678com Privacy Policy

1 Data Controller

678com operates as the data controller for all personal information collected through the https://678com.bet website and its associated services. As data controller, 678com determines the purposes and means of processing your personal data and is responsible for ensuring that such processing meets the standards described in this Policy. For any privacy-related enquiry or request, please contact our dedicated support team at [email protected].

2 Personal Data We Collect

678com collects personal data through several channels: directly from you when you register, deposit funds, contact support, or respond to promotions; automatically through your use of the platform; and, in limited circumstances, from trusted third-party verification partners. The categories of personal data we collect include:

• Identity Data: Full legal name, date of birth, gender, and a copy of government-issued photo identification (e.g., National ID Card, passport, or driving licence) when requested for verification.
• Contact Data: Email address, mobile phone number, and residential address including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi) and postcode.
• Financial Data: Mobile wallet identifiers (bKash, Nagad, Rocket, Upay), bank account details where applicable, deposit history, withdrawal records, and transaction amounts in BDT.
• Account Data: Username, encrypted password hash, account registration date, account status, and communication preferences.
• Technical Data: IP address, device type and model, operating system version, browser type and version, session duration, and geolocation data (country and region level only).
• Usage Data: Game history, bet amounts, wagering patterns, pages visited, features used, time spent on platform, and interaction logs.
• Marketing Data: Communication preferences, promotion participation history, and responses to bonus offers.

We do not intentionally collect any special-category personal data (such as health, religious belief, or biometric data) unless specifically required by applicable law or for responsible gaming purposes at your request.

3 How We Use Your Personal Data

678com processes your personal data only for the following clearly defined purposes, each supported by a lawful basis:

4 Cookies and Tracking Technologies

678com uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage objects) to operate and improve the platform. Cookies allow us to remember your session preferences, maintain your login state, measure site performance, and present personalised content. We use the following categories of cookies:

• Strictly Necessary Cookies: Required for core platform functions such as session management and security. These cannot be disabled without breaking the service.
• Functional Cookies: Remember your language preferences, game display settings, and previously selected deposit methods to improve your experience.
• Analytics Cookies: Collect aggregated, anonymised data on page visits, session duration, and feature usage to help us understand how players engage with 678com.
• Marketing Cookies: Used with your consent to deliver relevant promotional communications and measure the effectiveness of our campaigns.

You may manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may impact platform functionality. Continued use of the 678com website constitutes acceptance of strictly necessary cookies.

5 Sharing Your Personal Data

678com does not sell, rent, or trade your personal data. We may share your information with the following categories of recipients strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other financial institutions, solely to facilitate deposits and withdrawals.
• Identity Verification Partners: Third-party KYC service providers engaged to confirm player identity and comply with anti-money-laundering requirements.
• Game Content Providers: Certified game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session tokens and anonymised play data necessary to deliver their game content.
• Technology and Infrastructure Providers: Hosting, cloud storage, and security vendors who process data on our behalf under strict data processing agreements.
• Legal and Regulatory Authorities: We will disclose personal data to law enforcement, regulatory bodies, or courts when required to do so by applicable law or a valid legal order.

All third parties who process data on behalf of 678com are bound by contractual obligations that require them to handle your personal data securely, use it only for the specified purpose, and not retain it longer than necessary.

6 Data Retention

678com retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account and identity data: retained for the duration of your account plus a minimum of 5 years following account closure, to comply with anti-money-laundering regulations.
• Transaction and financial records: retained for a minimum of 5 years from the date of each transaction.
• Customer support communications: retained for 2 years from the date of the last interaction.
• Technical and usage logs: retained for up to 12 months in identifiable form, then anonymised or deleted.
• Marketing preference records: retained until you withdraw consent or request deletion, whichever is sooner.

When personal data is no longer required and retention obligations have been satisfied, 678com will securely delete or anonymise that data in accordance with our internal data disposal procedures.

7 Your Rights

As a data subject, you hold the following rights with respect to your personal data processed by 678com. To exercise any of these rights, please send a written request to [email protected]. We will respond within a reasonable timeframe:

• Right of Access: You may request a copy of all personal data we hold about you and information about how it is being processed.
• Right to Rectification: If any data we hold is inaccurate or incomplete, you may request that we correct or update it without undue delay.
• Right to Erasure: Subject to our legal retention obligations, you may request deletion of your personal data. We will assess each request carefully and notify you of the outcome.
• Right to Restriction: You may request that we restrict processing of your data while a dispute about its accuracy or lawfulness is under review.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including direct marketing communications.
• Right to Data Portability: Where technically feasible, you may request your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

8 Security Measures

678com employs a layered approach to information security. Technical measures include 256-bit TLS/SSL encryption for all data in transit, AES-256 encryption for sensitive data at rest, firewall protection, intrusion detection systems, and multi-factor authentication for administrative access. Organisational measures include staff access controls on a strict need-to-know basis, regular security awareness training, documented incident response procedures, and periodic external security audits.

While 678com takes all reasonable precautions to protect your personal data, no digital system is completely immune to risk. You are also responsible for maintaining the security of your own account credentials. If you suspect any unauthorised activity on your account, contact [email protected] immediately.

9 Children and Minors

678com is strictly an adult gaming platform intended for individuals aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. If we discover that personal data has been submitted by a minor, we will immediately suspend the associated account and delete all related data. If you have reason to believe that a person under 21 has registered on our platform, please notify us at [email protected] without delay.

10 Third-Party Links

The 678com website does not contain links to external third-party websites. All navigational links within the platform direct you to pages within the 678com domain. This Policy applies exclusively to personal data processed by 678com. We are not responsible for the privacy practices of any external organisation.

11 Changes to This Policy

678com reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, we will update the "Last Updated" date at the top of this page and, where the changes significantly affect how we use your data, notify you directly via the email address registered to your 678com account. We encourage you to review this Policy periodically. Your continued use of the platform following the publication of an updated Policy constitutes your acknowledgement of the revised terms.

12 Contact and Complaints

For any questions, concerns, or requests relating to this Privacy Policy or our data processing practices, please contact the 678com privacy team at [email protected]. We are committed to addressing all enquiries promptly and fairly. If you are not satisfied with our response, you may seek independent advice or submit a complaint through any applicable dispute resolution mechanism available in your jurisdiction. All correspondence should be in English to ensure the fastest possible response from our team.