678bbd Privacy Policy

01 Data We Collect

---

678bbd collects personal data in two primary ways: information you provide directly when registering and using the platform, and data we collect automatically when you interact with our website and services. We collect only the data that is necessary to deliver a secure, compliant, and high-quality gaming experience to players in Bangladesh.

Information You Provide Directly

• Registration Data: Full name, date of birth, email address, mobile phone number, and residential address. This information is required to create and verify your 678bbd account.
• Identity Verification (KYC) Documents: National Identity Card (NID), passport, driving licence, utility bills, and bank or mobile wallet statements. These are collected as part of our Know Your Customer process to verify your identity and comply with anti-money laundering obligations.
• Payment Information: Mobile wallet account numbers (bKash, Nagad, Rocket, Upay) and bank account details used for deposits and withdrawals. We do not store full card numbers — card payments via Visa or Mastercard are processed through our encrypted payment gateway partners.
• Communications: Any messages, queries, or complaints you send to our support team via email or live chat, including the content of those communications and the timestamps associated with them.
• Responsible Gaming Preferences: Deposit limits, session time limits, cool-off periods, and self-exclusion requests that you configure through your account settings.

Data Collected Automatically

• Device and Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage and Behavioural Data: Pages visited, games played, bets placed, session duration, click patterns, and navigation paths through the 678bbd platform.
• Transaction Data: A complete record of all deposits, withdrawals, bonus claims, wagers, and game results associated with your account.
• Geolocation Data: Approximate location derived from your IP address, used to verify that you are accessing the platform from a permitted region.
• Cookie and Tracking Data: See the Cookies & Tracking section below for full details.

Data Category	Collection Method	Retention Period
Registration & Identity	Direct input at registration	5 years post account closure
KYC Documents	Document upload (KYC process)	5 years post account closure
Payment Records	Automatic (transaction system)	7 years (financial compliance)
Device & Technical	Automatic (server logs)	12 months rolling
Usage & Behavioural	Automatic (analytics)	24 months rolling
Support Communications	Direct (email / chat)	3 years post last interaction

02 How We Use Your Data

---

678bbd processes your personal data only for specific, legitimate purposes. We do not process data in ways that are incompatible with the purpose for which it was originally collected. Below is a clear account of every purpose for which we use your data, together with the legal basis on which that processing is carried out.

• Account Management: To create, maintain, and administer your 678bbd player account, including processing your registration and verifying your identity. Legal basis: contractual necessity.
• Transaction Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods. Legal basis: contractual necessity.
• Fraud Prevention and AML Compliance: To detect and prevent fraudulent activity, money laundering, and other financial crimes. Legal basis: legal obligation and legitimate interest.
• Regulatory Compliance: To fulfil our obligations under applicable laws relating to online gaming, financial crime prevention, and data protection. Legal basis: legal obligation.
• Platform Improvement: To analyse usage patterns and improve the performance, design, and features of the 678bbd platform. Legal basis: legitimate interest.
• Customer Support: To respond to queries, complaints, and support requests submitted by players. Legal basis: contractual necessity and legitimate interest.
• Responsible Gaming: To monitor gaming behaviour and intervene proactively where patterns suggest a player may be experiencing gambling-related harm. Legal basis: legitimate interest and legal obligation.
• Marketing Communications: To send promotional offers, bonus notifications, and event updates to players who have opted in to receive marketing communications. Legal basis: consent. You may withdraw consent at any time by contacting our support team.
• Security Monitoring: To protect the integrity of the platform and the security of all players' accounts, including detecting unauthorised access attempts. Legal basis: legitimate interest.

03 Data Sharing

---

678bbd does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for each purpose.

Service Providers

We engage third-party service providers who process data on our behalf in order to deliver the 678bbd platform and its associated services. These include payment processing partners (bKash, Nagad, Rocket, Upay, and card payment gateway providers), identity verification service providers, cloud hosting and infrastructure providers, customer support platform operators, and analytics service providers. All service providers are bound by data processing agreements that prohibit them from using your data for any purpose other than providing the contracted service.

Game Content Providers

The 678bbd game lobby is powered by licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe. These providers may receive limited session and account data necessary to authenticate your access to their games and to record game outcomes accurately. They do not receive your full personal profile or payment details.

Legal and Regulatory Disclosure

678bbd may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities where we are required to do so by applicable law, court order, or regulatory direction. We will notify you of any such disclosure where we are legally permitted to do so.

04 Cookies & Tracking

---

The 678bbd platform uses cookies and similar tracking technologies to deliver core functionality, improve platform performance, and understand how players use our services. A cookie is a small text file stored on your device by your browser when you visit a website. Cookies cannot execute programs or deliver viruses to your device.

Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the platform to function correctly. They enable you to log in, maintain your session while navigating between pages, and use core features such as the game lobby and cashier. These cookies cannot be disabled without breaking core platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised information about how players use the platform — for example, which pages are visited most frequently and whether any error messages are received. This information helps us improve the platform experience. All data collected by these cookies is aggregated and does not personally identify any individual player.
• Functional Cookies: These cookies allow the platform to remember choices you have made — such as your preferred language, display settings, or responsible gaming limit configurations — so you do not need to re-enter them on every visit.
• Security Cookies: These cookies support our fraud detection and account security systems by helping us identify unusual login activity or suspicious behavioural patterns.

You can control cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to use key platform features. For full details on managing cookies in your specific browser, please refer to your browser's help documentation.

05 Data Security

---

678bbd takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your information against unauthorised access, loss, alteration, or disclosure. Our key security measures include:

• SSL Encryption: All data transmitted between your device and the 678bbd platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Look for the padlock icon in your browser address bar when accessing 678bbd.net.
• Data Encryption at Rest: Sensitive personal data stored in our systems — including KYC documents, payment details, and account credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within 678bbd's internal systems is restricted on a strict need-to-know basis. Staff with access to player data undergo regular security training and are bound by confidentiality obligations.
• Regular Security Audits: Our platform and infrastructure undergo periodic security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Two-Factor Authentication: Players are strongly encouraged to enable two-factor authentication (2FA) on their 678bbd accounts to provide an additional layer of protection against unauthorised access.

06 Your Privacy Rights

---

As a player on the 678bbd platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with your account details and a description of the right you wish to exercise. We will respond within a reasonable timeframe and in accordance with applicable data protection law.

• Right of Access: You have the right to request a copy of the personal data that 678bbd holds about you. We will provide this in a structured, commonly used, and machine-readable format where technically feasible.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You can update most account details directly through your account profile settings.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. Note that this right is subject to our legal obligations — we may be required to retain certain data (such as financial records) for a minimum statutory period regardless of a deletion request.
• Right to Restrict Processing: You may request that we pause or restrict the processing of your personal data in certain circumstances, for example while a dispute about the accuracy of that data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contractual necessity, you have the right to receive your data in a portable format and to request that it be transferred directly to another service provider where technically feasible.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interest — including profiling for marketing purposes. You may also withdraw consent for marketing communications at any time.
• Right Not to Be Subject to Automated Decisions: You have the right not to be subject to decisions that produce significant effects on you based solely on automated processing. See the automated decision-making note in the How We Use Your Data section above.

07 Data Retention

---

678bbd retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our standard retention periods are summarised in the data table in the Data We Collect section above. The following principles govern our retention decisions:

• Account and identity data is retained for a minimum of five years following permanent account closure to enable us to respond to any regulatory enquiries or legal proceedings that may arise after closure.
• Financial transaction records are retained for a minimum of seven years to comply with anti-money laundering regulations and financial record-keeping obligations.
• Technical and server log data is retained on a rolling 12-month basis and is automatically purged thereafter.
• Marketing consent records are retained for as long as you remain subscribed and for a reasonable period after withdrawal of consent to demonstrate compliance with our consent obligations.

When personal data is no longer required for any lawful purpose, 678bbd will securely delete or anonymise it. Anonymised data (from which it is not possible to identify any individual) may be retained indefinitely for statistical and platform improvement purposes.

08 Policy Updates

---

678bbd reviews this Privacy Policy regularly and may update it from time to time to reflect changes in our data practices, applicable law, or the features and services we offer. When we make material changes to this Policy, we will notify registered players via the email address associated with their account and will display a prominent notice on the platform for a reasonable period following the update.

The "Effective Date" shown at the top of this Policy indicates when the current version came into force. We encourage you to review this Policy periodically to stay informed about how we protect your personal data. Your continued use of the 678bbd platform following notification of any changes constitutes your acceptance of the updated Policy.

Document Version: PP-2026-01  |  Effective Date: January 2026  |  Last Reviewed: January 2026