Your Privacy Matters at 167bd
Data Protection Policy

167bd ("we", "us", "our") operates the online casino and sports betting platform accessible at https://167bd.bet, serving registered adult players across Bangladesh. As a platform that handles personal and financial data, 167bd treats data privacy as a core operational responsibility — not merely a compliance formality.

This Privacy Policy sets out the legal basis on which we process your personal data, the categories of data we collect, how that data is used in connection with the provision of our gaming and betting services, the circumstances under which data may be shared with carefully selected third parties, and the rights you have as a data subject to access, correct, or delete information we hold about you.

The policy applies to all personal data collected via the 167bd website, mobile-optimised browser interface, live chat support system, and any associated communication channels including email and SMS. It does not apply to the privacy practices of third-party game providers, payment processors, or any external websites that may be linked to or from the 167bd platform — those entities operate under their own privacy policies, which we encourage you to review independently.

167bd collects personal data from you at several points throughout the lifecycle of your account — from initial registration through to ongoing account activity and, where applicable, account closure. The categories of personal data we collect are described below. We collect only the data that is genuinely necessary for the purposes stated in this policy; we do not collect data speculatively or beyond what is required to deliver our services safely and responsibly.

We do not knowingly collect sensitive personal data beyond what is strictly required for identity verification and anti-money laundering (AML) compliance. We do not collect biometric data, racial or ethnic origin data, political opinions, religious beliefs, or health data except where a player voluntarily discloses a health-related reason in the context of a responsible gaming self-exclusion request — in which case such information is handled with additional care and used solely to action the request.

167bd processes your personal data for specific, clearly defined purposes. We do not use your data for purposes that are incompatible with the original reason it was collected. The table below summarises our primary processing activities, the data categories involved, and the legal basis for each activity.

• Account Creation & Management: We use your identity and contact data to create and maintain your 167bd account, verify your eligibility to use the platform, and communicate account-related information such as password resets, security alerts, and transaction confirmations.
• Payment Processing: Your financial data is used to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard. This includes verifying that payment accounts are registered in your own name, as required by our anti-fraud and AML obligations.
• Identity Verification & KYC: We are required to verify the identity of all players before processing withdrawals and when prompted by our AML risk assessment systems. This involves processing identity documents and cross-referencing them with the information provided at registration.
• Responsible Gaming Monitoring: We analyse gaming and betting data to identify patterns that may indicate problematic gambling behaviour. This processing is carried out in the interest of player welfare and allows us to proactively offer responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion, as described further on our Responsible Gaming page.
• Promotional Communications: Where you have opted in to marketing, we use your contact data to send personalised bonus offers, promotional notifications related to BPL cricket, T20 World Cup markets, seasonal events (Eid, Pohela Boishakh), and new game launches from providers such as Pragmatic Play and Evolution Gaming. You may opt out of marketing at any time via your account settings or by contacting support.
• Fraud Prevention & Security: Technical data including IP addresses, device fingerprints, and session logs are used to detect and prevent unauthorised account access, fraud, collusion, bonus abuse, and use of automated software. This processing is essential to protect both individual players and the integrity of the platform.
• Platform Improvement: Aggregated and anonymised usage data is analysed to understand how players interact with the 167bd platform, identify technical issues, improve game load times, and optimise the user experience for players on Bangladeshi mobile networks and devices.
• Legal & Regulatory Compliance: We process and retain certain categories of data for as long as required by applicable legal and regulatory obligations, including AML record-keeping requirements, audit obligations, and the resolution of any legal disputes or regulatory inquiries.

167bd will never sell your personal data to any third party for their own marketing purposes. We will never use your gaming or betting history to make decisions about you that produce significant legal or similarly significant effects without human review — our responsible gaming monitoring systems flag accounts for human review rather than taking automated punitive action.

The 167bd platform uses cookies and similar tracking technologies to enhance your browsing experience, maintain your login session, and collect anonymised analytics data. A cookie is a small text file placed on your device by a website server. Cookies do not contain executable code and cannot access other files on your device.

167bd does not use third-party advertising cookies or behavioural tracking cookies that build cross-site profiles of your browsing activity. All analytics data collected by 167bd is processed internally and is not shared with advertising networks or data brokers.

You may manage cookie settings through your browser's built-in controls. Most modern browsers allow you to block or delete cookies, or to receive a notification before a cookie is stored. Please note that disabling strictly necessary cookies will prevent you from logging in to the 167bd platform. Disabling functional cookies may result in the loss of saved preferences. Disabling analytics and fraud detection cookies may limit our ability to deliver a secure and optimised experience.

167bd does not sell, rent, or trade your personal data. We share personal data with third parties only in the limited circumstances described below, and only to the extent strictly necessary for each stated purpose. All third parties with whom we share personal data are subject to contractual data processing agreements that require them to handle your data securely, in accordance with applicable privacy standards, and solely for the purposes for which it was shared.

• Payment Service Providers: When you make a deposit or request a withdrawal, your transaction data is shared with the relevant payment processor — bKash, Nagad, Rocket, Upay, or the applicable card network (Visa, Mastercard) — to execute the transaction. These providers operate under their own privacy frameworks and regulatory obligations. Only the data necessary to complete the specific transaction is transmitted.
• Game Providers: When you launch a game, your player session token and game-specific parameters are transmitted to the relevant game provider (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi) to initialise and operate the game. Game providers receive session identifiers and game parameters — they do not receive your full identity data, payment details, or contact information.
• Identity Verification Partners: To fulfil our KYC obligations, we may share identity document images and personal data with third-party identity verification service providers. These providers are subject to strict data processing agreements and are prohibited from using your data for any purpose other than the KYC check requested by 167bd.
• Fraud Prevention & AML Services: We may share technical and transactional data with specialist fraud prevention and anti-money laundering screening services. These checks help us protect our players and maintain the integrity of the platform. Data shared for these purposes is handled under strict confidentiality obligations.
• Legal & Regulatory Authorities: 167bd will disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies when required to do so by law, by court order, or by a legitimate regulatory request. In all such cases, we will disclose only the minimum data necessary to comply with the legal requirement.
• Customer Support Infrastructure: Our live chat and support ticketing system is operated with the assistance of a third-party customer support platform. Support agents who access your account data for the purpose of resolving a query do so under strict access controls and data handling policies. Support interactions are logged for quality assurance and dispute resolution purposes.

In the event that 167bd undergoes a corporate restructuring, merger, acquisition, or transfer of assets, your personal data may be transferred as part of that transaction. In any such scenario, the acquiring entity will be required to honour the commitments made in this Privacy Policy, or you will be notified of any material changes to data handling prior to them taking effect.

Protecting your personal data from unauthorised access, disclosure, alteration, or destruction is one of 167bd's most fundamental operational commitments. We implement a multi-layered security architecture that covers data in transit, data at rest, and human access controls throughout our technical infrastructure.

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the 167bd servers is encrypted using 256-bit SSL/TLS encryption. This ensures that your login credentials, payment information, and personal data cannot be intercepted by third parties during transmission. Look for the padlock symbol and "https://" in your browser address bar when using the platform.
• Encrypted Data Storage: Sensitive personal data — including identity documents, financial records, and authentication credentials — is stored in encrypted form. Passwords are never stored in plain text; they are hashed using industry-standard cryptographic algorithms before storage. Even in the unlikely event of a data breach, stored passwords would not be recoverable in readable form.
• Access Controls: Access to personal data within the 167bd organisation is strictly limited on a need-to-know basis. Staff access is governed by role-based permissions, and all access to sensitive data is logged and audited. Employees with access to personal data are subject to confidentiality obligations and regular data privacy training.
• Continuous Monitoring: 167bd's technical infrastructure is subject to continuous security monitoring. Our systems are designed to detect and alert on unusual access patterns, potential intrusion attempts, and anomalous data access events. Security reviews and vulnerability assessments are conducted on a regular basis.
• Breach Response: In the event of a personal data breach that poses a risk to affected individuals, 167bd will notify impacted players as soon as reasonably practicable after the breach is discovered and contained. Notifications will include a clear description of the nature of the breach, the categories of data affected, the steps already taken to mitigate harm, and the steps you can take to protect yourself.

As a data subject, you hold a number of rights over the personal data that 167bd processes about you. We are committed to respecting and facilitating these rights. Requests to exercise any of the rights described below may be submitted by contacting the 167bd support team via live chat or by emailing [email protected]. We will acknowledge your request within 48 hours and respond substantively within 10 business days.

• Right of Access: You have the right to request a copy of the personal data 167bd holds about you, along with information about how it is processed, the legal basis for processing, who it has been shared with, and how long it will be retained. We will provide this information in a clear and accessible format.
• Right to Rectification: If you believe that personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For routine contact detail changes (mobile number, address), this can be done directly from your account settings. For corrections to identity data, verification of the corrected information will be required.
• Right to Erasure ("Right to be Forgotten"): You have the right to request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (where processing was consent-based), or where you object to processing and there is no overriding legitimate interest for us to continue. This right is subject to legal retention obligations — we are required to retain certain financial and identity records for a minimum period after account closure.
• Right to Restriction of Processing: In certain circumstances, you have the right to request that we restrict the processing of your personal data — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed. During a restriction period, we may store your data but will not actively process it for other purposes.
• Right to Data Portability: Where processing is carried out on the basis of your consent or in the performance of a contract, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to have that data transmitted to another controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time — this is an absolute right that we will honour immediately upon receipt of your objection. You may also object to processing carried out on the basis of legitimate interests, though in some cases we may be able to demonstrate compelling grounds that override your objection.
• Right to Withdraw Marketing Consent: If you have opted in to promotional communications from 167bd, you may withdraw that consent at any time by updating your notification preferences in your account settings, or by contacting support. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal.

167bd retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal and regulatory obligations, and to resolve any disputes or enforce our agreements. When data is no longer needed for any of these purposes, it is securely deleted or anonymised so that it can no longer be associated with an individual player.

When a player requests voluntary account closure, 167bd will deactivate the account and cease all active processing of personal data for marketing and gaming purposes. However, the data categories listed above will be retained for their specified retention periods, as required by applicable legal and regulatory obligations. After the applicable retention period expires, data is permanently deleted from our live systems and any backup archives on the next scheduled purge cycle.

Data that has been anonymised — meaning it can no longer be linked back to any identifiable individual — is not subject to retention limits and may be retained indefinitely for aggregated statistical and research purposes. Anonymised data does not constitute personal data and falls outside the scope of this Privacy Policy.

167bd reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, new legal or regulatory requirements, changes to the services we offer, or improvements in our privacy standards. When we make changes to this policy, the updated version will be published on this page with a revised "Last Reviewed" date at the top of the document.

For material changes — those that significantly affect how we process your personal data, expand the categories of data we collect, introduce new purposes for processing, or alter your rights — we will notify registered players via the email address associated with their account, or via an in-platform notification displayed upon next login. The notification will summarise the nature of the change and direct you to the updated policy.

Minor changes — such as typographical corrections, formatting improvements, or clarifications that do not alter the substance of our data processing practices or your rights — may be made without specific notification. The "Last Reviewed" date will always reflect when any change, however minor, was last made to this document.

Your continued use of the 167bd platform following the publication of an updated Privacy Policy constitutes your acknowledgement that you have been informed of the update. If you do not agree with the changes made to this policy, you have the right to close your account and request erasure of your data, subject to the legal retention obligations described in Section 8.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 167bd handles your personal data, we encourage you to contact us in the first instance via our support team. Our privacy-related enquiries are handled by a dedicated team member who will respond with the care and detail these matters deserve.

You may reach us by the following means:

• Email: Send your privacy enquiry or data subject rights request to [email protected]. Please include your registered username, a description of your request or concern, and — for data subject rights requests — a brief description of the specific right you wish to exercise and the data categories involved. We will acknowledge your email within 48 hours and respond substantively within 10 business days.
• Live Chat: Our 24/7 live chat support is available directly on the 167bd platform for immediate assistance with general privacy questions, marketing opt-outs, and account data queries. For complex data subject rights requests or formal complaints, we recommend following up your live chat discussion with a written email to create a clear record of your request.

If you are not satisfied with our response to a privacy enquiry or data subject rights request, or if you believe that 167bd has processed your personal data in a manner inconsistent with this Privacy Policy or applicable data protection principles, you have the right to escalate your complaint through the appropriate legal channels available in your jurisdiction.

167bd treats all privacy complaints with the utmost seriousness. We are committed to resolving complaints fairly, transparently, and promptly. No player will be penalised, disadvantaged, or treated differently for exercising their privacy rights or submitting a complaint in good faith.