Privacy Policy — 678bet Bangladesh

§ 1 Introduction and Scope

678bet is committed to protecting the privacy of every individual who interacts with our platform. This Privacy Policy sets out in clear terms the categories of personal data we collect, the purposes for which that data is processed, the conditions under which it may be shared, and the rights available to you as a data subject.

This policy applies to all personal data collected through the 678bet website at https://678bet.lol, including data gathered during account registration, identity verification, payment processing, customer support interactions, and general use of the platform's betting and gaming services.

This policy should be read alongside the 678bet Terms & Conditions, which are published at https://678bet.lol/terms-conditions. Where the Terms & Conditions and this Privacy Policy address the same subject matter, this Privacy Policy shall govern in respect of data protection matters.

§ 2 Data Controller Information

For the purposes of this Privacy Policy, 678bet acts as the data controller in respect of all personal data collected from players accessing the platform. As data controller, 678bet determines the purposes and means by which personal data is processed.

If you have any questions, concerns, or requests relating to how your personal data is handled, you may contact 678bet's data support team directly:

• Platform: 678bet (https://678bet.lol)
• Contact email: [email protected] (plain text — not a clickable link)
• Support hours: 24 hours a day, 7 days a week
• Response target: Within 72 hours of receiving a data-related request, in Bangladesh Standard Time (BST, UTC+6)

§ 3 What Personal Data We Collect

The categories of personal data that 678bet may collect and process are set out in the table below. The data collected from any individual player will depend on the nature and extent of their use of the platform.

678bet does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where a responsible gaming assessment voluntarily completed by a player touches upon personal wellbeing.

§ 4 How We Collect Your Data

678bet collects personal data through the following channels:

• Direct submission: Data you actively provide when completing the registration form, submitting KYC documents, making a deposit or withdrawal request, or contacting our support team.
• Automated collection: Technical and behavioural data gathered automatically by our servers and analytics systems as you navigate the 678bet platform. This includes server logs, session tracking, and cookie-based data.
• Third-party verification providers: Identity and document verification data returned by KYC service providers engaged by 678bet to confirm the authenticity of documents you submit.
• Payment processors: Transaction confirmation data and mobile wallet identifiers returned by bKash, Nagad, Rocket, Upay, and partner banks upon processing deposit or withdrawal instructions.
• Fraud prevention services: Risk signals and device fingerprinting data from fraud detection partners used to protect the integrity of the platform and its players.

§ 5 Legal Basis for Processing

678bet processes personal data on the following legal bases:

• Contractual necessity: Processing required to create and maintain your account, process transactions, settle bets, and fulfil the services described in the Terms & Conditions.
• Legal obligation: Processing necessary to comply with anti-money-laundering requirements, identity verification obligations, and any lawful instruction from a relevant authority.
• Legitimate interests: Processing carried out to protect the security and integrity of the platform, prevent fraud, detect prohibited conduct, and improve platform features — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where 678bet sends you optional marketing communications or uses non-essential cookies, it does so only on the basis of your express consent, which may be withdrawn at any time by contacting [email protected].

§ 6 How We Use Your Personal Data

678bet uses the personal data it collects for the following purposes:

• Account management: Creating, maintaining, and administering your player account, including verifying your identity and processing login requests.
• Payment processing: Executing deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and partner banks; reconciling transaction records; and investigating payment disputes.
• KYC and compliance: Verifying your identity and age (18+) as required by our anti-money-laundering and responsible gaming obligations.
• Customer support: Responding to your enquiries, resolving disputes, processing complaints, and providing assistance with account or technical issues.
• Fraud prevention and security: Detecting and preventing unauthorised account access, fraudulent transactions, money laundering, bonus abuse, and other prohibited conduct.
• Platform improvement: Analysing aggregated behavioural data to understand how players use the platform and to improve the quality, reliability, and range of games and features offered.
• Responsible gaming: Monitoring account activity for signs of problem gambling and administering deposit limits, cooling-off periods, and self-exclusion requests.
• Legal compliance: Retaining records as required by applicable law and responding to lawful requests from authorities.
• Communications: Sending you essential account notifications, security alerts, and — where you have consented — promotional messages about 678bet offers relevant to Bangladesh players.

§ 7 Sharing Your Data with Third Parties

678bet does not sell your personal data. We may share your data with the following categories of third party, strictly on a need-to-know basis and subject to appropriate confidentiality obligations:

• Identity and KYC verification providers: Third-party services engaged to authenticate identity documents submitted during the KYC process.
• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other payment partners require transaction data to process deposits and withdrawals.
• Fraud prevention and security partners: Specialist providers who assist in detecting suspicious account activity, device fingerprinting, and transaction risk scoring.
• Game software providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data to ensure game integrity and fair play certification.
• Legal and regulatory authorities: Where required by law, court order, or the instruction of a competent regulatory or law enforcement body, 678bet will disclose personal data as required.
• Professional advisers: Lawyers, auditors, and accountants engaged by 678bet who are bound by professional confidentiality obligations.

§ 8 International Data Transfers

Some of the third-party service providers engaged by 678bet may process personal data in countries other than Bangladesh. Where such transfers occur, 678bet takes reasonable steps to ensure that the receiving party applies a standard of data protection equivalent to that required under this Privacy Policy.

These steps may include executing standard contractual clauses, conducting due diligence on the third party's security practices, and limiting the scope of data transferred to the minimum necessary for the specified purpose.

By using the 678bet platform, you acknowledge that your data may be transferred to and processed in jurisdictions outside Bangladesh. If you have concerns about a specific transfer, please contact us at [email protected].

§ 9 Data Retention

678bet retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

• Active account data: Retained for the duration of your account's existence on the platform.
• Transaction and financial records: Retained for a minimum of five (5) years following the date of the transaction, in line with standard financial record-keeping practice.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of account closure or from the date of the last transaction, whichever is later.
• Customer support communications: Retained for a minimum of two (2) years from the date of the communication.
• Self-exclusion records: Retained indefinitely to prevent re-registration by self-excluded players, even after account closure.
• Technical and log data: Typically retained for up to twelve (12) months, after which it is aggregated or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

§ 10 Cookies and Tracking Technologies

678bet uses cookies and similar technologies to operate and improve the platform. A cookie is a small text file placed on your device by our web server when you visit the 678bet website. Cookies do not contain executable code and cannot access other data stored on your device.

We use the following categories of cookie:

• Strictly necessary cookies: Required for the platform to function. These include session cookies that keep you logged in during your visit. They cannot be disabled without affecting platform functionality.
• Preference cookies: Remember your settings and choices (such as language preference and display options) so you do not need to re-enter them on each visit.
• Analytics cookies: Collect aggregated, anonymised data about how players navigate the platform — which pages are visited most frequently, where sessions start and end, and which features are used. This information helps us improve platform performance and user experience.
• Security cookies: Help detect and prevent fraudulent access attempts, bot traffic, and other security threats.

678bet does not use third-party advertising cookies, social media tracking pixels, or cross-site behavioural profiling technologies. You may control cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the platform.

§ 11 Your Data Rights

As a 678bet player, you hold the following rights in respect of your personal data. To exercise any of these rights, submit a written request to [email protected]. We will respond within 72 hours and fulfil verified requests within 30 days.

• Right of access: You may request a copy of all personal data 678bet holds about you, along with information about how it is used.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected or updated.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to restriction: You may request that processing of your data be temporarily suspended while a dispute or complaint is being resolved.
• Right to data portability: You may request your data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including profiling. Where you object, 678bet will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.

Please note that certain rights are subject to limitations where processing is required to comply with a legal obligation, to establish, exercise, or defend legal claims, or to protect the vital interests of another person.

§ 12 Security Measures

678bet implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your browser and the 678bet platform is encrypted using 256-bit SSL/TLS protocols.
• Encryption at rest: Sensitive data including financial records and identity documents are stored in encrypted form on 678bet's servers.
• Access controls: Access to personal data within 678bet's systems is restricted to authorised personnel on a strict need-to-know basis. Staff with access to personal data are bound by confidentiality obligations.
• Intrusion detection: 678bet operates network monitoring and intrusion detection systems to identify and respond to security incidents in real time.
• Regular security reviews: Our platform and data handling procedures are reviewed periodically to identify and address potential vulnerabilities.
• Incident response: In the event of a data breach that poses a risk to players, 678bet will notify affected players promptly via their registered contact details and take immediate remedial action.

While 678bet takes reasonable steps to protect your data, no internet transmission or electronic storage system is completely secure. Players are strongly encouraged to use a strong, unique password for their account and to report any suspected unauthorised access immediately to [email protected].

§ 13 Children's Privacy

678bet's platform is intended solely for adults aged 18 years and above. We do not knowingly collect personal data from individuals under the age of 18. If you are under 18, you must not use the 678bet platform or submit any personal data to us.

If 678bet becomes aware that personal data has been collected from a person under the age of 18, that data will be deleted immediately and the associated account will be permanently closed. Parents or guardians who believe that a minor has submitted personal data to 678bet are asked to contact us immediately at [email protected] so that appropriate action can be taken.

678bet employs age verification measures during the registration and KYC process to reduce the risk of underage access. These include document-based identity checks and date-of-birth validation against submitted government-issued identification.

§ 14 Changes to This Policy

678bet reserves the right to update or modify this Privacy Policy at any time. When material changes are made, we will notify registered players via their registered email address or mobile number, and by displaying a prominent update notice on the 678bet platform. The revised policy will display an updated effective date at the top of this page.

If you continue to use the 678bet platform after a revised Privacy Policy has been published and notified, you are deemed to have accepted the updated version. If you do not agree with any change to this policy, you should cease using the platform and contact us to request account closure and deletion of your data, subject to our legal retention obligations.

We recommend that you review this Privacy Policy at least once every three months, or whenever you receive a notification of an update, to ensure you remain informed about how your data is handled.

§ 15 Contact Us

For any questions, requests, or complaints relating to this Privacy Policy or the way in which 678bet handles your personal data, please contact us using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: Please include "DATA REQUEST" or "PRIVACY" in your subject line for priority handling.
• Support hours: 24 hours a day, 7 days a week
• Response time: We aim to acknowledge all privacy-related enquiries within 72 hours and to resolve them within 30 calendar days, in Bangladesh Standard Time (BST, UTC+6).

We take privacy complaints seriously and will work with you in good faith to address any concern. If you are not satisfied with our response, you may seek further recourse through any applicable regulatory or legal channel available to you in Bangladesh.