356bd Privacy Policy — Your Data, Your Rights, Our Responsibility

1 Who We Are

356bd operates the online casino and sports betting platform accessible at 356bd.io. We serve players located in Bangladesh who access our services to play casino games, bet on cricket, rugby, football, and other sports, and engage with promotional features available through our platform.

For the purposes of this Privacy Policy, "356bd", "we", "us", and "our" refer to the operator of the 356bd platform. "You" and "your" refer to any individual who visits, registers on, or uses any feature of the 356bd Platform. "Personal data" means any information that identifies you or could reasonably be used to identify you, either alone or in combination with other data.

All privacy-related enquiries, data access requests, and data deletion requests should be directed to our support team at [email protected]. We aim to respond to all privacy-related requests within 30 calendar days of receipt.

2 Data We Collect

356bd collects personal data in several categories depending on how you interact with our platform. The following table summarises the main categories of data we collect and specific examples within each category:

Data You Are Not Required to Provide. Some data fields in your account profile are optional. However, certain data — particularly Identity Data and Financial Data — is mandatory for KYC verification and for processing withdrawals. If you decline to provide mandatory data, we may be unable to fulfil your withdrawal request or maintain your account in good standing.

3 How We Collect Your Data

356bd collects personal data through several channels:

• Direct Registration: When you create a 356bd account, you provide your name, date of birth, email address, mobile number, and residential address directly through the registration form.
• KYC Submissions: When you submit identity documents (National ID, passport, utility bill for address verification) during the KYC process, we collect and store the data contained in those documents.
• Payment Transactions: When you make a deposit or request a withdrawal, your payment method details and transaction metadata are captured automatically by our payment processing systems.
• Platform Usage: As you use the 356bd Platform — playing games, placing bets, navigating pages — our systems automatically log technical data including your IP address, device information, session timestamps, and in-game activity.
• Cookies and Tracking Technologies: 356bd uses cookies and similar tracking technologies on our website. See Section 7 of this Privacy Policy for full details on how cookies are used and how you can manage your cookie preferences.
• Customer Support Interactions: When you contact 356bd support via email or live chat, the content of those communications is recorded and retained as part of your account history.
• Third-Party KYC Providers: Where 356bd engages a third-party identity verification service to assist with KYC checks, that provider may supply us with verification results and associated identity data derived from your submitted documents.

4 Why We Use Your Data

356bd processes your personal data for the following purposes:

• Account Management: To create, maintain, and manage your player account, including authenticating your identity at login and processing account settings changes.
• Payment Processing: To process deposits from and withdrawals to your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard), and to maintain accurate financial records of all transactions.
• KYC and AML Compliance: To verify your identity, confirm your age (21+), and screen transactions for potential money laundering or fraud, as required by applicable anti-money-laundering obligations.
• Game Provision and Bet Settlement: To operate casino games and sports betting markets, record game rounds and bet outcomes, and settle winnings accurately to your account balance.
• Responsible Gaming: To monitor your account for signs of problem gambling behaviour, implement deposit limits and self-exclusion tools that you request, and send responsible gaming reminders where appropriate.
• Customer Support: To investigate and resolve queries, complaints, and disputes submitted by you, and to maintain records of all support interactions for quality assurance and audit purposes.
• Fraud Prevention and Security: To detect and prevent fraudulent account activity, duplicate account creation, unauthorised access attempts, bonus abuse, and other prohibited activities described in the 356bd Terms & Conditions.
• Platform Improvement: To analyse aggregated, anonymised usage data to understand how players interact with our platform, improve game offerings, and optimise the user experience for players across Bangladesh.
• Marketing Communications: Where you have opted in to receive promotional communications, to send you information about 356bd bonuses, new games, cricket betting markets, and special offers. You may opt out of marketing communications at any time via your account settings or by contacting support.
• Legal and Regulatory Obligations: To maintain records required under applicable law and to respond to lawful requests from regulatory or law enforcement authorities.

5 Legal Basis for Processing

356bd processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and 356bd — i.e., to operate your player account, process payments, and settle bets. Without this processing, we cannot provide our services.
• Legal Obligation: Processing required to comply with applicable legal obligations, including AML regulations, identity verification requirements, and financial record-keeping obligations.
• Legitimate Interests: Processing carried out in the legitimate interests of 356bd and our players, including fraud detection, account security monitoring, platform analytics, and responsible gaming monitoring. Where we rely on legitimate interests, we have balanced those interests against your privacy rights and concluded that our interests do not override your fundamental rights.
• Consent: Where we process data for marketing communications or optional profiling features, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Sharing Your Data

6.1 Third-Party Processors. 356bd shares personal data with carefully selected third-party service providers who process data on our behalf, strictly for the purposes described in this Privacy Policy. These processors include:

• Payment Processors: bKash, Nagad, Rocket, Upay, and card payment gateway providers, to process deposit and withdrawal transactions.
• KYC Verification Providers: Identity verification service providers who assist with document validation and age verification during the KYC process.
• Game Software Suppliers: Third-party game providers (including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi) receive game session data necessary to operate individual games, including your account identifier and bet amounts.
• Cloud Infrastructure Providers: Hosting and data storage providers who maintain the infrastructure on which the 356bd Platform and its associated databases operate.
• Customer Support Tools: Live chat and ticketing software providers who facilitate our 24/7 support operations.

6.2 All third-party processors are bound by contractual data processing agreements that restrict their use of your data to the specific purpose for which it was shared. They may not use your data for their own marketing or resell it to any further party.

6.3 Legal Disclosures. 356bd may disclose personal data to law enforcement authorities, regulatory bodies, or courts where required to do so by applicable law, a valid court order, or other lawful authority. Where permitted, we will notify you of such a request before complying.

6.4 Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of 356bd's assets, personal data held by 356bd may be transferred to the acquiring entity as part of that transaction. We will notify registered players via email prior to their data being transferred and subject to a different privacy policy.

7 Cookies and Tracking Technologies

7.1 What Are Cookies. Cookies are small text files placed on your device when you visit the 356bd website. They allow our platform to recognise your device across sessions, maintain your login state, remember your preferences, and collect analytics data about how you use the site.

7.2 Types of Cookies Used by 356bd.

7.3 Managing Cookies. You can control optional cookies through your browser settings. Most modern browsers allow you to block or delete cookies, or to receive a notification before a cookie is placed. Please note that disabling strictly necessary cookies may prevent you from logging in or using certain features of the 356bd Platform.

7.4 Local Storage and Session Storage. In addition to cookies, 356bd may use browser local storage and session storage to store small amounts of non-sensitive preference data on your device to improve platform performance and responsiveness.

8 Data Retention

356bd retains your personal data for different periods depending on the category of data and the purpose for which it was collected:

• Account and Identity Data: Retained for the full duration of your active account plus a minimum of 5 years following account closure, to satisfy AML record-keeping obligations and to support the resolution of any post-closure disputes.
• Financial Transaction Records: Retained for a minimum of 7 years from the date of each transaction in order to comply with financial record-keeping requirements.
• KYC Documents: Retained for the duration of your account plus 5 years post-closure. Original document images are deleted at the end of the retention period; a verification record is maintained.
• Game and Bet History: Retained for 5 years from the date of each game round or bet settlement, to support dispute resolution and responsible gaming monitoring.
• Customer Support Records: Retained for 3 years from the date of the last interaction in a support thread, unless the interaction relates to a formal complaint, in which case it is retained for 5 years.
• Marketing Preference Records: Opt-in and opt-out records are retained indefinitely to provide evidence of consent and to honour withdrawal-of-consent requests.
• Technical and Log Data: IP address logs and session logs are retained for 12 months and then anonymised or deleted, unless retained for ongoing fraud investigations.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual.

9 Your Rights

As a 356bd player whose personal data we hold and process, you have the following rights:

• Right of Access: You may request a copy of all personal data we hold about you. We will provide this in a structured, readable format within 30 days of your verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. You can update many data fields directly within your account settings; for changes to identity data, contact support.
• Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purposes it was collected, where you have withdrawn consent (and no other legal basis applies), or where we have processed it unlawfully. Note that this right is subject to our legal retention obligations — we cannot delete data we are legally required to retain.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances, for example while a dispute about accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request your data in a portable, machine-readable format (e.g., CSV or JSON) so that it can be transferred to another service provider.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where we rely on your consent to process data (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, contact 356bd support at [email protected] with the subject line "Data Rights Request". We will verify your identity before processing any request. All requests are responded to within 30 calendar days. There is no charge for submitting a data rights request.

10 Children and Minors

The 356bd Platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from any person under the age of 21. Our registration process includes an age declaration step and our KYC verification process is designed to confirm that every registered player meets the minimum age requirement.

If you believe that a person under the age of 21 has registered an account on 356bd or has been using an adult's account without authorisation, please notify us immediately at [email protected]. Upon receiving a credible report of underage access, 356bd will:

• Immediately suspend the account pending investigation.
• Conduct a KYC review to verify the age of the account holder.
• Where underage access is confirmed, permanently close the account and delete all associated personal data to the extent permitted by law.
• Refund any real-money balance that demonstrably originated from the underage user's own funds, following investigation.

11 Security Measures

356bd implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:

• Transport Layer Security (TLS): All data transmitted between your browser or device and 356bd servers is encrypted using TLS 1.2 or higher, equivalent to 256-bit SSL encryption.
• Data Encryption at Rest: Sensitive personal data including identity documents, payment account references, and password hashes are stored using AES-256 encryption on our servers.
• Password Hashing: Account passwords are never stored in plain text. They are hashed using a strong, salted hashing algorithm before storage. Even 356bd staff cannot read your password.
• Two-Factor Authentication (2FA): Optional 2FA is available to all players and is strongly recommended. 2FA adds a second layer of protection to your account login process.
• Access Controls: Access to player personal data within 356bd's internal systems is restricted on a strict need-to-know basis. Staff members who handle player data are subject to confidentiality agreements and regular data protection training.
• Intrusion Detection: 356bd employs automated intrusion detection and anomaly monitoring systems that identify and respond to suspicious activity patterns in real time.
• Security Audits: 356bd conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities in our platform and infrastructure.

Despite these measures, no data transmission over the internet and no data storage system can be guaranteed to be 100% secure. In the event of a data breach that is likely to result in significant risk to your rights, 356bd will notify affected players without undue delay and take all steps necessary to contain and remediate the breach.

12 Changes to This Policy

356bd reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our services. When material changes are made, we will:

• Update the "Effective Date" shown at the top of this page.
• Notify all registered players via their registered email address at least 14 days before the revised policy takes effect.
• Display a prominent in-platform notification banner for a period of 30 days following the update.

Your continued use of the 356bd Platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you must stop using the Platform and contact support to close your account before the effective date.

We encourage all players to review this Privacy Policy periodically so that you remain informed about how 356bd protects your personal data. This page always displays the most current version of the policy.

13 Contact and Data Requests

For all privacy-related enquiries, data access requests, data deletion requests, consent withdrawals, or complaints about how 356bd handles your personal data, please contact our support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Rights Request — [Your Registered Username]"
• Response Time: Privacy and data-related requests are acknowledged within 5 business days and resolved within 30 calendar days
• Support Hours: 24 hours a day, 7 days a week, including Bangladeshi public holidays
• Language: English

When submitting a data rights request, please include your registered username, the email address associated with your 356bd account, and a clear description of the data you wish to access, correct, or delete. We will verify your identity before actioning any request to ensure your data is protected from unauthorised access.