🔐 Data Protection · Privacy Rights · Secure Platform
678bdt Privacy Policy
Your privacy matters. This policy explains exactly what personal data 678bdt collects, why we collect it, how it is used, and the rights you hold as a player based in Bangladesh.
📅
Effective Date: 1 January 2026
Last reviewed: January 2026. This Policy supersedes all prior privacy statements published by 678bdt.
Who This Policy Applies To. This Privacy Policy applies to all individuals who visit, register on, or interact with the 678bdt platform at 678bdt.im ("Platform"), including players based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and all other regions of Bangladesh. By creating an account or using the Platform in any capacity, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.
678bdt ("we", "us", "our") is committed to protecting the personal information of our players and website visitors. We handle all personal data with strict confidentiality and in accordance with the principles of data minimisation, purpose limitation, storage limitation, and integrity. This Policy is incorporated into and forms part of the 678bdt Terms & Conditions.
We reserve the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. Any material changes will be notified via a prominent notice on the Platform and by updating the effective date above. Your continued use of 678bdt following the publication of a revised Policy constitutes your acceptance of those changes.
Our Privacy Commitments
The six cards below summarise the core data-protection principles that shape how 678bdt handles your information. Full details for each commitment are set out in the clauses that follow.
🛡️
SSL Encryption
All data transmitted between your device and 678bdt is encrypted using industry-standard TLS/SSL protocols. Your login credentials and payment details are never sent in plain text.
🚫
No Data Sales
678bdt does not sell, rent, or trade your personal data to third-party marketing companies. Your information is used solely for platform operations and legal compliance.
🎯
Purpose Limitation
We collect only the data necessary for a specific, stated purpose — account management, payment processing, or fraud prevention — and use it for
no other purpose without your explicit consent.
✏️
Your Right to Access
You may request a copy of the personal data 678bdt holds about you at any time by contacting our support team. We will respond within 30 calendar days.
🗑️
Right to Erasure
Subject to legal retention obligations, you may request deletion of your personal data when it is no longer necessary for the purpose for which it was collected.
🔒
Secure Storage
Personal data is stored on access-controlled servers with role-based permissions. Only authorised 678bdt personnel with a legitimate operational need may access your data.
Section 01
Personal Data We Collect
678bdt collects personal data through three channels: information you provide directly, information generated automatically by your use of the Platform, and information received from trusted third-party sources (such as payment processors and identity verification services). The table below summarises the categories we collect.
CLAUSE 1.1 — DATA PROVIDED BY YOU
Registration and Account Data
When you create a 678bdt account or update your profile, we collect:
Full legal name
Date of birth (to verify you are 21 years of age or older)
Email address
Mobile phone number (used for OTP verification)
Residential address (city and district)
Username and encrypted password
This data is required to create and maintain your account. Without it, we cannot provide platform services.
CLAUSE 1.2 — PAYMENT DATA
Financial and Transaction Information
When you make a deposit or request a withdrawal, we collect transactional data including your bKash, Nagad, Rocket, or Upay mobile wallet number (last four digits stored, full number tokenised), your bank account name and branch if using bank transfer, and a record of each transaction amount, timestamp, and status. We do not store full card numbers — card payments are processed entirely by our PCI-compliant payment gateway partners.
CLAUSE 1.3 — IDENTITY VERIFICATION DATA (KYC)
Documents Submitted for Verification
Where identity verification (KYC) is required — for example, before processing a large withdrawal or where fraud risk is flagged — we may collect scanned or photographed copies of:
National Identity Card (NID)
Passport (biographical page)
Driving licence
Utility bill or bank statement (as proof of address)
KYC documents are stored in an encrypted document vault with a strictly limited access list. They are retained only for as long as required by applicable legal and anti-money-laundering obligations.
CLAUSE 1.4 — AUTOMATICALLY COLLECTED DATA
Device, Usage, and Technical Data
When you access 678bdt, our servers and analytics systems automatically log:
IP address (used for fraud detection and geographic access controls)
Device type, operating system, and browser version
Session start and end times
Pages visited, games launched, and bet history
Referral source (the URL from which you arrived at 678bdt, if applicable)
This data is collected in aggregate for platform performance monitoring and security purposes. It is not used for cross-site tracking or behavioural advertising.
CLAUSE 1.5 — COOKIES AND SIMILAR TECHNOLOGIES
Session Cookies and Local Storage
678bdt uses strictly necessary session cookies to keep you logged in and maintain your session state. We do not use third-party advertising cookies or tracking pixels. Local storage may be used to save your language and display preferences. You may disable cookies via your browser settings, but doing so may prevent certain platform features from functioning correctly.
Section 02
How We Use Your Personal Data
678bdt processes your personal data only where we have a lawful basis to do so. The primary lawful bases are: (a) performance of a contract — processing necessary to provide you with the 678bdt service you have signed up for; (b) legitimate interests — fraud prevention, platform security, and service improvement; and (c) legal obligation — compliance with anti-money-laundering and identity-verification requirements. The following clauses set out the specific purposes for which we use your data.
CLAUSE 2.1 — ACCOUNT ADMINISTRATION
Providing and Managing the 678bdt Service
We use your registration data to create and maintain your account, authenticate your identity at login, process deposits and withdrawals, credit bonuses and promotional rewards, and respond to customer support enquiries. This processing is necessary for the performance of the contract between you and 678bdt.
CLAUSE 2.2 — FRAUD PREVENTION AND SECURITY
Protecting the Platform and Its Players
We analyse IP addresses, device fingerprints, login patterns, and transactional behaviour to detect and prevent fraudulent activity, multiple-account abuse, unauthorised access attempts, money laundering, and collusion. This processing is carried out on the basis of our legitimate interest in maintaining a safe and fair platform for all users.
CLAUSE 2.3 — RESPONSIBLE GAMING
Player Protection and Harm Minimisation
We monitor betting and deposit patterns to identify players who may be exhibiting signs of problem gambling behaviour. Where such patterns are detected, we may proactively offer responsible gaming tools — including deposit limits, time-outs, or a self-exclusion prompt — or our support team may reach out directly. This processing is carried out in the interest of player welfare and is consistent with our Responsible Gaming Policy.
CLAUSE 2.4 — SERVICE COMMUNICATIONS
Transactional and Promotional Messaging
We will send you transactional messages — deposit confirmations, withdrawal notifications, security alerts, and account status updates — via email and SMS to the contact details registered to your account. These communications are necessary for the performance of the service and cannot be opted out of while your account is active. Promotional communications (bonus offers, seasonal promotions for events like Eid, BPL, or T20 World Cup, and game announcements) are sent only where you have given explicit consent at registration or subsequently. You may withdraw promotional consent at any time by contacting [email protected].
CLAUSE 2.5 — PLATFORM IMPROVEMENT
Analytics and Performance Optimisation
Aggregated, anonymised usage data is used to understand how players interact with 678bdt, identify technical issues, prioritise new features, and improve game selection. This data does not identify any individual player and is processed solely for internal development purposes.
Section 03
Data Sharing and Third Parties
Core commitment: 678bdt does not sell, rent, or trade your personal data. Sharing occurs only with trusted service partners who require it to deliver a specific operational function, and only under binding confidentiality and data-processing agreements.
CLAUSE 3.1 — PAYMENT PROCESSORS
Mobile Wallets and Banking Partners
To process your deposits and withdrawals, we share the minimum necessary payment data with our payment processing partners — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. Each of these partners is bound by their own data protection obligations and applicable financial-sector regulations. 678bdt does not store full card or wallet credentials — these are managed entirely by the relevant payment gateway.
CLAUSE 3.2 — GAME PROVIDERS
Third-Party Software Studios
Games on the 678bdt platform are powered by independent studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Nolimit City, Spribe, and Ezugi. To deliver live games and record game results, a session token and anonymised player identifier may be shared with the relevant game provider. Personally identifiable information (name, email, phone number) is not shared with game providers. Each provider is contractually required to treat player session data confidentially.
CLAUSE 3.3 — IDENTITY VERIFICATION SERVICES
KYC and AML Service Providers
Where identity verification is required, we may share your submitted documents and personal details with a contracted KYC/AML verification service. These providers process your data solely for the purpose of identity verification and are prohibited from retaining or repurposing your data beyond that function.
CLAUSE 3.4 — LEGAL AND REGULATORY DISCLOSURE
Disclosure Required by Law
678bdt may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by a valid legal order, subpoena, or statutory obligation. We will notify you of any such disclosure where legally permitted to do so. We will not disclose data to law enforcement on the basis of informal requests that do not carry legal authority.
Section 04
Data Retention
678bdt retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The table below summarises our standard retention periods by data category.
RETENTION SCHEDULE
Standard Retention Periods
Data Category
Retention Period
Account registration data
Duration of account + 5 years after closure
Transaction records
7 years (AML legal requirement)
KYC / identity documents
5 years after account closure
Session and IP logs
12 months from session date
Support correspondence
3 years from last interaction
Marketing consent records
Until consent withdrawn + 1 year
Once a retention period expires, personal data is securely deleted or irreversibly anonymised. Anonymised aggregate data (which cannot be used to identify any individual) may be retained indefinitely for statistical and platform performance purposes.
Section 05
Your Data Rights
As a 678bdt player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days. We may ask you to verify your identity before processing the request.
CLAUSE 5.1 — RIGHT OF ACCESS
Requesting a Copy of Your Data
You may request a structured summary of the personal data 678bdt holds about you, the purposes for which it is processed, how long it will be retained, and any third parties with whom it has been shared. This is provided free of charge for one request per twelve-month period.
CLAUSE 5.2 — RIGHT TO RECTIFICATION
Correcting Inaccurate Data
If any personal data held about you is inaccurate or incomplete, you may request correction at any time. For account details such as your mobile number or email address, you may update these directly in your account settings. For identity documents or date-of-birth corrections, please contact our support team with documentary evidence.
CLAUSE 5.3 — RIGHT TO ERASURE
Requesting Deletion of Your Data
You may request deletion of your personal data where: (a) it is no longer necessary for the purpose for which it was collected; (b) you have withdrawn consent and there is no other lawful basis for processing; or (c) the data has been processed unlawfully. The right to erasure does not apply where retention is required by legal obligation (such as AML transaction records) or where the data is needed to establish, exercise, or defend legal claims.
CLAUSE 5.4 — RIGHT TO RESTRICTION
Limiting How We Use Your Data
You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is contested, or while a complaint about processing is under review. During a period of restriction, we will store your data but not actively process it, except where necessary for legal claims or with your explicit consent.
CLAUSE 5.5 — RIGHT TO OBJECT
Objecting to Legitimate-Interest Processing
Where 678bdt processes your data on the basis of legitimate interests — such as fraud detection or platform security analytics — you have the right to object. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or unless the processing is necessary for legal claims. Note that objecting to fraud-prevention processing may result in your account being suspended pending a manual review.
CLAUSE 5.6 — RIGHT TO WITHDRAW CONSENT
Revoking Previously Given Consent
Where processing is based on your consent — such as receiving promotional emails or SMS messages — you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal. It also does not affect processing carried out on a legal basis other than consent.
Section 06
Data Security
678bdt implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key technical and organisational measures include:
CLAUSE 6.1 — TECHNICAL SAFEGUARDS
Encryption, Access Control and Monitoring
TLS/SSL encryption on all data in transit between your device and 678bdt servers.
AES-256 encryption for sensitive data at rest, including identity documents and financial records.
Role-based access control (RBAC) ensuring that only authorised personnel with a specific operational need can access personal data.
Multi-factor authentication (MFA) required for all administrative access to systems holding personal data.
Intrusion detection and real-time monitoring with automated alerts for anomalous access patterns.
Regular penetration testing and vulnerability assessments carried out by independent security specialists.
CLAUSE 6.2 — BREACH NOTIFICATION
Response to Data Security Incidents
In the event of a personal data breach that poses a risk to your rights and freedoms, 678bdt will notify affected players without undue delay — and in any event within 72 hours of becoming aware of the breach — via the email address registered to your account. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures taken or proposed to address it.
CLAUSE 6.3 — YOUR RESPONSIBILITIES
Keeping Your Account Secure
While 678bdt takes robust measures to protect your data on our side, account security is a shared responsibility. You must use a strong, unique password for your 678bdt account, enable OTP/2FA where available, avoid accessing your account on public or shared devices, and notify [email protected] immediately if you suspect any unauthorised access. 678bdt is not liable for data loss or account compromise resulting from your failure to take reasonable precautions.
Section 07
Minors and Age Restriction
21+ Only. The 678bdt platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21.
If 678bdt becomes aware that personal data has been collected from a person under the age of 21 without verified parental consent, we will take immediate steps to delete that data and close the associated account. Any deposits made by an underage individual will be returned to the originating payment source, and any winnings accrued will be forfeited. If you are a parent or guardian and believe your child has registered on our platform, please contact us immediately at [email protected]. We will investigate and act within 48 hours of receiving your report.
Section 08
Contact and Privacy Enquiries
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how 678bdt handles your personal data, please contact our support team using the details below. All privacy-related correspondence is handled confidentially.
Privacy Contact:
Email: [email protected]
Subject line: Privacy Policy Enquiry
Response time: within 30 calendar days
Available 24/7 • English & Bengali • Bangladesh Standard Time (BST, UTC+6)
For formal data-rights requests (access, erasure, rectification, restriction), use the subject line "Data Rights Request" and include your registered email address and a brief description of your request. We may ask you to verify your identity before processing the request.
🎮 Continue Exploring 678bdt
Your Data Is Safe — Now Let's Play
Now that you understand how 678bdt protects your privacy, explore our full range of sports betting, live casino games, and slots. 21+ only. Play responsibly.