d678 Privacy Policy

1. Data Controller Information

d678 ("we", "us", "our") is the data controller responsible for the personal information collected and processed through the d678 platform at d678.bet. As data controller, d678 determines the purposes and means by which personal data is processed in connection with the operation of our online betting and casino services.

If you have any questions, concerns, or requests relating to the processing of your personal data, you may contact the d678 data protection team directly using the details below. All privacy-related enquiries will be handled with strict confidentiality and responded to within a reasonable timeframe.

By registering an account on d678 or by continuing to use the platform after this Privacy Policy has been published or updated, you acknowledge that you have read this Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you should not use d678 and should contact us to request account closure.

2. Data We Collect

d678 collects personal data from players through several channels: directly when you register an account or contact support, automatically when you use the platform, and in some cases from third-party identity verification services. The categories of data we collect are described below.

2.1 Registration and Identity Data

When you create a d678 account, we collect the following information:

• Full legal name;
• Date of birth (for age verification purposes);
• Residential address, including city and country (e.g., Dhaka, Chittagong, Sylhet);
• Email address;
• Mobile phone number;
• Username and encrypted password.

2.2 Identity Verification (KYC) Data

To comply with Know Your Customer (KYC) obligations and to prevent fraud and underage gambling, d678 may request copies of identity documents, including:

• Bangladesh National Identity Card (NID) or passport;
• Proof of residential address (e.g., utility bill or bank statement dated within the last 90 days);
• Proof of payment method ownership (e.g., a screenshot showing your name associated with your bKash or Nagad account).

2.3 Financial and Transaction Data

When you make deposits or withdrawals, d678 records transaction details including the payment method used (e.g., bKash, Nagad, Rocket, Visa), transaction amounts in Bangladeshi Taka (BDT), transaction timestamps, and reference numbers. d678 does not store full card numbers or mobile banking PINs — payment processing is handled by secure third-party payment processors.

2.4 Betting and Gaming Activity Data

d678 maintains a full record of your platform activity, including bets placed, games played, stakes, odds accepted, winnings, bonus usage, and session durations. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

2.5 Technical and Device Data

When you access d678, we automatically collect certain technical information, including:

• IP address and approximate geographic location;
• Browser type and version;
• Operating system and device type;
• Pages visited, time spent, and click-path data;
• Referring URL (the website or link that directed you to d678).

2.6 Communications Data

If you contact d678's customer support team via email or live chat, we retain a record of the communication, including the content of messages, timestamps, and the support agent's responses. This data is used to resolve your enquiry, train support staff, and maintain a history of your interactions with d678.

3. How We Use Your Data

d678 uses the personal data we collect for defined, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The table below summarises how d678 uses each category of data and the legal basis for that processing.

3.1 Marketing Communications

d678 may send promotional emails, bonus notifications, and event announcements (such as BPL cricket season offers or Eid promotions) to players who have opted in to marketing communications during registration or subsequently through account settings. You may withdraw your consent to receive marketing communications at any time by updating your notification preferences in your account settings or by contacting support at [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

3.2 Automated Decision-Making

d678 uses automated processes to flag accounts for review in cases where unusual betting patterns, multiple account indicators, or potential fraud signals are detected. These automated flags do not result in immediate automated account closure — all flagged accounts are reviewed by a human compliance team member before any action is taken. Players have the right to request human review of any decision that materially affects their account.

4. Cookies & Tracking

d678 uses cookies and similar tracking technologies on the d678.bet website to ensure the platform functions correctly, to analyse usage patterns, and to personalise content where applicable. A cookie is a small text file placed on your device by the website server; it allows d678 to recognise your browser on subsequent visits.

4.1 Types of Cookies Used

• Strictly Necessary Cookies: These are essential for the platform to function. They enable session management, user authentication, and security features. Without these cookies, core platform services cannot be delivered. These cookies cannot be disabled.
• Performance & Analytics Cookies: These cookies collect anonymised data about how visitors use d678.bet — including which pages are visited most frequently and whether users encounter error messages. This data helps d678 improve the platform experience.
• Functional Cookies: These cookies remember your preferences, such as your language setting, preferred currency display, and responsible gaming settings, so you do not need to re-enter them on each visit.
• Targeting Cookies: These are used only if you have consented to receive personalised promotional content. They help d678 display relevant offers based on your betting activity and preferences.

4.2 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to refuse non-essential cookies, delete existing cookies, or receive a notification before a cookie is placed. Please be aware that disabling cookies may affect the functionality of the d678 platform — in particular, disabling strictly necessary cookies may prevent you from logging in or completing transactions.

5. Data Sharing & Third Parties

d678 does not sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes. However, the operation of a secure, compliant online betting platform requires that certain categories of personal data be shared with trusted third-party service providers and, in defined circumstances, with regulatory or law enforcement authorities.

5.1 Service Providers

d678 shares data with third-party companies that perform services on our behalf, including:

• Payment processors: bKash, Nagad, Rocket, Upay, and card payment networks (Visa, Mastercard) receive transaction data necessary to process your deposits and withdrawals securely;
• Identity verification providers: KYC and age verification services that authenticate the identity documents submitted by players;
• Game software providers: Casino and sports betting software suppliers (such as Pragmatic Play, Evolution Gaming, Spribe, and others) receive anonymised player session data to deliver their games on the d678 platform;
• IT and hosting providers: Cloud hosting and server infrastructure providers that physically store d678's databases and application code;
• Customer support platforms: Software services used to manage and respond to player support enquiries.

All third-party service providers engaged by d678 are required to process personal data only on d678's instructions and to maintain appropriate security measures consistent with the standards set out in this Privacy Policy.

5.2 Legal and Regulatory Disclosure

d678 may disclose personal data to government authorities, law enforcement agencies, financial intelligence units, or regulatory bodies where we are legally required to do so, or where disclosure is necessary to prevent fraud, money laundering, or other criminal activity. Such disclosures will be made only to the extent required by the applicable legal obligation.

5.3 Business Transfers

In the event that d678 undergoes a merger, acquisition, asset sale, or similar corporate restructuring, personal data held about registered players may form part of the assets transferred to the acquiring entity. In such circumstances, d678 will notify affected players before their personal data is transferred and becomes subject to a different privacy policy.

6. Data Retention

d678 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods applied to the main categories of personal data are summarised below.

Once the applicable retention period expires, d678 will securely delete or anonymise the relevant personal data so that it can no longer be associated with an identifiable individual. Where data is anonymised rather than deleted, the anonymised data may be retained for statistical and analytical purposes without further limitation.

7. Your Privacy Rights

As a d678 player, you hold a set of rights in relation to your personal data. d678 is committed to honouring these rights and will respond to all valid requests within a reasonable timeframe — ordinarily within 30 calendar days of receipt, and no later than 60 days in cases of complexity or volume.

7.1 Right of Access

You have the right to request a copy of the personal data that d678 holds about you, along with information about how that data is being used. This is sometimes referred to as a Subject Access Request (SAR). To submit a SAR, please contact [email protected] with the subject line "Data Access Request" and include your registered email address and a copy of a valid identity document for verification purposes.

7.2 Right to Rectification

If any personal data held by d678 about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating a phone number or address) can typically be made directly through your account settings. For corrections to identity or KYC data, please contact support directly.

7.3 Right to Erasure

You may request that d678 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. Please note that this right is not absolute — d678 may be required to retain certain data to comply with legal obligations, even following a valid erasure request, as outlined in Section 6.

7.4 Right to Restrict Processing

You have the right to request that d678 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified, or where you have objected to processing based on legitimate interests and that objection is being assessed.

7.5 Right to Object to Marketing

Where d678 is processing your personal data for direct marketing purposes, you have the absolute right to object to that processing at any time. Upon receipt of a valid objection, d678 will cease processing your data for marketing purposes immediately. You may exercise this right via your account notification settings or by contacting [email protected].

7.6 How to Exercise Your Rights

To exercise any of the rights described in this section, please contact the d678 privacy team at [email protected]. We may need to verify your identity before processing your request to ensure that personal data is not disclosed to an unauthorised party. d678 will not charge a fee for processing legitimate privacy rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

8. Data Security

d678 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. While no online platform can guarantee absolute security, d678 applies security standards consistent with the sensitivity of the data we hold and the risks posed by our operating environment.

8.1 Technical Security Measures

• Encryption in transit: All data transmitted between your browser or device and the d678 servers is encrypted using TLS (Transport Layer Security) protocol;
• Encryption at rest: Sensitive personal data stored in d678's databases — including passwords (stored only as salted cryptographic hashes) and KYC documents — is encrypted at rest;
• Access controls: Access to personal data within d678's systems is restricted on a need-to-know basis. Staff members are granted access only to the data categories required to perform their specific role;
• Intrusion detection: d678's technical infrastructure is monitored continuously for signs of unauthorised access, unusual traffic patterns, or potential security incidents.

8.2 Organisational Security Measures

• All d678 staff and contractors who handle personal data are subject to confidentiality obligations;
• Staff receive data protection training appropriate to their role and level of data access;
• d678 conducts periodic internal reviews of data processing practices to identify and address security risks.

8.3 Data Breach Response

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, d678 will take immediate steps to contain the breach, assess its scope and impact, and notify affected players without undue delay. Notifications will be sent to the email address registered on the affected player's d678 account and will include a description of the breach, the categories of data affected, the likely consequences, and the steps d678 is taking to address it.

8.4 Your Role in Security

d678 cannot guarantee the security of data transmitted to us if that transmission is made over an insecure network. You are responsible for ensuring that any device used to access d678 is protected with up-to-date antivirus and security software, and that you do not share your account credentials with any third party. If you suspect that your d678 account has been compromised, please contact support immediately at [email protected].

8.5 Changes to This Privacy Policy

d678 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. Material changes will be communicated to registered players by email at least 14 days before the updated Policy takes effect. The effective date at the top of this page will always reflect the date of the most recent revision. Continued use of d678 following notification of a material change constitutes acceptance of the revised Privacy Policy.