678 Privacy Policy — Your Data, Protected

1 Who We Are

678 is an online betting and casino gaming platform operating at 678-678.com, built specifically for players in Bangladesh. When this Privacy Policy refers to "678", "we", "us", or "our", it means the 678 platform and the team responsible for operating it.

678 acts as the data controller for all personal information collected through the platform. This means we are responsible for deciding how and why your data is processed, and we are accountable for keeping it safe.

If you have any questions about how 678 handles your personal data, you can contact us at any time at [email protected]. Our support team is available 24 hours a day, 7 days a week.

2 Data We Collect

678 collects personal data in several ways — directly from you when you register or use the platform, automatically as you interact with the site, and from third parties such as payment processors. Here is a breakdown of the categories of data we collect:

3 How We Use Your Data

678 uses the personal data we collect for the following purposes:

• Account management — to create, maintain, and secure your 678 account.
• Identity verification — to confirm your age and identity as required by our operating standards.
• Payment processing — to handle deposits and withdrawals via bKash, Nagad, and Rocket.
• Customer support — to respond to your queries, complaints, and requests.
• Platform improvement — to analyse how players use 678 and improve the experience over time.
• Fraud prevention — to detect and prevent fraudulent activity, money laundering, and abuse of the platform.
• Responsible gaming — to monitor for signs of problem gambling and apply protective measures where needed.
• Legal compliance — to meet our obligations under applicable laws and regulations.
• Communications — to send you important account notifications, security alerts, and, where you have opted in, promotional messages.

678 will never use your personal data for purposes that are incompatible with those listed above without first obtaining your consent.

4 Legal Basis for Processing

678 processes your personal data on one or more of the following legal grounds:

• Contract performance — processing is necessary to provide the 678 service you have signed up for.
• Legal obligation — processing is required to comply with applicable laws, including anti-money laundering and age verification requirements.
• Legitimate interests — processing is necessary for 678's legitimate business interests, such as fraud prevention and platform security, provided those interests are not overridden by your rights.
• Consent — where you have given us explicit permission to process your data for a specific purpose, such as receiving marketing communications.

5 Data Sharing

678 does not sell your personal data. We share your data only in the following limited circumstances:

• Payment processors — we share necessary financial data with bKash, Nagad, and Rocket to process your transactions. These providers are bound by their own privacy obligations.
• Identity verification providers — we may share identity documents with third-party verification services to confirm your age and identity.
• Technology providers — we work with hosting, analytics, and security providers who may process data on our behalf under strict data processing agreements.
• Law enforcement and regulators — we will disclose personal data to authorities where required by law, court order, or regulatory obligation.
• Business transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity, subject to the same privacy protections.

All third parties who receive your data from 678 are required to handle it securely and in accordance with applicable privacy standards. 678 does not permit third parties to use your data for their own marketing purposes.

6 Cookies and Tracking

678 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and understand how players interact with the site. Cookies are small text files stored on your device when you visit 678.

We use the following types of cookies:

• Essential cookies — required for the platform to function. These cannot be disabled without breaking core features such as login and session management.
• Analytics cookies — help us understand how players navigate 678 so we can improve the experience. Data collected is aggregated and anonymised where possible.
• Preference cookies — remember your settings and choices, such as language preferences and display options.
• Security cookies — used to detect and prevent fraudulent activity and protect your account.

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the 678 platform.

7 Data Retention

678 retains your personal data only for as long as it is necessary for the purposes described in this policy, or as required by applicable law. The following general retention periods apply:

• Account data — retained for the duration of your account and for a period after closure as required by law.
• Transaction records — retained for a minimum of five years to comply with financial regulations and anti-money laundering requirements.
• Identity verification documents — retained for the period required by applicable regulations, typically five years from account closure.
• Support communications — retained for up to two years from the date of the last interaction.
• Analytics data — retained in anonymised form for platform improvement purposes.

When data is no longer needed, 678 will securely delete or anonymise it so that it can no longer be linked back to you.

8 Your Privacy Rights

As a 678 player, you have the following rights over your personal data. To exercise any of these rights, contact us at [email protected]:

• Right of access — you can request a copy of the personal data 678 holds about you.
• Right to rectification — you can ask us to correct any inaccurate or incomplete data we hold.
• Right to erasure — you can request that we delete your personal data, subject to legal retention requirements.
• Right to restrict processing — you can ask us to limit how we use your data in certain circumstances.
• Right to data portability — you can request your data in a structured, machine-readable format.
• Right to object — you can object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent — where processing is based on consent, you can withdraw it at any time.

9 Data Security

678 takes the security of your personal data seriously. We have implemented a range of technical and organisational measures to protect your information against unauthorised access, loss, destruction, or alteration.

• All data in transit is protected by TLS (Transport Layer Security) encryption.
• Stored data is encrypted using AES-256 or equivalent standards.
• Access to personal data within 678 is restricted on a need-to-know basis and is subject to access controls and audit logging.
• Our systems are regularly tested for vulnerabilities and updated to address security risks.
• Staff who handle personal data receive regular training on data protection and security practices.

Despite these measures, no online platform can guarantee absolute security. If you believe your 678 account has been compromised, contact our support team immediately at [email protected] so we can take action to protect your account.

In the event of a data breach that is likely to affect your rights, 678 will notify you without undue delay and will take all necessary steps to contain and remediate the breach.

10 Children's Privacy

The 678 platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe that a minor has registered on the 678 platform, please contact us immediately at [email protected].

Upon receiving such a report, 678 will investigate promptly and, if confirmed, will close the account and delete all associated personal data as quickly as possible. Any funds held in an underage account will not be paid out.

11 Changes to This Policy

678 may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make changes, we will update the "last updated" date at the top of this page.

For significant changes that materially affect how we use your personal data, 678 will notify registered players via email or an in-platform notification before the changes take effect. We encourage you to review this policy periodically to stay informed about how 678 protects your privacy.

Your continued use of the 678 platform after any update to this policy constitutes your acknowledgement of the revised version.

12 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 678 handles your personal data, please get in touch with our team:

• Email: [email protected]
• Support hours: 24 hours a day, 7 days a week
• Response time: Most queries are handled within a few hours

For questions about your account or responsible gaming tools, you can also visit our FAQ page or our Responsible Gaming page. For the full platform rules, see our Terms and Conditions.