bd369 Privacy Policy

This Privacy Policy ("Policy") describes how bd369 ("bd369", "we", "us", "our") collects, uses, stores, shares, and protects personal information about individuals ("you", "your", "Player", "User") who access or use the bd369 platform, including its website at https://bd369.io, its mobile applications, and all associated betting, casino, and gaming services (collectively, the "Platform").

This Policy is incorporated into and forms part of the bd369 Terms & Conditions. By registering an account or using the Platform in any capacity, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

bd369 is committed to handling your personal data with transparency, integrity, and in compliance with applicable data protection principles. Our goal is to provide you with a clear understanding of what data we hold about you and why, so you can make informed decisions about your engagement with our Platform.

bd369 acts as the data controller for all personal data collected through the Platform. As data controller, bd369 determines the purposes and means of processing your personal information and is responsible for ensuring that such processing is conducted lawfully, fairly, and transparently.

For all data protection enquiries, rights requests, or complaints, you may contact bd369 directly using the contact details provided in Section 15 of this Policy. bd369 commits to acknowledging all data-related correspondence within 2 business days and providing a substantive response within 5 business days.

bd369 collects personal information through several means in the ordinary course of operating the Platform. The categories of data we may collect include the following:

When you create a bd369 account, we collect information necessary to verify your identity and set up your account, including:

• Full legal name
• Date of birth (to verify you are aged 21 or above)
• Residential address (including city, district, and division within Bangladesh)
• Email address
• Mobile phone number
• Username and encrypted password
• National Identity Card (NID) number or passport number (for KYC verification)

In connection with deposits, withdrawals, and betting activity on the Platform, we collect:

• Mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers in tokenised form)
• Bank account details for bank transfer transactions (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank)
• Transaction history including deposit amounts, withdrawal amounts, and timestamps
• Betting history including wagers placed, markets selected, outcomes, and winnings
• Account balance history

As part of our Know Your Customer (KYC) process, we may collect copies or photographs of identity documents, including:

• National Identity Card (NID)
• Passport
• Proof of address documents (utility bills, bank statements)
• Selfie photographs for liveness verification where required

When you access the Platform, certain technical information is automatically collected by our systems, including:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Pages visited, features accessed, and time spent on the Platform
• Session duration and login/logout timestamps
• Referral source (how you arrived at bd369.io)
• Error logs and crash reports

When you contact bd369 support or otherwise communicate with us, we collect records of those communications, including:

• Email correspondence sent to [email protected]
• Live chat transcripts
• Support ticket content and resolution records
• Feedback or complaints submitted through the Platform

Where you interact with bd369's responsible gaming tools — including setting deposit limits, session time limits, loss limits, or requesting self-exclusion — we record those instructions and their application history to ensure they are enforced consistently across your account.

bd369 uses the personal data it collects for the following specific purposes:

bd369 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to create and manage your account, process transactions, and deliver the betting and casino services you have requested.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, responsible gaming obligations, and identity verification requirements.
• Legitimate interests: Processing conducted for the legitimate business interests of bd369, including fraud prevention, platform security, abuse detection, and service improvement, where such interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent, such as the sending of promotional communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

bd369 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data only in the following limited circumstances:

Personal and financial data necessary to process deposits and withdrawals is shared with our payment processing partners, including the operators of bKash, Nagad, Rocket, Upay, and our Bangladeshi banking partners. These partners process data solely for the purpose of completing your requested financial transactions and are contractually bound to maintain appropriate data security standards.

Limited technical identifiers (such as anonymised player session tokens) may be shared with our game technology providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to facilitate game delivery. These providers do not receive your name, contact details, or financial information.

For KYC purposes, identity document data may be shared with third-party identity verification service providers who verify the authenticity of documents and cross-reference identity information. These providers operate under strict data processing agreements with bd369.

bd369 may disclose personal data to law enforcement agencies, regulatory bodies, or other authorised authorities where required to do so by applicable law, court order, or regulatory instruction. bd369 will, where legally permitted, notify you of any such disclosure request.

In the event of a merger, acquisition, restructuring, or sale of all or part of bd369's business, player data may be transferred as part of that transaction. You will be notified of any such transfer and any material change to the way your data is processed before it takes effect.

bd369 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your login session, and analyse Platform usage. The categories of cookies used by bd369 are as follows:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in while you navigate the site. These cookies cannot be disabled.
• Functional cookies: Used to remember your preferences such as language settings, display preferences, and responsible gaming tool configurations. Disabling these may affect your Platform experience.
• Analytics cookies: Used to collect anonymised data about how players use the Platform, which pages are visited most frequently, and where errors occur. This data is used to improve Platform performance and user experience.
• Marketing cookies: Used where you have consented to receive personalised promotional content. These cookies track your activity to deliver relevant offers and communications.

You may manage your cookie preferences through your browser settings. Note that disabling certain cookie categories may impact the functionality of the bd369 Platform. For full details on the cookies we use and how to manage them, refer to our Cookie Notice, available within your account settings.

bd369 retains personal data only for as long as is necessary for the purposes for which it was collected or as required to meet legal and regulatory obligations. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Data that has been anonymised is no longer personal data and may be retained indefinitely for statistical or analytical purposes.

As a bd369 account holder, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of all personal data that bd369 holds about you. We will provide this information in a structured, commonly used format within 5 business days of receiving a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account information directly within your account settings.
• Right to erasure: You may request that bd369 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing was unlawful. Note that deletion may not be possible where retention is required by law (e.g., financial transaction records).
• Right to restrict processing: You may request that bd369 restrict the processing of your data in certain circumstances, such as while a rectification request is being verified.
• Right to data portability: You may request that bd369 provide your personal data in a machine-readable format for transfer to another service provider where this is technically feasible.
• Right to object: You may object to the processing of your personal data for legitimate interest purposes or for direct marketing at any time. Objections to direct marketing will be honoured immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without penalty and without affecting the lawfulness of processing carried out prior to withdrawal.

bd369 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the bd369 Platform
• AES-256 encryption for sensitive data stored at rest in bd369's databases
• Tokenisation of payment credentials so that full payment details are never stored on bd369 servers
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Multi-factor authentication requirements for all bd369 administrative system access
• Regular security audits and penetration testing conducted by independent security professionals
• Continuous monitoring for suspicious activity, unauthorised access attempts, and data anomalies
• Incident response procedures that include player notification in the event of a confirmed data breach

While bd369 takes all reasonable precautions to secure your personal data, no method of internet transmission or electronic storage is 100% secure. You are encouraged to use a strong, unique password for your bd369 account and to keep your login credentials confidential at all times.

The bd369 Platform is strictly intended for adults aged 21 years and above. bd369 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step during the registration process, and bd369 reserves the right to request documentary proof of age at any point during the account lifecycle.

If bd369 discovers or has reason to believe that an account belongs to an individual under 21 years of age, that account will be immediately suspended, all personal data associated with the account will be deleted as far as legally permissible, and any balances will be handled in accordance with the applicable Terms & Conditions.

Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling platforms. bd369 supports initiatives to protect minors from harm associated with online gambling.

bd369 primarily processes player data within systems and servers operated in connection with the Bangladesh market. However, some of bd369's technology and service providers — including game providers such as Pragmatic Play, Evolution Gaming, and Microgaming — operate infrastructure in multiple international jurisdictions.

Where personal data is transferred internationally, bd369 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy. These safeguards may include contractual data processing agreements incorporating standard data protection clauses, or reliance on the established data protection frameworks of the receiving jurisdiction.

Only the minimum personal data necessary to deliver the relevant service is shared with international providers. Your full identity data and financial records remain within bd369's primary data processing environment.

The bd369 Platform does not contain links to third-party websites. bd369 operates a closed internal navigation structure, and all links within the Platform direct to pages within bd369.io. Accordingly, this Policy applies solely to data processing activities conducted by bd369 on the Platform.

In the event that bd369 introduces any third-party integrations that involve the processing of your personal data, this Policy will be updated to reflect the nature of those integrations and the data shared, and you will be notified in advance.

bd369 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or the services offered on the Platform. When material changes are made to this Policy, bd369 will notify registered players via email and/or a prominent notice displayed on the Platform prior to the changes taking effect.

The "Last updated" date at the top of this Policy will always reflect the date of the most recent revision. Continued use of the Platform following publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must discontinue use of the Platform and request account closure by contacting [email protected].

The most current version of this Privacy Policy is always available at https://bd369.io/privacy-policy.

For all privacy-related enquiries, data rights requests, or concerns about the way bd369 handles your personal information, please contact us using the details below. All privacy communications are handled in English.

• Email: [email protected]
• Subject Line for Data Requests: "Data Rights Request" or "Privacy Enquiry"
• Support Hours: 24 hours a day, 7 days a week
• Priority Response Hours: 08:00–22:00 Bangladesh Standard Time (BST, UTC+6)
• Acknowledgment Time: Within 2 business days
• Full Response Time: Within 5 business days for data rights requests