Privacy Policy 678bd – Our Commitment to Protecting Your Data

1 Introduction

678bd ("we", "Platform", "678bd") is committed to protecting the privacy of every user who uses our services. This Privacy Policy explains our practices regarding the collection, use, storage, and protection of your personal data.

This document is drafted in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. We review and update this policy from time to time to ensure it remains relevant and compliant with legal changes.

Privacy is not something we take lightly. As a platform that handles sensitive financial and personal information, we understand that your trust is our most valuable asset, and we are committed to protecting it to the fullest extent of our ability.

2 Types of Personal Data Collected

678bd collects your personal data through several means — directly from you during registration or platform use, and automatically through standard tracking technologies. The following are the categories of data we collect:

3 How We Use Your Data

The personal data you provide to 678bd is used solely for lawful purposes necessary to operate the platform properly and securely. These purposes include:

• Open and manage your account, including the KYC identity verification process required by law.
• Process deposits, withdrawals, and all financial transactions on the platform accurately and securely.
• Detect, investigate, and prevent fraudulent activity, money laundering, or platform abuse.
• Provide customer support and resolve enquiries or disputes submitted by you.
• Send important account-related communications such as transaction confirmations, security notifications, and policy updates.
• Personalise your experience on the platform based on your usage habits and preferences.
• Analyse aggregated, anonymised usage patterns for platform improvement.
• Complying with legal and regulatory obligations applicable to the platform's operations.

678bd will not use your data for purposes unrelated to platform operations without first obtaining your additional consent.

4 Data Sharing with Third Parties

678bd does not sell or rent your personal data to any third party. However, in operating the platform, we need to share certain data with the following parties within limited and controlled boundaries:

• Payment Service Providers: Information required to process deposits and withdrawals is shared with payment service providers that have undergone rigorous security assessments.
• Game Software Providers: Minimum technical data required to run games is shared with licensed game providers.
• Relevant Authorities: 678bd will disclose data when required by court order, legal investigation, or a lawful request from a competent authority.
• Technical Service Providers: Cloud infrastructure and technical service providers that help us operate the platform, subject to strict confidentiality agreements.

All third parties that receive your data are bound by data protection agreements and are only permitted to use that data for the specific agreed purposes.

5 Data Security

678bd continuously invests in security infrastructure and practices to ensure your data is protected from cyber threats and unauthorized access. The security measures we implement include:

• 256-bit SSL/TLS encryption for all data communications between client and server.
• Passwords are stored using strong one-way hashing algorithms — we cannot read your password ourselves.
• Two-factor authentication (2FA) to protect account access.
• Real-time account activity monitoring and anomaly detection system.
• Strict internal access controls — only staff who require access to specific data to perform their duties are permitted.
• Regular security testing and audits by independent parties.
• Tested incident response procedures to address any data breaches promptly and transparently.

6 Cookies & Tracking Technologies

678bd uses cookies and similar tracking technologies to enhance platform functionality and your experience as a user. There are several types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collect information on how users interact with the platform to help us identify technical issues and improve performance.
• Functional Cookies: Save your preferences such as language and display settings to deliver a more personalised experience.
• Analytics Cookies: Help us understand aggregated, anonymised usage patterns for platform improvement purposes.

You can manage cookie settings through your web browser. Please note that disabling certain cookies may affect your experience on the 678bd platform.

7 Cross-Border Data Transfers

In operating a digital platform, some data may be stored or processed on servers located outside Malaysia. Every cross-border data transfer carried out by 678bd is subject to the following protections:

• Transfers only occur to countries or regions with an adequate level of data protection.
• Binding data transfer agreements are established with all data recipients outside the country.
• The same encryption standards are maintained regardless of data storage location.

678bd ensures that any cross-border data transfer does not reduce the level of protection afforded to your personal data.

8 Your Rights as a Data Subject

As a 678bd member, you have the following rights regarding your personal data held by us, in line with Malaysia's PDPA:

To exercise any of the above rights, contact our privacy team via in-platform live chat or email at [email protected]. We will process your request within 30 business days. In complex cases, this period may be extended with prior notice to you.

9 Data Retention Period

678bd does not retain your personal data longer than necessary for the purposes stated in this policy. Our data retention guidelines are as follows:

• Active account data is retained for the duration your account remains active and for any additional period required by law following account closure.
• Financial transaction records are retained for a minimum of 7 years in accordance with Malaysia's financial and tax regulatory requirements.
• KYC documents are retained for a minimum of 5 years after the business relationship ends.
• System logs and security data are retained for 12 months for investigation purposes if required.
• Cookie and analytics data is retained for a maximum of 24 months before being deleted or anonymized.

Upon expiry of the relevant retention period, your data will be securely deleted or anonymised using approved deletion procedures.

10 Children's Privacy

The 678bd platform is intended for individuals aged 18 and above only. We do not knowingly collect, store, or process personal data of children under the age of 18.

If we find that data belonging to a minor has been collected without our knowledge, we will take immediate action to delete that data and close the account in question. If you believe a minor has registered on our platform, please contact us immediately.

11 Privacy Policy Amendments

678bd reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or platform improvements.

• Material amendments that affect your privacy rights will be communicated via in-platform notifications and email at least 14 days before taking effect.
• Minor amendments that do not affect your fundamental rights may be updated immediately, with the new review date stated at the top of this document.
• Continued use of the platform after the effective date of any amendments is considered acceptance of the revised policy.

We recommend you review this Privacy Policy periodically to stay informed about how we protect your information.

12 Contact Us for Privacy Inquiries

If you have any questions, concerns, or complaints about how 678bd handles your personal data, our privacy team is ready to help.

If you are not satisfied with our response, you have the right to file a complaint with the Department of Personal Data Protection Malaysia or the relevant data protection authority in your region.