Your Privacy at 368bd

Data We Collect

368bd collects personal data from you in several ways — directly when you register or interact with our platform, automatically through your device and browser as you navigate our services, and occasionally from third-party sources such as payment processors and identity verification providers. The categories of data we collect are outlined below.

1.1 Registration & Account Data

When you create a 368bd account, we collect the personal information you provide during the sign-up process. This includes your full legal name, date of birth, residential address (including city — for example, Dhaka, Chittagong, Sylhet, or Khulna), email address, and mobile phone number. This information is essential for creating and maintaining your account and for satisfying our Know Your Customer (KYC) obligations.

1.2 Identity Verification Data

To comply with anti-money laundering regulations and to verify that all players are aged 18 or above, 368bd may request copies of government-issued identity documents (such as a National ID card or passport), proof of address documents, and in some cases documentation confirming your source of funds. These documents are handled with the highest level of care and are stored in an encrypted, access-controlled environment.

1.3 Financial & Transaction Data

We record details of all financial transactions conducted through your 368bd account, including deposit amounts, withdrawal requests, payment method identifiers (for example, your registered bKash, Nagad, or Rocket mobile number), and transaction timestamps. We do not store full payment credentials directly — sensitive payment data is handled by our payment processing partners under their own privacy and security frameworks.

1.4 Usage & Behavioural Data

As you use the 368bd platform, we automatically collect data about your interactions, including pages visited, games played, betting history, session duration, device type, operating system, browser type, IP address, and referring URLs. This data helps us optimise the platform, personalise your experience, and detect unusual activity that may indicate fraud or security threats.

How We Use Your Data

368bd processes your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we process personal data are as follows:

• Account management: Creating, maintaining, and securing your 368bd account, including processing login requests, managing account settings, and handling account closure or self-exclusion requests.
• Service delivery: Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer; crediting and debiting your account balance in accordance with bets placed and game outcomes.
• Legal and regulatory compliance: Fulfilling our KYC and anti-money laundering (AML) obligations, verifying player age (18+), and cooperating with lawfully authorised investigative or regulatory requests.
• Fraud prevention and security: Monitoring transactions and account activity to detect and investigate potential fraud, money laundering, collusion, or unauthorised access, and taking action where such activity is identified.
• Responsible gaming: Using usage and behavioural data to identify players who may be at risk from problematic gambling patterns, and offering appropriate responsible gaming tools or support pathways in accordance with our Responsible Gaming policy.
• Customer support: Responding to queries, resolving disputes, processing complaints, and communicating with you about your account in English via live chat or email.
• Platform improvement: Analysing aggregated and anonymised usage data to improve the 368bd user experience, identify technical issues, and develop new features or game categories.
• Marketing communications (with consent): Sending you promotional offers, bonus notifications, and seasonal event alerts — for example, BPL season promotions or Eid special bonuses — where you have opted in to receive such communications. You may withdraw marketing consent at any time from your account settings.

Data Sharing & Disclosure

368bd does not sell, rent, or trade your personal data to third parties for their own commercial purposes under any circumstances. We may, however, share your data with carefully selected third parties where it is necessary to deliver our services, meet our legal obligations, or protect the integrity of our platform. All third-party data sharing arrangements are governed by data processing agreements that require the recipient to handle your data with standards equivalent to those applied by 368bd.

3.1 Service Providers

We share data with third-party service providers who support the operation of the 368bd platform. These include payment processors (including the technical partners facilitating bKash, Nagad, and Rocket transactions), identity verification and KYC service providers, cloud infrastructure and hosting providers, customer support software providers, and fraud detection and cybersecurity partners. These providers act as data processors on our behalf and are contractually restricted from using your data for any purpose other than providing the service for which they have been engaged.

3.2 Game Providers

Some 368bd games — including live casino tables, slot titles, and specialty games — are powered by third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. In order to deliver a seamless in-game experience, certain technical data (such as session tokens and game round identifiers) may be shared with these providers. These providers do not receive your full personal profile and are bound by strict data handling obligations under their integration agreements with 368bd.

3.3 Legal Authorities

368bd may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities if required to do so by applicable law, or where such disclosure is necessary to prevent, investigate, or prosecute illegal activity, including fraud, money laundering, or underage gambling. In all such cases, we disclose only the minimum amount of data necessary to satisfy the relevant legal requirement.

Cookies & Tracking

The 368bd platform uses cookies and similar tracking technologies to enable core platform functionality, improve performance, and — with your consent — to deliver a more personalised experience. A cookie is a small text file placed on your device by a website server. Cookies cannot execute programs or deliver viruses to your device.

4.1 Types of Cookies We Use

• Strictly necessary cookies: These cookies are essential for the 368bd platform to function. They enable you to log in, navigate between pages, maintain your session, and process transactions. These cookies cannot be disabled without impairing core platform functionality.
• Performance and analytics cookies: These cookies collect information about how visitors use 368bd — for example, which pages are visited most frequently and whether users encounter error messages. All data collected is aggregated and anonymised. These cookies help us improve how the platform works.
• Functionality cookies: These cookies allow the platform to remember choices you have made — such as your preferred language setting or display preferences — and to provide enhanced, personalised features.
• Fraud detection cookies: Certain cookies are used specifically to detect and prevent fraudulent activity, identify bot traffic, and protect the integrity of our gaming environment. These operate in the background and do not affect your browsing experience.

4.2 Managing Your Cookie Preferences

You may control non-essential cookie categories through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that blocking strictly necessary cookies will prevent you from accessing certain features of the 368bd platform, including logging in and placing bets. Your cookie preferences can also be updated at any time by contacting our support team.

Data Retention

368bd retains your personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Active account data: All data associated with an active 368bd account — including identity, contact, financial, and usage data — is retained for the full duration of your account's active status and for a minimum of 5 years following permanent account closure.
• Transaction records: Financial transaction records, including deposit and withdrawal history and bet records, are retained for a minimum of 7 years to satisfy anti-money laundering record-keeping requirements.
• KYC and identity documents: Copies of identity documents submitted for KYC purposes are retained for a minimum of 5 years from the date of account closure, or longer if required by applicable law or ongoing investigation.
• Marketing data: If you opt out of marketing communications, your preference is recorded and retained indefinitely to ensure we do not contact you again in the future without fresh consent.
• Support communications: Customer support chat logs and email correspondence are retained for up to 3 years following the closure of the relevant support case, unless the matter relates to an ongoing dispute or investigation.
• Anonymised data: Aggregated and fully anonymised data — from which individual players cannot be identified — may be retained indefinitely for statistical, research, and platform improvement purposes.

When data is no longer required under these retention guidelines, it is securely deleted or permanently anonymised. 368bd conducts periodic data audits to ensure that no personal data is held beyond its retention period without justification.

Your Privacy Rights

As a 368bd player, you have a number of rights in relation to the personal data we hold about you. We are committed to honouring these rights promptly and without undue restriction. Your rights include:

• Right of access: You have the right to request a copy of the personal data that 368bd holds about you. We will respond to verified access requests within 30 days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic contact details directly from your account settings panel.
• Right to erasure: In certain circumstances, you have the right to request that we delete your personal data — for example, where the data is no longer necessary for its original purpose and there is no legal obligation requiring us to retain it. Note that erasure requests may be refused where retention is required by applicable law.
• Right to restrict processing: You may request that we temporarily suspend the processing of your personal data in certain circumstances — for example, while you contest the accuracy of data we hold about you.
• Right to object: You have the right to object to processing of your personal data where such processing is based on our legitimate interests, including profiling for responsible gaming purposes. We will honour such objections unless we have compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent — such as for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of any processing carried out before the withdrawal.
• Right to data portability: Where technically feasible, you have the right to receive a copy of personal data you have provided to us in a structured, commonly used, machine-readable format.

To exercise any of the rights listed above, please contact the 368bd privacy team via our 24/7 live chat or by emailing [email protected]. We may need to verify your identity before processing your request. All requests will be handled within 30 calendar days. If we are unable to fulfil your request within that period, we will notify you of the extended timeline and the reason for the delay.

Data Security Measures

368bd implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following safeguards:

• 256-bit SSL/TLS encryption: All data transmitted between your browser or device and the 368bd platform is encrypted using industry-standard TLS encryption, preventing interception by third parties.
• Encrypted data storage: Sensitive personal and financial data stored on 368bd servers is encrypted at rest using AES-256 encryption. Access to encrypted data stores is restricted to authorised personnel only.
• Access controls: Internal access to personal data is governed by strict role-based access control (RBAC) policies. Employees may only access personal data that is necessary for the performance of their specific job function.
• Two-factor authentication (2FA): 368bd supports and encourages SMS-based 2FA for all player accounts. Internal system access by 368bd staff is protected by mandatory multi-factor authentication.
• Security audits and penetration testing: The 368bd platform undergoes regular security assessments, including vulnerability scanning and third-party penetration testing, to identify and remediate security weaknesses before they can be exploited.
• Incident response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 368bd will notify affected players without undue delay, providing details of the nature of the breach, the data affected, and the steps we are taking to address it.

Policy Updates & Contact

8.1 Changes to This Privacy Policy

368bd may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes to this policy, we will notify registered players via email or an in-platform notification at least 14 days before the change takes effect. The updated policy will be published at this page with a revised effective date. We encourage you to review this policy periodically to stay informed about how we protect your data.

Continued use of the 368bd platform after the effective date of any updated policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you are entitled to close your account by contacting our support team before the effective date.

8.2 Children's Privacy

The 368bd platform is strictly intended for adults aged 18 years and above. We do not knowingly collect personal data from any person under the age of 18. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account. If you believe that a person under the age of 18 has registered on 368bd, please notify us immediately at [email protected].

8.3 Contact the 368bd Privacy Team

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 368bd handles your personal data, please reach out to us through any of the following channels. We are committed to responding to all privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6).

This Privacy Policy should be read alongside the 368bd Terms & Conditions and Responsible Gaming policy, both of which are available in English on this website.