bd356 Privacy Policy

1 Who We Are

bd356 ("bd356", "we", "us", "our") operates the online sports betting and casino platform accessible at https://bd356.io. bd356 is the data controller responsible for the personal data of all registered players and visitors who interact with the platform. As data controller, bd356 determines the purposes for which your personal data is collected and the means by which it is processed.

bd356 is committed to handling personal data with integrity, transparency, and security. We operate under a framework of responsible data stewardship that reflects the trust our players place in us when they choose to register and play on our platform. This Privacy Policy is one part of that commitment — it gives you a clear and complete picture of our data practices so that you can make informed decisions about your use of bd356.

If you have any questions about this Privacy Policy or about how bd356 handles your personal data, please contact our support team. Contact details are provided in Section 13 of this document.

2 Data We Collect

bd356 collects personal data through several channels — directly from you when you register or interact with the platform, automatically through technical systems as you use the platform, and in some cases from third-party verification providers. The categories of personal data we collect are as follows:

Category	Data Items	Collection Method
Identity Data	Full legal name, date of birth, gender, national ID or passport number	Registration form; KYC verification documents
Contact Data	Email address, mobile phone number, residential address (city, district, Bangladesh)	Registration form; account settings
Financial Data	Mobile financial service account references (bKash, Nagad, Rocket, Upay); Visa/Mastercard last four digits; transaction history	Deposit and withdrawal processes
Technical Data	IP address, device type, browser type and version, operating system, screen resolution, time zone (BST/UTC+6), session duration	Automatic collection via server logs and analytics
Usage Data	Pages visited, games played, bets placed, deposit and withdrawal amounts, bonus activity, live chat transcripts	Platform activity logging
Verification Data	Copies of identity documents, selfie images submitted for liveness checks, proof-of-address documents	KYC verification process
Communications Data	Email correspondence with support, live chat logs, feedback submissions	Direct communications with bd356

bd356 does not collect special categories of sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, biometric data (beyond liveness-check images used solely for identity verification), or sexual orientation. If we ever need to collect any such data in the future, we will seek your explicit consent before doing so.

3 How We Use Your Data

bd356 uses the personal data we collect solely for the legitimate purposes described below. We do not use your data for any purpose that is incompatible with the purpose for which it was originally collected without first obtaining your consent.

• Account Creation and Management: We use your identity and contact data to create and maintain your bd356 player account, verify your eligibility, and provide you with access to our platform services.
• Identity Verification (KYC): We use identity, verification, and financial data to carry out Know Your Customer checks required to confirm your age (21+), identity, and the source of your deposited funds. This is a standard requirement for responsible operation of an online gaming platform.
• Payment Processing: We use your financial data to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard. This includes sharing relevant payment reference data with our payment processing partners to complete transactions.
• Fraud Prevention and Security: We use technical data, usage data, and financial data to detect and prevent fraudulent activity, money laundering, and other forms of financial crime. Automated systems monitor account activity patterns and flag anomalies for human review.
• Customer Support: We use identity data, contact data, and communications data to respond to your support queries, resolve disputes, and process formal complaints.
• Responsible Gaming: We use usage data and financial data to identify patterns of play that may indicate problem gambling behaviour. This data informs our responsible gaming intervention processes, including the application of deposit limits and self-exclusion measures where necessary.
• Platform Improvement: We use anonymised and aggregated technical and usage data to analyse platform performance, identify areas for improvement, and develop new features and products.
• Legal and Regulatory Compliance: We use your data as required to comply with applicable legal obligations, including responding to lawful requests from regulatory and law enforcement authorities.
• Direct Communications: We use your contact data to send you transactional communications such as deposit confirmations, withdrawal notifications, security alerts, and — where you have opted in — promotional communications about bd356 offers and events relevant to Bangladeshi players.

4 Legal Basis for Processing

Every instance of personal data processing by bd356 is underpinned by one of the following legal bases:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you as a registered player — including account management, payment processing, and service delivery — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with applicable laws and regulations — including anti-money-laundering requirements, age verification obligations, and responses to lawful authority requests — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing carried out to protect bd356's legitimate business interests — including fraud prevention, security monitoring, and platform improvement using anonymised analytics — is conducted on the basis of legitimate interests, provided those interests do not override your fundamental rights and freedoms.
• Consent: Processing for direct marketing communications is carried out on the basis of your explicit consent, which you may withdraw at any time by contacting bd356 support or using the unsubscribe mechanism included in all marketing messages.

5 Sharing Your Data

bd356 does not sell, rent, or trade your personal data to third parties. We share personal data only with the specific categories of third-party recipients listed below, and only to the extent necessary to fulfil the purpose for which the sharing takes place:

• Payment Processors: We share relevant payment reference data with bKash, Nagad, Rocket, Upay, Visa, and Mastercard processing infrastructure to execute deposit and withdrawal transactions. These partners process your data solely as our data processors and are contractually bound to handle it securely and in accordance with this Privacy Policy.
• Identity Verification Services: We share identity and verification data with third-party KYC service providers to conduct age and identity checks. These providers are specialists in document verification and operate under strict data processing agreements.
• Game Software Providers: We share pseudonymised player session data with casino game providers such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, Habanero, and Spribe to facilitate game delivery and resolve disputes relating to game rounds. These providers do not receive personally identifiable information beyond what is necessary to operate the game session.
• Regulatory and Law Enforcement Authorities: We share personal data with regulatory bodies, law enforcement agencies, and courts where we are legally required to do so. Such disclosures are made only in response to verified, lawful requests.
• Fraud Prevention Networks: We share flagged account data with industry fraud prevention services to protect the integrity of the broader online gaming ecosystem and to protect other players from fraud-related harm.
• Professional Advisers: We may share personal data with our legal advisers, auditors, and accountants where strictly necessary for the provision of professional services to bd356, subject to obligations of professional confidentiality.

6 Cookies & Tracking Technologies

bd356 uses cookies and similar tracking technologies to operate the platform, improve your experience, and understand how players interact with our services. The following categories of cookies are used on the bd356 platform:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They manage your login session, maintain your account security, and ensure that the platform behaves as expected during your visit. These cookies cannot be disabled without significantly impairing your ability to use bd356.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, game settings, and responsible gaming tool configurations — so that you do not need to reconfigure them on each visit.
• Analytical Cookies: These cookies collect anonymised data about how players use the platform, including which pages are visited most frequently and where errors occur. This data helps bd356 improve platform performance and identify usability issues.
• Security Cookies: These cookies support our fraud detection and account security systems. They help bd356 identify unusual access patterns and protect your account from unauthorised activity.

You can manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please be aware that disabling strictly necessary cookies will affect the functionality of the bd356 platform, and some features may not work correctly without them. bd356 does not use third-party advertising or behavioural tracking cookies.

7 Data Retention

bd356 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or for as long as is required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

Data Category	Retention Period	Reason
Account and identity data	Duration of account + 5 years after closure	Regulatory compliance and dispute resolution
Financial transaction records	7 years from transaction date	Anti-money-laundering record-keeping requirements
KYC verification documents	5 years after account closure	Regulatory compliance
Customer support communications	3 years from last interaction	Dispute resolution and quality assurance
Technical and usage logs	13 months on a rolling basis	Security monitoring and platform improvement
Marketing consent records	Until consent is withdrawn + 1 year	Consent audit trail

When a retention period expires, personal data is either securely deleted from our systems or anonymised in such a way that it can no longer be associated with any individual. Anonymised data may be retained indefinitely for statistical analysis purposes.

8 Your Rights

As a player whose personal data is processed by bd356, you hold the following rights in relation to that data. You may exercise any of these rights at any time by contacting bd356 support at [email protected]:

• Right of Access: You have the right to request a copy of all personal data bd356 holds about you. We will provide this information in a structured, commonly used, and machine-readable format within 14 business days of receiving your verified request.
• Right to Rectification: If you believe that any personal data bd356 holds about you is inaccurate or incomplete, you have the right to request that we correct or complete it. Identity data corrections may require supporting documentation.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing and there is no overriding legitimate interest. This right is subject to our legal retention obligations — data we are required by law to retain cannot be deleted on request.
• Right to Restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances, for example while a dispute about the accuracy of the data is being resolved.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to bd356 in a structured, machine-readable format, and to request that we transmit that data directly to another data controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data where it is carried out on the basis of legitimate interests. You also have the absolute right to object at any time to the use of your data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.

bd356 will respond to all data rights requests within 14 business days. Where a request is complex or there is a high volume of requests, we may extend this period by a further 30 days, in which case we will notify you of the extension within the initial 14-day period.

9 Children's Privacy

The bd356 platform is strictly intended for adults aged 21 years and above. bd356 does not knowingly collect personal data from persons under the age of 21. The platform's registration process includes age verification checks specifically designed to prevent underage access.

If bd356 becomes aware that personal data has been collected from a person under the age of 21 without appropriate consent or in circumvention of our age verification processes, we will immediately close the relevant account, delete all associated personal data to the extent permitted by our legal obligations, and report the matter to the appropriate authorities if required.

10 Security Measures

bd356 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• Transport Layer Security: All data in transit between your device and bd356 servers is encrypted using TLS 1.3, the current industry standard for transport security.
• Data Encryption at Rest: Sensitive personal data stored on bd356 servers is encrypted at rest using AES-256 encryption. This ensures that even in the event of a physical breach of our servers, stored data remains unreadable without the encryption keys.
• Password Security: Account passwords are processed using a strong one-way cryptographic hashing algorithm with individual salts. bd356 staff cannot retrieve your plaintext password and will never ask you for it.
• Access Controls: Access to personal data within bd356's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the categories of data necessary to perform their specific role.
• Intrusion Detection: bd356 operates continuous network monitoring and intrusion detection systems to identify and respond to potential security threats in real time.
• Regular Security Audits: Our platform and infrastructure undergo periodic security assessments conducted by qualified security professionals to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. bd356 will continue to invest in and improve our security posture to maintain the highest practicable level of data protection for our players.

11 Third-Party Links

The bd356 platform does not contain links to third-party websites outside of bd356's own domain. All navigation within the platform remains within https://bd356.io. bd356 is not responsible for the privacy practices of any external organisations whose platforms you may access independently.

If you access any payment partner's own platform or mobile application — such as the bKash app, Nagad app, or Rocket app — when making deposits or withdrawals, those platforms operate under their own privacy policies, which are separate from this document. bd356 recommends that you review the privacy policies of all third-party platforms you use in connection with your bd356 account.

12 Changes to This Privacy Policy

bd356 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable regulations. When material changes are made, we will notify registered players by publishing a prominent notice on the platform and, where appropriate, sending a notification to the registered email address associated with your account.

The effective date shown at the top of this page and in the page header will be updated whenever a new version of this Privacy Policy is published. We encourage you to review this page periodically to stay informed of how bd356 is protecting your data. Your continued use of the platform after the effective date of any amendment constitutes your acknowledgement of the updated Privacy Policy.

If you have objections to any material change in this Privacy Policy, you may close your account and withdraw your remaining balance by contacting bd356 support prior to the effective date of the change.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data bd356 holds about you, please reach out to our support team through the following channels:

• Email: [email protected] — Please use the subject line "Privacy Request — [Your Username]" to ensure your message is routed to the correct team. Response time: 4 to 12 hours.
• Live Chat: Available 24 hours a day, 7 days a week via the bd356 platform after bd356 Login. Live chat is the fastest channel for urgent privacy-related queries.
• Support Hours: Our support team operates in Bangladesh Standard Time (BST, UTC+6), 24/7, including Eid holidays and public holidays.

For formal data rights requests — including access requests, erasure requests, and objections to processing — please submit your request in writing to [email protected] with sufficient detail to allow bd356 to identify your account and process your request efficiently. bd356 may request verification of your identity before actioning any data rights request, to ensure we do not disclose or delete data in response to fraudulent requests.