b678 Privacy Policy

1.Introduction

b678 ("we", "us", "our") operates the online betting and casino platform accessible at https://b678.io. We are committed to protecting the privacy and personal data of every individual who interacts with the b678 platform, whether as a registered player or an anonymous visitor.

This Privacy Policy sets out in clear, plain English the categories of personal data b678 collects, the purposes for which that data is processed, the third parties with whom it may be shared, the periods for which it is retained, and the rights available to you in relation to your data.

This policy should be read alongside the b678 Terms & Conditions, which govern your contractual relationship with the b678 platform. Where any conflict arises between this Privacy Policy and the Terms & Conditions on a data-related matter, this Privacy Policy takes precedence.

2.Data We Collect

b678 collects the following categories of personal data, depending on how you interact with the platform:

b678 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data (other than responsible gaming records relevant to player protection), or biometric data.

3.How We Collect Data

b678 collects personal data through the following channels:

• Direct interactions: Data you provide when creating a b678 account, completing KYC verification, making a deposit or withdrawal, contacting support, or completing any form on the platform.
• Automated technologies: Technical and usage data collected automatically when you access b678, including data gathered via cookies, session tokens, and server log files. See Section 7 for full details on cookies.
• Third-party payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank when you initiate a deposit or withdrawal. b678 does not receive or store your full payment credentials — only the confirmation reference and wallet/account identifier needed to process your transaction.
• Identity verification services: Where b678 uses a third-party KYC provider to verify your identity document, that provider may return a verification result and a risk score to b678. b678 does not receive a copy of your raw identity document from the KYC provider unless you submit it directly to b678 support.
• Game providers: Aggregated gameplay data (e.g., game sessions, RTP results) may be passed to b678 by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi for platform analytics and responsible gaming monitoring purposes.

4.How We Use Your Data

b678 uses the personal data it collects for the following purposes:

• Account management: To create, maintain, and secure your b678 account, including login authentication and account recovery.
• Service delivery: To process your deposits and withdrawals in BDT, credit winnings to your account, and enable your access to betting markets, casino games, and all other b678 platform features.
• Identity verification: To carry out KYC checks required before processing withdrawals above ৳50,000 or where b678 has a compliance obligation to verify your identity.
• Fraud prevention and platform integrity: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and any other prohibited conduct described in the b678 Terms & Conditions.
• Responsible gaming: To monitor your betting patterns for indicators of problem gambling, to apply the deposit limits and self-exclusion settings you have requested, and to contact you if our responsible gaming algorithms identify behaviour that may indicate harm.
• Customer support: To respond to your support enquiries, handle complaints, and maintain records of our interactions for quality assurance purposes.
• Marketing communications: To send you promotional offers, bonus notifications, and seasonal promotions (e.g., BPL cricket, Eid, Pohela Boishakh specials) where you have opted in to receive such communications. You may opt out at any time via your account settings.
• Platform analytics and improvement: To understand how players use b678, identify technical issues, and improve the user experience — using aggregated, anonymised data wherever possible.
• Legal compliance: To comply with applicable laws, respond to lawful requests from authorities, and maintain financial records as required by anti-money-laundering regulations.

5.Legal Basis for Processing

b678 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil our contractual obligations to you under the b678 Terms & Conditions — including account creation, payment processing, and game access.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money-laundering requirements and age verification obligations.
• Legitimate interests: Processing carried out for b678's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — particularly for marketing communications. You may withdraw consent at any time by updating your preferences in your b678 account settings or by contacting support.

6.Data Sharing

b678 does not sell your personal data. We share personal data with third parties only in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive only the minimum data required to process your specific transaction. These providers operate under their own privacy policies and are independent data controllers for the data they process.
• KYC and identity verification providers: Where a third-party service is used to verify your identity documents, that provider receives only the data necessary to complete verification and is contractually prohibited from using your data for any other purpose.
• Game suppliers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other game providers may receive a pseudonymous player identifier and session data to deliver their games within the b678 platform. These providers do not receive your name, contact details, or financial information.
• Legal and regulatory authorities: b678 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by law or where we have a good-faith belief that disclosure is necessary to protect the rights, property, or safety of b678, its players, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of b678's business, personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy. Affected players will be notified in advance of any such transfer.

7.Cookies & Tracking Technologies

b678 uses cookies and similar tracking technologies to operate the platform, maintain your login session, and understand how players interact with the site. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function. These include session cookies that keep you logged in during your visit and security tokens that protect your account from cross-site request forgery. These cookies cannot be disabled.
• Functional cookies: Used to remember your preferences, such as your preferred language setting, display options, and recently viewed game categories. Disabling these cookies may affect your experience on the b678 platform.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate the b678 platform — including which pages are visited most frequently and where users encounter technical issues. This data helps b678 improve the platform experience. No personally identifiable information is included in analytics reports.
• Responsible gaming cookies: Used to track session duration and display session time reminders in accordance with b678's responsible gaming commitments. These cookies are strictly necessary for player protection and cannot be disabled.

You can manage your non-essential cookie preferences through your browser settings. Note that disabling certain cookies may limit access to some b678 features. b678 does not use third-party advertising cookies or cross-site tracking pixels.

8.Data Retention

b678 retains your personal data for the following periods, after which it is securely deleted or anonymised:

• Account data: Retained for the duration of your active b678 account and for a period of 5 years following permanent account closure, to meet standard financial compliance and anti-money-laundering record-keeping requirements.
• Transaction records: All deposit and withdrawal records in BDT are retained for a minimum of 5 years from the date of each transaction.
• KYC documents: Copies of identity documents submitted for verification are retained for 5 years from the date of submission or from the date of account closure, whichever is later.
• Support communications: Chat transcripts and email correspondence with b678 support are retained for 2 years from the date of the most recent interaction in each case.
• Technical and usage data: Server logs and session data are retained for 12 months on a rolling basis, after which they are automatically deleted.
• Responsible gaming records: Self-exclusion records and deposit limit histories are retained for the full duration of any active exclusion or restriction plus 5 years, to prevent re-registration in violation of a self-exclusion order.
• Marketing consent records: Records of your marketing opt-in or opt-out are retained for the duration of your account and for 2 years following account closure, as evidence of the consent basis for any communications sent.

9.Your Rights

As a b678 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact b678 support at [email protected] with your account username and a description of your request.

• Right of access: You may request a copy of the personal data b678 holds about you. b678 will provide this within 30 days of receiving a valid request.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held about you. You can update most account details directly in your b678 account settings without needing to contact support.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to b678's legal obligations to retain certain records (see Section 8).
• Right to restrict processing: You may request that b678 restrict processing of your data in certain circumstances, for example while a data accuracy dispute is being resolved.
• Right to data portability: You may request a copy of the personal data you have provided to b678 in a structured, commonly used, machine-readable format, where technically feasible.
• Right to object: You may object at any time to processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, though b678 may have compelling grounds to continue in certain cases.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.

b678 will respond to all valid data rights requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days, with notice provided to you within the initial 30-day period.

10.Children's Privacy

The b678 platform is strictly for adults aged 21 and above. b678 does not knowingly collect personal data from any individual under the age of 21. If you believe that a person under the age of 21 has created a b678 account or provided personal data to b678, please contact us immediately at [email protected]. b678 will take prompt action to close the account, void any associated wagers, and securely delete all personal data associated with the underage individual.

11.Security Measures

b678 implements the following technical and organisational security measures to protect your personal data:

• 256-bit SSL/TLS encryption on all data transmitted between your browser or device and the b678 servers, ensuring that your login credentials, financial data, and personal information cannot be intercepted in transit.
• Encrypted data storage for sensitive fields including passwords (stored as salted cryptographic hashes, never in plain text), payment wallet identifiers, and identity document references.
• Access controls: Role-based access controls ensure that b678 staff can only access personal data relevant to their specific job function. Access to player financial data is restricted to the payments and compliance teams.
• Regular security audits: b678 conducts periodic security reviews of its platform infrastructure, including vulnerability assessments and penetration testing, to identify and remediate risks before they can affect player data.
• Incident response: b678 maintains a documented data breach response procedure. In the event of a data breach that is likely to result in risk to your rights and freedoms, b678 will notify affected players without undue delay and no later than 72 hours after becoming aware of the breach.

While b678 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your b678 login credentials confidential and for logging out of your account on shared devices.

12.Third-Party Links

The b678 platform may contain references to third-party game providers and payment services. These third parties operate under their own privacy policies, which are entirely independent of this b678 Privacy Policy. b678 is not responsible for the privacy practices of any third-party service, and we encourage you to review the privacy policies of any third-party provider you interact with in connection with your b678 account — in particular bKash, Nagad, Rocket, and Upay when initiating BDT transactions.

13.Policy Updates

b678 reserves the right to update this Privacy Policy at any time. When material changes are made, b678 will notify registered players by email to the address associated with their account, and will display a prominent notification on the b678 platform homepage for a period of not less than 7 days prior to the revised policy taking effect.

The "Last Updated" date at the top of this policy reflects the date on which the most recent revision was published. Your continued use of the b678 platform after that date constitutes acceptance of the revised Privacy Policy. If you do not accept the revised policy, you should cease using the platform and contact support to arrange account closure.

b678 will not make retroactive changes to this Privacy Policy that reduce the privacy protections afforded to personal data already collected under the previous version of the policy.

14.Contact Us

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a privacy concern, please contact b678 using the details below. All contact details are provided as plain text — they are not clickable links.

• Email: [email protected]
• WhatsApp: +880 1700 000000
• Support Hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (UTC+6)

b678 aims to acknowledge all privacy-related requests within 48 hours and to provide a substantive response within 30 calendar days of receipt. For complex requests, an extension of up to 60 additional days may apply, with prior notice given to you.