Data & Privacy • 678b Bangladesh

678b Privacy Policy — Your Data, Your Rights

678b is committed to protecting the privacy and personal data of every player in Bangladesh. This policy explains exactly what we collect and why.

🔏 Last Updated: January 2026

Introduction

This Privacy Policy ("Policy") describes how 678b ("the Platform", "we", "us", "our") collects, uses, stores, protects, and shares the personal data of players and visitors who access or use the 678b Casino platform at 678b.bar. This Policy applies to all personal data we process in connection with our services, including account registration, payment processing, game activity, and customer support interactions. By accessing or using the 678b platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

678b operates in the Bangladesh market and is fully aware of the trust that Bangladeshi players place in the platform when they register an account, link a bKash or Nagad wallet, or provide any personal information. We treat your data with the highest degree of care and transparency, and we will never sell your personal data to any third party for their own marketing or commercial purposes. This Policy is intended to give you complete clarity about what personal data 678b handles, the lawful basis for handling it, and the rights you have in relation to that data.

Our Data Protection Principles

678b's approach to data handling is guided by six core principles that underpin every decision we make about your personal information.

🎯
Purpose Limitation
Data collected only for specified, legitimate purposes
🔒
Security First
SSL encryption and access controls protect all stored data
📏
Data Minimisation
We collect only what is strictly necessary to operate our services
👁️
Transparency
We tell you clearly what data we hold and how it is used
🗑️
Right to Erasure
Players may request deletion of their personal data
✅
Lawful Basis
Every data processing activity has a documented lawful basis
Section 1

Personal Data We Collect

When you register an account with 678b, interact with our platform, or contact our support team, we may collect the following categories of personal data:

  • Registration data: your Bangladesh mobile number (used as your primary account identifier), your chosen password (stored in hashed, non-reversible form), and any display name or profile preferences you configure.
  • Identity verification (KYC) data: where required by our internal compliance policy, we may request a copy of a government-issued identity document to verify that you meet the 21+ age requirement and that your registered identity matches your payment account.
  • Payment transaction data: records of deposits and withdrawals including the payment method used (bKash, Nagad, Rocket, Upay), transaction reference numbers, amounts in BDT, and timestamps. We do not store your full bKash or Nagad account PIN — payment authentication happens directly on your mobile banking app.
  • Gaming activity data: records of games played, bet amounts, win/loss outcomes, session durations, and game preferences. This data is used to personalise your experience and to meet our responsible gaming obligations.
  • Technical and device data: IP address, device type (Android/iOS), browser version, operating system, and session logs. This data is used for security monitoring, fraud prevention, and platform optimisation.
  • Customer support communications: the content of messages, emails, and live chat conversations you have with the 678b support team, used to resolve your enquiry and to improve our support quality.

678b does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data unless specifically required by applicable law or in the context of identity verification. We do not collect or process financial data beyond what is necessary to process your deposits and withdrawals on the 678b platform.

Section 2

How We Use Your Personal Data

678b uses the personal data we collect for the following specific, documented purposes:

  • Account creation and management: to register your 678b account, maintain your player profile, process your login authentication, and manage your BDT balance.
  • Payment processing: to facilitate deposits from and withdrawals to your registered bKash, Nagad, Rocket, or Upay account, and to maintain accurate transaction records required by our compliance obligations.
  • Fraud prevention and security: to monitor platform activity for signs of account compromise, money laundering, bonus abuse, or other prohibited conduct as defined in our Terms and Conditions.
  • Responsible gaming compliance: to monitor gaming patterns that may indicate problematic gambling behaviour, to facilitate self-exclusion requests, and to apply deposit limits and other responsible gaming tools.
  • Platform improvement and analytics: to analyse aggregated, anonymised usage patterns to improve game selection, payment processing speed, mobile performance, and the overall user experience for players across Bangladesh.
  • Promotional communications: where you have opted in, to send you notifications about relevant bonuses, seasonal promotions (Eid, Pohela Boishakh, BPL), and platform updates. You may opt out of promotional communications at any time by contacting 678b support.
No Data Selling: 678b will never sell, rent, or trade your personal data to any third party for their own marketing, advertising, or commercial purposes. This is an unconditional commitment to every 678b player in Bangladesh.
Section 3

678b processes your personal data on the following legal bases, depending on the purpose of processing:

  • Contractual necessity: processing required to fulfil our contractual obligations to you as a registered player — including account management, game access, and payment processing — is necessary to perform the contract between us.
  • Legal obligation: processing required to comply with applicable legal obligations, including anti-money laundering (AML) requirements, Know Your Customer (KYC) verification, and responding to lawful requests from regulatory or law enforcement authorities.
  • Legitimate interests: processing carried out in pursuit of 678b's legitimate interests in operating a safe and fair gaming platform, including fraud prevention, security monitoring, and platform analytics, where these interests are not overridden by your data protection rights.
  • Consent: processing based on your freely given, specific, and informed consent — primarily for optional promotional communications and non-essential analytics cookies. You may withdraw your consent at any time without affecting the lawfulness of processing that occurred before withdrawal.
Section 4

Sharing Your Personal Data

678b does not share your personal data with third parties except in the limited circumstances described below. In all cases, data sharing is subject to appropriate contractual safeguards:

  • Payment processing partners: we share transaction reference data with bKash, Nagad, Rocket, and Upay solely to process your deposit and withdrawal requests. These providers are bound by their own privacy policies and regulatory obligations under Bangladesh Bank guidelines.
  • Game content providers: game studios such as Pragmatic Play, Evolution Gaming, Ezugi, and Spribe receive session tokens and game result data necessary to operate their games on the 678b platform. They do not receive your mobile number, payment data, or full account details.
  • Regulatory and law enforcement authorities: where required by applicable law or a lawful order from a competent authority in Bangladesh, 678b may be obligated to disclose specific player data to regulatory bodies, financial intelligence units, or law enforcement agencies.
  • Technical infrastructure providers: cloud hosting and security service providers who process data on our behalf under strict data processing agreements that prohibit them from using your data for any purpose other than providing services to 678b.

678b requires all third parties that process personal data on its behalf to implement appropriate technical and organisational security measures, and to process personal data solely for the purposes specified in their agreement with 678b. 678b does not permit third-party service providers to use your personal data for their own purposes.

Section 5

Payment Data and Mobile Banking

678b integrates with Bangladesh's primary mobile banking ecosystem — bKash, Nagad, Rocket, and Upay — to process BDT deposits and withdrawals. When you initiate a transaction, the relevant payment is authenticated directly through your mobile banking app using your own PIN or biometric. 678b does not at any point see, capture, or store your mobile banking PIN, biometric data, or the full credentials of your mobile banking account.

What 678b does retain is the transaction reference number, the amount in BDT, the timestamp, and which payment channel was used. This data is retained to maintain accurate account records, to support withdrawal requests back to the same channel, and to satisfy the financial record-keeping requirements that apply to our operations. Payment transaction records are retained for a minimum of five (5) years after the transaction date, consistent with financial recordkeeping standards.

Secure Payment: 678b uses 256-bit SSL encryption for all data transmitted during payment processing. Your mobile banking credentials are authenticated exclusively by your mobile banking provider — 678b never acts as an intermediary for credential entry.
Section 6

678b uses cookies and similar browser storage technologies to operate the platform, remember your session, and gather anonymised analytics about how users interact with our mobile site. We use three categories of cookies:

  • Strictly necessary cookies: these are essential for the platform to function. They manage your login session, remember your language preference, and maintain your BDT game balance display. You cannot opt out of strictly necessary cookies without ceasing to use the platform.
  • Analytical cookies: these collect anonymised, aggregated data about which games are most popular, which sections of the site see the most traffic, and how players navigate the platform. This data helps us improve the 678b experience for all Bangladesh users.
  • Functional cookies: these remember optional preferences you set, such as your preferred game category or display settings, to save you time on repeat visits.

Most mobile browsers allow you to control cookies through your browser settings. Blocking certain cookies may impair some features of the 678b platform, including session persistence after closing and reopening the browser. 678b does not use third-party advertising or tracking cookies.

Section 7

Data Retention

678b retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply: account data (mobile number, profile settings) is retained for the duration of your account plus 3 years after account closure; payment transaction records are retained for a minimum of 5 years; gaming activity logs are retained for 3 years; customer support communications are retained for 2 years; KYC documents are retained for 5 years from the date of verification.

When your data is no longer required for the purposes for which it was collected, 678b will securely delete or anonymise it. If you close your 678b account, your active account data will be deactivated immediately, but financial and compliance-related records will be retained for the legally required minimum periods as outlined above.

Section 8

Your Data Rights

As a 678b player, you have the following rights in relation to your personal data. To exercise any of these rights, contact 678b support at [email protected].

  • 1
    Right of Access — You may request a copy of all personal data 678b holds about you
  • 2
    Right to Rectification — You may request correction of any inaccurate or incomplete data we hold about you
  • 3
    Right to Erasure — You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations
  • 4
    Right to Object — You may object to processing based on legitimate interests, including direct marketing communications
  • 5
    Right to Portability — You may request your personal data in a structured, machine-readable format where technically feasible

678b will respond to all valid data rights requests within 30 days. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

Section 9

Data Security

678b implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include 256-bit SSL/TLS encryption for all data in transit between your device and our platform; encryption at rest for sensitive stored data; access controls that restrict which members of the 678b team can access personal data, and only for legitimate operational purposes; regular security reviews and penetration testing; and automatic session logout after inactivity to protect players on shared devices.

No method of data transmission or storage over the internet can be guaranteed as 100% secure. While 678b applies industry-standard security practices, we cannot guarantee the absolute security of data transmitted to or from the platform. Players are encouraged to use strong, unique passwords and to log out of their 678b account when using shared devices to reduce the risk of unauthorised access.

Section 10

Children and Minors

The 678b platform is strictly for adults aged 21 years and above. 678b does not knowingly collect, process, or store personal data from any person under the age of 21. If we become aware that personal data has been collected from a person who is under 21, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and you believe that your child or a minor in your care has registered a 678b account or provided personal data to 678b, please contact us immediately at [email protected].

21+ Strictly Enforced: Age verification is part of our KYC process. Any account found to be registered by a person under 21 will be closed immediately and any balance will be reviewed in line with our Terms and Conditions.
Section 11

Changes to This Policy and Contact

678b may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes, we will publish the updated Policy on the platform with a revised "Last Updated" date. Your continued use of the 678b platform following the publication of any updated Policy constitutes your acceptance of those changes. We encourage you to review this Policy periodically to remain informed about how we protect your personal data.

If you have any questions, concerns, or requests in relation to this Privacy Policy or 678b's data practices, please contact the 678b Data Team. We are available 24/7 in Bangladesh Standard Time (BST, UTC+6) and aim to respond to all privacy enquiries within 5 business days. For formal data rights requests (access, rectification, erasure, objection, portability), please identify yourself clearly and specify the right you wish to exercise in your message.

Privacy Contact Email: [email protected]