Privacy Policy — How vs678 Protects Your Data

This Privacy Policy is published by vs678 ("vs678", "we", "our", or "us"), the operator of the online gaming and sports betting platform accessible at vs678.app. It applies to all individuals who visit the vs678 website, register a player account, make a deposit or withdrawal, participate in any game or betting activity, contact our support team, or otherwise interact with any vs678 service (collectively, "players" or "you").

This policy governs the collection, storage, processing, and disclosure of personal data in connection with your use of vs678. It applies regardless of the device or method you use to access vs678 — whether via desktop browser, mobile browser, or any vs678 application. For players accessing vs678 from Bangladesh, this policy is designed to reflect internationally recognised data protection principles consistent with the standards upheld by responsible gaming operators worldwide.

By creating a vs678 account or by continuing to use the platform after this policy has been updated, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of vs678 and contact our support team to close your account.

vs678 collects personal data through several channels: directly from you during registration and account management, automatically through your use of the platform, and from third-party sources such as identity verification providers and payment processors. The table below summarises the main categories of data we collect:

2.1 Data You Provide Voluntarily

When you register for a vs678 account, you voluntarily provide your name, date of birth, email address, and Bangladesh mobile number. During account verification (KYC), you may upload identity documents. When contacting support, you provide the details included in your message. Providing accurate information is a condition of your vs678 account — submitting false data constitutes a breach of the Terms & Conditions.

2.2 Data Collected Automatically

Like all modern online platforms, vs678 automatically collects technical and behavioural data when you visit and use the platform. This includes your IP address (which may indicate your approximate geographic location within Bangladesh), device identifiers, browser type, pages visited, games launched, time spent, and click-path data. This data is used primarily for platform security, fraud prevention, and improving the user experience.

2.3 Data from Third Parties

vs678 may receive personal data about you from third-party sources in limited circumstances, including: identity verification agencies (to confirm NID or passport validity), payment processors (to confirm transaction status and flag suspicious activity), and fraud-detection services. Data received from third parties is handled in accordance with this Privacy Policy.

vs678 processes your personal data only for specific, legitimate purposes and only where a valid legal basis exists for doing so. The following table sets out our key processing activities:

vs678 does not sell, rent, or disclose your personal data to third parties for their own commercial or marketing purposes under any circumstances. We share personal data with external parties only to the extent necessary to deliver our services, comply with legal obligations, or protect the integrity of the platform. The categories of third parties with whom we may share your data are:

4.1 Payment Service Providers

To process your deposits and withdrawals, vs678 shares the minimum necessary financial and identity data with payment processors including bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, and card payment networks (Visa, Mastercard). These providers receive only the data needed to authenticate and execute your transaction. They are not permitted to use your data for any other purpose.

4.2 Identity Verification (KYC) Providers

To fulfil our regulatory obligation to verify player identity and prevent underage gambling, vs678 uses third-party KYC and document verification services. When you submit identity documents, the relevant data may be transmitted securely to these providers for automated and/or manual review. KYC providers are contractually obligated to handle your data confidentially and to delete it after the verification process is complete, subject to their own legal retention requirements.

4.3 Game Content Providers

Licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi deliver game content to vs678 players. These providers may receive a player session token and anonymised session identifier to enable the game to function correctly. They do not receive your name, NID, financial details, or contact information as part of the game delivery process.

4.4 Fraud Prevention & Security Services

vs678 employs specialist third-party fraud detection and cybersecurity services. Technical data including IP addresses, device fingerprints, and behavioural patterns may be shared with these services for real-time risk assessment. This sharing is carried out on the basis of our legitimate interest in protecting the platform and our players from fraud, money laundering, and unauthorised access.

4.5 Regulatory and Law Enforcement Authorities

vs678 may disclose personal data to relevant regulatory authorities, law enforcement agencies, or courts where we are legally required or compelled to do so by applicable law, regulatory licence obligation, or valid court order. We will notify affected players of such disclosures where permitted by law.

vs678 uses cookies and similar tracking technologies (such as local storage, session storage, and pixel tags) to operate and improve the platform. A cookie is a small text file placed on your device when you visit vs678. Cookies allow the platform to recognise your device across sessions, maintain your login state, remember your preferences, and analyse how the platform is used.

5.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in during a gaming session. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred game category, and last visited page. These improve your experience but are not essential to platform operation.
• Analytics Cookies: Collect anonymised data about how players navigate the vs678 platform — pages visited, time spent, game categories explored — to help us improve content and performance. Individual players are not identified in analytics reports.
• Security Cookies: Support fraud prevention and account security functions, including device fingerprinting to detect unauthorised access attempts and to identify suspicious patterns consistent with multi-account abuse.

5.2 Managing Your Cookie Preferences

You can control non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies. Please note that disabling strictly necessary cookies will prevent you from logging in and using the vs678 platform. Disabling analytics or functional cookies may result in a degraded experience but will not prevent basic access.

vs678 retains personal data only for as long as is necessary for the purposes described in this Privacy Policy, or as required by applicable legal, regulatory, or licence obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual player. vs678 uses secure data deletion procedures consistent with recognised information security standards.

vs678 respects the privacy rights of all players. The following rights are available to you in relation to your personal data held by vs678:

• Right of Access: You have the right to request a copy of the personal data vs678 holds about you. We will respond to verified access requests within 30 calendar days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic contact details directly in your account settings at any time.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data. We will honour erasure requests where there is no overriding legal obligation to retain the data (such as AML record-keeping requirements). Where a full erasure is not possible, we will explain the specific legal basis for any retained data.
• Right to Restriction of Processing: You may request that vs678 restrict the processing of your data in certain circumstances — for example, while the accuracy of data is being contested, or where processing is unlawful but you prefer restriction over erasure.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you may request that your data be provided to you in a structured, machine-readable format.
• Right to Object: You have the right to object to processing based on our legitimate interests, including profiling for marketing personalisation. You may opt out of marketing communications at any time via your account settings.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing opt-in), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

7.1 How to Exercise Your Rights

To exercise any of the rights listed above, contact the vs678 Data Protection team via 24/7 English live chat or by email at [email protected]. Please include your registered account username and a description of your request. We may need to verify your identity before processing the request. All requests are handled within 30 calendar days; complex requests may take up to 60 calendar days with prior notice.

vs678 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our key security measures include:

• TLS/SSL Encryption: All data transmitted between your device and vs678 servers is encrypted using current industry-standard TLS protocols. The padlock icon in your browser confirms this encryption is active during every session.
• Encrypted Data Storage: Sensitive data fields including passwords, payment credentials, and KYC document files are stored in encrypted form at rest. Passwords are hashed using one-way cryptographic algorithms and are never stored in plain text.
• Access Controls: Access to player personal data within vs678 is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate operational reason may access identifiable player records. Access is logged and audited.
• Two-Factor Authentication (2FA): vs678 supports and encourages 2FA via SMS OTP for all player accounts. Administrative staff accounts accessing player data require 2FA as a mandatory control.
• Penetration Testing & Vulnerability Management: vs678 conducts regular security assessments to identify and remediate vulnerabilities in our platform infrastructure and application code.
• Device Fingerprinting & Anomaly Detection: Automated systems monitor for abnormal access patterns, unusual login locations, and suspicious transaction behaviour in real time, enabling rapid response to potential account compromise incidents.
• Staff Data Protection Training: All vs678 staff who handle personal data receive regular training on data protection obligations, secure data handling practices, and how to respond to potential data breaches.

vs678 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, platform features, applicable law, or regulatory requirements. All revisions will be published on this page at vs678.app/privacy-policy, with the "Last Updated" date at the top of the page amended to reflect the date of the most recent revision.

For material changes — meaning changes that significantly affect how we use your personal data or that reduce your privacy rights — vs678 will provide advance notice via email to your registered account address at least 14 calendar days before the revised policy takes effect. Non-material updates (such as clarifications of existing practices, typographical corrections, or formatting improvements) may be made without advance notice but will still be reflected in the updated date.

Your continued use of the vs678 platform after any update to this Privacy Policy constitutes your acknowledgement of the revised policy. If you do not accept a material change, you have the right to close your account before the revised policy takes effect by contacting our 24/7 English live support team.

If you have any questions, concerns, or complaints about this Privacy Policy, about how vs678 handles your personal data, or if you wish to exercise any of your privacy rights, please contact us using the details below. All privacy-related enquiries are handled by our dedicated Data Protection team.

• Primary Contact Method: 24/7 English Live Chat — available directly within the vs678 platform at all hours, including Bangladeshi public holidays (Eid, Victory Day, Independence Day, Pohela Boishakh)
• Email: [email protected] — include "Privacy Request" in the subject line for fastest routing to the Data Protection team
• Response Time: We aim to acknowledge all privacy enquiries within 48 hours (Bangladesh Standard Time, BST UTC+6) and to resolve standard requests within 30 calendar days
• Language: All privacy enquiries must be submitted in English. Our Data Protection team responds in English only.

vs678 is committed to resolving all privacy concerns constructively and transparently. If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority or Alternative Dispute Resolution (ADR ) body in the jurisdiction where vs678 is licensed.