dc678 Privacy Policy
Your privacy matters. This policy explains exactly what data dc678 collects, why we collect it, how we protect it, and what rights you hold over your personal information.
Effective: 2026Introduction
dc678 operates the online casino and sports betting platform available at dc678.ws (the "Platform"). dc678 is committed to protecting the personal information of all users who access or register on the Platform. This Privacy Policy ("Policy") describes the categories of personal data that dc678 collects, the purposes for which it is processed, the circumstances under which it may be shared with third parties, the security measures in place to protect it, and the rights available to Players regarding their personal data.
By registering an account on dc678, accessing the Platform, or submitting any personal information to dc678, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. This Policy applies to all Players, visitors, and any individual whose personal data dc678 processes in connection with the operation of the Platform. If you do not agree with this Policy, you should not access or use the Platform.
dc678 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Your information is collected solely to operate the Platform, verify your identity, process payments, and maintain a safe and fair gambling environment for all Players in Bangladesh.
What Personal Data We Collect
dc678 collects personal data from Players through several channels: information provided directly during account registration, information gathered automatically during Platform use, and information received from third-party payment processors and verification partners. The categories of data collected include:
How We Use Your Personal Data
dc678 uses the personal data it collects for the following purposes, each of which is necessary for the operation of the Platform or is based on a legitimate interest as described in the Legal Basis section below:
- Account creation, verification, and management: to register your account, verify your identity through the KYC process, and manage your account settings, preferences, and responsible gaming tools.
- Payment processing: to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other supported payment methods, and to maintain accurate financial records in connection with your account.
- Platform operation and service delivery: to provide access to casino games, sports betting markets, live casino services, and all other features of the dc678 Platform, and to personalise your experience where applicable.
- Fraud prevention and security: to detect and prevent fraudulent activity, money laundering, collusion, bonus abuse, and any other activity that violates the dc678 Terms and Conditions or applicable law.
- Responsible gaming compliance: to monitor gambling patterns in accordance with our responsible gaming commitments, to apply deposit limits, self-exclusion periods, and session reminders, and to identify Players who may need support.
- Marketing and promotional communications: to send relevant promotional offers, bonus notifications, and seasonal promotions via email or SMS, where you have opted in to receive such communications. You may opt out at any time by contacting [email protected].
dc678 does not use personal data to make solely automated decisions that produce significant legal or similarly significant effects on Players without human oversight. Where automated processes (such as fraud detection algorithms) flag an account, a human review is conducted before any account action is taken.
Legal Basis for Processing
dc678 processes personal data on the following legal bases, depending on the specific purpose of processing:
Contractual Necessity
Processing that is necessary to perform dc678's contractual obligations to a Player — including account registration, payment processing, game delivery, and customer support — is carried out on the basis of contractual necessity. Without this processing, dc678 cannot provide the Platform services to the Player.
Legal Obligation
Processing necessary to comply with applicable legal and regulatory obligations — including anti-money laundering checks, age verification, KYC, and regulatory reporting — is carried out on the basis of legal obligation. dc678 is required by applicable law to retain certain financial and identity records for specified minimum periods.
Legitimate Interests
Processing carried out to protect dc678's legitimate business interests — including fraud detection and prevention, platform security, responsible gaming monitoring, and improvement of the Platform's features and performance — is carried out on the basis of legitimate interests, provided those interests are not overridden by the Player's own privacy interests.
Consent
Processing for direct marketing communications — including promotional emails, SMS bonus alerts, and seasonal offer notifications — is carried out solely on the basis of the Player's explicit consent. Players may withdraw consent for marketing communications at any time by contacting [email protected] or using the unsubscribe mechanism in any marketing email.
How We Share Your Data
dc678 does not sell your personal data. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:
Payment Processors
To process deposits and withdrawals, dc678 shares the minimum necessary financial and identity information with payment service providers including bKash, Nagad, Rocket, Upay, and card network partners. These providers process data under their own privacy frameworks and are independently responsible for the security of data they handle.
Game Content Providers
dc678 uses third-party game studios including Evolution Gaming, Pragmatic Play, Spribe, Ezugi, Netent, and Microgaming to deliver casino and live casino games. These studios may receive limited technical data (such as session identifiers and game transaction records) as required to deliver and record game outcomes. They do not receive identifying personal data beyond what is technically required.
Identity Verification Partners
To fulfil KYC obligations, dc678 may use third-party identity verification service providers. These providers process identity documents and biometric data strictly for the purpose of verifying a Player's identity and confirming eligibility. They operate under contractual data processing agreements with dc678 and may not use Player data for any other purpose.
Legal and Regulatory Authorities
dc678 will disclose personal data to law enforcement agencies, financial intelligence units, regulatory bodies, or courts when legally required to do so by valid legal process, court order, or applicable regulation. Where legally permissible, dc678 will attempt to notify the affected Player before disclosing their data to a regulatory authority.
dc678 does not transfer personal data to countries outside its operational jurisdiction except where strictly necessary for the delivery of Platform services (for example, routing a payment through an international card network). In all such cases, appropriate data transfer safeguards are applied in accordance with applicable data protection law.
Cookies and Tracking Technologies
dc678 uses cookies and similar tracking technologies on the Platform to improve functionality, analyse usage patterns, and deliver a more personalised experience. The types of cookies used by dc678 are described below:
Essential Cookies
Essential cookies are strictly necessary for the Platform to function. They enable core features such as user authentication, session management, security token validation, and the preservation of your login state between pages. The Platform cannot function correctly without these cookies and they cannot be disabled.
Analytics Cookies
Analytics cookies allow dc678 to understand how Players interact with the Platform — including which pages are visited most frequently, how long sessions last, and which features are used. This data is collected in aggregate and anonymised form and is used solely to improve the Platform's design and performance. Analytics cookies are only placed with your consent.
Preference Cookies
Preference cookies remember your Platform settings — such as your selected language, display preferences, and responsible gaming tool configurations — so that these settings are preserved across sessions. You may disable preference cookies through your browser settings, though doing so may affect your experience on the Platform.
Data Retention
dc678 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply:
- Account and identity data: retained for the duration of the active account relationship plus a minimum of 5 years following account closure, to comply with anti-money laundering and financial record-keeping legal requirements.
- Transaction and payment records: retained for a minimum of 7 years following the transaction date, in compliance with applicable financial regulations.
- Marketing preference and consent records: retained for the duration of the active account plus 3 years, to demonstrate compliance with consent-based marketing obligations.
When personal data is no longer required for any lawful purpose, dc678 will securely delete or anonymise it in accordance with its internal data disposal procedures. Anonymised aggregate data that cannot be used to identify an individual may be retained indefinitely for statistical analysis purposes.
How We Protect Your Data
dc678 implements industry-standard technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include SSL/TLS encryption for all data transmitted between the Player's device and the dc678 servers, encryption at rest for sensitive stored data including financial records and identity documents, access controls that restrict employee access to personal data on a strict need-to-know basis, regular internal security reviews and vulnerability assessments of the Platform infrastructure, and two-factor authentication requirements for administrative access to systems containing personal data.
While dc678 takes all reasonable steps to protect your personal data, no data transmission over the internet or storage system can be guaranteed to be completely secure. If you become aware of any potential security breach affecting your dc678 account, you should notify us immediately at [email protected].
Your Data Protection Rights
As a Player whose personal data dc678 processes, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact dc678 at [email protected] with your registered username and a clear description of your request:
- 👁️Right of Access: you may request a copy of the personal data dc678 holds about you, along with information about how it is being used and with whom it has been shared.
- ✏️Right to Rectification: if any personal data dc678 holds about you is inaccurate or incomplete, you may request that it be corrected or completed without undue delay.
- 🗑️Right to Erasure: in certain circumstances you may request that dc678 delete your personal data — for example, where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis for processing applies. Erasure requests are subject to dc678's legal data retention obligations.
- ⏸️Right to Restriction of Processing: you may request that dc678 restrict the processing of your personal data in certain circumstances, such as while a rectification request is being assessed or where you contest the lawfulness of processing.
- 📦Right to Data Portability: where processing is carried out by automated means and based on your consent or a contract, you may request that dc678 provide your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
- 🚫Right to Object: you have the right to object to processing based on dc678's legitimate interests, including profiling for responsible gaming purposes. You also have an absolute right to object to direct marketing at any time.
dc678 will respond to all valid data rights requests within 30 days of receipt. Where a request is particularly complex or where a large volume of requests has been received, dc678 may extend this period by a further 30 days, subject to notifying the Player of the extension and the reasons for it. dc678 will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive.
Payment Data and Financial Privacy
dc678 takes the security of financial data extremely seriously. When a Player initiates a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the relevant payment data is transmitted directly to the respective payment service provider using encrypted channels. dc678 does not store full card numbers, card verification values (CVV), or mobile banking PINs on its own servers. Payment identifiers (such as a masked account number or wallet reference) are retained only as necessary to link transactions to the correct account and to support dispute resolution.
All financial transactions on dc678 are conducted in Bangladeshi Taka (BDT / ৳). dc678 maintains detailed transaction records for each Player account in accordance with its legal record-keeping obligations. Players may request a summary of their transaction history at any time by contacting [email protected].
Protection of Minors
dc678 is strictly an adults-only platform. The Platform is not directed at, intended for, or designed to be used by individuals under the age of 21. dc678 does not knowingly collect or process personal data from anyone under 21 years of age. If dc678 becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and any associated account will be permanently closed. If you are a parent or guardian and believe that a minor in your care has registered an account on dc678, please contact us immediately at [email protected] so that we can take appropriate action. 21+ only. Play responsibly.
Changes to This Privacy Policy
dc678 may update this Privacy Policy from time to time to reflect changes in its data processing practices, legal obligations, or Platform features. When material changes are made — meaning changes that significantly affect how your personal data is processed — dc678 will notify registered Players via the email address on file or through a prominent notice on the Platform, with a minimum of 14 days' advance notice before the changes take effect. The revised Policy will carry an updated effective date at the top of this page. Continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy.
Governing Law
This Privacy Policy is governed by and construed in accordance with the laws applicable to dc678's operational jurisdiction. Any dispute arising from or in connection with this Policy that cannot be resolved through dc678's internal complaints procedure will be subject to the jurisdiction of the competent courts of the applicable territory. dc678 encourages Players to raise any privacy concerns directly with the support team at [email protected] in the first instance.
Contact Our Data Team
If you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, or need to report a potential data security incident, please contact the dc678 data team. We are available 24/7 and will respond to all data protection enquiries promptly.
Email: [email protected] — Please include your registered username, the nature of your enquiry, and any relevant reference numbers to help us assist you efficiently.
Ready to Experience dc678?
Your data is protected. Now explore Bangladesh's trusted casino platform — cricket betting, live casino, slots and more await you.