cd678 Privacy Policy

This Privacy Policy ("Policy") describes how cd678 ("we", "us", "our") collects, uses, stores, shares, and protects the personal data of players and visitors who use the cd678 platform at https://cd678.club. This Policy applies to all registered players, prospective players, and casual visitors, regardless of the device or network used to access the platform.

By registering an account or continuing to use the cd678 platform, you consent to the collection and processing of your personal data as described in this Policy. If you do not agree with this Policy, please do not register or use the platform. This Policy is incorporated by reference into the cd678 Terms and Conditions.

cd678 is committed to handling your data responsibly and in line with internationally recognised privacy principles. We collect only the data we genuinely need to provide our services, and we retain it only for as long as necessary. We take data security seriously and implement robust technical measures to protect your information at every stage of its lifecycle.

We collect different categories of personal data depending on how you interact with cd678. The table below summarises the main categories of data we collect and the primary reason for collecting each category.

cd678 uses the personal data it collects strictly for legitimate operational and compliance purposes. We do not use your data for any purpose that is inconsistent with the purposes listed below, and we do not permit our service providers to use your data for their own purposes beyond what is necessary to deliver the contracted service.

Each time cd678 processes your personal data, we do so on the basis of a recognised lawful ground. The principal legal bases on which we rely are set out below.

cd678 does not sell, rent, or trade your personal data to any third party for commercial gain. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

All third parties with whom cd678 shares personal data are contractually bound to use that data solely for the purposes described, to apply security standards equivalent to those cd678 applies, and to delete or return the data when the contracted service ends.

cd678 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your session security, and analyse platform performance. Cookies are small text files placed on your device by your browser when you visit the cd678 website.

We use four categories of cookies on the cd678 platform. You can control non-essential cookies through your browser settings, though disabling certain cookies may affect the functionality of the platform.

cd678 retains your personal data for as long as your account remains active and for as long as necessary to fulfil the purposes described in this Policy, including legal, regulatory, and compliance obligations. The minimum retention period for account and transaction records is five years from the date of account closure, in line with standard AML record-keeping requirements.

Once the applicable retention period has expired and there is no longer a legitimate legal or operational reason to hold your data, cd678 will securely delete or irreversibly anonymise it. Data that has been anonymised and can no longer be linked to an individual is not considered personal data and may be retained for statistical and analytical purposes.

cd678 implements a layered approach to data security. All data transmitted between your device and the cd678 platform is protected by 256-bit SSL/TLS encryption. All stored account and financial data is encrypted at rest using industry-standard AES-256 encryption. Access to personal data within cd678's internal systems is restricted on a strict need-to-know basis, and all staff with data access undergo security training.

Despite these measures, no internet-based system can guarantee absolute security. In the unlikely event of a data breach that affects your personal data, cd678 will notify affected players promptly and take all reasonable steps to contain and remedy the breach. If you believe your account has been compromised, contact [email protected] immediately.

As a registered player on cd678, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected]. We will respond to all verified requests within 30 calendar days.

cd678 treats payment data with the highest level of protection. Mobile wallet identifiers (bKash, Nagad, Rocket, Upay) and bank account details are stored in encrypted form and are accessible only to the payment processing team for the purposes of processing withdrawals and investigating disputed transactions. cd678 does not store full card numbers for Visa or Mastercard transactions; card data is handled exclusively by the PCI-DSS compliant payment gateway.

Financial transaction records are retained for a minimum of five years from the date of each transaction in accordance with standard AML record-keeping obligations. These records may be disclosed to the Bangladesh Financial Intelligence Unit (BFIU) or other regulatory authorities upon lawful request.

cd678 may send you promotional communications about bonuses, game launches, seasonal promotions, and platform news via your registered email address or mobile number — but only where you have given explicit consent at registration or subsequently opted in through your account settings. Marketing communications are never sent as a condition of using the platform.

You may opt out of all marketing communications at any time by contacting [email protected] with the subject line "Unsubscribe", or by using the unsubscribe link present in any marketing email. Opting out of marketing will not affect your ability to receive transactional communications such as withdrawal confirmations and security alerts, which are sent on the basis of contract performance rather than consent.

The cd678 platform may contain references to third-party game providers, payment services, and other external services. cd678 is not responsible for the privacy practices of any third-party website or service. Each third-party provider operates under its own privacy policy. We encourage you to review the privacy policies of any third-party services you use in connection with your cd678 account. cd678 does not endorse or take responsibility for the content or privacy practices of any linked third-party service.

cd678 does not knowingly collect or process the personal data of any individual under the age of 21. The platform is designed exclusively for adults aged 21 and above. During registration, players are required to declare that they meet the minimum age requirement and to submit identity documents confirming their date of birth during KYC verification.

cd678 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the services we offer. The date of the most recent revision is displayed at the top of this page. Where a material change is made to this Policy, we will notify registered players via platform notification or email before the change takes effect.

Your continued use of cd678 after any update to this Policy constitutes acceptance of the revised terms. If you do not accept the revised Policy, you should stop using the platform and may request account closure by contacting [email protected].

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how cd678 handles your personal data, please contact our support team using the details below. We take all privacy concerns seriously and aim to respond to all queries within 30 calendar days.