768bt Privacy
Policy & Data Protection

This Privacy Policy is issued by 768bt ("768bt", "we", "us", "our"), the operator of the online betting and casino platform accessible at https://768bt.io and all associated subdomains and mobile interfaces. 768bt acts as the data controller in respect of all personal data collected through the platform, meaning we are the party responsible for determining the purposes and means of processing your personal information.

Our platform is designed and operated specifically for adult players (aged 21 and over) located in Bangladesh. All customer-facing content, support communications, and account management services are delivered in English. If you have any questions about this Privacy Policy or about how 768bt handles your personal data, you may contact our data team at any time using the details provided in Section 12 of this document.

768bt collects personal data from you at several points during your relationship with the platform. The categories of data we collect, and the circumstances in which we collect them, are set out in the table below.

We collect personal data directly from you (when you fill in registration forms, make deposits, or contact support), automatically (via cookies and server logs when you visit the site), and from third parties (identity verification providers and payment processors who confirm the accuracy of information you have provided to us).

768bt uses the personal data it collects for clearly defined purposes. We do not use your data for any purpose that is incompatible with the purposes described in this section. The primary purposes for which we process your personal data are as follows:

• Account creation and management: To register your 768bt account, verify your identity and age (21+), maintain your account profile, and process any account closure or self-exclusion requests.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other supported payment methods; to reconcile transaction records; and to prevent payment fraud.
• Platform delivery: To make sports betting markets, live casino tables, slot games, crash games, and all other 768bt products available to your account and to record the outcomes of all gaming activity.
• Regulatory compliance: To meet anti-money-laundering (AML) and know-your-customer (KYC) obligations, including customer due diligence, enhanced due diligence for high-value accounts, and transaction monitoring for suspicious activity.
• Responsible gaming: To monitor gaming behaviour for indicators of problem gambling, to enforce deposit limits, session time limits, and self-exclusion requests, and to communicate proactively with players who show signs of gambling harm.
• Customer support: To respond to enquiries, resolve disputes, process complaints, and deliver technical assistance via live chat, email, and other support channels.
• Personalisation and marketing: To deliver bonus offers, promotional emails, and platform notifications that are relevant to your gaming preferences and account status — but only where you have provided your consent or where we have a legitimate interest in doing so.
• Platform security and fraud prevention: To detect and prevent unauthorised account access, bonus abuse, collusion, money laundering, and other fraudulent or prohibited activity on the platform.
• Analytics and improvement: To analyse aggregated, anonymised usage data to understand how players interact with the platform and to improve our products, user interface, and customer experience.

768bt processes your personal data only where a valid legal basis exists for doing so. The legal bases we rely on are as follows:

• Contractual necessity: Processing that is necessary to perform the contract between you and 768bt — specifically, to operate your account, accept your deposits, settle your bets, and pay your winnings. Without this processing, we cannot provide you with our services.
• Legal obligation: Processing that is required to comply with applicable laws and regulations, including anti-money-laundering legislation, age verification requirements, and financial record-keeping obligations.
• Legitimate interests: Processing that is necessary for our legitimate business interests or those of a third party, provided those interests are not overridden by your rights and freedoms. This includes fraud prevention, platform security, responsible gaming monitoring, and analytics.
• Consent: Processing that is based on your explicit, freely given, and informed consent. This applies primarily to direct marketing communications. You may withdraw your consent to marketing communications at any time by updating your preferences in your account dashboard or by contacting [email protected].

768bt does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share your personal data only in the limited circumstances described below, and only to the extent necessary for the specified purpose.

• Payment processors: We share transaction data with payment service providers (including bKash, Nagad, Rocket, Upay, and card network processors) solely for the purpose of processing your deposits and withdrawals. These providers are bound by their own data protection obligations and may not use your data for any other purpose.
• Identity verification providers: We share identity and document data with third-party KYC verification services to confirm your age, identity, and address as part of our mandatory verification process. These providers process data on our behalf under strict data processing agreements.
• Game software providers: When you play games supplied by third-party studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), a unique player identifier and session token may be shared with the relevant provider to load and operate the game. No contact details or financial data are shared with game providers.
• Fraud and security partners: We may share technical data (IP address, device fingerprint, behavioural data) with specialist fraud prevention services to protect the platform and its players from fraudulent activity.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by applicable law, court order, or in connection with the investigation of suspected money laundering, fraud, or other criminal activity.
• Business transfers: In the event that 768bt undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified via email and/or a prominent notice on the platform before your data becomes subject to a different privacy policy.

Given the 768bt platform's primary focus on the Bangladeshi market, the majority of player transactions are processed via mobile financial services — most commonly bKash, Nagad, Rocket (Dutch-Bangla Bank), and Upay. The handling of payment data associated with these services warrants specific explanation.

When you make a deposit or withdrawal using bKash or Nagad, you interact directly with the payment provider's interface or USSD system to authorise the transaction. 768bt receives a transaction confirmation reference from the payment provider, along with the sender's mobile number (partially masked) and the transaction amount in BDT. We do not receive or store your bKash or Nagad PIN, your full mobile banking password, or any authentication credentials associated with your mobile financial service account.

• bKash account numbers associated with your 768bt account are stored in encrypted form in our database.
• Withdrawals to bKash or Nagad are processed only to the mobile number registered to your 768bt account, consistent with our anti-money-laundering obligations.
• For card payments (Visa, Mastercard), full card numbers are never stored on 768bt servers. Card data is tokenised by our payment processing partner at the point of entry. 768bt retains only the masked card number (last four digits) and card type for display in your account dashboard.

768bt uses cookies and similar tracking technologies (including local storage objects and session tokens) to operate and improve the platform. Cookies are small text files placed on your device by your web browser when you visit the 768bt website. They allow the platform to recognise your device, maintain your logged-in session, remember your preferences, and collect anonymous usage statistics.

The categories of cookies used by 768bt are as follows:

• Strictly necessary cookies: These cookies are essential for the platform to function correctly. They maintain your login session, protect against cross-site request forgery (CSRF), and ensure that game sessions load correctly. These cookies cannot be disabled without preventing the platform from functioning.
• Performance and analytics cookies: These cookies collect anonymous, aggregated information about how visitors use the 768bt website — for example, which pages are visited most frequently and whether error messages are encountered. This data is used to improve platform performance and user experience.
• Functionality cookies: These cookies remember your account preferences — such as your chosen display language (English), your last-visited game lobby, and any responsible gaming settings you have configured — so that you do not need to re-enter them each time you visit.
• Marketing and retargeting cookies: Where you have provided consent, these cookies may be used to deliver relevant promotional content to you on the 768bt platform or, in limited circumstances, on third-party advertising networks. You may withdraw consent for marketing cookies at any time via your account privacy settings.

You may also manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the 768bt platform and may prevent you from logging in or completing transactions.

768bt retains personal data only for as long as it is necessary for the purposes set out in this Privacy Policy, or as required by applicable law. The retention periods we apply to different categories of data are summarised below.

Upon expiry of the relevant retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

As a player on the 768bt platform, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us in writing at [email protected] with the subject line "Data Rights Request" and your registered account username.

• Right of access: You have the right to request a copy of the personal data that 768bt holds about you, together with information about how it is being processed. We will respond to access requests within 30 days of receipt.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. Please note that updating identity data may require you to submit fresh verification documents.
• Right to erasure ("right to be forgotten"): In certain circumstances, you may request that 768bt delete the personal data we hold about you. This right is subject to our legal retention obligations — for example, we are required to retain AML and transaction records for five years and therefore cannot delete them on request during that period.
• Right to restriction of processing: In certain circumstances, you may request that 768bt restrict the processing of your personal data — for example, while a dispute about data accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive a copy of the personal data you have provided to us in a structured, machine-readable format (e.g., CSV).
• Right to object: Where processing is based on our legitimate interests, you have the right to object to that processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

768bt takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, and destruction. Our primary security measures include the following:

• SSL/TLS encryption in transit: All data transmitted between your browser or device and the 768bt platform is encrypted using TLS 1.2 or TLS 1.3. The padlock icon displayed in your browser's address bar confirms that your connection to 768bt is encrypted.
• Encryption at rest: Sensitive personal data stored in our databases — including identity documents, financial account references, and authentication credentials — is encrypted at rest using industry-standard AES-256 encryption.
• Access controls: Access to personal data held by 768bt is restricted to authorised personnel who require it to perform their job functions. All staff with access to personal data undergo data protection training and are bound by confidentiality obligations.
• Two-factor authentication: Players are encouraged to enable two-factor authentication (2FA) on their 768bt accounts for an additional layer of login security. Internal 768bt systems handling sensitive data require 2FA for all staff access.
• Penetration testing: The 768bt platform undergoes periodic independent security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a data breach that is likely to result in a risk to your rights and freedoms, 768bt will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.

768bt operates exclusively for adults aged 21 and above. We do not knowingly collect, process, or retain personal data from any individual under the age of 21. Registration on the platform requires the submission of a date of birth and, where required, a government-issued identity document. Any account found to belong to a person under 21 years of age will be immediately suspended, all associated balances will be forfeited in accordance with our Terms & Conditions, and all personal data associated with that account will be securely deleted as soon as practicable.

If you are a parent or guardian and you believe that a minor under your care has registered an account on the 768bt platform, please contact us immediately at [email protected] with the subject line "Minor Account Report". We will investigate the matter promptly and take all appropriate action, including account closure and data deletion.

768bt reserves the right to update, amend, or replace this Privacy Policy at any time. When we make material changes to this Policy, we will notify registered players by email and/or by posting a prominent notice on the platform homepage at least 14 days before the changes take effect. The "Last Updated" date at the top of this document will always reflect the date on which the most recent version of the Policy came into force.

Your continued use of the 768bt platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to this Policy, you should stop using the platform and contact us to close your account before the changes take effect.

If you have any questions, concerns, or complaints relating to this Privacy Policy or to the way in which 768bt processes your personal data, please contact our data protection team using the details below. We aim to resolve all privacy-related enquiries in a timely and satisfactory manner.

• Data enquiries email: [email protected] (subject line: "Privacy Enquiry")
• Support availability: 24 hours a day, 7 days a week, in English
• Response time: Within 5 business days (Bangladesh Standard Time, UTC+6)