymized such that it can no longer be associated with you as an individual. Anonymized data may be retained indefinitely for statistical analysis and research purposes.

8. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information held by bq678:

• Right of Access: You may request a copy of the personal information bq678 holds about you, including what data we have, how it is used, and with whom it has been shared. Requests are fulfilled within 30 days of receipt.
• Right to Rectification: If any personal information we hold about you is inaccurate, incomplete, or out of date, you may request that we correct it. Minor account details such as email address or phone number can be updated directly from your account settings page.
• Right to Erasure: You may request deletion of your personal information where we no longer have a lawful basis to retain it. Note that certain data must be retained to comply with legal obligations and cannot be erased upon request, including transaction records and identity verification data required by AML regulations.
• Right to Restrict Processing: You may request that bq678 restrict processing of your data in certain circumstances, such as when you contest the accuracy of the data or object to our use of it for a particular purpose.
• Right to Data Portability: You may request a structured, machine-readable copy of the personal information you have provided to bq678, to the extent technically feasible and required by applicable law.
• Right to Object: You may object to processing of your personal information for direct marketing purposes at any time. You may also object to processing based on legitimate interests where you believe your individual rights and interests override bq678's grounds for processing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.

To exercise any of these rights, please submit a written request to [email protected] with the subject line "Privacy Rights Request". We may ask you to verify your identity before processing your request. We will respond within 30 days; complex or multiple requests may require up to 90 days, and we will notify you if an extension is needed.

9. Cookies and Tracking Technologies

9.1 Types of Cookies We Use

bq678 uses cookies and similar tracking technologies to enhance your experience on our platform. The main categories of cookies we use are:

• Essential Cookies: Strictly necessary for the website to function. These cookies enable core features such as session management, secure login, shopping cart functionality, and load balancing. Essential cookies cannot be disabled as they are integral to platform operation.
• Analytics Cookies: Used to collect anonymized data about how users interact with bq678, including which pages are most visited, how long users stay, and which features are most popular. This data helps us improve the website and user experience.
• Preference Cookies: Store your settings and preferences such as language selection, timezone (Bangladesh Standard Time), display options, and previously entered form data to make your experience more convenient.
• Marketing Cookies: Used to track your visit across the bq678 website and other sites to deliver relevant advertising, measure campaign effectiveness, and prevent the same ads from being shown repeatedly.

9.2 Managing Cookie Preferences

You can control non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies stored on your device. Please note that disabling analytics, preference, or marketing cookies may affect the functionality and personalization of your bq678 experience. Essential cookies cannot be blocked without preventing access to core platform features.

10. Children's Privacy

bq678 Services are strictly intended for adults aged 21 years and older. We do not knowingly collect personal information from individuals under the age of 21. If we become aware that we have inadvertently collected data from a minor, we will immediately delete that information and close the associated account. If you believe a minor has created a bq678 account, please notify us immediately at [email protected] so we can investigate and take appropriate action.

11. International Data Transfers

bq678 operates internationally and your personal information may be transferred to, stored on, and processed by servers located in countries outside Bangladesh. These countries may have data protection laws that differ from those in your jurisdiction. When we transfer personal data internationally, we implement appropriate safeguards including standard contractual clauses approved by relevant data protection authorities, data processing agreements with all third-party processors, and encryption of data in transit and at rest to ensure your information receives an equivalent level of protection regardless of where it is processed.

12. Third-Party Links and Services

The bq678 website does not contain links to external third-party websites. All links and navigation within our platform direct you to bq678-owned pages. Game interfaces powered by external studios such as Pragmatic Play, Evolution Gaming, or Ezugi operate within our platform under separate end-user license agreements with those providers. bq678 is not responsible for the privacy practices of game software providers operating within embedded game frames. We encourage you to review the privacy policies of any third-party services you interact with separately.

13. Changes to This Privacy Policy

bq678 reserves the right to update, modify, or replace this Privacy Policy at any time in response to changes in applicable law, our data practices, or business operations. When material changes are made, we will notify you via email to the address on file with your account and post a prominent notice on the bq678 website for at least 30 days following the update. The revised Policy will indicate the new "Last Updated" date at the top of the document. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

14. Contact Us Regarding Privacy

If you have questions, concerns, or complaints about this Privacy Policy, our data handling practices, or how your personal information is being used, please contact our dedicated privacy team. We take all privacy inquiries seriously and aim to respond within five business days:

• Email: [email protected] (subject line: "Privacy Inquiry")
• Response Time: Within 5 business days for general inquiries; within 30 days for formal rights requests
• Support Hours: 24/7 English-language support available for all account and privacy matters