Privacy Policy

1 Introduction and Scope

This Privacy Policy ("Policy") describes the information practices of 345bdt ("we", "us", "our") in connection with the website available at https://345bdt.onl and all associated services (collectively, the "Platform"). It explains what personal data we collect, the purposes for which it is used, with whom it may be shared, how long we retain it, and the rights you hold in relation to it.

This Policy applies to all players who access, register on, or use the 345bdt Platform, including visitors who browse the site without registering. By using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, you must discontinue use of the Platform immediately.

This Policy should be read together with the Terms & Conditions and the Responsible Gaming Policy, both of which form part of the overall agreement between you and 345bdt.

2 Data We Collect

We collect personal data in the following categories, depending on how you interact with the Platform:

2.1 Registration and Identity Data

• Full legal name, date of birth, and gender (collected at registration to verify age eligibility — players must be 21 or older).
• Residential address, city, and postcode (e.g., Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, or other Bangladeshi cities).
• Email address and mobile phone number used to contact you and authenticate your account.
• Username and hashed password credentials (we never store plain-text passwords).

2.2 Identity Verification (KYC) Data

• Copies of government-issued identity documents (National Identity Card, passport, or driving licence).
• Proof of address documentation (utility bill, bank statement).
• Selfie or live photo for facial verification purposes, processed by our KYC partner only.

2.3 Financial and Transaction Data

• bKash, Nagad, Rocket, or Upay mobile wallet account numbers associated with deposits and withdrawals.
• Visa or Mastercard partial card numbers (last four digits only — full card numbers are handled exclusively by the payment processor and are never stored on 345bdt systems).
• Deposit amounts, withdrawal amounts, and transaction timestamps — all denominated in ৳ BDT.
• Bonus credit history and wagering activity linked to promotional offers.

2.4 Gaming and Betting Activity Data

• Game sessions played, bet amounts, win and loss records, and game provider identifiers.
• Sports betting selections including cricket matches (BPL, IPL, T20 World Cup), football, and other markets.
• Session start and end times, responsible gaming tool usage (deposit limits set, self-exclusion requests).

2.5 Technical and Device Data

• IP address, browser type and version, operating system, device model and screen resolution.
• Cookie identifiers, session tokens, and similar tracking technologies (see Section 7 for full cookie details).
• Referring URL and pages visited within the Platform.

2.6 Communications Data

• Support chat transcripts, email correspondence, and complaint records submitted to [email protected].
• Feedback or survey responses submitted voluntarily.

3 Purposes and Legal Basis for Processing

We process your personal data only where we have a valid legal basis to do so. The table below summarises the primary purposes and the corresponding legal basis for each:

Where we rely on your consent (for example, for marketing emails or SMS notifications), you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting [email protected]. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.

4 How We Share Your Data

345bdt does not sell, rent, or trade your personal data. We share data only in the following limited circumstances and always under contractual confidentiality obligations:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive only the transaction data strictly necessary to process your deposit or withdrawal. These providers operate their own privacy policies, which we encourage you to review.
• KYC and identity verification providers: Your identity documents and verification data are shared with our contracted KYC partner solely for the purpose of age and identity verification. Verification data is not used for any other purpose by the provider.
• Game content providers: Provider partners such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming receive your player session identifiers to deliver game content and calculate results. They do not receive your full personal profile.
• Anti-fraud and security services: Technical data (IP address, device fingerprint) may be shared with fraud prevention services to protect the platform and all players from malicious activity.
• Legal and regulatory authorities: Where required by applicable law or by a valid legal order, we may disclose personal data to law enforcement agencies, regulatory bodies, or courts. We will notify you of such disclosures unless prohibited from doing so by law.
• Corporate restructuring: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of the transaction. You will be notified of any such transfer and of any change to this Privacy Policy that results from it.

5 Data Retention

We retain your personal data for as long as your account remains active and for the period required by applicable financial, gaming, and anti-money-laundering regulations after account closure. In practice, this means:

• Account and identity data: Retained for a minimum of five (5) years following account closure to satisfy AML record-keeping obligations.
• Transaction and financial records: Retained for a minimum of five (5) years, consistent with standard financial record-keeping requirements.
• Game session logs: Retained for three (3) years for dispute resolution and responsible gaming monitoring purposes.
• Communications and support records: Retained for two (2) years from the date of the interaction.
• Marketing preference records: Retained for as long as necessary to evidence your consent or opt-out status.

Once retention periods have lapsed and no legal obligation requires further storage, data is securely and permanently deleted or anonymised. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

6 Data Security

345bdt implements a range of technical and organisational security measures appropriate to the sensitivity of the personal data we hold. These include:

• SSL/TLS encryption on all data transmitted between your device and our servers, preventing interception during transit.
• Hashed and salted password storage — your password is never stored in plain text. Even in the event of a data breach, stored password hashes cannot be directly used to access your account.
• Role-based access controls ensuring that only authorised personnel with a legitimate business need can access player records.
• Firewalls, intrusion detection systems, and regular vulnerability assessments to protect our infrastructure against external threats.
• OTP (one-time password) two-factor authentication available to all players to protect their accounts beyond the password alone.

While we take every reasonable precaution, no method of data transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security, but we are committed to responding promptly and transparently to any security incident that affects your data. If you suspect your account has been compromised, contact [email protected] immediately.

7 Cookies and Tracking Technologies

345bdt uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse usage patterns. Cookies are small text files stored on your device by your browser at our request.

We use the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens and security cookies. They cannot be disabled without breaking core Platform functionality.
• Functional cookies: Store your preferences such as language settings and display options to personalise your experience.
• Analytics cookies: Collect aggregated, anonymised data about how players navigate the Platform. This helps us identify areas for improvement. No personally identifiable information is included in analytics reports.
• Fraud prevention cookies: Used by our security services to detect anomalous behaviour patterns that may indicate fraud or account takeover attempts.

You can manage or disable non-essential cookies through your browser settings. Note that disabling cookies may affect the availability and performance of certain Platform features. We do not use third-party advertising or behavioural targeting cookies.

8 Your Rights and How to Exercise Them

Subject to applicable law, you have the following rights in relation to your personal data held by 345bdt:

• Right of access: You may request a copy of the personal data we hold about you, along with information about how it is processed.
• Right to rectification: If any of your personal data is inaccurate or incomplete, you have the right to request that it be corrected.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer needed for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restriction of processing: In certain circumstances, you may request that we restrict the processing of your data (for example, while a dispute about accuracy is resolved).
• Right to data portability: You may request a structured, machine-readable copy of the personal data you provided to us.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring purposes, subject to our overriding legitimate interests and legal obligations.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, send a written request to [email protected]. We will respond within 30 calendar days of receiving a valid request. We may ask you to verify your identity before processing your request to protect against unauthorised access to your data.

9 Children and Minors

The 345bdt Platform is strictly intended for adults aged 21 years and over. We do not knowingly collect or process personal data from individuals under the age of 21. If we discover that a minor has registered on the Platform or provided personal data, we will immediately close the account and delete the associated personal data.

If you believe that a person under 21 has registered on the Platform, please notify us immediately at [email protected]. Parents and guardians concerned about underage access to gambling platforms are encouraged to use parental control software to restrict access to gambling websites on shared devices.

10 Changes to This Privacy Policy

345bdt reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When a material change is made, we will notify registered players via email or via a prominent notice on the Platform at least 14 days before the change takes effect.

Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must stop using the Platform and may request account closure by contacting [email protected]. We encourage you to review this page periodically to stay informed of how we protect your data.

The version number and effective date shown at the top of this Policy identify the currently applicable version. Previous versions of this Policy are available on request.

11 Contact and Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which 345bdt processes your personal data, please contact our support team:

• Email: [email protected] (plain text — not a clickable link)
• Support hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Response time: We aim to respond to all privacy-related enquiries within 5 business days and to formal data subject requests within 30 calendar days.

We take all privacy complaints seriously and will investigate and respond to each one in a fair and timely manner. If you remain dissatisfied with our response, further escalation options will be communicated to you at that time.