Privacy Policy — 356bet Bangladesh

1 Introduction

356bet is an online betting and gaming platform serving players across Bangladesh, including Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, and Mymensingh. We take the privacy and security of our players' personal data seriously and are committed to handling all data with transparency, integrity, and care.

This Policy applies to all personal data collected through the 356bet website, mobile-optimised interfaces, customer support channels, and any other services operated under the 356bet brand. It applies to all registered players, prospective players, and visitors to the 356bet platform.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of the agreement between you and 356bet. Where this Policy uses the term "personal data", it means any information that identifies or can identify you as an individual, directly or indirectly.

2 Personal Data We Collect

356bet collects the following categories of personal data depending on how you interact with our platform:

2.1 Identity Data

Full legal name, date of birth, gender, nationality, and copies of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence. This data is collected during the account registration and KYC (Know Your Customer) verification process.

2.2 Contact Data

Email address, mobile phone number, and residential address (including division, district, and upazila within Bangladesh). This information is used to communicate with you about your account, process transactions, and deliver customer support.

2.3 Financial Data

Payment method details necessary to process deposits and withdrawals, including mobile financial service account references (bKash, Nagad, Rocket, Upay), bank account details where bank transfers are used, and partial card numbers where Visa or Mastercard payments are made. 356bet does not store full card numbers on its own servers — card transactions are handled by PCI-DSS compliant payment processors.

2.4 Transaction Data

A full record of all financial transactions associated with your 356bet account, including deposit amounts, withdrawal requests, bet history, winnings, bonus claims, and wagering activity. This data is retained for regulatory compliance, dispute resolution, and responsible gaming monitoring purposes.

2.5 Technical Data

IP address, device type and identifiers, browser type and version, operating system, time zone, screen resolution, and session duration data collected automatically when you access the 356bet platform. This data is used for security monitoring, fraud prevention, and platform optimisation.

2.6 Usage Data

Information about how you navigate and interact with the 356bet platform, including pages visited, features used, search queries entered, games played, time spent on specific sections, and clickstream data. This data helps us improve the platform experience and personalise content where applicable.

2.7 Communications Data

Records of all communications between you and 356bet support, including live chat transcripts, email correspondence, and any documents submitted to support a complaint or query. These records are maintained for quality assurance, dispute resolution, and compliance purposes.

3 How We Collect Your Data

356bet collects personal data through the following channels:

• Direct collection: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotional offer.
• Automated collection: Technical and usage data collected automatically via cookies, pixel tags, server logs, and similar tracking technologies when you visit the 356bet platform.
• Third-party sources: Identity and fraud risk data received from KYC verification providers, payment processors, and fraud prevention services used to validate the information you have provided and to detect potentially suspicious activity.
• Publicly available sources: In limited circumstances where regulatory or compliance obligations require it, 356bet may cross-reference data against publicly available records such as sanctions lists or politically exposed persons (PEP) databases.

4 Lawful Basis for Processing

356bet processes your personal data on the following lawful bases:

5 How We Use Your Personal Data

356bet uses your personal data for the following specific purposes:

• To create, verify, and maintain your 356bet account and ensure its security.
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer.
• To verify your age and identity as required before processing your first withdrawal or at 356bet's discretion.
• To monitor transactions for signs of money laundering, fraud, bonus abuse, or other prohibited conduct as defined in the Terms & Conditions.
• To provide customer support, respond to complaints, and resolve disputes.
• To monitor your betting activity for responsible gaming purposes and to intervene where there are signs of problem gambling behaviour.
• To send you account-related notifications such as deposit confirmations, withdrawal updates, identity verification requests, and security alerts.
• To send you promotional communications about 356bet offers and new features — but only where you have provided your consent to receive such communications.
• To improve the design, functionality, and content of the 356bet platform based on aggregated usage analytics.
• To comply with applicable legal obligations, respond to regulatory enquiries, and enforce 356bet's Terms & Conditions.

6 Cookies and Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files stored on your device by a website. 356bet uses cookies and similar technologies (including pixel tags and local storage) to operate the platform, maintain your session, and gather usage analytics. Cookies do not contain your financial data or passwords.

6.2 Types of Cookies Used by 356bet

• Strictly Necessary Cookies: Required for the platform to function. These include session cookies that keep you logged in and security tokens that protect against cross-site request forgery (CSRF). These cookies cannot be disabled without breaking the platform.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and notification configurations. Disabling these cookies may affect your user experience.
• Analytics Cookies: Collect aggregated, anonymised data about how users navigate the platform. This data is used to identify and resolve usability issues and to measure the performance of platform features. No individual user is identified in analytics reports.
• Security Cookies: Used to detect and prevent fraudulent access attempts, bot activity, and account takeover attempts. These cookies help 356bet maintain a secure environment for all players.

6.3 Managing Cookies

You may manage or disable cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in and using the 356bet platform. For guidance on managing cookies in your specific browser, consult your browser's help documentation.

7 Data Sharing and Disclosure

356bet does not sell, rent, or trade your personal data to any third party for their independent commercial use. We may, however, share your personal data with the following categories of recipients where necessary:

• Payment processors: bKash, Nagad, Rocket, Upay, banking partners, and card processors receive the minimum data necessary to process your transactions. All payment partners are contractually required to handle your data securely and in accordance with applicable data protection standards.
• KYC and identity verification providers: Third-party services used to verify your identity, age, and document authenticity during the KYC process. These providers receive copies of identity documents and biometric data only for verification purposes and retain them in accordance with their own regulated data retention policies.
• Fraud prevention and AML services: Specialist providers that help 356bet detect and prevent money laundering, bonus abuse, account fraud, and other prohibited conduct. Data shared with these services is used solely for risk assessment purposes.
• IT infrastructure and hosting providers: Cloud and server infrastructure providers who store and process data on behalf of 356bet under strict data processing agreements. These providers do not have the right to use your data for any purpose beyond hosting and infrastructure services.
• Legal and regulatory authorities: Law enforcement agencies, regulatory bodies, and courts where 356bet is legally obligated to disclose data under applicable law, a valid court order, or a regulatory requirement. 356bet will not disclose more data than is required by the specific legal obligation.
• Professional advisers: Lawyers, accountants, and auditors acting under professional confidentiality obligations, where data disclosure is necessary for the provision of their services to 356bet.

8 Data Security

356bet employs a multi-layered approach to data security designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• SSL/TLS encryption: All data transmitted between your browser or device and the 356bet platform is encrypted using industry-standard TLS 1.2 or higher, preventing interception in transit.
• Encryption at rest: Sensitive personal data stored on 356bet servers — including identity documents and financial records — is encrypted using AES-256 encryption.
• Access controls: Access to personal data is restricted to 356bet employees and authorised partners who have a direct operational need for that data. All staff with data access undergo regular data protection training.
• Two-factor authentication: 356bet's internal administrative systems require multi-factor authentication for all staff accessing player data, reducing the risk of unauthorised internal access.
• Penetration testing: 356bet's platform is subject to regular third-party security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident response plan: 356bet maintains a documented data breach incident response plan that is tested and updated regularly to ensure a rapid, effective response in the event of a security incident.

Despite these measures, no internet-based system can guarantee absolute security. You also play a role in protecting your account — please use a strong, unique password for your 356bet account and contact [email protected] immediately if you suspect any unauthorised access.

9 Data Retention

356bet retains personal data only for as long as is necessary to fulfil the purpose for which it was collected or as required by applicable legal or regulatory obligations. The following general retention periods apply:

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data has been anonymised, it may be retained indefinitely for statistical and analytical purposes as it no longer constitutes personal data.

10 Your Data Rights

As a 356bet player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request — [Your Username] — [Right Requested]".

• Right of Access: You have the right to request a copy of the personal data that 356bet holds about you. We will provide this within 30 days of receiving a valid request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update most account information directly through your Account settings.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other lawful basis applies), or where the data has been unlawfully processed. This right is subject to overriding legal retention obligations such as AML requirements.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data while we verify it, or where you have objected to processing and we are assessing that objection.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests. You may also withdraw consent for marketing communications at any time by clicking the unsubscribe link in any promotional email or by contacting support.
• Right Not to Be Subject to Automated Decisions: Where 356bet makes decisions about you solely through automated means that have a significant effect on you (for example, an automated account suspension decision), you have the right to request human review of that decision.

11 Children's Privacy

356bet is strictly an adults-only platform. Our services are not directed at, and we do not knowingly collect personal data from, any person under the age of 18. If you are under 18 years of age, you must not create an account, make a deposit, or place any bet on the 356bet platform.

If 356bet becomes aware that personal data has been collected from a person under 18, we will take immediate steps to delete that data, close the associated account, and return any funds deposited, subject to identity verification of the appropriate guardian where required. If you believe a minor has gained access to the 356bet platform, please report this immediately to [email protected].

12 International Data Transfers

356bet operates as an international online betting platform and some of the third-party partners and service providers we use may process personal data in countries outside of Bangladesh. Where personal data is transferred to a third country, 356bet takes steps to ensure that appropriate safeguards are in place to protect your data, including the use of contractual clauses that impose equivalent data protection standards on the receiving party.

By creating an account on 356bet and consenting to this Privacy Policy, you acknowledge and agree that your personal data may be transferred to and processed in countries outside of Bangladesh in the circumstances described above. 356bet will not transfer your data to any jurisdiction that does not provide an adequate level of protection for personal data without first implementing appropriate contractual safeguards.

13 Marketing Communications

356bet may use your contact details to send you promotional communications about new games, bonuses, seasonal offers (such as Eid promotions, BPL cricket specials, or Pohela Boishakh offers), and platform updates. We will only send you marketing communications where you have given your explicit consent to receive them.

You can withdraw your consent to receive marketing communications at any time by:

• Clicking the unsubscribe link included in any promotional email sent by 356bet.
• Updating your notification preferences in your Account settings.
• Contacting 356bet support at [email protected] and requesting removal from all marketing lists.

Withdrawing consent for marketing communications will not affect the delivery of transactional and account-related notifications, such as deposit confirmations, withdrawal updates, and security alerts — these communications are necessary for the operation of your account and cannot be opted out of while your account remains active.

14 Third-Party Links

The 356bet platform may contain references to third-party services such as payment providers. Where you navigate away from the 356bet platform to a third-party website or service, that third party's own privacy policy will govern the collection and use of your data. 356bet is not responsible for the privacy practices of third-party websites and services and encourages you to review the privacy policy of any third-party platform before providing your personal data.

15 Updates to This Privacy Policy

356bet reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or the services we provide. Where a material change is made to this Policy, 356bet will notify registered players via email or through a prominent notice on the platform at least 14 days before the change takes effect.

The date of the most recent revision is displayed at the top of this page. Your continued use of the 356bet platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how we protect your data.

16 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 356bet handles your personal data, please contact our Data Protection team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line Format: "Privacy Enquiry — [Your Username] — [Brief Description]"
• Live Chat: Available 24/7 via the live chat widget on the 356bet platform
• Response Time: Within 30 calendar days for data rights requests; within 24 hours for general privacy enquiries via email

We are committed to resolving all privacy-related concerns promptly and transparently. All correspondence should be in English to ensure the fastest possible resolution. Please include your registered account username in all privacy-related communications to help us locate your records efficiently.