678bad Privacy Policy

1. Who We Are and How to Contact Us

678bad operates the online gaming platform accessible at 678bad.pro. For all privacy-related enquiries, data access requests, or complaints regarding the handling of your personal information, you may contact our data team at the following address:

Email: [email protected]
Support hours: 9:00 AM – 12:00 AM (BST, UTC+6)

We aim to respond to all privacy-related requests within five business days. Complex requests involving data extraction or deletion may take up to 30 days to fulfil, and we will notify you of the expected timeline upon receipt of your request.

2. Information We Collect

We collect personal information in the following categories:

• Registration data: Full name, date of birth, mobile phone number, email address, and city of residence (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar).
• Identity verification data: National ID number, passport scan, or other government-issued identification documents submitted during the Know Your Customer (KYC) process.
• Payment data: Mobile money account references (bKash, Nagad, Rocket, Upay), bank account details (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank), transaction amounts, and timestamps. Full payment credentials are never stored.
• Activity data: Game history, betting records, session duration, bonus usage, and account transaction logs.
• Technical data: IP address, device type, operating system, browser type, referral URL, and geolocation data (country/city level only).
• Communications data: Records of support chat conversations, emails, and any other correspondence you initiate with our team.
• Cookie and tracking data: Session cookies, preference cookies, and analytics identifiers as described in Section 8 of this Policy.

3. How We Use Your Information

678bad processes your personal data for the following lawful purposes:

• To create and manage your player account and verify your identity and age (21+ requirement).
• To process deposits and withdrawals via your chosen payment method and maintain accurate financial records.
• To deliver the games, betting markets, and Platform features you have requested.
• To detect, investigate, and prevent fraud, money laundering, bonus abuse, and other prohibited conduct.
• To comply with applicable legal and regulatory obligations including anti-money laundering (AML) checks and record-keeping requirements.
• To provide customer support and respond to your enquiries, complaints, and data subject requests.
• To send you service communications such as deposit confirmations, withdrawal notifications, and account security alerts.
• To send you promotional communications about bonuses, game launches, and seasonal offers — only where you have given explicit consent.
• To analyse Platform usage patterns and improve the performance, design, and content of 678bad.
• To enforce our Terms & Conditions and protect the rights and safety of 678bad and other players.

4. Legal Basis for Processing

678bad processes your personal data on one or more of the following legal grounds:

• Contractual necessity: Processing required to perform the agreement between you and 678bad, including account management and payment processing.
• Legal obligation: Processing required to comply with applicable laws, including identity verification, AML compliance, and financial record-keeping.
• Legitimate interests: Processing carried out to protect 678bad from fraud and abuse, improve Platform security, and conduct internal analytics — provided these interests are not overridden by your rights.
• Consent: Processing for optional purposes such as marketing communications, where you have given clear, informed consent that can be withdrawn at any time.

5. Sharing of Personal Data

678bad does not sell or rent your personal data. We may share your information with the following categories of recipient, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment processors: bKash, Nagad, Rocket, Upay, and banking partners, solely to process your financial transactions.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other providers whose games appear on the Platform. These providers receive only the minimum data required to operate their games (e.g., a pseudonymous player identifier and bet values).
• Identity verification services: Third-party KYC and AML service providers engaged to verify player identity and screen against sanctions lists.
• IT and hosting providers: Cloud infrastructure and server providers who process data on our behalf under strict data processing agreements.
• Legal and regulatory authorities: Where disclosure is required by law, court order, or regulatory demand, we will share the minimum information necessary to comply.

All third-party service providers are contractually required to process your data only for the specified purpose and to maintain appropriate security standards. We do not authorise any third party to use your data for their own independent marketing purposes.

6. Data Retention

678bad retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

After the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical analysis.

7. Your Rights Over Your Personal Data

Subject to applicable law, you have the following rights in relation to the personal data 678bad holds about you:

To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We may ask you to verify your identity before processing your request. We will respond within 30 days. Please note that some rights are subject to legal limitations — for example, we cannot delete data that we are legally required to retain for AML or financial reporting purposes.

8. Cookies and Tracking Technologies

678bad uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse how the Platform is used. The following types of cookies may be active when you use 678bad:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies and load-balancing cookies. They cannot be disabled without breaking core functionality.
• Functional cookies: Store your preferences such as language, currency display (৳ Taka), and game lobby layout settings between sessions.
• Analytics cookies: Help us understand how players navigate the Platform so that we can identify performance issues and improve the user experience. Data collected is aggregated and anonymised where possible.
• Security cookies: Used to detect fraudulent login attempts, bot traffic, and abnormal session behaviour.

You can control non-essential cookies through your device or browser settings. Disabling functional cookies may affect your experience on the Platform. 678bad does not use third-party advertising cookies or cross-site tracking cookies for ad targeting purposes.

9. Children and Minors

678bad is strictly an adults-only platform. No person under the age of 21 may register or use any service on 678bad. We do not knowingly collect personal data from individuals under 21 years of age. If we become aware that we have inadvertently collected data from a minor, we will delete that data and close the associated account without notice. If you believe that a minor has registered on 678bad, please notify us immediately at [email protected].

10. Security of Your Personal Data

678bad implements a multi-layered security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our key security measures include:

• SSL/TLS encryption for all data in transit between your device and our servers.
• At-rest encryption for sensitive data fields including identity documents and payment references.
• One-way cryptographic hashing for account passwords — 678bad staff cannot view your password in plain text.
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis.
• Regular independent security assessments and penetration testing of the Platform.
• Automated monitoring systems that detect and alert on anomalous access patterns or potential data exfiltration attempts.

While we implement robust safeguards, no online platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying us immediately if you suspect any unauthorised access to your account.

11. Changes to This Privacy Policy

678bad may revise this Privacy Policy at any time. When we make changes, the updated Policy will be posted at 678bad.pro/privacy-policy with a revised "Last updated" date. Where changes are material — such as a new category of data collection or a new sharing arrangement — we will notify registered players directly via their registered mobile number or email address. Your continued use of the Platform after the effective date of any revision constitutes acceptance of the updated Policy. If you disagree with a revision, you should stop using the Platform and may request account closure by contacting support.