bd366 Privacy Policy — How We Handle Your Personal Data

Introduction and Scope

This Privacy Policy ("Policy") describes how bd366 ("bd366", "we", "us", "our") collects, uses, stores, discloses, and protects personal data relating to individuals ("you", "the Player") who access or use the bd366 website, mobile interface, sportsbook, casino platform, and all associated services (collectively, "the Platform").

This Policy applies to all personal data processed by bd366 in connection with the Platform, regardless of whether you are a registered account holder, a visitor browsing the Platform without an account, or a former player whose account has been closed. By accessing or using the Platform, you acknowledge that you have read and understood this Policy.

This Policy should be read alongside the bd366 Terms & Conditions, which govern the broader contractual relationship between bd366 and its players. In the event of any conflict between this Policy and the Terms & Conditions on matters of data privacy, this Policy shall take precedence.

bd366 operates the Platform specifically for players in Bangladesh. All monetary figures referenced in this Policy are in Bangladeshi Taka (BDT) unless otherwise stated. The Platform is intended solely for adults aged 21 and above.

Data Controller Information

For the purposes of this Policy, bd366 acts as the data controller in respect of all personal data collected through the Platform. As data controller, bd366 determines the purposes for which and the manner in which personal data is processed.

If you have any questions, concerns, or requests relating to this Policy or to the personal data bd366 holds about you, you may contact our data protection team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Response Time: We aim to respond to all data-related enquiries within five (5) business days and to fulfil verified data subject requests within thirty (30) calendar days.

Where a data subject request is complex or involves a large volume of data, we may extend the response period by a further thirty (30) days, in which case we will notify you of the extension and the reason for it within the initial thirty-day window.

Personal Data We Collect

bd366 collects the following categories of personal data from players and platform visitors:

3.1 Registration and Identity Data. When you create a bd366 account, we collect your full legal name, date of birth, residential address in Bangladesh (including city — such as Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or Barisal), email address, and mobile phone number. This information is required to create and maintain your account and to fulfil our identity verification obligations.

3.2 Identity Verification (KYC) Data. As part of our Know Your Customer (KYC) process, we may collect copies of government-issued identification documents such as your National Identity Card (NID), passport, or driving licence, together with proof of your residential address. We may also collect a facial photograph or video for biometric identity verification purposes where required.

3.3 Financial and Transaction Data. We collect details of all deposits and withdrawals made through the Platform, including the payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank), transaction amounts in BDT, transaction timestamps, and payment method identifiers (such as mobile wallet numbers or masked card numbers). We do not store full payment card numbers on our servers.

3.4 Gaming and Betting Activity Data. We collect records of all bets placed, games played, bonus offers claimed, wagering activity, and associated outcomes. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

3.5 Technical and Usage Data. We automatically collect certain technical data when you access the Platform, including your IP address, device type, operating system, browser type and version, screen resolution, session duration, pages visited, and referring URL. This data is used to maintain platform security, detect fraudulent activity, and improve the user experience.

3.6 Communications Data. We retain records of communications between you and bd366's customer support team, including emails, live chat transcripts, and any other written correspondence. These records are maintained for quality assurance, dispute resolution, and regulatory compliance purposes.

3.7 Responsible Gaming Data. Where you make use of responsible gaming tools — such as setting deposit limits, requesting a cooling-off period, or applying for self-exclusion — we record and retain this information to enforce your elected restrictions and to fulfil our responsible gaming obligations.

How We Use Your Personal Data

bd366 uses the personal data it collects for the following purposes:

• Account Management: To create, maintain, and administer your bd366 player account, including processing deposits and withdrawals, applying bonuses, and communicating account-related information.
• Identity Verification: To verify your identity and age in accordance with our KYC obligations, and to confirm that you meet the 21+ eligibility requirement for using the Platform.
• Payment Processing: To process deposits and withdrawals via supported payment methods, including bKash, Nagad, Rocket, Upay, and supported bank accounts, and to investigate and resolve payment disputes.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, money laundering, multi-accounting, bonus abuse, and other prohibited activities on the Platform.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling, to enforce player-elected limits and exclusions, and to contact players where our responsible gaming systems identify behaviour of concern.
• Platform Improvement: To analyse usage patterns, diagnose technical issues, test new features, and improve the overall performance and user experience of the bd366 Platform.
• Legal and Regulatory Compliance: To comply with applicable laws and regulations, including anti-money-laundering requirements, and to respond to lawful requests from regulatory authorities.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance in connection with your bd366 account and the Platform's services.
• Marketing Communications: Where you have provided consent, to send you promotional offers, bonus notifications, and platform updates by email or SMS. You may withdraw consent for marketing communications at any time by contacting [email protected].

Legal Basis for Processing

bd366 processes personal data on the following legal bases:

5.1 Contractual Necessity. The majority of the personal data processing described in this Policy is necessary for the performance of the contract between bd366 and the Player — specifically, for delivering the Platform's betting and gaming services, processing payments, and managing the player account. Without this processing, bd366 would be unable to provide its services to you.

5.2 Legal Obligation. Certain processing — particularly in relation to identity verification, transaction record-keeping, and anti-money-laundering monitoring — is required to comply with applicable legal and regulatory obligations. bd366 must fulfil these obligations regardless of player consent.

5.3 Legitimate Interests. bd366 processes certain data — including technical usage data and communication records — on the basis of its legitimate interests in operating a secure, reliable, and commercially viable platform. In each case, bd366 has assessed that its legitimate interests are not overridden by the rights and freedoms of the Player.

5.4 Consent. Where bd366 relies on consent as a legal basis — primarily for marketing communications — that consent is freely given, specific, informed, and revocable. You may withdraw consent for consent-based processing at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Sharing Your Personal Data

bd366 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. Personal data is shared with third parties only in the following circumstances:

• Payment Service Providers: Personal and financial data is shared with payment processors (including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank) to the extent necessary to process deposits and withdrawals. These providers are bound by their own data protection obligations and are not permitted to use player data for any purpose other than processing the relevant transaction.
• KYC and Verification Partners: Identity and document data may be shared with third-party identity verification service providers engaged by bd366 to perform KYC checks. These providers operate under binding data processing agreements and are prohibited from retaining or using player data beyond the scope of verification.
• Game Content Providers: Certain technical data may be transmitted to game providers (including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, JILI, PG Soft, Habanero, and Playtech) in connection with the delivery of game content. This is limited to the session and account identifiers necessary to authenticate and deliver the game session.
• Legal and Regulatory Authorities: bd366 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or regulatory direction. bd366 will notify affected players of such disclosures where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a material portion of bd366's business, personal data held by bd366 may be transferred to the acquiring entity as part of the transaction, subject to the acquirer honouring the commitments made in this Policy.

International Data Transfers

Some of the third-party service providers engaged by bd366 may be based outside of Bangladesh. Where personal data is transferred internationally, bd366 takes reasonable steps to ensure that the recipient provides an adequate level of data protection, including through the use of contractual data protection clauses, data processing agreements, or other recognised transfer mechanisms.

bd366 does not transfer personal data to jurisdictions known to offer inadequate data protection standards without first implementing appropriate safeguards. If you have questions about the international transfer of your personal data, please contact us at [email protected].

Data Retention

8.1 Active Accounts. Personal data associated with an active bd366 account is retained for as long as the account remains open and active. bd366 reviews the data it holds on active accounts periodically and deletes or anonymises data that is no longer necessary for the purposes for which it was collected.

8.2 Closed Accounts. Following the closure of a player account, bd366 retains personal data — including identity, transaction, and gaming activity records — for a minimum period of five (5) years from the date of account closure. This retention period reflects bd366's obligations under applicable financial crime prevention, anti-money-laundering, and record-keeping requirements.

8.3 KYC Documents. Identity verification documents submitted as part of the KYC process are retained for a minimum of five (5) years following account closure. Physical or digital copies of documents are stored securely and destroyed or deleted at the end of the retention period.

8.4 Responsible Gaming Records. Records of self-exclusion elections and deposit limit settings are retained for the duration of the exclusion or restriction period and for a minimum of five (5) years thereafter to prevent the circumvention of self-exclusion through re-registration.

8.5 Post-Retention. At the expiry of the applicable retention period, personal data is either securely deleted or irreversibly anonymised such that it can no longer be attributed to any individual player.

Cookies and Tracking Technologies

bd366 uses cookies and similar tracking technologies on the Platform for the following purposes:

9.1 Essential Cookies. These cookies are strictly necessary for the Platform to function. They maintain your login session, store your platform preferences, and enable core platform features such as game loading and payment processing. Essential cookies cannot be disabled without impairing your ability to use the Platform.

9.2 Analytics Cookies. bd366 uses first-party analytics cookies to collect aggregated, anonymised data about how players navigate and interact with the Platform. This information is used solely to improve platform performance, identify technical issues, and optimise the user experience. bd366 does not use third-party analytics services that track players across other websites.

9.3 No Advertising Cookies. bd366 does not use third-party advertising cookies or cross-site tracking technologies on the Platform. Your browsing activity on bd366 is not shared with advertising networks or data brokers.

9.4 Managing Cookies. You may manage cookie preferences through your browser settings. Note that disabling essential cookies may prevent certain Platform features from functioning correctly. Detailed instructions for managing cookies are available in the help documentation of all major browsers.

Security Measures

bd366 implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL encryption for all data transmitted between your device and the bd366 Platform.
• Encryption of sensitive data fields — including financial data and identity document copies — at rest in bd366's secure data storage infrastructure.
• Role-based access controls limiting access to personal data to authorised personnel with a legitimate operational need.
• Comprehensive audit logging of all access to personal data by internal systems and personnel.
• Regular security assessments and penetration testing of the Platform's infrastructure.
• Employee training on data protection obligations and information security best practices.

Notwithstanding these measures, no data transmission over the internet or electronic storage system is entirely immune from risk. bd366 cannot guarantee the absolute security of personal data and is not liable for losses resulting from security breaches that are outside its reasonable control. In the event of a data breach that is likely to result in a risk to players' rights and freedoms, bd366 will notify affected players in accordance with applicable legal requirements.

Children and Minors

The bd366 Platform is strictly for adults aged 21 and above. bd366 does not knowingly collect personal data from individuals under the age of 21. If bd366 becomes aware that personal data has been submitted by or relates to a person under the age of 21, that data will be deleted and the associated account will be closed immediately.

If you are a parent or guardian and believe that a minor has registered on the bd366 Platform or submitted personal data without your consent, please contact us immediately at [email protected] with the relevant details. We will investigate and take appropriate action without undue delay.

Changes to This Privacy Policy

bd366 may update this Privacy Policy from time to time to reflect changes in our data processing practices, platform features, or applicable legal requirements. When changes are made, the "Last Updated" date at the top of this page will be revised accordingly.

Where changes to this Policy are material — meaning they significantly affect how we collect, use, or share your personal data — bd366 will provide advance notice to registered players via the email address held on their account, or by displaying a prominent notice on the Platform, no less than fourteen (14) days before the revised Policy takes effect.

Your continued use of the bd366 Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you should stop using the Platform and may request account closure by contacting [email protected].

We encourage you to review this Policy periodically to stay informed about how bd366 protects your personal data. The current version of this Policy is always accessible on this page.