365bd Privacy Policy

1 Introduction

365bd operates an online betting and casino platform (the "Platform") accessible at https://365bd.io, providing Bangladesh players with access to sports betting markets, live casino tables, slot games, and fishing games. In the course of delivering these services, 365bd necessarily collects and processes certain personal data relating to the individuals who register and interact with the Platform.

This Privacy Policy (the "Policy") sets out in formal terms the categories of personal data 365bd collects, the purposes for which that data is processed, the parties with whom it may be shared, the period for which it is retained, and the rights available to data subjects in respect of their personal information. This Policy should be read in conjunction with the 365bd Terms & Conditions, which govern your use of the Platform more broadly.

The effective date of this Policy is stated in the hero section above. 365bd reserves the right to update this Policy in accordance with the process described in Section 14. The most current version of this Policy is always accessible at https://365bd.io/privacy-policy.

2 Data Controller

For the purposes of this Privacy Policy, 365bd acts as the data controller in respect of all personal data collected through the Platform. As data controller, 365bd is responsible for determining the purposes and means of processing your personal data and for ensuring that such processing is conducted lawfully, fairly, and transparently.

All enquiries relating to the collection, use, storage, or deletion of your personal data — including the exercise of any data subject rights described in Section 10 of this Policy — should be directed to the 365bd support team using the contact details provided in Section 15.

3 Data We Collect

365bd collects personal data from registered users and, in limited circumstances, from visitors who have not yet created an account. The categories of personal data we collect are set out below.

365bd does not collect or store full payment card numbers. Card transactions processed via Visa or Mastercard are handled by PCI-DSS-compliant third-party payment processors. 365bd receives only masked card references and transaction status confirmations from these processors.

4 How We Collect Data

365bd collects personal data through the following channels and mechanisms:

• Direct submission: Information you actively provide when creating an account, completing your profile, submitting KYC documents, making a deposit or withdrawal request, or contacting our support team.
• Automated platform systems: Technical and usage data collected automatically as you navigate and interact with the Platform, including server logs, session tracking systems, and in-game event logging.
• Payment processors: Transaction confirmation data transmitted to 365bd by third-party payment providers (bKash, Nagad, Rocket, Upay, DBBL, Visa, Mastercard gateways) upon processing a deposit or withdrawal instruction.
• Cookie and tracking technologies: Data collected via cookies, web beacons, pixel tags, and similar technologies as described in Section 6 of this Policy.
• Identity verification services: Where 365bd uses a third-party KYC (Know Your Customer) service to verify identity documents, that provider may return verification status data to 365bd as part of the verification workflow.
• Fraud and risk management tools: Automated fraud detection systems may generate risk signals associated with your account, device fingerprint, or transaction patterns. These signals are used internally for platform security purposes only.

5 Purpose & Legal Basis for Processing

365bd processes personal data only where there is a clear, documented purpose and a lawful basis for doing so. The primary purposes for which your data is processed, together with the corresponding legal basis, are described below.

6 Cookies & Tracking Technologies

The 365bd platform uses cookies and similar tracking technologies to support essential platform functionality, maintain your session state, and collect anonymised usage analytics. A cookie is a small text file placed on your device by a web server when you access the Platform. Cookies do not contain executable code and cannot access other data stored on your device.

The categories of cookies used by 365bd are as follows:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They manage your login session, maintain your account authentication state, and support the operation of the cashier and game-launch systems. These cookies cannot be disabled without rendering the Platform non-functional.
• Functional cookies: These cookies remember your preferences — such as your preferred language, display settings, and recently played games — to personalise your experience across sessions. Disabling these cookies will not prevent Platform access but will result in loss of personalisation features.
• Analytics cookies: These cookies collect anonymised data about how users navigate the Platform, which pages are most visited, and where technical errors occur. This data is used solely for internal platform improvement purposes. No personally identifiable data is included in analytics reports.
• Security cookies: These cookies help 365bd identify and prevent fraudulent login attempts, bot activity, and other security threats by maintaining a consistent device and session fingerprint across your browsing session.

365bd does not use third-party advertising cookies or behavioural targeting cookies for the purpose of serving advertisements on other websites. You may manage cookie preferences through your browser settings, though disabling strictly necessary cookies will impair your ability to use the Platform.

7 Data Sharing & Third Parties

365bd does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. We share personal data with third parties only in the specific, limited circumstances described below:

• Payment processors: To process your deposit and withdrawal instructions, 365bd shares the minimum required data (typically your name, payment method reference, and transaction amount in BDT) with our payment processing partners, including bKash, Nagad, Rocket, Upay, DBBL, and card gateway providers. These processors operate under contractual data processing agreements with 365bd.
• Identity verification providers: Where KYC (Know Your Customer) verification is required, 365bd may share copies of identity documents you have submitted with a licensed third-party verification service. These providers are contractually bound to use your data exclusively for identity verification purposes.
• Game providers: To launch third-party games from providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, a session token and player ID are transmitted to the relevant provider's gaming server. These providers do not receive your full identity data; they receive only a pseudonymous session identifier.
• Fraud and security services: 365bd may share technical data (IP address, device fingerprint, risk signals) with specialist fraud prevention and cybersecurity service providers for the purpose of protecting the integrity of the Platform and its users.
• Legal and regulatory authorities: 365bd will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, including AML reporting obligations, or where disclosure is necessary to protect the safety of any person or the integrity of the Platform.
• Business transfers: In the event that 365bd undergoes a merger, acquisition, restructuring, or sale of business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer by a prominent notice on the Platform prior to the transfer taking effect.

8 International Data Transfers

365bd primarily serves Bangladesh players, and the majority of our operational data processing takes place in infrastructure aligned with Bangladesh Standard Time (BST, UTC+6). However, because some of our third-party game providers and technology partners maintain servers and operations in other countries, your personal data may in certain circumstances be transferred to and processed in jurisdictions outside Bangladesh.

Where such international transfers occur, 365bd takes reasonable steps to ensure that the receiving entity provides an adequate level of data protection, including through contractual safeguards such as standard data protection clauses in our agreements with those third parties.

If you wish to obtain further information about the specific safeguards applied to any international transfer of your personal data, please contact the 365bd support team using the details provided in Section 15.

9 Data Retention

365bd retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account's active status, plus a minimum of five (5) years following permanent account closure, to satisfy AML record-keeping requirements.
• Financial and transaction data: Retained for a minimum of seven (7) years from the date of each transaction, in accordance with financial record-keeping obligations applicable to online betting platforms.
• KYC verification documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Support communications: Retained for three (3) years from the date of the last communication in each support case, to support dispute resolution and quality assurance purposes.
• Technical and usage data: Typically retained for up to twelve (12) months in identifiable form, after which it is aggregated and anonymised for long-term analytics purposes.
• Responsible gaming records: Retained for five (5) years from the date of any self-exclusion or limit-setting event, to ensure re-registration checks can be applied effectively.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data cannot be immediately deleted due to technical constraints (for example, data held in backup archives), it will be isolated from active processing until deletion can be completed.

10 Your Rights

As a data subject whose personal data is processed by 365bd, you hold the following rights in respect of your personal information. To exercise any of these rights, please submit a written request to the 365bd support team at the contact address provided in Section 15.

• Right of access: You have the right to request a copy of the personal data 365bd holds about you, along with information about the purposes for which it is processed and the categories of third parties to whom it has been disclosed.
• Right to rectification: You have the right to request the correction of any inaccurate or incomplete personal data held in your 365bd account. Basic profile details (such as contact information) can be corrected directly through your account dashboard.
• Right to erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where consent has been withdrawn, or where processing is unlawful. This right is subject to override by legal retention obligations, particularly in respect of AML and financial record-keeping requirements.
• Right to restriction of processing: You have the right to request that 365bd restricts the active processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to data portability: You have the right to receive a copy of personal data you have provided to 365bd in a structured, commonly used, machine-readable format, where processing is carried out on the basis of consent or contractual necessity and by automated means.
• Right to object: You have the right to object to the processing of your personal data on grounds of legitimate interest, including profiling based on legitimate interest. You also have an absolute right to object to processing for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

11 Children & Minors

The 365bd platform is strictly intended for adults aged 21 years and above. 365bd does not knowingly collect, store, or process personal data relating to individuals under the age of 21. The Platform's registration process includes age declaration and is subject to age verification checks as described in the Terms & Conditions.

If 365bd becomes aware that personal data has been collected from an individual who is under 21 years of age, all such data will be deleted from our systems without delay, and the associated account will be permanently closed. If you have reason to believe that a minor has registered on the 365bd platform using false age information, please contact the support team immediately at the address provided in Section 15 so that appropriate action can be taken.

Parents and guardians who are concerned about underage access to online gambling platforms are encouraged to make use of parental control software and internet filtering tools, and to review the guidance available on our Responsible Gaming page.

12 Security Measures

365bd implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• SSL/TLS encryption: All data in transit between your device and the 365bd Platform is encrypted using current-generation SSL/TLS protocols. Visitors attempting to access the Platform over unencrypted HTTP connections are automatically redirected to the secure HTTPS version.
• Access controls: Access to personal data held in 365bd's internal systems is restricted to staff members and contractors with a genuine operational need. Access rights are role-based and reviewed regularly.
• Data pseudonymisation: Where technically feasible, personal data used for analytics and internal reporting purposes is pseudonymised or anonymised to reduce the risk associated with any potential data breach.
• Intrusion detection: 365bd's technical infrastructure is monitored continuously for signs of unauthorised access, unusual traffic patterns, and other indicators of compromise. Incidents are investigated promptly by the security team.
• Incident response: In the event of a personal data breach that is likely to result in a risk to affected individuals, 365bd will notify impacted players and take appropriate remediation action without undue delay.
• Staff training: All 365bd staff members and contractors who handle personal data are required to undergo data privacy awareness training as part of their onboarding and on a regular basis thereafter.

While 365bd takes data security very seriously and applies robust protective measures, no online platform can guarantee absolute security against all threats. Players are strongly encouraged to use a strong, unique password for their 365bd account and to contact support immediately if they suspect any unauthorised access to their account.

13 Third-Party Links

The 365bd platform may, from time to time, contain references or links to content operated by third-party game providers, payment processors, or other service partners. This Privacy Policy applies solely to personal data collected and processed by 365bd in connection with the Platform. It does not apply to the privacy practices of any third-party website, application, or service that may be accessible from within the Platform.

365bd has no control over, and accepts no responsibility for, the privacy practices or content of third-party operators. We encourage you to review the privacy policy of any third-party service you interact with before providing that service with any personal information. The inclusion of any third-party service within the 365bd platform does not constitute 365bd's endorsement of that service's privacy or security practices.

14 Policy Updates

365bd reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or our data processing practices. Where any change to this Policy is material — meaning it affects how we collect, use, share, or retain your personal data in a way that could be significant to you — we will endeavour to notify registered players by displaying a prominent notice on the Platform and, where feasible, by sending a notification to the email address associated with your account.

The effective date at the top of this page will be updated each time a new version of the Policy is published. Your continued use of the 365bd Platform after the updated Policy takes effect constitutes your acceptance of the revised terms. If you do not agree to any material changes, you must cease use of the Platform and contact the support team to arrange account closure.

We recommend that you review this Privacy Policy periodically, even in the absence of a formal notification, to stay informed about how 365bd is protecting your personal information. The current version of this Policy is always available at https://365bd.io/privacy-policy.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which 365bd handles your personal data, please contact our support team. Our support staff are available 24 hours a day, 7 days a week, and are equipped to assist Bangladesh players in English with all data privacy matters.

You may reach the 365bd data privacy support team at the following email address:

365bd aims to resolve all privacy-related enquiries promptly, courteously, and in accordance with the timeframes described in Section 10 of this Policy. We value the trust Bangladesh players place in our platform and are committed to handling every privacy enquiry with the care and professionalism it deserves.