678b Privacy Policy – How We Collect, Use, and Protect Your Personal Data

Introduction

This Privacy Policy ("Policy") describes how 678b ("we", "us", "our", or "the Platform") collects, uses, stores, discloses, and otherwise processes personal data relating to individuals ("you", "your", or "the Player") who access or use the 678b website at https://678b.im and all associated services, features, and content.

678b is committed to handling personal data responsibly and in a manner consistent with internationally recognised data protection principles. By registering a 678b account or continuing to use the platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

Data Controller

For the purposes of this Privacy Policy, 678b acts as the data controller in respect of the personal data collected from players who access the platform. As data controller, 678b determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

If you have any questions or concerns regarding how 678b processes your personal data, you may contact our designated data protection contact via email at [email protected]. All data-related enquiries are handled in English and will receive a substantive response within seven (7) business days.

Personal Data We Collect

3.1 Data Provided Directly by You

When you register a 678b account, interact with our support team, complete identity verification, or use any feature of the platform, you may provide us with the following categories of personal data:

• Identity data: Full legal name, date of birth, gender, and government-issued identification number (National ID, passport, or driving licence number)
• Contact data: Email address, mobile phone number, and residential address (including city and district within Bangladesh)
• Verification documents: Scanned copies or photographs of government-issued ID, proof of address, and proof of payment method ownership submitted during KYC review
• Financial data: Mobile banking account identifiers associated with bKash, Nagad, Rocket, or Upay; bank account details for supported Bangladeshi banks; transaction history and deposit/withdrawal records
• Account credentials: Username and encrypted password (passwords are stored using one-way hashing; 678b staff cannot access plain-text passwords)
• Communications data: Records of correspondence between you and the 678b support team, including email, live chat transcripts, and any feedback or complaints submitted

3.2 Data Collected Automatically

When you access and use the 678b platform, certain technical and behavioural data is collected automatically through our server infrastructure and tracking technologies:

• Device and technical data: IP address, device type, operating system and version, browser type and version, screen resolution, and device identifiers
• Usage data: Pages visited, features accessed, games played, bet amounts and outcomes, session start and end times, and click-path data within the platform
• Log data: Server access logs, error logs, and security event logs associated with your account activity
• Cookie data: Session cookies, preference cookies, and analytics cookies as described in Section 7 of this Policy

3.3 Data Collected from Third Parties

In certain circumstances, 678b may receive personal data about you from third-party sources, including:

• Payment service providers (bKash, Nagad, Rocket, Upay, and supported banks) for the purpose of confirming the status of deposit and withdrawal transactions
• Identity verification and fraud prevention services used to validate the documents you submit during KYC review
• Game providers (including Evolution Gaming, Pragmatic Play, Spribe, and Ezugi) for the purpose of resolving game-related disputes or technical incidents

How We Use Your Personal Data

678b uses the personal data described in Section 3 for the following clearly defined purposes:

• Account creation and management: To register your 678b account, verify your identity, maintain your profile, and manage your account settings and preferences.
• Service delivery: To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported Bangladeshi banks; to grant access to sports betting, live casino, slots, and arcade games; and to calculate and credit winnings to your account.
• Identity verification and compliance: To conduct KYC checks, verify your age (21+), prevent fraud and money laundering, and fulfil our obligations under applicable international anti-money laundering (AML) and counter-terrorism financing (CTF) frameworks.
• Customer support: To respond to your queries, resolve disputes, process complaints, and provide technical assistance through the 678b support team.
• Platform security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, collusion, and other forms of abuse or misconduct on the platform.
• Responsible gaming: To monitor your gaming activity for signs of problem gambling, enforce deposit limits and self-exclusion requests, and deliver responsible gaming notifications and interventions where appropriate.
• Platform improvement: To analyse aggregated usage data, identify technical issues, test new features, and improve the overall performance and user experience of the 678b platform.
• Legal obligations: To comply with applicable law, respond to lawful requests from regulatory or law enforcement authorities, and enforce the 678b Terms & Conditions.
• Promotional communications: Where you have given explicit consent, to send you information about 678b promotions, bonuses, and platform updates relevant to your account. You may withdraw this consent at any time by contacting [email protected].

Legal Basis for Processing

678b processes your personal data on one or more of the following legal grounds, depending on the specific processing activity involved:

• Contractual necessity: Processing required to perform the contract with you — i.e., to operate your 678b account, process transactions, and deliver the gaming services you have requested.
• Legal obligation: Processing required to comply with applicable legal obligations, including AML/CTF due diligence, record-keeping requirements, and responses to lawful authority requests.
• Legitimate interests: Processing carried out for 678b's legitimate business interests — including fraud prevention, platform security, and service improvement — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in the context of promotional communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Third-Party Disclosure and Data Sharing

6.1 Categories of Third-Party Recipients

678b does not sell, rent, or commercially transfer your personal data to third parties. We share personal data only with the following categories of recipients, and only to the extent necessary for the purposes described in this Policy:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and Islami Bank — to process deposit and withdrawal transactions associated with your 678b account.
• Game content providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, and other certified studios — limited to the technical data required to deliver game sessions and resolve game-related disputes.
• Identity verification services: Third-party KYC and AML screening providers engaged to assist with the verification of player identity documents and compliance checks.
• IT and hosting infrastructure providers: Service providers who operate the servers, databases, and cloud infrastructure on which the 678b platform runs, subject to strict data processing agreements.
• Legal and regulatory authorities: Law enforcement agencies, regulatory bodies, courts, or other public authorities where disclosure is required by applicable law, court order, or to protect the rights and safety of 678b, its players, or the public.

6.2 Data Processing Agreements

All third parties that process personal data on behalf of 678b are required to enter into data processing agreements that impose obligations consistent with the data protection standards set out in this Policy. 678b conducts due diligence on third-party data processors to verify that appropriate technical and organisational security measures are in place before any personal data is shared.

Cookies and Tracking Technologies

7.1 Types of Cookies Used

678b uses the following categories of cookies and similar tracking technologies when you access the platform:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in to your 678b account during an active session. These cookies cannot be disabled without breaking core platform functionality.
• Preference cookies: Used to remember your platform settings and preferences, such as your selected language or display options, so that you do not need to reconfigure them on each visit.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate and interact with the 678b platform. This data helps us identify usability issues and improve the platform experience. Individual player behaviour is not identifiable from these aggregated reports.

7.2 Managing Your Cookie Preferences

You can control and manage cookies through your web browser's settings at any time. Most modern browsers allow you to block, delete, or receive notifications about cookies. Please note that disabling strictly necessary cookies will impair your ability to log in and use the 678b platform. For detailed instructions on managing cookies in your specific browser, refer to the browser's official help documentation.

678b does not use cookies to serve third-party advertisements, build cross-site tracking profiles, or share your browsing data with advertising networks.

Data Security

678b implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 678b platform
• Encrypted storage of sensitive personal and financial data within our infrastructure
• One-way cryptographic hashing of all player account passwords — plain-text passwords are never stored or accessible to any member of 678b staff
• Role-based access controls limiting internal access to personal data to authorised personnel with a legitimate business need
• Regular security audits, vulnerability assessments, and penetration testing of the platform infrastructure
• Intrusion detection and real-time monitoring systems to identify and respond to suspicious activity
• Documented incident response procedures to contain and notify affected parties in the event of a confirmed data breach

While 678b takes all reasonable steps to protect your personal data, no internet-based service can guarantee absolute security. In the event that a data security incident occurs that is likely to affect your rights or interests, 678b will notify you and the relevant authorities within the timeframes required by applicable law.

Data Retention

678b retains personal data for the minimum period necessary to fulfil the purposes described in this Policy, subject to any longer retention obligations imposed by applicable law. The general retention schedule applied by 678b is as follows:

Upon expiry of the applicable retention period, personal data is permanently deleted from 678b's active systems or irreversibly anonymised so that it can no longer be associated with any individual player.

Your Data Rights

As a registered 678b player, you have the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request". 678b will respond within thirty (30) days of receiving a valid request, subject to identity verification.

• Right of access: You have the right to request confirmation of whether 678b holds personal data about you and, if so, to receive a copy of that data along with information about how it is being processed.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data held by 678b be corrected or updated without undue delay.
• Right to erasure: In certain circumstances, you have the right to request that 678b delete your personal data. This right is subject to limitations where retention is required by law or for the establishment, exercise, or defence of legal claims.
• Right to restriction of processing: You have the right to request that 678b restricts the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling for marketing purposes. 678b will cease such processing unless compelling legitimate grounds are demonstrated.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out prior to withdrawal.

Children's Privacy

The 678b platform is strictly intended for adults aged 21 years and above. 678b does not knowingly collect, process, or retain personal data relating to individuals under the age of 21. If we become aware that personal data has been collected from a person under 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a person under your care has registered a 678b account or submitted personal data to the platform, please contact us immediately at [email protected] so that we can investigate and take the necessary action promptly.

International Data Transfers

678b operates globally and may process or store personal data on servers or through service providers located outside Bangladesh. Where personal data is transferred internationally, 678b takes appropriate steps to ensure that adequate protections are in place, including:

• Transferring data only to countries or organisations that provide a level of data protection that is substantially equivalent to the standards described in this Policy
• Implementing contractual data protection clauses with all international data processors that impose binding obligations consistent with this Policy
• Conducting transfer impact assessments where required to evaluate the risks of any proposed international data transfer

By using the 678b platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Bangladesh where necessary for the delivery of the services described in these documents, subject to the protections outlined above.

Updates to This Privacy Policy

678b reserves the right to update, modify, or replace this Privacy Policy at any time. When material changes are made, the revised Policy will be published on this page with an updated effective date. Where changes are significant, 678b may also notify registered players by email or through an in-platform notification.

Your continued use of the 678b platform following the publication of a revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. We encourage you to review this page periodically to remain informed of how your personal data is being handled.

Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the manner in which 678b processes your personal data, please contact us using the details below. All privacy-related enquiries are handled in English by our dedicated support team.

Email: [email protected]

Please include "Privacy Enquiry" in the subject line of your email and provide your registered 678b username and a clear description of your query. 678b aims to acknowledge all privacy-related requests within two (2) business days and to provide a full response within thirty (30) days, except in cases of unusual complexity which may require up to an additional sixty (60) days with prior notification.