Privacy Policy — 366bdt

1. Introduction

This Privacy Policy ("Policy") describes how 366bdt ("we", "us", "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you", "Player", "User") who access or use the services available at https://366bdt.vip. By registering an account or otherwise using the 366bdt platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy should be read alongside our Terms & Conditions, which together govern your use of the 366bdt platform. We may update this Policy from time to time. Material updates will be communicated to registered players. The most current version is always available at https://366bdt.vip/privacy-policy.

2. Information We Collect

366bdt collects personal information through several channels. The categories of data we collect are as follows:

Registration and Identity Data

• Full name as it appears on your government-issued identification document.
• Date of birth (used to verify the 21+ age requirement).
• Residential address, including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, or elsewhere in Bangladesh).
• Email address and mobile phone number.
• Username selected during account creation.

Identity Verification Documents

• Copies of government-issued identity documents (National ID card, passport, or driver's licence) submitted for Know Your Customer (KYC) verification purposes.
• Proof of address documents where requested.
• Payment method verification documents where required for withdrawal processing.

Financial and Transaction Data

• Mobile wallet identifiers associated with your bKash, Nagad, Rocket, or Upay accounts (account numbers as used for deposits and withdrawals — not your wallet PIN or password).
• Card details for Visa and Mastercard transactions, handled via PCI-DSS compliant payment processing infrastructure. 366bdt does not store full card numbers on its own servers.
• Deposit history, withdrawal history, and current account balance.
• Bonus and promotional credit history.

Platform Usage and Behavioural Data

• IP address and approximate geolocation at the time of login.
• Device type, operating system, browser type, and version.
• Session start and end times, pages visited, and features used within the platform.
• Game history, wager amounts, game outcomes, and session durations.
• Responsible gaming tool usage, including deposit limits set, cooling-off periods activated, and self-exclusion requests submitted.

Communications Data

• Records of communications between you and the 366bdt support team via email ([email protected]), Telegram (@366bdt_support), or live chat.
• Feedback, complaints, and dispute records.

3. How We Use Your Information

The personal data collected by 366bdt is used exclusively for the following purposes:

366bdt does not use automated profiling or algorithmic decision-making that produces legal or similarly significant effects on players without human review.

4. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contractual necessity: Processing required to create and manage your account, accept deposits, process withdrawals, and provide gaming services under the Terms & Conditions you have agreed to.
• Legal obligation: Processing required to comply with anti-money laundering (AML) obligations, age verification requirements, fraud prevention duties, and applicable regulatory requirements.
• Legitimate interests: Processing necessary for the security and integrity of the 366bdt platform, fraud prevention, responsible gaming monitoring, and platform performance analytics, where these interests are not overridden by your fundamental rights.
• Consent: Processing for optional marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting your ability to use the platform.

5. Data Sharing and Third Parties

366bdt does not sell your personal data. We share data with third parties only where necessary and only in the following circumstances:

• Payment processors: Financial transaction data is shared with payment service providers (including the technical infrastructure supporting bKash, Nagad, Rocket, Upay, Visa, and Mastercard transactions) solely to process deposits and withdrawals on your behalf.
• Game content providers: Certain gameplay data (such as player session tokens) is shared with licensed game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe to facilitate real-time game delivery. These providers operate under their own data protection obligations.
• Identity verification services: KYC document data may be shared with third-party identity verification platforms for the purpose of age and identity checks.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory direction, 366bdt may disclose personal data to competent legal or regulatory authorities. We will notify you of such disclosure where we are legally permitted to do so.
• IT and security service providers: Technical service providers supporting platform hosting, cybersecurity monitoring, and database management may have access to personal data as data processors acting on our documented instructions under strict confidentiality obligations.

All third parties with whom 366bdt shares personal data are required to implement appropriate technical and organisational security measures consistent with the sensitivity of the data shared.

6. Cookies and Tracking Technologies

366bdt uses the following categories of cookies and similar technologies on its platform:

• Strictly necessary cookies: Session authentication tokens, CSRF protection tokens, and load-balancing cookies that are essential for the platform to function securely. These cannot be disabled without preventing use of the platform.
• Functional cookies: Persistent cookies that remember your language preference, display settings, and game lobby layout preferences across sessions.
• Analytical cookies: Aggregated, anonymised data about page visits and feature usage, used internally to identify performance issues and improve the player experience. 366bdt does not use third-party analytics platforms that track players across external websites.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in or using real-money features of the platform.

7. Data Retention

Personal data is retained by 366bdt for as long as your account remains active and for a defined period following account closure, as required by applicable legal, regulatory, and anti-money laundering obligations. The following general retention periods apply:

• Account and identity data: Retained for a minimum of five (5) years following the date of account closure, to satisfy AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications: Retained for three (3) years from the date of the last interaction, unless a longer period is required for active dispute resolution.
• Platform usage and session data: Retained for up to twelve (12) months in identifiable form, after which it is anonymised for aggregate analytics purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

8. Data Security

366bdt implements a layered approach to data security, combining technical controls, organisational policies, and access governance to protect personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between player devices and the 366bdt platform.
• Encrypted storage of sensitive personal data and financial identifiers at rest.
• Role-based access controls limiting internal access to personal data to staff with a documented operational need.
• Regular security assessments and penetration testing of platform infrastructure.
• Multi-factor authentication requirements for administrative access to production systems.
• Incident response procedures covering detection, containment, investigation, and notification in the event of a data security incident.

In the event of a data breach that poses a material risk to the rights of affected players, 366bdt will notify impacted account holders as promptly as circumstances allow via their registered contact details.

9. Your Rights

As a 366bdt account holder, you have the following rights regarding your personal data:

• Right of access: You may request a copy of the personal data we hold about you at any time.
• Right to rectification: You may request correction of inaccurate or incomplete personal data held by 366bdt.
• Right to erasure: You may request deletion of personal data where no overriding legal obligation requires continued retention. Note that AML and regulatory retention obligations may prevent full erasure within the relevant retention periods.
• Right to restrict processing: You may request that we limit the use of your personal data to storage only while a rectification or objection request is being assessed.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications, non-essential cookies), you may withdraw consent at any time without penalty.

To exercise any of these rights, contact the 366bdt data team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within five (5) business days and provide a substantive response within thirty (30) calendar days, Bangladesh Standard Time (BST, UTC+6).

10. Children and Underage Players

The 366bdt platform is strictly intended for adults aged 21 years and over. We do not knowingly collect personal data from individuals under the age of 21. Where we discover that a registered account belongs to an underage individual, the account will be immediately closed, all associated data will be deleted (except as required by applicable legal obligations), and any deposited funds will be returned to the verified payment source where technically possible.

If you believe a minor has registered an account on the 366bdt platform, please report this immediately to [email protected] so that appropriate action can be taken without delay.

11. Changes to This Privacy Policy

366bdt reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal obligations. Where changes are material, we will notify registered players via their registered contact channel prior to the revised policy taking effect. The effective date displayed at the top of this page will be updated accordingly. Your continued use of the 366bdt platform after a revised policy takes effect constitutes your acceptance of the updated terms.

12. Contact and Data Enquiries

All privacy-related enquiries, data rights requests, and concerns regarding the handling of your personal data by 366bdt should be directed to our support team using the contact details below. Do not include sensitive financial information (card numbers, wallet PINs) in any written communication.

• Email: [email protected]
• Telegram: @366bdt_support
• Response hours: 24/7, Bangladesh Standard Time (BST, UTC+6)