678apk Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all Users of the 678apk platform, including visitors, registered account holders, and anyone who interacts with our website, mobile-optimized interface, customer support channels, or related services. This policy governs the collection and processing of personal data in connection with sports betting, casino gaming, account management, payment processing, customer service, marketing communications, and all other activities conducted through 678apk.

678apk operates as an online gaming platform serving the Indonesian market. We recognize the importance of data privacy and are committed to complying with applicable data protection laws and international best practices. This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy, which together form the complete framework governing your use of our Services.

By creating an account, making a deposit, placing bets, or otherwise using 678apk Services, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your personal information as described in this Privacy Policy. If you do not agree with any aspect of this policy, you must not use our platform.

2. Information We Collect

678apk collects various types of personal information necessary to provide, maintain, protect, and improve our Services. The categories of data we collect include:

2.1 Account Registration Information

When you create an account with 678apk, we collect the following mandatory information:

• Personal Identification: Full legal name as it appears on your government-issued identification document, date of birth, gender, and nationality.
• Contact Details: Residential address in Indonesia (including street address, city, province, and postal code), valid email address, and mobile phone number with Indonesian country code.
• Account Credentials: Username, password (stored in encrypted format), and security questions/answers for account recovery purposes.

This information is required to verify your identity, confirm you meet eligibility requirements (21+ years of age, Indonesian residency), prevent fraud, and comply with Know Your Customer (KYC) and anti-money laundering regulations.

2.2 Identity Verification Documents

To process withdrawals and comply with regulatory obligations, we require submission of identity verification documents including:

• Indonesian National Identity Card (KTP) - front and back images
• Passport or driver's license as alternative identification
• Proof of address documents such as utility bills, bank statements, or government correspondence dated within the last 3 months
• Selfie photograph holding your identification document for facial verification

These documents are securely stored in encrypted databases and accessed only by authorized verification staff. We retain identification documents for the duration of your account activity plus applicable regulatory retention periods, typically 5-7 years after account closure.

2.3 Financial and Payment Information

To facilitate deposits and withdrawals, we collect payment-related information including:

• Bank account details for Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) - account holder name, bank name, account number, and branch information
• E-wallet account identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja
• Transaction history including deposit amounts, withdrawal amounts, dates, times, and transaction reference numbers
• Payment processing data such as transaction status, processing times, and failure/success notifications

We do not store sensitive payment credentials such as bank login passwords, credit card CVV codes, or e-wallet PINs. All payment processing is conducted through secure third-party payment gateways that maintain PCI DSS (Payment Card Industry Data Security Standard) compliance.

2.4 Gaming and Betting Activity

We automatically record comprehensive data about your gaming activities to maintain platform integrity, detect fraud, resolve disputes, and improve Services:

• Bet history including sport/game type, bet amounts, odds, selections, timestamps, bet IDs, settlement status, and outcomes
• Account balance changes, bonus credits, wagering progress, and cashback calculations
• Game session data such as duration, game titles, bet sizes, win/loss records, and RTP (Return to Player) outcomes
• Responsible gaming tool usage including deposit limit configurations, loss limit settings, session time limits, reality check acknowledgments, and self-exclusion requests

This data helps us identify problem gambling patterns, provide responsible gaming interventions, calculate accurate loyalty rewards, and resolve customer service inquiries regarding specific bets or game outcomes.

2.5 Technical and Device Information

When you access 678apk, we automatically collect technical data including:

• Device Information: Device type (smartphone, tablet, desktop), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution, and device identifiers
• Network Information: IP address, internet service provider, approximate geographic location (city/region level based on IP), and connection type
• Usage Data: Pages visited, time spent on pages, navigation paths, click patterns, search queries, features used, and referring/exit pages
• Cookies and Tracking Technologies: Session cookies for authentication, persistent cookies for preferences, and analytics cookies to understand user behavior (see Section 8 for detailed cookie information)

Technical data helps us optimize platform performance, detect security threats, prevent duplicate accounts, improve user experience design, and troubleshoot technical issues.

2.6 Communications and Customer Support

When you contact 678apk customer support via live chat, email, WhatsApp, or phone, we collect and retain:

• Content of your inquiries, complaints, feedback, and suggestions
• Communication metadata including timestamps, support agent assignments, response times, and resolution status
• Attachments such as screenshots, documents, or other files you provide to support your inquiry
• Call recordings for quality assurance and training purposes (you will be notified before recording begins)

Communications records help us improve customer service quality, resolve disputes, investigate fraud, and provide consistent support experiences across multiple interactions.

3. How We Use Your Information

678apk uses collected personal information for the following legitimate business purposes:

3.1 Service Provision and Account Management

• Creating, maintaining, and authenticating your 678apk account
• Processing deposits and withdrawals through Indonesian banking channels and e-wallets
• Providing access to sports betting, casino games, live dealer experiences, and other platform features
• Calculating and displaying accurate account balances, bet history, and transaction records
• Administering VIP loyalty programs, tier progressions, and reward distributions
• Processing bonus credits, cashback payments, and promotional offers

3.2 Verification and Regulatory Compliance

• Verifying your identity, age (21+ requirement), and Indonesian residency status
• Complying with Know Your Customer (KYC) and anti-money laundering (AML) regulations
• Conducting fraud prevention checks and detecting suspicious activities
• Preventing duplicate accounts, bonus abuse, and terms violations
• Cooperating with law enforcement requests and regulatory audits when legally required
• Maintaining records for regulatory retention periods as mandated by licensing authorities

3.3 Customer Support and Communication

• Responding to inquiries, complaints, and support requests via live chat, email, or phone
• Sending account-related notifications such as deposit confirmations, withdrawal approvals, and security alerts
• Providing responsible gaming support including self-exclusion confirmations and limit change acknowledgments
• Investigating and resolving disputes regarding bets, game outcomes, or account issues
• Collecting feedback to improve customer service quality and platform features

3.4 Platform Improvement and Personalization

• Analyzing user behavior to optimize website design, navigation, and feature placement
• Testing new features, games, and payment methods with select user groups
• Personalizing content recommendations based on your gaming preferences and history
• Improving mobile responsiveness and performance for Indonesian network conditions
• Identifying and fixing technical bugs, errors, or security vulnerabilities

3.5 Marketing and Promotional Communications (With Consent)

• Sending promotional emails about new games, bonuses, VIP offers, and special events
• Delivering targeted offers based on your gaming interests (e.g., football betting promotions for sports bettors)
• Announcing platform updates, new features, and service improvements
• Inviting participation in tournaments, competitions, and exclusive VIP events

Marketing communications are sent only to Users who have opted in to receive them. You can unsubscribe at any time via the link in promotional emails or by adjusting preferences in your account settings. Transactional communications (deposit confirmations, withdrawal notifications, security alerts) are not affected by marketing preferences and will continue as they are essential to service delivery.

4. Legal Basis for Data Processing

678apk processes personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our obligations under the Terms & Conditions you accepted when creating an account, including providing gaming services, processing payments, and maintaining account security.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including identity verification requirements, anti-money laundering rules, tax reporting obligations, and data retention mandates.
• Legitimate Interest: Processing serves our legitimate business interests such as fraud prevention, platform security, service improvement, and customer support, balanced against your privacy rights.
• Consent: For marketing communications and non-essential cookies, we obtain your explicit consent, which you can withdraw at any time without affecting other Services.

5. Data Sharing and Disclosure

678apk does not sell, rent, or trade your personal information to third parties for their marketing purposes. We share data only in the following limited circumstances:

5.1 Essential Service Providers

We share necessary personal information with trusted third-party service providers who perform functions on our behalf under strict confidentiality agreements:

• Payment Processors: Indonesian banking partners and e-wallet providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) receive payment-related data to process deposits and withdrawals.
• Identity Verification Providers: Third-party KYC services receive identification documents and personal details to verify your identity, age, and address against government databases and watchlists.
• Game Providers: Software studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and others receive anonymized player IDs and bet data necessary to deliver casino games, live dealer experiences, and record outcomes.
• Cloud Hosting and Infrastructure: Technology providers that host our servers, databases, and applications receive encrypted data to deliver platform performance, scalability, and reliability.
• Customer Support Tools: Communication platforms for live chat, email management, and ticket systems process support conversations and contact details to facilitate assistance.
• Analytics Services: Analytics platforms receive anonymized usage data to help us understand traffic patterns, popular features, and areas for improvement.

5.2 Legal Requirements and Law Enforcement

We may disclose personal information when legally required or when we believe in good faith that disclosure is necessary to:

• Comply with court orders, subpoenas, or other legal processes
• Respond to requests from law enforcement, tax authorities, or regulatory agencies
• Enforce our Terms & Conditions and investigate potential violations
• Protect the rights, property, or safety of 678apk, our Users, or the public
• Detect, prevent, or address fraud, security issues, or technical problems
• Cooperate with anti-money laundering investigations or terrorism financing inquiries

5.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets, your personal information may be transferred to the successor entity as part of the transaction. We will notify you via email and prominent website notice before your data is transferred and becomes subject to a different privacy policy, giving you the opportunity to close your account if you disagree with the change.

6. Data Security Measures

678apk employs industry-leading security technologies and organizational practices to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

• Encryption: All data transmitted between your device and our servers uses SSL/TLS encryption (minimum 256-bit). Sensitive data at rest (passwords, identification documents, payment details) is stored in encrypted formats using AES-256 encryption standards.
• Access Controls: Personal data is accessible only to authorized 678apk employees and contractors who require access to perform their job functions. Access is granted based on role-based permissions and logged for audit purposes.
• Authentication: Your account is protected by password authentication with minimum complexity requirements. We strongly recommend enabling two-factor authentication when available for enhanced security.
• Network Security: Our infrastructure employs firewalls, intrusion detection systems, DDoS protection, and regular security scanning to prevent unauthorized network access.
• Secure Development: Our development practices follow OWASP (Open Web Application Security Project) guidelines including input validation, output encoding, and protection against common vulnerabilities like SQL injection and cross-site scripting.
• Third-Party Audits: We engage independent security firms to conduct penetration testing and vulnerability assessments annually, promptly addressing any identified issues.
• Employee Training: All staff with access to personal data undergo regular privacy and security training, sign confidentiality agreements, and are subject to disciplinary action for policy violations.

Despite these measures, no internet transmission or electronic storage method is 100% secure. While we strive to protect your personal information using commercially reasonable security practices, we cannot guarantee absolute security against all threats. You are responsible for maintaining the confidentiality of your account credentials and should notify us immediately if you suspect unauthorized access to your account.

7. Data Retention

678apk retains personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce agreements. Specific retention periods include:

Data Category	Retention Period
Account Registration Information	Duration of account activity + 7 years after closure
Identity Verification Documents	Duration of account activity + 7 years after closure
Financial Transaction Records	Duration of account activity + 7 years after closure (regulatory requirement)
Betting and Gaming History	Duration of account activity + 5 years after closure
Customer Support Communications	Duration of account activity + 3 years after closure
Technical and Usage Data	24 months from collection, then anonymized
Marketing Consent Records	Duration of account activity + 2 years after consent withdrawal

After retention periods expire, personal data is securely deleted or anonymized such that it can no longer identify you. Anonymized aggregated data may be retained indefinitely for statistical and research purposes. Certain data may be retained longer if required by legal proceedings, investigations, or regulatory requests.

8. Cookies and Tracking Technologies

678apk uses cookies and similar technologies to improve platform functionality, personalize your experience, and analyze usage patterns. Cookies are small text files stored on your device that contain information about your preferences and activities.

Types of Cookies We Use:

• Essential Cookies: Required for platform operation including user authentication, session management, security features, and shopping cart functionality. These cannot be disabled without breaking core Services.
• Performance Cookies: Collect anonymous information about how Users interact with the platform, which pages are most popular, error messages encountered, and navigation patterns. This helps us optimize performance and fix issues.
• Functional Cookies: Remember your preferences such as language selection, currency display, screen layout settings, and personalized content recommendations to provide a tailored experience.
• Marketing Cookies: Track your visits across 678apk pages to deliver relevant promotional offers and measure campaign effectiveness. These require your consent and can be disabled via cookie preferences.

You can manage cookie preferences through your browser settings or our cookie consent tool displayed on first visit. Blocking certain cookies may limit functionality and features available to you. Note that disabling cookies does not prevent essential security cookies required for account protection.

9. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal data we hold about you, including details about how it's processed and who it's shared with. Access requests are fulfilled within 30 days.
• Right to Rectification: Update or correct inaccurate personal information in your account settings or by contacting customer support.
• Right to Deletion: Request deletion of your personal data, subject to legal retention obligations and legitimate business needs. Account closure triggers our deletion processes according to retention schedules.
• Right to Restriction: Request temporary restriction of data processing in certain circumstances such as during dispute resolution.
• Right to Data Portability: Receive your personal data in a structured, commonly used format to transfer to another service provider where technically feasible.
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes. Marketing objections are honored immediately.
• Right to Withdraw Consent: Withdraw previously given consent for marketing communications or optional data processing at any time without affecting lawful processing based on other legal grounds.

To exercise these rights, contact 678apk customer support via email at [email protected] with "Data Privacy Request" in the subject line. We will verify your identity before processing requests to protect against unauthorized access. In some cases, legal or contractual obligations may prevent us from fulfilling deletion or restriction requests.

10. International Data Transfers

While 678apk primarily serves the Indonesian market, some data processing may occur in jurisdictions outside Indonesia when using international service providers for hosting, analytics, or game delivery. We ensure such transfers comply with applicable data protection laws through:

• Standard contractual clauses approved by data protection authorities
• Verification that recipient countries provide adequate data protection levels
• Binding corporate rules and privacy shield certifications where applicable
• Explicit consent for transfers where required by Indonesian regulations

11. Children's Privacy

678apk Services are strictly intended for adults aged 21 years and older. We do not knowingly collect personal information from individuals under the legal gambling age. Our registration process includes age verification measures, and we require submission of government-issued identification confirming date of birth before processing withdrawals.

If we discover that personal information from an individual under 21 years of age has been collected, we will immediately delete such data, close the associated account, and refund any deposits to the payment source. Parents or guardians who believe a minor has accessed our Services should contact us immediately at [email protected] for urgent account closure and data deletion.

12. Changes to This Privacy Policy

678apk reserves the right to modify this Privacy Policy at any time to reflect changes in legal requirements, business practices, or Services offered. Material changes affecting your rights will be communicated via email to your registered address and prominent website notice at least 30 days before taking effect. Your continued use of the platform following policy updates constitutes acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. The "Last Updated" date at the top of this document indicates when the most recent changes were made.

13. Contact Information and Data Protection Officer

If you have questions, concerns, or complaints about this Privacy Policy or our data handling practices, please contact 678apk:

• Email: [email protected] (Privacy inquiries should include "Privacy Policy" in subject line)
• Live Chat: Available 24/7 through platform interface
• WhatsApp: Accessible via customer support portal

For data protection matters specifically, you may request to speak with our Data Protection Officer who oversees compliance with privacy regulations and investigates privacy complaints. We aim to respond to all privacy inquiries within 48 hours and resolve issues within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with relevant Indonesian data protection authorities.