Privacy Policy BT678 – Malaysian Member Data Protection

This Privacy Policy explains how bt678 — operating under the domain bt678-bangla.com — collects, uses, discloses, retains, and protects your personal information as a member of our platform. bt678 takes member privacy very seriously, as we understand that your trust in us depends greatly on how we handle the personal data you entrust to us.

Bt678 operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), which sets out seven data protection principles that all organisations processing personal data in a commercial context in Malaysia must observe. We also adhere to international data protection best practices to ensure the highest standard of protection for all bt678 members.

By registering a bt678 account or using our platform in any capacity, you agree to the collection and use of your personal data as described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the bt678 platform and contact us to close your account.

Bt678 only collects personal data that is necessary to provide our platform services safely and effectively. We do not collect data beyond what our operations require. The following are the categories of data we collect:

Bt678 does not collect sensitive data such as your health information, religious beliefs, or political views. All financial data collected by bt678 is limited strictly to what is required to process deposit and withdrawal transactions in MYR through supported payment methods.

Bt678 collects members' personal data through several transparent and lawful channels. We are committed to ensuring that data collection is done directly from you, with your knowledge and consent:

• Registration Form: When you register a bt678 account, you provide basic information such as your name, Malaysian phone number, and password. This is the most essential data we need to create and manage your account.
• Identity Verification Process (KYC): To meet anti-money laundering (AML) compliance requirements and to process withdrawals above certain thresholds, bt678 may request a copy of your MyKad or other official identification document. This process is designed to protect you and all bt678 members from fraud.
• Financial Transactions: Each time you make a deposit or withdrawal via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX online banking (Maybank2u, CIMB Clicks), the transaction details are automatically recorded for financial record-keeping and security purposes.
• Platform Activity: While you use the bt678 platform — playing slots, Live Casino, poker, betting on the Malaysia Super League or EPL football, and more — our systems automatically record usage data for security and experience improvement purposes.
• Cookie Technology: bt678 uses cookies and similar tracking technologies to enhance your experience on our platform. Further information about bt678 cookies can be found in Section 7 of this document.
• Customer Support: When you contact the bt678 support team via live chat, email, WhatsApp, or Telegram, those conversations may be recorded for quality control and dispute resolution purposes.

Bt678 uses members' personal data solely for legitimate and transparent purposes. We will not use your data for unrelated purposes without your explicit consent. The following are the primary purposes for which bt678 uses personal data:

• Service Provision: Creating and managing your bt678 account, processing deposits and withdrawals in MYR, providing access to all platform games and services, and managing VIP programmes and bonuses.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, collusion, bot usage, money laundering, and any unauthorised access to your bt678 account. This includes monitoring for unusual transaction patterns and the use of two-factor authentication systems.
• Legal Compliance: To comply with applicable legal and regulatory requirements, including the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLATFPUAA), the Personal Data Protection Act 2010 (PDPA), and relevant licensing regulatory requirements.
• Service Communications: Sending transaction confirmations, account security notifications, important bt678 service updates, and responses to customer support enquiries. These communications are essential and consent cannot be withdrawn.
• Platform Upgrades: Analysing usage patterns in aggregate and anonymised form to understand bt678 members' needs and improve platform design, technical performance, and overall user experience.
• Responsible Gaming: Monitoring gameplay patterns to identify members who may be showing signs of problem gambling, and reaching out to them with appropriate support information in line with bt678's commitment to responsible gaming.
• Marketing Communications (with consent): Sending information about bt678 promotions, new bonuses, and special offers to members who have given consent to receive marketing communications. You may withdraw this consent at any time.

Bt678 does not sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. This is our absolute commitment. However, there are limited circumstances in which bt678 may need to disclose your personal data to certain parties:

• Trusted Service Providers: bt678 works with carefully selected third-party service providers to support platform operations — including payment gateway providers for processing Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX transactions; game providers such as Evolution Gaming and Pragmatic Play Live; and cloud infrastructure and cybersecurity providers. All these providers are bound by strict confidentiality agreements and are prohibited from using bt678 data for any purpose other than those specified.
• Legal Requirements: bt678 may disclose personal data when required to do so by applicable Malaysian law, court order, or direction from a competent regulatory authority. In such cases, bt678 will only disclose the minimum data necessary.
• Crime Prevention: If bt678 has reasonable grounds to believe that criminal activity, fraud, or money laundering is linked to a bt678 account, we reserve the right to disclose relevant information to the appropriate Malaysian law enforcement authorities.
• Business Transfer: In the event of a company merger, acquisition, or transfer of bt678's business assets, members' personal data may be transferred to the entity taking over bt678's operations. Members will be notified in advance should such a transfer occur.

Bt678 continually invests in the latest security technologies and procedures to ensure members' personal data is protected to the highest standard. Data security is not merely a legal obligation for us — it is the foundation of trust that builds a lasting relationship between bt678 and each of our members.

• Transmission Encryption: All data transmitted between your device and bt678's servers is protected by TLS 1.3 with AES-256-bit encryption — the same standard used by leading financial institutions in Malaysia and worldwide. This ensures no third party can intercept or read your data in transit.
• Storage Encryption: Personal data stored in bt678's databases is encrypted using AES-256. This means that even if an unauthorised party were somehow to gain access to bt678's databases, they would be unable to read the data without the appropriate decryption key.
• Access Controls: Access to bt678 members' personal data is restricted to staff with a legitimate business need only. A role-based access control (RBAC) system ensures that each bt678 staff member can only access the data required to carry out their specific duties.
• Two-Factor Authentication: bt678 supports and encourages the use of two-factor authentication (2FA) for member accounts. By enabling 2FA, you add an extra layer of protection that ensures only you can access your bt678 account, even if your password is compromised.
• Continuous Monitoring: bt678's security systems monitor all platform activity around the clock to detect any unauthorised access attempts, traffic anomalies, or other indicators of a security compromise. The bt678 cybersecurity team responds to any threats promptly.
• Penetration Testing: bt678 conducts regular penetration testing carried out by independent cybersecurity experts to identify and address any vulnerabilities in the platform infrastructure before they can be exploited.

While bt678 takes all reasonable precautions to protect your data, no system can be guaranteed 100% secure against every possible threat. In the unlikely event of a data breach affecting your personal information, bt678 is committed to notifying you within 72 hours of the breach being detected and taking appropriate remedial action.

Like most modern online platforms, bt678 uses cookies and similar tracking technologies to keep the platform running smoothly, remember your preferences, and help us understand how the bt678 platform is used so we can continue to improve it.

• Essential Cookies: These cookies are essential for the bt678 platform to function properly. They manage your login session, maintain connection security, and preserve basic platform settings. They cannot be disabled — without them, the bt678 platform will not function as intended.
• Functional Cookies: These cookies remember your preferences such as your chosen language, display settings, and last login details to make your experience on bt678 smoother. Without them, you may need to re-enter your settings each time you visit the bt678 platform.
• Analytics Cookies: bt678 uses analytics cookies to understand how members use the platform — which pages are visited most frequently, how much time is spent in each section, and common navigation paths. This data is collected in aggregate and anonymised form solely for the purpose of improving the platform experience.
• Security Cookies: These cookies help bt678 detect suspicious login attempts, recognise the devices you normally use, and alert you if your bt678 account is accessed from an unfamiliar device or location.

You can manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the bt678 platform. For guidance on managing cookies in your browser (Chrome, Firefox, Safari, or others), please refer to the relevant browser's help documentation.

As a bt678 member and data subject under Malaysia's PDPA 2010, you have several important rights regarding your personal data that bt678 is committed to upholding and facilitating:

Bt678 retains members' personal data only for as long as necessary for the purposes set out in this Privacy Policy, or as required under applicable Malaysian law. The following are bt678's data retention guidelines:

• Active Account Data: Personal data of members with an active bt678 account is retained for the duration of the active account period and used for ongoing operational purposes.
• Post-Account Closure Data: When a bt678 account is closed — whether by the member or by bt678 — core personal data is retained for a minimum period of 7 years, in accordance with Malaysian financial and anti-money laundering legal requirements.
• Financial Transaction Records: All deposit and withdrawal records in MYR made via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, or CIMB Clicks are retained for a minimum of 7 years in accordance with the Companies Act and Malaysian financial regulations.
• Security Logs: Technical and security logs used to detect fraud and protect the bt678 platform are retained for 2 years and then automatically deleted.
• Communication Records: bt678 customer support records are retained for 3 years after case resolution for reference and quality control purposes.

Once the relevant retention period has expired, bt678 will securely delete or anonymise your personal data using procedures that ensure it cannot be recovered or exploited by any party.

Bt678 strictly prohibits individuals under the age of 18 from registering or using this platform in any capacity. The bt678 platform is designed exclusively for adults and contains gambling content that is not suitable for children or minors.

Bt678 does not knowingly collect or store any personal data from individuals under the age of 18. If we become aware that personal data belonging to someone under 18 has been collected by bt678, we will take immediate steps to delete that data and close the associated account.

Bt678 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or changes to bt678's services. Any amendments will take effect immediately upon publication of the updated version on this page.

For amendments considered significant and materially affecting members' privacy rights, bt678 will notify affected members via their registered email address or through an in-platform bt678 notification at least 14 days before the amendment takes effect. This gives you sufficient time to review the changes and make an informed decision about whether to continue using the bt678 platform.

The "Last Updated" date at the top of this document will always reflect the date of the most recent revision. bt678 recommends that you review this page periodically, especially before making any important decisions relating to your use of the bt678 platform.

Bt678 has appointed a Data Protection Officer who is responsible for ensuring compliance with this Privacy Policy and handling all privacy-related enquiries, complaints, and requests from members.

If you have any questions, concerns, or complaints regarding how bt678 handles your personal data, or if you wish to exercise any of the privacy rights set out in Section 8, please contact us through any of the following channels:

• Privacy Email: support@bt678-bangla.com (please mark the email subject as "Privacy Enquiry" for faster processing)
• Live Chat: Available 24/7 within the bt678 platform — select "Privacy & Data" as your enquiry category
• WhatsApp & Telegram: Number available after logging in to your bt678 account under the "Contact Us" section

Bt678 is committed to responding to all privacy enquiries within 3 business days. For formal data rights exercise requests, the processing time is 14 business days as stated in Section 8. If you are not satisfied with bt678's response, you have the right to lodge a complaint with the Personal Data Protection Department (PDPD) of Malaysia.