bd369 Privacy Policy

1 Data We Collect

When you use the bd369 platform — whether browsing the site, registering an account, making a deposit, placing a bet, or contacting our support team — we collect certain personal information about you. This section explains precisely what we collect and why.

1.1 Information You Provide Directly

When you register a bd369 account, you provide us with the following information:

• Identity data: your full legal name and date of birth, as required for age verification and KYC compliance;
• Contact data: your email address and mobile phone number registered with your preferred payment method (bKash, Nagad, Rocket, or Upay);
• Account credentials: your chosen username and a hashed representation of your password — we never store passwords in plain text;
• Address data: your city and district of residence (e.g., Dhaka, Chittagong, Sylhet, Khulna), collected as part of the KYC process;
• Identity documents: a copy of your National Identity Card (NID) or passport, submitted during KYC verification;
• Payment information: mobile wallet account numbers and bank account details used for deposits and withdrawals. bd369 does not store full card numbers for Visa or Mastercard transactions — card data is handled exclusively by our certified payment processors.

1.2 Information We Collect Automatically

When you access bd369, our systems automatically collect certain technical information:

• Device data: device type, operating system, browser type and version, screen resolution, and language settings;
• Network data: IP address, internet service provider, and approximate geographic location derived from IP;
• Usage data: pages visited, time spent on each page, games played, bet amounts, session duration, and navigation patterns within the platform;
• Transaction logs: a complete record of all deposits, withdrawals, bonuses claimed, and bets placed, including timestamps and amounts in Bangladeshi Taka (৳);
• Cookie data: information stored via cookies and similar tracking technologies, as described in Section 4 of this policy.

1.3 Information from Third Parties

In limited circumstances, bd369 may receive information about you from third-party sources:

• Payment providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank may share transaction confirmation details with us to reconcile your account balance;
• Identity verification services: third-party KYC providers used to authenticate identity documents submitted during the verification process;
• Fraud prevention agencies: we may cross-reference data with fraud prevention databases to protect all players on the platform.

2 How We Use Your Data

bd369 processes your personal data for specific, legitimate purposes. We do not use your information for purposes beyond those described in this policy without first obtaining your consent or where we are required to do so by law.

2.1 Account Operation and Service Delivery

The primary purpose for which bd369 processes your data is to operate and deliver the platform services you have signed up for. This includes:

• Creating and maintaining your bd369 account;
• Verifying your identity and age in compliance with responsible gaming standards;
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer;
• Calculating and crediting winnings to your account balance;
• Delivering bonuses, promotions, and free spins to eligible accounts;
• Providing customer support via email at [email protected].

2.2 Legal and Regulatory Compliance

bd369 is obligated to process certain personal data to comply with applicable legal and regulatory requirements, including:

• Age verification to prevent underage gambling (players must be 18 years or older);
• Anti-money laundering (AML) checks and transaction monitoring;
• Know Your Customer (KYC) verification for withdrawal processing;
• Responding to lawful requests from competent authorities.

2.3 Platform Security and Fraud Prevention

We use your data to protect the integrity of the bd369 platform and the security of all players. This includes detecting and investigating suspicious account activity, preventing bonus abuse, identifying duplicate accounts, and responding to reports of unauthorised access. IP address data and device fingerprinting are used specifically to detect and block fraudulent activity.

2.4 Platform Improvement and Analytics

Aggregated and anonymised usage data is used to understand how players interact with bd369, which games are most popular, where navigation issues occur, and how to improve the overall experience. Analytics processing uses data in a form that does not directly identify individual players wherever possible.

2.5 Marketing Communications

With your explicit consent, bd369 may send you promotional communications by email or SMS about new games, seasonal promotions (such as BPL cricket offers, Eid bonuses, and Pohela Boishakh specials), and platform updates. You can withdraw your consent at any time by updating your communication preferences in your account settings or by contacting support at [email protected]. Opting out of marketing does not affect your ability to use the platform.

3 Data Sharing & Disclosure

bd369 does not sell your personal data to third parties. We share your information only in the circumstances described below, and only with parties that are contractually obligated to handle it securely and in accordance with this Privacy Policy.

3.1 Service Providers and Technology Partners

bd369 works with a limited number of trusted third-party service providers who process data on our behalf. These include:

3.2 Legal Disclosure

bd369 may disclose your personal data to competent government authorities, law enforcement agencies, or regulatory bodies when required to do so by applicable law, court order, or other legal process. In such cases, bd369 will disclose only the minimum data necessary to comply with the legal obligation and will, where permitted by law, notify you of the disclosure.

3.3 Business Transfers

In the event that bd369 undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, bd369 will take reasonable steps to ensure that the acquiring party is bound by privacy obligations at least equivalent to those in this policy, and will notify affected players of any material change in data controller.

3.4 What We Will Never Do

• Sell your personal data to advertisers, data brokers, or any third party for commercial gain;
• Share your data with other gambling operators or affiliates for their direct marketing;
• Disclose your identity to other players on the platform;
• Use your data for automated decision-making that produces legal or similarly significant effects on you without offering a right to human review.

4 Cookies & Tracking

bd369 uses cookies and similar technologies (such as local storage and session tokens) to ensure the platform functions correctly, to remember your preferences, and to understand how you use the site. This section explains the types of cookies we use, their purpose, and how you can manage them.

4.1 What Are Cookies?

A cookie is a small text file placed on your device by a website you visit. Cookies allow the website to recognise your device on subsequent visits, remember your preferences and session state, and collect usage information. Cookies set by bd369 directly are called "first-party cookies". Cookies set by our service providers (analytics, game studios) are called "third-party cookies".

4.2 Types of Cookies We Use

4.3 Managing Cookies

You can control and delete cookies through your browser settings. Most modern browsers allow you to block third-party cookies, clear all cookies on exit, or receive a notification before any cookie is stored. Please note that disabling essential cookies will impair your ability to log in to bd369 and use core platform features. Instructions for managing cookies are available in the help documentation of your browser (Chrome, Firefox, Safari, Edge, or Opera).

You can also manage your analytics and marketing cookie preferences from the Privacy section of your bd369 account settings after logging in via the bd369 Login page.

4.4 Third-Party Cookies from Game Providers

Game studios such as Pragmatic Play, Evolution Gaming, and Spribe may set their own cookies within the game frame to maintain game state, render RNG outputs, and stream live dealer video. These cookies are governed by the respective providers' privacy policies. bd369 does not have direct control over cookies set by embedded game providers but ensures that all providers on our platform meet reasonable privacy standards as part of our vendor agreements.

5 Data Security

Protecting the personal data of our players is a core operational priority at bd369. We implement a multi-layered security architecture designed to prevent unauthorised access, accidental loss, destruction, or disclosure of your personal information.

5.1 Technical Security Measures

• 256-bit SSL/TLS encryption on all data in transit between your device and bd369 servers;
• AES-256 encryption for sensitive data fields stored at rest in our databases, including identity document references and payment method details;
• Bcrypt password hashing — your password is never stored in plain text;
• Firewalls and intrusion detection systems (IDS) monitoring all inbound and outbound network traffic;
• Regular penetration testing conducted by independent third-party security professionals;
• Two-factor authentication (2FA) available for player accounts and mandatory for all bd369 administrative staff accounts.

5.2 Organisational Security Measures

• Access to player personal data is restricted on a strict need-to-know basis. Only staff whose role requires access to specific data categories are granted that access;
• All bd369 staff with access to personal data undergo privacy and security training before handling any player information;
• Data access is logged and audited. Anomalous access patterns trigger automatic alerts;
• Vendor and third-party access to bd369 systems is governed by contractual security obligations and subject to periodic review.

5.3 Security Incident Response

In the event of a data breach that is likely to result in risk to the rights and freedoms of affected players, bd369 will notify affected players without undue delay via their registered email address. The notification will describe the nature of the breach, the categories and approximate number of records affected, the likely consequences, and the measures bd369 has taken or is taking to address the breach.

6 Data Retention

bd369 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any legal obligation that requires us to retain it for a longer period.

6.1 Active Account Data

While your bd369 account remains active, we retain all account data necessary to provide the platform service, including your profile information, transaction history, game play logs, and responsible gaming settings. This data is retained for the lifetime of your active account.

6.2 Post-Closure Retention

Following the closure of your account — whether voluntary or initiated by bd369 — we retain certain categories of data for the following periods:

6.3 Secure Deletion

At the end of the applicable retention period, personal data is securely deleted from bd369's live systems and backups using industry-standard data destruction methods. Where complete deletion is not technically feasible (for example, in encrypted backup archives), the data is rendered permanently inaccessible until the backup is overwritten in the normal cycle.

7 Your Privacy Rights

As a bd369 player, you have specific rights over your personal data. bd369 is committed to honouring these rights promptly and without unnecessary barriers.

7.1 Right of Access

You have the right to request a copy of the personal data that bd369 holds about you. This is sometimes called a Subject Access Request (SAR). bd369 will provide a structured summary of your data within 14 business days of receiving a verified request. Requests can be submitted to [email protected] with the subject line "Data Access Request".

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Name and date of birth corrections require supporting documentary evidence (such as an updated NID scan). Contact details and payment method information can be updated directly from your account settings panel.

7.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other lawful basis for processing exists. Please note that bd369 may be unable to delete certain data categories during the legally mandated retention periods described in Section 6. In such cases, we will explain which data cannot be deleted and why.

7.4 Right to Restrict Processing

You have the right to ask bd369 to restrict how we process your data in certain circumstances — for example, while we are investigating a rectification request, or where you contest whether bd369's legitimate interest overrides your right to object. During a restriction period, your data will be stored but not actively processed beyond what is required for legal compliance.

7.5 Right to Object to Marketing

You have an absolute right to object to the processing of your personal data for direct marketing purposes at any time. To opt out of marketing communications, update your preferences in account settings or email [email protected] with the subject line "Unsubscribe". Opt-out requests are processed within 5 business days.

7.6 How to Exercise Your Rights

All privacy rights requests should be submitted in writing to [email protected]. To protect your data, bd369 will verify your identity before processing any rights request. Verification may require you to confirm your registered email address, mobile number, or provide a copy of your NID. bd369 will respond to all verified requests within 14 business days of identity confirmation.

8 Policy Updates & Contact

8.1 Updates to This Policy

bd369 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes, we will notify registered players via the email address associated with their bd369 account and display a prominent notice on the platform for a period of at least 14 days prior to the change taking effect. The "Last updated" date at the top of this document will always reflect the most recent revision.

We encourage you to review this Privacy Policy periodically. Continued use of the bd369 platform after a revised policy takes effect constitutes your acknowledgement of the updated terms.

8.2 Children's Privacy

bd369 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a player has provided personal data and is under 18 years of age, we will immediately suspend the account, void any associated winnings, return any deposited real-money funds via the original payment method, and permanently delete all data associated with the underage account. If you believe a minor has registered on bd369, please contact us immediately at [email protected].

8.3 Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or about the way bd369 handles your personal data, please contact our support team:

• Email: [email protected]
• Subject line for privacy matters: "Privacy Enquiry — [Your Registered Username]"
• Response time: within 2 business days for general enquiries; within 14 business days for formal rights requests
• Operating hours: Monday to Sunday, 09:00 – 22:00 Bangladesh Standard Time (BST, UTC+6)

We take all privacy complaints seriously. If you submit a complaint and feel it has not been resolved to your satisfaction, you have the right to escalate the matter through appropriate legal channels available in your jurisdiction.