md678 Privacy Policy — Your Data, Your Rights

Introduction

md678 is committed to protecting the privacy and personal data of every player who uses our platform. This Privacy Policy ("Policy") describes the types of personal information we collect from you, the purposes for which we use that information, the circumstances under which we may share it with third parties, and the rights you hold as a data subject. This Policy applies to all users of the md678 website and mobile platform, including registered account holders and visitors who access the platform without registering.

By registering an account on md678 or by continuing to use our platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection, use, and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the md678 platform. Questions or concerns about this Policy may be directed to our support team at [email protected].

Our Privacy Commitments

1. Information We Collect

• 1
  Registration Data

  When you create an md678 account, we collect your full name, date of birth, email address, mobile phone number, and country of residence. This information is required to open and manage your account, verify your eligibility, and comply with our Know Your Customer (KYC) obligations.

• 2
  Identity Verification Documents

  As part of our KYC process, we may request copies of government-issued identification (such as a National Identity Card or passport) and proof of address. These documents are used solely to verify your identity, confirm your age, and comply with applicable anti-money laundering regulations. Document images are stored securely and are not used for any other purpose.

• 3
  Financial Transaction Data

  We collect records of all deposits and withdrawals made on your md678 account, including the payment method used (such as bKash, Nagad, or Rocket account identifiers), transaction amounts, dates, and processing status. We do not store full payment card numbers. Payment processing is handled by our certified payment partners, who maintain their own security standards.

• 4
  Technical and Usage Data

  We automatically collect certain technical data when you access md678, including your IP address, device type, browser type and version, operating system, referring URLs, pages visited, session duration, and click-stream data. This data is used for platform security, fraud prevention, performance optimisation, and improving the user experience. It is not linked to your personal identity for marketing purposes.

2. How We Use Your Information

md678 uses the personal information we collect from you for the following lawful purposes. We process your data only where we have a legitimate basis to do so, including the performance of our contract with you, compliance with legal obligations, and our legitimate business interests in operating a safe and fair gaming platform.

• 1
  Account Management

  We use your registration data to create and maintain your md678 account, process your deposits and withdrawals, calculate and credit bonuses, record your betting history, and provide you with access to all platform features. This is the primary purpose for which personal data is collected, and it is necessary for the performance of our service agreement with you.

• 2
  Identity Verification and Fraud Prevention

  We use your personal and identity verification data to confirm that you meet our eligibility requirements, to prevent underage gambling, to detect and prevent fraudulent activity, bonus abuse, and money laundering, and to comply with our obligations under applicable anti-money laundering regulations. This processing is a legal requirement and a core component of responsible platform operation.

• 3
  Customer Support

  When you contact our support team, we use your account data and the information provided in your query to identify your account, investigate the issue, and provide an appropriate resolution. Support interactions are logged and may be reviewed for quality assurance and training purposes. We retain support interaction records for a period consistent with our data retention policy.

• 4
  Responsible Gaming Monitoring

  We analyse your gaming activity patterns — including deposit frequency, session length, betting amounts, and the use of responsible gaming tools — to identify players who may be experiencing gambling-related harm. Where our systems flag a player as potentially at risk, our responsible gaming team may make contact to offer support, provide information about self-exclusion tools, or apply protective limits to the account.

• 5
  Platform Improvement

  Aggregated, anonymised usage data is used to analyse how players interact with the md678 platform, identify areas for improvement, test new features, and optimise the overall user experience. This analysis does not identify individual users and is used solely to improve the quality of our service.

3. Disclosure to Third Parties

md678 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We may share your information with carefully selected third parties only where it is necessary for the delivery of our services, required by law, or required to protect the legitimate interests of md678 or its users.

All third-party service providers who receive personal data from md678 are contractually bound to process that data only for the purposes for which it was shared, to maintain appropriate security measures, and to comply with applicable data protection laws. md678 does not permit its service providers to use your data for their own independent purposes.

• 1
  Payment Processors

  To process your deposits and withdrawals, md678 shares necessary transaction data with our payment processing partners, including bKash, Nagad, Rocket, Upay, and card payment processors. These partners receive only the minimum data required to complete the transaction and are bound by their own regulatory obligations regarding data security.

• 2
  Game and Technology Providers

  Our game software providers — such as Pragmatic Play, Evolution Gaming, and Spribe — may receive technical session data necessary to deliver their games to your device and to calculate game outcomes. This data typically includes your session token, stake amounts, and game results. Game providers do not receive your full identity details unless required for their own compliance purposes.

• 3
  Legal and Regulatory Authorities

  md678 may be required by law to disclose your personal data to regulatory bodies, law enforcement agencies, financial intelligence units, or courts. Such disclosures will be made only to the extent required by applicable law and will be handled with appropriate confidentiality. Where legally permitted, md678 will endeavour to notify you of such a disclosure request prior to complying.

4. Cookies and Tracking Technologies

md678 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device when you visit our website. We use strictly necessary cookies (required for the platform to function, such as session management and security tokens), functional cookies (which remember your preferences, such as language settings), and analytical cookies (which help us understand how users navigate the platform so we can improve it). We do not use third-party advertising cookies or cross-site tracking cookies.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the md678 platform — for example, you may be required to log in again on each visit if session cookies are disabled. Strictly necessary cookies cannot be disabled without preventing the platform from functioning correctly. For further details about the specific cookies we use, please contact our support team.

5. Data Security

md678 implements industry-standard technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, loss, or destruction. These measures include 256-bit SSL/TLS encryption for all data transmitted between your device and our servers; encrypted storage of sensitive data at rest; role-based access controls that restrict which md678 team members can access personal data; regular security audits and penetration testing of our platform infrastructure; and two-factor authentication options for player accounts.

Despite our best efforts, no security system is completely impenetrable. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, md678 will notify affected players without undue delay and will take all reasonable steps to contain the breach, assess its impact, and prevent recurrence. If you believe your md678 account has been compromised, please contact our support team immediately at [email protected].

6. Data Retention

md678 retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law and regulation. For most categories of personal data, our standard retention period following account closure is five years, in order to meet our obligations under anti-money laundering regulations and to resolve any disputes that may arise after account closure. Financial transaction records may be retained for a longer period where required by applicable tax or financial regulation.

When the retention period for a given category of data has expired, md678 will securely delete or anonymise that data so that it can no longer be associated with you as an individual. Where data must be retained beyond the standard period for a specific legal reason — such as ongoing litigation or a regulatory investigation — the data will be placed under restricted access and will be deleted as soon as the specific legal requirement has been satisfied.

7. Your Data Rights

As a user of md678, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with your account details and a description of your request. We will respond to all valid data rights requests within 30 days, and within 5 business days for straightforward requests.

• 1
  Right of Access

  You have the right to request a copy of all personal data that md678 holds about you. We will provide this information in a structured, commonly used, and machine-readable format. There is no charge for the first subject access request in any 12-month period. We reserve the right to charge a reasonable administrative fee for subsequent requests within the same period.

• 2
  Right to Rectification

  If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. Many personal details — such as your email address, phone number, and communication preferences — can be updated directly from your account settings. For data that cannot be self-corrected, such as your registered name or date of birth, please contact our support team with supporting documentation.

• 3
  Right to Erasure

  You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (where consent is the basis for processing), or where you object to processing and there is no overriding legitimate interest. Please note that this right is subject to our legal data retention obligations — we may not be able to delete certain records, such as financial transaction history, where retention is required by law.

• 4
  Right to Object

  You have the right to object to the processing of your personal data where that processing is based on our legitimate interests. If you object, we will review the processing activity and will cease it unless we can demonstrate compelling legitimate grounds that override your interests, or unless processing is necessary for the establishment, exercise, or defence of a legal claim. You may also object at any time to the use of your data for direct marketing purposes.

8. Children and Minors

md678 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately close the associated account, void any related transactions or winnings, and delete the personal data collected from that individual. If you are a parent or guardian and believe that a minor has registered on md678, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

9. Changes to This Privacy Policy

md678 reserves the right to update or amend this Privacy Policy at any time. Material changes to this Policy — meaning changes that significantly affect your rights or how we process your personal data — will be communicated to registered users by email or by in-platform notification prior to taking effect, where practically feasible. The effective date of the current version of this Policy is displayed at the top of this page.

Your continued use of md678 following any update to this Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with any change to this Policy, you should stop using the md678 platform and may request to close your account. The most current version of this Privacy Policy will always be available at this URL. We recommend that you review this page periodically to stay informed about how we protect your information.