678luck Casino & Sportsbook Data Care
This page describes what we collect when you use 678luck and how we keep that data protected. When you open an account, deposit funds via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer, or engage with our football markets and live-dealer tables, we gather personal information — email address, identity documents, payment details, and betting activity. We handle this information according to data protection principles: we collect only what is necessary, store it securely, and share it only with trusted processors or where required by law.
Our 678luck platform operates across multiple jurisdictions where online gaming is legally permitted. Because our servers and payment processors may sit outside your own region, data transfers can occur. This policy explains those practices and your rights in relation to your personal information on 678luck.
We encourage you to read this policy carefully. If you have questions about how we handle your data, our contact information is listed at the end of this page.
What data we collect on 678luck
We collect personal information in several categories. First, account registration data: we require your email address, password, phone number, and a username. We use this information to create and manage your 678luck account, communicate account updates, and verify your identity.
Second, identity and verification documents: to comply with anti-money-laundering (AML) and know-your-customer (KYC) regulations, we ask you to submit a government-issued ID (passport, national ID card, or driver's license) and proof of address (utility bill, bank statement, or official letter). We store these documents securely and use them only for account verification and fraud prevention.
Third, payment information: when you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer, we record the transaction amount, timestamp, and payment method. We do not store your full bank account numbers or wallet passwords — payment processors handle those details directly. Our records show only that a deposit was made and by which method.
Fourth, betting and gaming activity: we log every bet you place on Liga 1, Piala AFF, Champions League, or other markets, as well as every slot spin, live table session, and Number Pair or Bingo round. These logs include the stake amount, game or market name, outcome, and timestamp. We retain this information to settle disputes, prevent fraud, and comply with gaming regulations.
Fifth, device and usage data: we collect information about the devices you use to access 678luck (operating system, browser type, IP address), session duration, and pages or games you visit. We use this data to improve platform performance, detect suspicious activity, and provide technical support.
How we use your data on 678luck
We use your personal data for several purposes:
- Account management: to create your account, process deposits and withdrawals, and handle password resets or account recovery requests.
- Compliance and regulation: to verify your identity, comply with AML/KYC requirements, and respond to legal requests from authorities in jurisdictions where we operate.
- Fraud and security: to detect suspicious activity, prevent account takeovers, and investigate disputes.
- Communication: to send you account notifications, support responses, and information about service changes. We do not send marketing emails unless you opt in.
- Platform improvement: to analyse usage patterns, identify technical issues, and enhance game or market offerings.
We do not sell your personal data to third parties for marketing purposes. We do share data with essential partners — payment processors, KYC verification providers, and fraud detection services — but only to the extent necessary to operate our services. These partners are contractually bound to protect your data and use it only for agreed purposes.
Your privacy is a condition of using 678luck. We handle your data with the care we would expect if we were in your position.
Data retention and cross-border transfers
We retain your personal data for as long as your 678luck account is active, plus a period thereafter to comply with legal and regulatory requirements. Account registration data and transaction records are typically kept for at least five years. Identity documents are stored securely and may be retained for longer if required by AML/KYC rules or law enforcement requests.
Our servers and payment processors operate across multiple jurisdictions. When you use 678luck from Jakarta, Surabaya, Bandung, or Medan, your data may be transferred to, or processed in, countries outside Indonesia. These jurisdictions may have different data protection laws than your own. By using 678luck, you consent to this cross-border processing. If you do not consent, you should not use our platform.
We apply technical and organisational safeguards — encryption, access controls, and secure storage — to protect your data during these transfers. However, we cannot guarantee absolute security. Internet transmission always carries some risk.
Your rights regarding 678luck data
Depending on your jurisdiction, you may have the right to:
- Access: request a copy of the personal data we hold about you on 678luck.
- Correction: ask us to correct inaccurate data (e.g., misspelled address or phone number).
- Deletion: request deletion of your data, subject to legal retention obligations. Note that deleting your account may limit your ability to withdraw funds or dispute past transactions.
- Objection: object to certain processing activities, such as profiling for fraud detection.
- Data portability: request your data in a structured, machine-readable format.
To exercise these rights, contact our support team using the details provided at the end of this policy. We will respond within standard business timeframes. If you believe we have mishandled your data, you may lodge a complaint with your local data protection authority.
Third-party services and our 678luck platform
We use third-party services to operate 678luck. Payment processors (for DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and bank transfers), identity verification providers, and fraud detection services all have access to portions of your data. These partners are contractually required to maintain confidentiality and use your data only to provide their services to us.
We are not responsible for the privacy practices of third parties. If you have concerns about how a payment processor or verification provider handles your data, contact them directly or consult their own privacy policy.
Changes to our 678luck privacy policy
We may update this privacy policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by email or by posting a notice on our platform. Your continued use of 678luck after such changes constitutes your acceptance of the updated policy.
Contact us about your 678luck data
If you have questions about this privacy policy, wish to exercise your rights, or need to report a data breach, contact our support team. You can reach us through the contact form on our platform, via email listed in your account dashboard, or through the channels provided on our footer. We aim to respond to data-related inquiries within standard business timeframes.
This privacy policy applies to our 678luck platform and all associated services. By registering an account and using our sportsbook, live tables, slots, and other entertainment offerings, you acknowledge that you have read and agree to this policy.