fb678 Privacy Policy

1 Who We Are

This Privacy Policy is issued by fb678 ("we", "us", "our"), the operator of the online betting and casino platform accessible at fb678.io. fb678 is Bangladesh's premier VIP gaming destination, offering cricket sportsbook, live casino, slots, and crash games to eligible members aged 21 and above.

fb678 acts as the data controller in respect of the personal data collected from members and visitors to the platform. As data controller, fb678 determines the purposes and means by which your personal data is processed, and is responsible for ensuring that all processing is conducted lawfully, fairly, and transparently.

This Privacy Policy applies to all personal data collected through the fb678 website, mobile interface, customer support channels, and any other touchpoint through which you interact with the fb678 platform. It should be read alongside the fb678 Terms & Conditions and Responsible Gaming policy.

2 Data We Collect

fb678 collects personal data from you in several ways: directly when you provide it during registration or in the course of using our services, automatically through your use of the platform, and occasionally from trusted third-party sources for the purposes of identity verification and fraud prevention.

2.1 Registration and Identity Data

When you create an fb678 account, we collect the following information:

• Full legal name as it appears on your government-issued identity document
• Date of birth (used to verify that you meet the 21+ age requirement)
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna) and postal code
• Mobile phone number registered in your name
• Email address
• Username and encrypted password

2.2 Identity Verification (KYC) Documents

As part of our Know Your Customer (KYC) process, fb678 may request copies of the following documents:

• National Identity Card (NID) or passport
• Proof of residential address (e.g., utility bill, bank statement dated within three months)
• Proof of payment method ownership (e.g., screenshot of your bKash or Nagad account showing your registered mobile number)
• Source of funds documentation where required by our compliance procedures

2.3 Financial and Transaction Data

fb678 records all financial transactions associated with your account, including deposit amounts, withdrawal requests, payment method references (e.g., your bKash or Nagad registered number, Visa card last four digits), transaction timestamps, and the outcomes of any bonus wagering activity.

2.4 Gameplay and Betting Data

We record data relating to your use of the fb678 platform, including the games you play, the markets you bet on, your stake amounts and returns, session durations, and in-game decisions. This data is used for account management, responsible gaming monitoring, fraud detection, and service improvement.

2.5 Technical and Device Data

When you access the fb678 platform, our systems automatically collect certain technical data, including your IP address, device type and operating system, browser type and version, screen resolution, time zone, and session activity logs. This data is used for security monitoring, fraud prevention, and platform optimisation.

2.6 Communications Data

If you contact the fb678 support team via email or live chat, we retain records of those communications, including the content of messages and any attachments you submit, for the purpose of resolving your query and maintaining a service history.

3 How We Use Your Data

fb678 uses the personal data we collect for the following purposes:

• Account creation and management: To register your fb678 account, verify your identity, and maintain your account in good standing throughout your membership.
• Transaction processing: To process deposits and withdrawals through your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, or Mastercard) and to maintain accurate financial records for your account.
• KYC and regulatory compliance: To verify your age (21+), identity, and payment method ownership in accordance with our compliance obligations, and to satisfy anti-money laundering (AML) reporting requirements where applicable.
• Fraud and security monitoring: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, collusion, match manipulation, and other prohibited activities as defined in our Terms & Conditions.
• Responsible gaming: To monitor your gambling activity for signs of problem gambling behaviour, to enforce self-imposed limits and cooling-off periods, and to take protective action where our responsible gaming obligations require it.
• Customer support: To respond to your queries, resolve complaints, and maintain a record of your interactions with the fb678 support team.
• Service communications: To send you transactional communications relating to your account, including deposit confirmations, withdrawal notifications, security alerts, and policy update notices. These communications are not marketing and cannot be opted out of while your account is active.
• Platform improvement: To analyse aggregate, anonymised usage data to understand how members use the fb678 platform, identify areas for improvement, and develop new features and services.
• Marketing communications (where consented): To send you promotional offers, bonus notifications, and VIP programme updates where you have given explicit consent to receive such communications. You may withdraw this consent at any time by contacting [email protected].

4 Legal Basis for Processing

fb678 processes your personal data only where a valid legal basis exists. The legal bases we rely on for each category of processing are as follows:

• Contract performance: Processing that is necessary to fulfil the contract between you and fb678 — including account registration, transaction processing, and customer support — is conducted on the basis of contractual necessity.
• Legal obligation: Processing required to comply with applicable laws — including KYC identity verification, AML transaction monitoring, and record-keeping obligations — is conducted on the basis of legal compliance.
• Legitimate interests: Processing for fraud prevention, security monitoring, and platform analytics is conducted on the basis of fb678's legitimate interest in maintaining a secure and well-functioning platform, provided that such processing does not override your fundamental rights and freedoms.
• Consent: Processing for marketing communications is conducted on the basis of your explicit consent, which you may withdraw at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 Cookies and Tracking Technologies

The fb678 platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. Cookies are small text files stored on your device when you visit the fb678 website. They do not contain executable code and cannot access other files on your device.

5.1 Types of Cookies Used

• Strictly necessary cookies: Required for the platform to function. These include session cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without impairing platform functionality.
• Performance and analytics cookies: Used to collect anonymised data about how members navigate the fb678 platform, which pages are most visited, and where technical errors occur. This data helps us improve the platform experience.
• Preference cookies: Used to remember your platform preferences, such as your display settings and language selection, so that you do not need to re-enter them on each visit.

5.2 Managing Cookies

You may control non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies. Please note that disabling cookies may affect the functionality of certain platform features. Strictly necessary cookies cannot be blocked without preventing access to the platform entirely.

fb678 does not use cookies to serve third-party advertising or to track your browsing activity across other websites.

6 Third-Party Data Sharing

fb678 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the following limited circumstances:

• Payment processors: Your payment method details are shared with the relevant payment processor (e.g., bKash, Nagad, Rocket, Upay) solely for the purpose of executing your deposit or withdrawal transaction. Payment processors operate under their own privacy policies and are bound by contractual data protection obligations with fb678.
• Identity verification providers: Where fb678 uses a third-party KYC service provider to assist with identity document verification, the relevant personal data is shared with that provider under a binding data processing agreement.
• Game providers: Gameplay data is shared with our licensed game content providers (such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, and Microgaming) to the extent necessary to deliver the game experience and resolve game-related disputes. Game providers receive only the data required for these purposes.
• Legal and regulatory authorities: fb678 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, valid legal process, or in the exercise of or defence of legal claims.
• Business operations: fb678 may share data with professional advisers (lawyers, auditors, accountants) under strict confidentiality obligations where necessary for the conduct of our business.

7 Data Security

fb678 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Key measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the fb678 platform
• AES-256 encryption for sensitive data stored at rest, including identity documents and payment method references
• Role-based access controls ensuring that fb678 staff access only the data necessary for their specific job functions
• Multi-factor authentication for all administrative access to fb678 systems containing member data
• Regular security audits and penetration testing conducted by qualified third-party security specialists
• Intrusion detection systems that monitor platform traffic for anomalous patterns indicative of a security breach or attack
• Incident response procedures that ensure prompt identification, containment, and notification in the event of a data security incident

While fb678 takes all reasonable steps to protect your data, no internet-based transmission or electronic storage system is completely secure. fb678 cannot guarantee the absolute security of data transmitted to or from the platform. You can reduce your personal risk by using a strong, unique password and keeping your fb678 login credentials confidential.

8 Data Retention

fb678 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Active account data: Retained for the duration of your active membership plus a minimum of five years following account closure, in order to satisfy anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of seven years from the date of each transaction, in accordance with financial record-keeping obligations.
• KYC and identity verification documents: Retained for a minimum of five years following account closure or the conclusion of any related investigation or legal proceeding.
• Customer support communications: Retained for a minimum of three years from the date of the most recent communication in a given support thread.
• Technical and device data (logs): Retained for a rolling period of 12 months, after which logs are anonymised or deleted unless required in connection with an active security investigation.
• Marketing consent records: Retained for the duration of your consent and for three years following withdrawal, to demonstrate compliance with consent obligations.

Following the expiry of the applicable retention period, fb678 will securely delete or anonymise your personal data so that it can no longer be linked to you.

9 Your Data Rights

As a member of the fb678 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact [email protected] with your request. fb678 will respond within 30 days and will not charge a fee for routine requests.

• Right of access: You may request a copy of the personal data fb678 holds about you, together with information about how it is being processed.
• Right to rectification: You may request that fb678 correct any inaccurate personal data held about you, or complete any incomplete data.
• Right to erasure: You may request that fb678 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Please note that we may be required to retain certain data even after an erasure request.
• Right to restriction of processing: You may request that fb678 restrict the processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
• Right to data portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you may request that fb678 provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to fb678 processing your personal data on the basis of legitimate interests, or for direct marketing purposes. Marketing objections will be processed immediately; other objections will be assessed within 30 days.
• Right to withdraw consent: Where fb678 processes your data on the basis of consent (for example, for marketing communications), you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.

10 Children and Minors

The fb678 platform is strictly intended for adults aged 21 years and above. fb678 does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an account, deposit funds, or use any feature of the fb678 platform.

If fb678 discovers or has reason to believe that personal data has been collected from a person under the age of 21, we will take immediate steps to close the relevant account, delete the collected data, and — where required — return any funds deposited. Parents or guardians who believe that their child may have registered with fb678 should contact [email protected] immediately so that appropriate action can be taken without delay.

11 Changes to This Policy

fb678 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. The effective date at the top of this document will be updated whenever a material change is made.

Where a change is material — meaning it significantly affects how we collect, use, or share your personal data, or alters your rights under this policy — fb678 will provide advance notice to affected members via their registered email address. For non-material changes (such as typographical corrections or clarifications that do not alter the substance of the policy), fb678 may update this page without separate individual notification.

Your continued use of the fb678 platform following the effective date of any revised Privacy Policy constitutes your acknowledgement and acceptance of the updated terms. If you do not agree to any revised Privacy Policy, you should cease using the platform and may request account closure by contacting [email protected].

12 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which fb678 processes your personal data, please contact our privacy team using the details below:

• Email: [email protected]
• Subject line (for privacy matters): "Privacy Policy Enquiry" or "Data Rights Request"
• Response target: Within 30 days of receipt for data rights requests; within 5 business days for general privacy enquiries
• Support availability: 24 hours a day, 7 days a week, 365 days a year

fb678 is committed to resolving all privacy-related enquiries promptly and transparently. If you are not satisfied with our response to a privacy concern, you may raise the matter as a formal complaint by emailing [email protected] with the subject line "Formal Privacy Complaint". fb678 will acknowledge formal complaints within 48 hours and will provide a substantive response within 15 business days.