678bd3 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") is issued by 678bd3 ("678bd3", "we", "our", "us") and applies to all personal data collected from individuals ("Player", "User", "you") who visit, register on, or interact with the 678bd3 platform at 678bd3.app and any associated sub-domains or services.

678bd3 takes its data protection obligations seriously. We are committed to handling your personal data in a transparent, lawful, and secure manner. This Policy is designed to inform you fully about our data practices so that you can make informed decisions about your use of the 678bd3 platform. We encourage you to read this document carefully and to contact our support team if you have any questions about how we handle your information.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming policy, both of which form part of the overall agreement between you and 678bd3. By registering an account or continuing to use the 678bd3 platform after the effective date of this Policy, you acknowledge that you have read and understood its contents.

2 Data We Collect

2.1 Registration Data

When you create a 678bd3 account, we collect the personal information you provide directly, including your full legal name, date of birth, email address, mobile telephone number (Bangladesh-registered), and the username and password you select. This information is mandatory — without it, we cannot create or maintain a player account on the platform.

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) compliance obligations, we may request copies of government-issued identification documents (National Identity Card, passport, or driving licence), proof of address (utility bill or bank statement), and proof of ownership of the payment method you use for deposits and withdrawals (for example, a screenshot showing your bKash or Nagad wallet registration details). KYC documents are stored securely and accessed only by authorised compliance personnel.

2.3 Financial Transaction Data

We record details of all financial transactions you conduct on the 678bd3 platform, including deposit amounts, withdrawal requests, bonus credits, and wager histories. For bKash, Nagad, Rocket, and Upay transactions, we retain the transaction reference numbers and the mobile wallet numbers involved. For card transactions (Visa, Mastercard), we store only masked card numbers — we do not store full card numbers on our servers at any point.

2.4 Usage and Technical Data

We automatically collect certain technical data when you visit or use the 678bd3 platform, including your IP address, device type and operating system, browser type and version, referring URL, pages visited within the platform, session duration, and in-game activity logs. This data is used for security monitoring, fraud prevention, platform performance optimisation, and responsible gaming analytics.

2.5 Communications Data

When you contact 678bd3's support team via live chat or email, we retain records of those communications, including the content of messages exchanged, the date and time of contact, and the outcome of any issue raised. These records are retained for quality assurance, dispute resolution, and regulatory compliance purposes.

3 How We Use Your Data

The following table summarises the primary purposes for which 678bd3 processes your personal data, along with the category of data involved in each processing activity:

4 Legal Basis for Processing

678bd3 processes your personal data on the following legal grounds, depending on the specific processing activity involved:

• Contractual necessity: Processing required to fulfil our obligations to you under the 678bd3 Terms & Conditions — including account creation, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering obligations, age verification requirements, and responses to lawful requests from competent authorities.
• Legitimate interests: Processing carried out for purposes that serve the legitimate business interests of 678bd3, including fraud prevention, security monitoring, platform analytics, and responsible gaming safeguards — provided those interests are not overridden by your rights and freedoms.
• Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent — in particular, the sending of direct marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 Data Sharing

5.1 We Do Not Sell Your Data

678bd3 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Your personal information is not a product. This commitment is unconditional and applies regardless of whether you are an active or inactive player.

5.2 Authorised Third-Party Processors

In order to deliver the 678bd3 service, we share certain personal data with carefully selected third-party service providers who process data on our behalf and under our instruction. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, and card processing partners (Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank) receive transaction data necessary to execute your deposits and withdrawals.
• Game content providers: Providers such as Pragmatic Play, Evolution, Microgaming, NetEnt, Ezugi, Spribe, and Play'n GO may receive anonymised session data necessary to deliver and audit game content.
• Identity verification services: Third-party KYC providers may process copies of your identification documents for the purpose of verifying your identity in compliance with our anti-money laundering obligations.
• IT infrastructure and hosting providers: Our platform is hosted on secure servers. Our infrastructure partners have access to system-level data only to the extent necessary for operations, maintenance, and security.
• Analytics providers: We use analytics tools to understand platform usage patterns. Where possible, this data is anonymised or pseudonymised before processing.

All third-party processors engaged by 678bd3 are bound by contractual data processing agreements that prohibit them from using your personal data for any purpose beyond the specific service they provide to us.

5.3 Legal Disclosures

678bd3 may disclose your personal data to law enforcement agencies, regulatory authorities, courts, or other competent bodies when required to do so by applicable law, a binding court order, or a lawful regulatory instruction. In such cases, we will disclose only the minimum data necessary to satisfy the legal requirement and will notify you of the disclosure to the extent permitted by law.

6 Cookies & Tracking Technologies

6.1 What Are Cookies

Cookies are small text files placed on your device by the 678bd3 platform when you visit or log in to your account. They allow the platform to recognise your device, remember your preferences, maintain your session, and collect usage data for analytics and security purposes. Cookies do not contain your password or financial information.

6.2 Types of Cookies We Use

• Essential cookies: Required for the platform to function correctly — including session management, login state, and security tokens. These cannot be disabled without preventing you from using the platform.
• Functional cookies: Used to remember your preferences such as language settings, display options, and last-visited game categories.
• Analytics cookies: Used to collect anonymised data about how players interact with the 678bd3 platform — including pages visited, time spent, and features used — to help us improve the user experience.
• Security cookies: Used to detect and prevent fraudulent activity, unauthorised login attempts, and bot traffic on the platform.

You may manage non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the 678bd3 platform and your overall user experience.

7 Data Retention

678bd3 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following general retention periods apply:

• Account and registration data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years following the last transaction or account closure, whichever is later.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications: Retained for three (3) years from the date of the last communication, or longer where relevant to an unresolved dispute.
• Usage and technical data: Retained for up to thirteen (13) months in identifiable form, after which it is anonymised or deleted.

Upon expiry of the applicable retention period, your personal data is securely deleted or irreversibly anonymised. Where deletion is technically infeasible within standard timescales (for example, data held in encrypted backups), the data is isolated from further processing until it can be securely deleted.

8 Data Security

678bd3 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our key security controls include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our platform servers.
• Encryption of sensitive data fields at rest within our database infrastructure.
• Role-based access controls ensuring that only authorised 678bd3 personnel can access personal data, and only to the extent necessary for their specific job function.
• Multi-factor authentication requirements for all 678bd3 administrative and operational system access.
• Regular penetration testing and vulnerability assessments conducted by qualified security professionals.
• Automated intrusion detection and real-time alerting systems monitoring platform infrastructure 24/7.
• Secure, encrypted backup procedures with off-site storage for disaster recovery purposes.

9 Your Privacy Rights

As a 678bd3 player, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected]. We will respond to all verified requests within 30 days of receipt.

• Right of access: You may request a copy of the personal data we hold about you, along with information about how it is being used and shared.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restrict processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute about accuracy is being resolved.
• Right to data portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to object: You may object to the processing of your personal data where we rely on legitimate interests as the legal basis, including profiling for marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Please note that certain rights are subject to limitations — for example, we cannot delete data that we are legally required to retain. Where we are unable to fulfil a request in full, we will explain the reason clearly in our response.

10 Third-Party Services

The 678bd3 platform integrates content and services from third-party game providers including Pragmatic Play, Evolution, Microgaming, NetEnt, Ezugi, Spribe, and Play'n GO. When you launch a game from one of these providers within the 678bd3 platform, the provider's own servers may process certain session data in order to deliver the game. 678bd3 is not responsible for the privacy practices of third-party game providers beyond the contractual obligations we impose on them as data processors. We encourage you to review the privacy policies of any third-party service you interact with.

The 678bd3 platform does not contain links to external websites. Any reference to third-party brand names (bKash, Nagad, Rocket, Visa, Mastercard, etc.) is purely informational and does not constitute an endorsement or imply any data-sharing arrangement beyond what is described in Section 5 of this Policy.

11 Children's Privacy

The 678bd3 platform is strictly intended for adults aged 18 years and above. We do not knowingly collect, store, or process personal data from individuals under the age of 18. If we discover or have reasonable grounds to believe that a player is under 18, we will immediately suspend the account, initiate identity verification procedures, and take all necessary steps to delete any personal data associated with that account in accordance with applicable law.

If you are a parent or guardian and believe that your child may have registered an account on the 678bd3 platform, please contact us immediately at [email protected]. We will investigate the matter promptly and take appropriate action.

12 Marketing Communications

678bd3 may send you promotional communications regarding bonuses, new games, seasonal offers (such as Eid promotions, Pohela Boishakh specials, or BPL season offers), and platform updates. We will only send such communications where you have explicitly opted in to receive them during registration or through your account settings.

You may opt out of receiving marketing communications from 678bd3 at any time by: updating your communication preferences in your account settings; clicking the unsubscribe link included in any marketing email; or contacting our support team directly at [email protected]. Opting out of marketing communications will not affect the delivery of transactional messages related to your account, such as deposit confirmations, withdrawal notifications, and security alerts.

13 Updates to This Policy

678bd3 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes to this Policy, we will publish the revised version on the 678bd3 platform with an updated effective date, and we will make reasonable efforts to notify registered players via their registered email address. Your continued use of the 678bd3 platform following the posting of a revised Privacy Policy constitutes your acceptance of the changes. If you do not accept the revised Policy, you must stop using the platform and may request account closure in accordance with our Terms & Conditions.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the handling of your personal data by 678bd3, please contact our dedicated support team using the details below. We treat all privacy-related enquiries with priority and aim to respond within 72 hours Bangladesh Standard Time (UTC+6).

• Support Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the chat widget on the 678bd3 platform
• Response Time: Within 72 hours for privacy requests; within 30 days for formal data subject rights requests
• Time Zone: Bangladesh Standard Time (BST, UTC+6)