t678 Privacy Policy —
Your Data Rights & Our Obligations
At t678, protecting the personal information of our players is a core responsibility, not an afterthought. This Privacy Policy explains in plain, formal English exactly what data we collect, why we collect it, how we use and store it, who we may share it with, and what rights you hold over your own information. We encourage every t678 player to read this document fully before registering an account.
Secure Data Handling
All personal data submitted to t678 is protected by industry-standard SSL encryption in transit and AES-256 encryption at rest. Your information is never stored in plain text and is only accessible to authorised t678 personnel on a strict need-to-know basis.
You Control Your Data
t678 players hold meaningful rights over their personal data, including the right to access, correct, restrict, and in applicable circumstances request deletion of the information we hold. Submit any data rights request to [email protected] and we will respond within 30 days.
No Unauthorised Selling
t678 does not sell, rent, or lease your personal data to third-party advertising networks or data brokers. Any sharing of your data is limited strictly to the operational partners required to deliver our platform and comply with legal obligations in Bangladesh.
Transparent Cookie Use
t678 uses cookies and similar technologies solely to keep your session active, remember your preferences, and measure platform performance. We do not deploy third-party advertising or cross-site tracking cookies. Full details are provided in our Cookies section below.
Verified Payment Security
When you deposit or withdraw via bKash, Nagad, Rocket, or Upay, t678 communicates exclusively through each provider's official encrypted API. We never store your mobile wallet PIN, bank account password, or card CVV on our servers at any time.
Age & Identity Verification
Identity documents submitted during the t678 KYC verification process are held in an isolated, encrypted document store with strictly limited access. Verification documents are used exclusively for age and identity confirmation and are never shared with unaffiliated parties.
1 Information We Collect
t678 collects personal data about you when you register an account, use the platform, make deposits or withdrawals, participate in promotions, or contact our support team. We collect only the minimum data necessary to provide a safe, compliant, and fully functional service to players based in Bangladesh.
Registration & Identity Data
When you create a t678 account, we collect the following information directly from you:
- Full legal name as it appears on your government-issued identification document;
- Date of birth — used to verify that you meet the 18+ age requirement;
- Email address — used for account communications, security alerts, and promotional messages (where opted in);
- Mobile phone number — used for two-factor authentication and to link your bKash or Nagad mobile banking account;
- Residential address in Bangladesh — required for identity verification and fraud prevention purposes;
- Username and encrypted password — stored in hashed form; t678 never stores passwords in plain text.
Identity Verification (KYC) Documents
To comply with our age verification and anti-money-laundering obligations, t678 may request copies of supporting documents, including your National ID Card (NID), passport, driving licence, or utility bill. These documents are stored in an encrypted, isolated document management system and are accessible only to designated compliance personnel.
Financial Transaction Data
t678 records details of all deposits and withdrawals processed through your account, including the payment method used (bKash, Nagad, Rocket, Upay, or bank transfer), transaction reference numbers, amounts in BDT, timestamps, and transaction status. t678 does not store your full mobile banking credentials or bank account login details.
Technical & Usage Data
In the course of your use of the t678 platform, we automatically collect certain technical data, including:
- IP address and approximate geolocation (country and city level);
- Device type, operating system, and browser version;
- Session duration, pages visited, games played, and betting activity logs;
- Cookie identifiers and session tokens (see the Cookies section for full details);
- Error logs and crash reports generated by the platform software.
2 How We Use Your Data
t678 uses the personal data we collect exclusively for the purposes set out in this Privacy Policy. We do not use your data in ways that are incompatible with those purposes, and we do not subject your data to automated decision-making that produces legal or similarly significant effects without human oversight.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation & management | Name, email, phone, date of birth, address | Contractual necessity |
| Age & identity verification | NID / passport, date of birth, address | Legal obligation |
| Payment processing | Payment method identifier, transaction records | Contractual necessity |
| Fraud prevention & security | IP address, device data, transaction patterns | Legitimate interest |
| Customer support | Account data, communication history | Contractual necessity |
| Responsible gaming monitoring | Session data, betting activity, self-exclusion status | Legal obligation / Legitimate interest |
| Platform analytics & improvement | Usage logs, error reports, session data | Legitimate interest |
| Promotional communications | Email address, game preferences | Consent (opt-in only) |
Marketing Communications
t678 will only send you promotional emails, SMS notifications, or in-platform messages about bonuses, new games, or special offers if you have actively opted in to receive such communications during registration or via your account settings. You may withdraw your marketing consent at any time by updating your notification preferences in your account dashboard or by emailing [email protected].
Withdrawing marketing consent does not affect transactional communications such as deposit confirmations, withdrawal notifications, security alerts, or mandatory policy update notices, which are sent as part of the service regardless of your marketing preferences.
3 Data Sharing & Third Parties
t678 does not sell, rent, or trade your personal data to third parties for their own commercial purposes under any circumstances. We share personal data only where it is strictly necessary to deliver the t678 service, comply with legal requirements, or protect the security of the platform and its players.
Operational Service Providers
To operate the t678 platform, we engage a limited number of trusted third-party service providers who process data on our behalf under binding data processing agreements. These include:
- Payment processors: bKash, Nagad, Rocket, and Upay receive the minimum transaction data required to authorise and complete your deposit or withdrawal. These providers operate under their own privacy policies and are subject to Bangladesh Bank regulations;
- Identity verification partners: Third-party KYC providers may process identity document images to assist with age and identity verification. All such partners are contractually bound to process your data solely for verification purposes;
- Cloud infrastructure providers: t678's platform is hosted on secure cloud infrastructure. Our hosting partners have access to server-level data as part of their service delivery obligations, subject to strict confidentiality agreements;
- Game software providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session identifiers and game-related data to deliver their games within the t678 platform. No directly identifiable personal data (such as your NID number or bank account details) is shared with game providers.
Legal Disclosure
t678 may disclose your personal data to regulatory authorities, law enforcement agencies, financial intelligence units, or courts where we are legally obligated to do so — for example, in connection with anti-money-laundering investigations, fraud inquiries, or court orders. We will notify you of any such disclosure where we are legally permitted to do so.
4 Cookies & Tracking Technologies
t678 uses cookies and similar technologies (including local storage and session tokens) to maintain the functionality of our platform, remember your preferences, and monitor aggregate platform performance. We do not use third-party advertising cookies or cross-site tracking technologies.
Types of Cookies We Use
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintains your authenticated session, prevents session hijacking, enables secure login and account navigation | Session (deleted on logout) |
| Functional / Preference | Remembers your language preference, game display settings, and notification choices between visits | Up to 12 months |
| Analytics | Collects anonymised data on page visits, feature usage, and error events to improve platform performance. No personally identifiable data is included in analytics reports | Up to 12 months |
| Security | Detects suspicious login attempts, rate-limits brute-force access, and validates form submissions against CSRF attacks | Session or up to 30 days |
Managing Cookies
You may configure your browser to block or delete cookies at any time. However, disabling strictly necessary cookies will prevent you from logging into your t678 account, as these cookies are essential to the authentication process. Disabling functional cookies may cause your display preferences to reset between visits. t678 does not gate access to informational content behind cookie consent, and analytics cookies do not affect your ability to use the platform.
For instructions on managing cookies in your specific browser (Chrome, Firefox, Samsung Internet, UC Browser, or others commonly used in Bangladesh), please refer to your browser's help documentation.
5 Data Retention & Storage
t678 retains your personal data only for as long as is necessary for the purposes described in this Privacy Policy, or for as long as we are required to retain it by applicable legal or regulatory obligations. The following retention periods apply as a general guide:
- Account registration data (name, email, date of birth, address): Retained for the lifetime of your account and for a minimum of five years following account closure, to comply with anti-money-laundering record-keeping obligations;
- Financial transaction records (deposit and withdrawal history): Retained for a minimum of five years from the date of each transaction;
- KYC identity verification documents: Retained for the duration of the account and for five years post-closure, unless a longer period is required by applicable law;
- Customer support communications: Retained for three years from the date of the most recent communication in a given support thread;
- Marketing consent records: Retained for three years from the date consent was last given or withdrawn, to maintain an auditable record of your preferences;
- Technical logs and session data: Retained for up to 12 months in live systems, after which they are anonymised or deleted.
Storage Location & Transfers
t678's primary data storage infrastructure is located in secure data centres serving the South and Southeast Asian region. Where data is processed by a third-party service provider located outside Bangladesh, t678 ensures that appropriate contractual safeguards are in place — including standard contractual clauses and data processing agreements — to protect your personal data to a standard equivalent to that applied within Bangladesh.
6 Your Data Rights
As a t678 player, you hold a number of rights in relation to the personal data we hold about you. t678 is committed to honouring these rights promptly and without unnecessary obstruction. To exercise any of the rights listed below, please contact us at [email protected] with the subject line "Data Rights Request — [Your Account Email]".
- Right of Access: You have the right to request a copy of the personal data t678 holds about you, together with information about how it is being used. t678 will provide this information within 30 calendar days of receiving a valid request.
- Right to Rectification: If any personal data t678 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For most account data, you may update your information directly through the account settings panel.
- Right to Erasure: In certain circumstances, you may request that t678 delete your personal data. This right is subject to limitations where retention is required by law — for example, financial transaction records must be retained for anti-money-laundering compliance and cannot be deleted on request within the mandatory retention period.
- Right to Restriction: You may request that t678 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of your data and we are in the process of verifying it.
- Right to Object: You have the right to object to t678's processing of your personal data where that processing is based on our legitimate interests. You may also object to the use of your data for direct marketing at any time, with immediate effect.
- Right to Data Portability: Where t678 processes your data by automated means on the basis of consent or contractual necessity, you may request that we provide your data to you in a structured, commonly used, machine-readable format.
- Right to Withdraw Consent: Where t678 processes your data on the basis of your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
7 Data Security Measures
t678 employs a layered, defence-in-depth security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. While no system can guarantee absolute security, the measures described below reflect t678's commitment to maintaining a robust and continuously improving security posture.
Technical Safeguards
- TLS/SSL encryption: All data transmitted between your device and t678 servers is encrypted using TLS 1.2 or higher. The t678 platform enforces HTTPS exclusively; unencrypted HTTP connections are redirected automatically;
- Encryption at rest: Sensitive personal data, including identity documents and financial records, is encrypted at rest using AES-256 encryption;
- Password hashing: Account passwords are stored using a salted cryptographic hashing algorithm. t678 does not have access to your plain-text password at any time;
- Two-factor authentication (2FA): t678 supports and encourages the use of 2FA on all player accounts to provide an additional layer of login security;
- Firewall and intrusion detection: t678's infrastructure is protected by enterprise-grade firewalls and real-time intrusion detection systems that monitor for anomalous access patterns 24 hours a day, 7 days a week.
Organisational Safeguards
- Access to personal data is restricted to t678 personnel on a strict need-to-know basis, with role-based access controls enforced across all internal systems;
- All t678 employees and contractors who handle personal data are subject to binding confidentiality obligations;
- t678 conducts periodic internal security reviews and vulnerability assessments of its platform and data processing infrastructure;
- In the event of a data security incident that poses a risk to your rights and freedoms, t678 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the incident.
Your Role in Security
Platform security is a shared responsibility. t678 strongly encourages all players to use a unique, strong password for their t678 account, to enable two-factor authentication, to log out after each session on shared devices, and to report any suspected unauthorised account activity to [email protected] immediately.
8 Policy Updates & Contact
t678 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made to this Privacy Policy, we will notify registered players via the email address associated with their account at least 14 days before the changes take effect. The updated policy will also be published on this page with a revised effective date.
Your continued use of the t678 platform following notification of a material policy change constitutes your acceptance of the updated Privacy Policy. If you do not agree with any changes, you should contact t678 to discuss your options, which may include requesting account closure in accordance with the account closure procedures described in the t678 Terms & Conditions.
Children's Privacy
The t678 platform is strictly intended for adults aged 18 and above. t678 does not knowingly collect or process personal data from individuals under the age of 18. If t678 becomes aware that personal data has been collected from an underage individual, that data will be deleted immediately and the associated account permanently closed. If you believe a minor may have registered on t678, please contact us immediately at [email protected].
Contacting t678 About Privacy
If you have any questions, concerns, or requests relating to this Privacy Policy or the way t678 handles your personal data, please contact our Data Protection contact point:
t678 Data Protection Contact
Email:
Subject line: "Privacy Policy Enquiry — [Your Account Email]"
Response time: Within 30 calendar days of receiving a complete and verifiable request. Complex requests may take up to 60 calendar days, in which case we will notify you of the extension within the initial 30-day window.
Privacy Covered — Ready to Play?
Now that you understand how t678 protects your data, explore our games or log in to your account. Have more questions? Our FAQ covers everything from account setup to withdrawals via bKash and Nagad.