bd365 Privacy Policy
— Your Data, Protected

1. Overview

bd365 is Bangladesh's most trusted online casino and sports betting platform, serving players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh. As part of delivering our services — which include cricket betting on BPL, IPL, and T20 tournaments, 500+ slot games, live dealer casino tables, and instant deposits via bKash, Nagad, and Rocket — we necessarily collect and process certain personal data about our players.

This Policy applies to all personal data collected through the bd365 website, mobile platform, customer support channels, and any other point of contact between you and bd365. It covers how data is collected, what it is used for, with whom it is shared, how long it is retained, and how it is protected.

bd365 acts as the data controller in respect of your personal data. We are responsible for deciding the purposes and means of processing that data and for ensuring that processing is carried out lawfully, fairly, and transparently.

2. Data We Collect

2.1 Registration Data

When you create a bd365 account, we collect the following information: your full legal name, date of birth, email address, mobile phone number (including the number registered to your bKash, Nagad, or Rocket mobile wallet), chosen username, and a password (stored in hashed form — we never store plain-text passwords). You may optionally provide a residential address, which becomes mandatory if you are required to complete enhanced KYC verification before a withdrawal is processed.

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, bd365 may request copies of identity documents, including your National Identity Card (NID), passport, driver's licence, or birth certificate. We may also request proof of address such as a utility bill or bank statement dated within the last three months. These documents are collected solely for identity verification and fraud prevention purposes.

2.3 Financial Data

bd365 collects records of all financial transactions conducted through your account, including deposit amounts, withdrawal requests, bet placements, bonus activations, and balance adjustments. We record the payment method reference (e.g., the last four digits of a mobile wallet number or a bank transaction reference) but do not store full payment credentials. All payment data is processed by our certified third-party payment partners.

2.4 Activity and Behavioural Data

bd365 automatically records gameplay data, including the games played, bet amounts, session duration, game outcomes, and in-play actions. This data is used for account security, responsible gaming monitoring, fraud detection, game optimisation, and — in aggregated anonymous form — platform improvement purposes.

2.5 Technical Data

When you access bd365, our servers automatically collect certain technical data, including your IP address, browser type and version, operating system, device type, screen resolution, time zone setting, and referring URL. This data is used for security monitoring, fraud prevention, and platform performance analysis. It is not used to identify you personally in ordinary circumstances but may be linked to your account during fraud investigations.

2.6 Communications Data

bd365 retains records of all communications between you and our support team, including emails, live chat transcripts, and any documentation submitted in connection with a complaint or KYC request. These records are kept for quality assurance, dispute resolution, and legal compliance purposes.

3. How We Use Your Data

bd365 uses your personal data for the following specific and defined purposes:

• Account Management: Creating, maintaining, and administering your bd365 player account, including processing deposits, withdrawals, and bet settlements in Bangladeshi Taka (৳).
• Identity Verification: Confirming that you meet the 21+ age requirement and that you are who you say you are, in compliance with our KYC obligations.
• Fraud Prevention and Security: Detecting and preventing fraudulent activity, money laundering, account takeover attempts, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling, enforcing self-exclusion and deposit limit requests, and proactively reaching out to players who exhibit high-risk behaviour.
• Customer Support: Responding to your queries, resolving complaints, and processing account-related requests in an accurate and timely manner.
• Legal and Regulatory Compliance: Meeting our obligations under applicable law, including responding to lawful requests from regulatory or law enforcement authorities.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve game selection, platform performance, user experience, and promotional relevance.
• Marketing Communications: Sending you promotional offers, bonus notifications, and seasonal campaigns (e.g., BPL season promotions, Eid special offers) where you have given consent to receive such communications. You may opt out at any time.

4. Legal Basis for Processing

bd365 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and bd365 — specifically, to operate your account, process transactions, and deliver gaming services.
• Legal Obligation: Processing is required to comply with legal obligations applicable to bd365, including anti-money laundering checks, age verification requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing is necessary for the legitimate interests of bd365, including fraud prevention, platform security, and improving the quality of our services, provided those interests are not overridden by your own interests or fundamental rights.
• Consent: Where processing is based on your consent — such as receiving marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Data Sharing & Disclosure

5.1 Payment Processors

To process your deposits and withdrawals in Bangladeshi Taka (৳), bd365 shares necessary transaction data with our payment processing partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. These partners process your data only to the extent necessary to complete your transaction and are contractually bound to protect it.

5.2 Game Providers

bd365 integrates games developed and operated by Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming. When you play a game delivered by one of these providers, limited session and gameplay data is shared with that provider for the purpose of operating the game, ensuring RNG certification compliance, and resolving game-related disputes.

5.3 Identity Verification Partners

bd365 may use third-party identity verification services to assist with KYC processing. These services receive only the data necessary to verify your identity and are contractually prohibited from using it for any other purpose.

5.4 Legal and Regulatory Disclosure

bd365 may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where we are required to do so by law or where we reasonably believe that disclosure is necessary to protect the rights, property, or safety of bd365, our players, or the public. In all such cases, we disclose only the minimum data required to satisfy the legal obligation.

5.5 No Commercial Data Sales

bd365 does not sell, rent, lease, or otherwise commercially transfer your personal data to any third party for that party's own marketing or commercial purposes. Your data is not a product. It is collected to make bd365 work safely and securely for you.

6. Cookies & Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. bd365 uses cookies and similar tracking technologies (including local storage and session tokens) to ensure the platform functions correctly, to keep you logged in securely, and to understand how players interact with the platform.

6.2 Types of Cookies Used

6.3 Managing Cookies

You can control and delete cookies through your browser settings at any time. Please note that disabling essential cookies will prevent you from logging in and using the platform. Disabling functional or analytical cookies will not affect your ability to play but may result in a degraded user experience. bd365 does not use third-party advertising cookies or cross-site tracking technologies.

7. Data Retention

bd365 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised data may be retained indefinitely for statistical and platform improvement purposes.

8. Security Measures

bd365 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and bd365 servers is encrypted using industry-standard SSL/TLS protocols.
• Encrypted Data Storage: Sensitive data at rest — including identity documents and hashed passwords — is stored using strong encryption algorithms on access-controlled servers.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. bd365 employees and contractors are granted the minimum level of access required to perform their job functions.
• Two-Factor Authentication (2FA): bd365 supports 2FA for player accounts and mandates it for all staff accounts with access to personal data systems.
• Intrusion Detection: bd365 operates continuous automated monitoring for unusual access patterns, brute-force login attempts, and other indicators of a potential data breach.
• Regular Security Audits: bd365 engages independent security professionals to conduct periodic penetration tests and vulnerability assessments of the platform and its data infrastructure.
• Data Breach Response: In the event of a data breach affecting your personal data, bd365 will notify affected players and take all necessary steps to contain and remediate the breach as quickly as possible.

9. Your Rights

As a bd365 player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request — [your username]". bd365 will acknowledge your request within 48 hours and respond substantively within 30 days.

bd365 will not charge a fee for handling a data rights request unless the request is manifestly unfounded or excessive. In such cases, a reasonable administrative fee may be applied. We will always inform you before charging any fee. If you are unsatisfied with our response, you retain the right to escalate the matter through the appropriate legal channels in your jurisdiction.

10. Third-Party Services

The bd365 platform integrates third-party services to deliver its gaming content, process payments, and monitor platform security. While bd365 takes care to partner only with reputable, established providers, please be aware of the following:

• Game Providers: Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming each operate their own game engines and may collect session-level data directly as part of game delivery. Their processing of that data is governed by their own privacy policies. bd365 requires all game providers to process data in accordance with fair-play and data protection standards as a condition of integration.
• Payment Partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank each operate as independent data controllers in respect of the payment transaction data they process. Their handling of your financial data is governed by their respective privacy policies and the regulations applicable to licensed financial service providers in Bangladesh.
• Analytics Tools: bd365 may use privacy-respecting analytics tools to collect aggregated, anonymised usage statistics. These tools are configured to avoid collecting personally identifiable information and to store data on servers within a jurisdiction that provides adequate data protection standards.
• External Links: The bd365 platform does not include external links to third-party websites for commercial or advertising purposes. If any informational reference to an external resource is included, bd365 is not responsible for the privacy practices of that external website.

11. Minors & Age Verification

bd365 is strictly an adult-only platform. Access to the platform, account registration, and all gaming and betting services are available exclusively to individuals aged 21 years and above. bd365 does not knowingly collect, store, or process personal data belonging to persons under the age of 21.

During the registration process, all applicants are required to confirm that they are aged 21 or above. bd365 further verifies player ages through its KYC process, which requires submission of a valid government-issued identity document confirming date of birth. Where our KYC review indicates that a player may be under 21, the account will be suspended immediately pending verification, and any deposits made during the suspended period will be returned to the original payment method.

12. Amendments to This Policy

bd365 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When we make material changes — that is, changes that substantively affect how your personal data is collected, used, or shared — we will notify you in advance by:

• Posting a prominent notice on the bd365 platform homepage and login page for a minimum of 14 days prior to the changes taking effect;
• Sending a notification to the email address registered on your account; and/or
• Displaying an in-platform alert when you next log in to your account.

Your continued use of the bd365 platform after the effective date of any amended Policy constitutes your acceptance of the updated terms. If you do not agree with the amended Policy, you must stop using the platform and may request account closure by contacting our support team.

Minor amendments — such as corrections of typographical errors, clarifications that do not change the substance of the Policy, or updates to contact details — may be made without advance notice. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision, whether material or minor.

13. Contact & Data Rights Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how bd365 has handled your personal data, please contact our Data Protection team using the details below:

bd365 is committed to resolving all data-related concerns promptly and transparently. We aim to provide a substantive response to every data rights request within 30 calendar days. In cases of particular complexity, we may extend this period by a further 30 days, in which case we will inform you of the extension and the reason for it within the initial 30-day window.