678nd Privacy Policy

678nd collects personal data from users in several ways — directly when you register and use the platform, automatically when you interact with the 678nd website, and in some cases from third-party verification or payment partners. The categories of personal data we collect are described below.

1.1 Registration and Account Data

When you create a 678nd account, you are required to provide certain personal information to establish your identity and set up your account. This includes your full legal name, date of birth, gender, residential address (including city — for example, Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar), email address, and mobile phone number. You will also choose a username and password. All of this data is mandatory for account creation — without it, we cannot create or operate a verified account for you.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we may request and collect copies of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence. We may also collect proof of address documents such as a utility bill or bank statement, and proof of ownership of your registered payment method. These documents are used exclusively for identity verification and fraud prevention purposes and are stored securely in accordance with the data retention policy described in Section 5 of this Privacy Policy.

1.3 Financial and Transaction Data

To process deposits and withdrawals in Bangladeshi Taka (BDT), 678nd collects and retains records of all financial transactions conducted on your account. This includes the payment method used (such as your registered bKash mobile number, Nagad account, Rocket account, Upay account, or bank account identifier), the amount deposited or withdrawn, the date and time of each transaction, and the transaction reference number. 678nd does not store full card numbers, card verification values (CVV), or complete mobile banking PINs — this sensitive authentication data is handled exclusively by the relevant payment provider.

1.4 Betting and Gaming Activity Data

678nd maintains a complete record of all betting and gaming activity conducted on your account. This includes the games played (slots, live casino, sports betting markets), bets placed, bet amounts, outcomes, winnings, losses, bonus claims, and wagering activity. This data is used to operate your account, settle bets correctly, calculate wagering requirement progress, detect unusual patterns that may indicate fraud or problem gambling, and produce the account statement available in your account dashboard.

1.5 Technical and Usage Data

When you access the 678nd website or mobile platform, our servers automatically collect certain technical information including your IP address, device type (desktop, mobile, tablet), operating system, browser type and version, screen resolution, referring URL, pages visited within the 678nd site, session duration, and interaction data such as clicks and scrolls. This data is collected automatically via server logs and cookies as described in Section 4 of this Privacy Policy. It is used to ensure the platform operates correctly, to detect and prevent unauthorised access, and to improve the overall user experience.

1.6 Communications Data

When you contact 678nd customer support — whether by email to [email protected] or through any in-platform messaging tool — we retain records of those communications, including the content of your messages, your contact details, and the nature and resolution of any support query or complaint. This data allows us to maintain continuity of service and to resolve disputes accurately.

678nd does not sell your personal data to third parties. However, to operate the platform and fulfil our legal obligations, we share certain categories of personal data with a limited set of trusted partners and authorities as described below.

3.1 Payment Processing Partners

To process your deposits and withdrawals in BDT, 678nd shares the minimum necessary financial data with our payment processing partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and international card networks such as Visa and Mastercard. The data shared is limited to what is required to complete the specific transaction — for example, your registered mobile number for a bKash transfer, or your bank account reference for a bank transfer. Payment partners are contractually required to handle your data securely and to use it only for transaction processing purposes.

3.2 Game Technology Providers

The casino and slot games available on 678nd are provided by third-party game studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe. When you play a game, certain session data — including your account identifier, bet amounts, and game outcomes — is transmitted to the relevant game provider's systems to facilitate gameplay and enable correct settlement. Game providers are contractually bound to process this data only for the purpose of delivering and certifying the fairness of their games.

3.3 Identity Verification Services

To support our KYC verification process, 678nd may share identity document data with specialist third-party identity verification service providers. These providers use automated document authentication and biometric matching technologies to confirm the validity of identity documents submitted by users. All identity verification partners are contractually required to handle document data with the highest levels of security and to retain it only for as long as is necessary to complete the verification process.

3.4 Legal and Regulatory Disclosure

678nd may disclose your personal data to relevant authorities — including law enforcement agencies, financial intelligence units, or courts — where we are legally required to do so, where disclosure is necessary to prevent or detect fraud or crime, or where we receive a valid legal order or request requiring such disclosure. 678nd will only disclose the minimum data necessary to comply with such requests and, where legally permitted, will attempt to notify you of any such disclosure.

3.5 Corporate Transactions

In the event that 678nd undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring or successor entity as part of that transaction. In such circumstances, 678nd will ensure that the acquiring entity is bound by data protection obligations that are at least as protective as those described in this Privacy Policy, and will notify registered users of any such change via the registered email address on their account.

678nd retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve any disputes or enforce our agreements. The retention periods applicable to the main categories of data held by 678nd are outlined below.

5.1 Active Account Data

While your 678nd account remains active, we retain all account data — including registration information, KYC documents, transaction records, and betting activity history — for the lifetime of your account. This data is necessary to operate your account, maintain your account statement, verify your identity for withdrawal processing, and support our responsible gaming monitoring obligations.

5.2 Post-Closure Retention

Following the closure of your 678nd account — whether at your request, due to inactivity, or as a result of enforcement action — 678nd retains certain categories of personal data for a defined period as required by applicable law and our operational obligations. Specifically: account registration and KYC data is retained for a minimum of five years after account closure; financial transaction records are retained for a minimum of five years after the transaction date; communications records are retained for a minimum of three years after the communication was made. These retention periods reflect our obligations under anti-money laundering legislation and general record-keeping requirements.

5.3 Data Deletion After Retention Period

Once the applicable retention period for a category of data has expired and there is no longer a legitimate basis for continued processing, 678nd will securely delete or anonymise the data in accordance with our internal data disposal procedures. Anonymised data — from which all identifying information has been irreversibly removed — may be retained indefinitely for statistical and research purposes, as it can no longer be associated with any individual user.

5.4 Self-Exclusion Records

Where a user has applied for self-exclusion under 678nd's responsible gaming programme, the record of that self-exclusion is retained for the full duration of the exclusion period and for a minimum of five years following the end of the exclusion period. This extended retention is necessary to prevent re-registration by self-excluded users and to document compliance with responsible gaming obligations.

As a 678nd user, you have a number of rights in relation to the personal data we hold about you. 678nd is committed to facilitating the exercise of these rights promptly and without undue obstacles. The rights available to you are described below.

7.1 Right of Access

You have the right to request a copy of the personal data that 678nd holds about you, along with information about the purposes for which it is processed, the categories of data held, and the third parties with whom it has been shared. This is commonly referred to as a Subject Access Request (SAR). To submit a SAR, contact [email protected] with the subject line "Data Access Request" and include your registered email address and account username so that we can identify your account. 678nd will respond to valid SARs within 30 days of receipt.

7.2 Right to Rectification

If any personal data held by 678nd about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. You can update many of your account details directly through your account settings. For corrections to KYC or identity information, please contact [email protected] and provide supporting documentation confirming the correct information.

7.3 Right to Erasure

You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, where you have withdrawn your consent and no other lawful basis applies, or where the data has been processed unlawfully. Please note that 678nd may be unable to delete certain categories of data where retention is required by law — for example, transaction records subject to anti-money laundering retention obligations. In such cases, we will explain the specific legal basis for continued retention.

7.4 Right to Restrict Processing

You have the right to request that 678nd restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or where you have objected to processing based on legitimate interests pending determination of whether our interests override yours. Where processing is restricted, 678nd will continue to store the relevant data but will not process it for any other purpose until the restriction is lifted.

7.5 Right to Withdraw Consent

Where 678nd processes your personal data on the basis of your consent — such as for marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. You can withdraw your consent to marketing communications via your account preferences or by contacting [email protected].

7.6 Right to Object

You have the right to object to the processing of your personal data where that processing is based on 678nd's legitimate interests. Upon receipt of an objection, 678nd will review whether its legitimate interests are overridden by your rights and interests in the specific circumstances. If we determine that your objection is valid, we will cease the relevant processing. Note that objections to processing that is strictly necessary for the performance of your account contract (such as transaction processing or bet settlement) cannot be upheld, as that processing is necessary to provide the service you have contracted for.