678fb Privacy Policy — How We Protect Your Personal Data

678fb ("we", "us", "our", "the Platform") is committed to protecting the personal data of all registered players and visitors. This Privacy Policy sets out in detail what personal information we collect about you, the purposes for which we process that information, with whom we share it, how long we retain it, and the rights you have in relation to your personal data. This Policy applies to all users of the 678fb website and mobile platform, regardless of their device or method of access. By registering an account with 678fb or by continuing to use our Services, you confirm that you have read and understood this Privacy Policy.

We approach data privacy practically: we collect the minimum personal data necessary to deliver our Services, process financial transactions, comply with anti-money-laundering obligations, and maintain a safe and fair gaming environment. We do not sell your personal data to third-party advertisers. We do not share your data with parties outside 678fb except where required to operate our platform, process your payments, verify your identity, or comply with applicable law.

678fb collects personal data from you directly — when you register, when you make a deposit or withdrawal, when you contact support, and when you use our Services. We also collect certain technical data automatically when you access the platform. The categories of personal data we collect are as follows.

678fb uses the personal data we collect only for legitimate purposes directly related to the operation of our platform and the delivery of Services to you. We do not use your data for purposes that are incompatible with those listed below.

678fb processes personal data only where a valid legal basis exists. The primary legal bases on which we rely when processing your data are set out below.

678fb does not sell your personal data to any third party. We share personal data only where it is strictly necessary for the operation of the platform, the processing of your transactions, compliance with legal obligations, or the protection of our legitimate interests. All third parties with whom we share data are required to handle that data securely and in accordance with applicable data protection standards.

We take contractual steps to ensure that any third party who receives personal data from 678fb is bound by appropriate data protection obligations and uses that data only for the specific purpose for which it was shared.

All financial transactions on 678fb are conducted in Bangladeshi Taka (BDT) through mobile wallet platforms — bKash, Nagad, Rocket and Upay. When you make a deposit or withdrawal, 678fb receives confirmation data from the relevant payment provider: this includes your mobile wallet number, the transaction amount and a transaction reference. 678fb does not store full payment credentials (such as mobile banking PINs or OTPs). Your mobile wallet PIN and OTP codes are entered directly into your wallet provider's own interface and are never transmitted to or stored by 678fb.

The mobile wallet numbers associated with your 678fb account are used solely for processing deposits and withdrawals, for fraud-prevention checks (including verifying that the payment method belongs to the account holder), and for KYC purposes where applicable. 678fb will never contact you to request your mobile banking PIN, OTP, or any sensitive payment credential. If you receive such a request claiming to be from 678fb, do not respond and report it to us immediately at [email protected].

678fb uses cookies and similar tracking technologies to operate the platform, maintain your login session, detect fraud, and — where you have consented — to analyse how players use the platform so we can improve our Services. A cookie is a small text file placed on your device by the platform when you visit it. Cookies do not contain your personal financial data or passwords.

Essential cookies — those required to log you in, keep your session active and maintain your account security — cannot be disabled without preventing the platform from functioning. Analytics and performance cookies, which help us understand usage patterns, are optional and can be managed through your browser settings. 678fb does not use third-party advertising cookies or cross-site tracking technologies that share your data with advertisers.

678fb implements industry-standard technical and organisational security measures to protect the personal data we hold from unauthorised access, disclosure, alteration or destruction. These measures include 256-bit SSL/TLS encryption for all data transmitted between your device and the 678fb platform; access controls that restrict access to personal data to authorised 678fb personnel only; secure, access-controlled server infrastructure; regular security reviews and vulnerability assessments; and internal data handling policies that govern how 678fb staff may access and process personal data.

While 678fb takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security against all possible threats. In the event of a data security incident that is likely to result in a risk to your rights or interests, 678fb will take appropriate steps to contain the incident and, where required, to notify affected users in a timely manner. If you believe your 678fb account has been compromised, you should contact [email protected] immediately.

678fb retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable law and regulatory obligations. In general, the retention periods we apply are as follows: account registration data and KYC documents are retained for the duration of your account plus a minimum of five years following account closure, in accordance with AML record-keeping requirements. Transaction records — deposits, withdrawals, bet histories and game session logs — are retained for a minimum of five years from the date of the transaction.

Support correspondence and complaint records are retained for a minimum of three years from the date of the last interaction. Technical logs (IP addresses, session logs) are retained for up to twelve months. Where 678fb is required by a regulatory authority or court to retain specific data for a longer period, we will comply with that requirement. Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that makes re-identification impossible.

As a user of 678fb, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected] with your registered mobile number and a clear description of your request.

678fb's Services are strictly available to individuals aged 21 years and over. We do not knowingly collect personal data from anyone under the age of 21. Age verification is a mandatory step in our account registration and KYC process. Where 678fb becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to close the relevant account, return any real-money balance where possible, and delete the personal data associated with that account. If you believe a minor has registered an account with 678fb, please notify us immediately at [email protected].

678fb reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our Services. When we make material changes to this Policy, we will update the "Last Updated" date at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of the 678fb platform following the publication of any updated version of this Policy constitutes your acknowledgement of the revised terms.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a privacy concern related to 678fb, please contact our support team. All privacy enquiries are handled in English and responded to within a reasonable timeframe during Bangladesh Standard Time (BST, UTC+6) business hours.

Privacy contact email: [email protected]. Please include your registered Bangladesh mobile number and a clear description of your privacy request or concern in all correspondence. 678fb is committed to responding to all privacy-related enquiries promptly and transparently.