dc678 Privacy Policy

Data We Collect

dc678 collects personal data from you in three principal ways: information you provide directly when registering an account or using the platform; information generated automatically as you interact with the site and its games; and information received from third-party service providers such as payment processors and identity verification agencies. The following table summarises the categories of data collected, the source of that data, and the primary purpose for which it is held.

dc678 does not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, health data (except where voluntarily disclosed in the context of a responsible gaming self-exclusion request), or biometric data for identification purposes beyond what is contained in a standard government-issued identity document.

How We Use Your Data

dc678 processes your personal data only where a lawful basis for doing so exists. The primary lawful bases on which dc678 relies are: performance of a contract (operating your account and processing your transactions); compliance with a legal obligation (KYC, AML, tax reporting); legitimate interests (fraud prevention, platform security, responsible gaming monitoring); and consent (marketing communications, optional analytics cookies).

Account Operations

dc678 uses your identity and contact data to create and maintain your account, authenticate your sessions at dc678 Login, verify your age and identity, process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank channels, and send transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts. These uses are necessary for the performance of your account contract with dc678 and cannot be opted out of while your account remains active.

Fraud Prevention & Security

Technical and usage data, including IP addresses, device fingerprints, and session behaviour, are analysed by dc678's automated security systems to detect and prevent unauthorised access, duplicate account creation, bonus abuse, money laundering, and other fraudulent activity. This processing is necessary for dc678's legitimate interest in maintaining a secure and fair platform for all players.

Responsible Gaming Monitoring

dc678 uses gameplay and financial data to monitor for patterns consistent with problem gambling — such as rapid, escalating deposits, unusually long session durations, and attempts to self-exclude followed by re-registration. Where such patterns are identified, dc678's responsible gaming team may contact the player to offer support resources or apply protective account restrictions. This processing is carried out in the legitimate interests of player welfare and is a core duty of care obligation for dc678.

Marketing Communications

Where you have given explicit consent during registration or subsequently opted in through your account settings, dc678 may send you promotional emails and SMS messages about bonuses, seasonal promotions (including BPL cricket season offers, Eid specials, and Pohela Boishakh promotions), new game launches, and tournament announcements. You may withdraw your marketing consent at any time by updating your notification preferences in your dc678 account settings or by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal.

Platform Improvement & Analytics

Aggregated, anonymised usage data is used to understand how players interact with dc678's games, cashier, and support channels. This data helps dc678 identify performance bottlenecks, improve user experience, and prioritise the development of features most valued by Bangladeshi players. Analytics processing does not involve any data that directly identifies you as an individual.

Data Sharing & Disclosure

dc678 does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. dc678 shares your data only in the limited circumstances described below, and only to the extent necessary for the specific purpose stated.

Payment Service Providers

To process deposits and withdrawals, dc678 shares relevant financial and identity data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and the Visa/Mastercard network. These providers process your data as independent data controllers under their own privacy policies and are contractually obligated to use your data solely for transaction processing purposes.

Identity Verification Agencies

dc678 may use third-party identity verification and KYC service providers to assist in verifying the documents you submit during account registration or as part of an enhanced due diligence review. These providers are contractually bound to process your data only for verification purposes and to maintain security standards equivalent to those applied by dc678.

Game Software Providers

Games on the dc678 platform are powered by licensed third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive technical session data (such as session tokens and game round identifiers) necessary to deliver the game experience. They do not receive your full identity or financial data. Each provider operates under its own data protection policies and licensing obligations.

Legal & Regulatory Disclosure

dc678 may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other government authorities where required to do so by applicable law, a valid court order, or a lawful request from a competent authority. In such cases, dc678 will disclose only the minimum data necessary to satisfy the legal obligation, and will notify you of the disclosure where permitted by law.

Cookies & Tracking Technologies

dc678 uses cookies and similar technologies — including local storage objects and session tokens — to operate the platform, maintain your logged-in session, remember your language and display preferences, and collect analytical data about how the site is used. The table below describes the main categories of cookies in use on dc678.

You can manage or delete cookies through your browser settings. Most modern browsers allow you to block third-party cookies, clear existing cookies, or receive a notification before a cookie is stored. Please note that disabling strictly necessary or fraud detection cookies will prevent certain core platform functions from operating correctly, including the ability to log in and maintain a session. dc678 does not use cookies to serve targeted third-party advertising.

Data Security & Retention

dc678 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Key security measures in place include:

• Encryption in transit: All data exchanged between your browser or mobile device and dc678's servers is encrypted using TLS 1.2 or higher. The dc678 website operates exclusively over HTTPS.
• Encryption at rest: Sensitive data fields — including identity document images, payment method identifiers, and account credentials — are stored in encrypted form within dc678's database infrastructure.
• Access controls: Access to personal data within dc678's internal systems is restricted on a strict need-to-know basis. Staff with access to player data undergo background screening and receive regular data protection training.
• Two-factor authentication: dc678 offers 2FA for player accounts and requires it for all internal administrative access to systems holding personal data.
• Penetration testing: dc678's infrastructure is subject to periodic security assessments by independent security professionals to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a data breach that is likely to result in risk to affected players, dc678 will notify impacted individuals without undue delay and take immediate steps to contain the incident.

Data Retention Periods

dc678 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account plus a minimum of 5 years after account closure, to satisfy AML record-keeping obligations.
• Transaction records: Retained for a minimum of 5 years following the date of the transaction.
• Support communications: Retained for 3 years from the date of the interaction, or longer if the communication relates to an unresolved dispute or legal matter.
• Technical and usage data (logs): Retained for up to 12 months in active storage, after which logs are anonymised or deleted.
• Marketing preferences: Retained until you withdraw consent or close your account, plus a short period thereafter to suppress re-marketing to opted-out individuals.

When the retention period for a data category expires, dc678 securely deletes or anonymises the data so that it can no longer be linked to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and research purposes.

Your Privacy Rights

As a dc678 player, you have a number of rights in relation to the personal data we hold about you. dc678 is committed to honouring these rights promptly and transparently. To exercise any of the rights listed below, please contact dc678 at [email protected] from your registered email address, clearly stating the right you wish to exercise and providing enough information to allow dc678 to locate your account.

• Right of access: You may request a copy of the personal data dc678 holds about you, along with information about how that data is used, where it came from, and with whom it has been shared. dc678 will respond to access requests within 30 days of receipt.
• Right to rectification: If any personal data dc678 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details (such as your email address or contact number) directly through your dc678 account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and there is no other lawful basis for processing, or where the data has been processed unlawfully. dc678 will assess erasure requests against its legal retention obligations — data required for AML compliance cannot be deleted before the mandatory retention period expires.
• Right to restrict processing: You may request that dc678 restricts the processing of your data in certain circumstances, such as while a rectification request is being assessed, or where you have objected to processing pending a determination of dc678's legitimate grounds.
• Right to data portability: Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you may request that dc678 provides your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of dc678's legitimate interests, including profiling for responsible gaming purposes. dc678 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests or the processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to withdraw marketing consent: Where dc678 sends you promotional communications on the basis of your consent, you may withdraw that consent at any time. Opt-out links are included in all dc678 marketing emails. You may also update your preferences in your account settings or contact [email protected].

Children's Privacy

dc678 is strictly an adults-only platform. No person under the age of 18 is permitted to register an account, access real-money games, or transact on dc678 in any way. dc678 does not knowingly collect personal data from anyone under the age of 18. If dc678 becomes aware that it has inadvertently collected personal data from a minor, that data will be deleted immediately and the account will be closed.

If you are a parent or guardian and you believe that your child has registered an account or provided personal information to dc678, please contact [email protected] immediately. dc678 will investigate the report promptly, take appropriate action including account closure and data deletion, and provide you with a written confirmation once the matter has been resolved.

dc678 supports parental control software as a supplementary measure to prevent minors from accessing online gambling platforms. If there are minors in your household, dc678 strongly encourages you to install appropriate internet filtering software on shared devices. However, parental controls are a household-level safeguard and do not substitute for dc678's own age verification procedures.

Policy Updates & Contact

dc678 reviews this Privacy Policy at least annually and updates it whenever there is a material change to how player data is collected, used, or shared. The effective date at the top of this page reflects the date of the most recent revision. Where a change is material — meaning it could meaningfully affect your rights or the way your data is used — dc678 will notify registered players by email at least 14 days before the change takes effect.

Minor updates, such as clarifications of existing practices, corrections to typographical errors, or improvements to the readability of existing explanations, may be made without advance notice. In all cases, the version of the Privacy Policy published at https://dc678.bet/privacy-policy on the date you use the platform is the version that applies to your use.

How to Contact dc678 About Privacy

For all privacy-related queries, data rights requests, concerns about how your data has been handled, or to report a suspected data breach or unauthorised access to your account, please contact the dc678 data team using the details below. Please contact us from your registered email address wherever possible, as this allows dc678 to verify your identity and respond more efficiently.

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: "Privacy Rights Request — [Your Registered Username]"
• Response target: Acknowledgement within 5 business days; substantive response within 30 calendar days
• Operating hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

dc678 is committed to resolving all privacy concerns fairly and efficiently. If you are not satisfied with dc678's response to a privacy complaint, you retain the right to escalate the matter through applicable legal channels available in your jurisdiction.