bd353 Privacy Policy

1 Who We Are

bd353 operates the online casino and sports betting platform accessible at bd353.io (the "Platform"). The bd353 entity operating under an international gaming licence is the data controller responsible for the personal data of players accessing the Platform from Bangladesh. When this Privacy Policy refers to "bd353", "we", "us", or "our", it refers to this controlling entity.

This Privacy Policy applies to all personal data collected through the bd353 website, any bd353 mobile application, and through any direct communication channels operated by bd353, including live chat and email. It does not apply to the data practices of third-party game providers, payment processors, or other external services whose own privacy policies govern their respective data handling.

Any questions regarding this Privacy Policy or the manner in which bd353 handles your personal data should be directed to our support team at [email protected] (plain text — not a link). We aim to respond to all privacy-related enquiries within five business days of receipt.

2 Data We Collect

The categories of personal data that bd353 may collect, hold, and process are set out in the table below. The actual data collected about any individual player will depend on their level of account activity and the verification steps they have completed.

bd353 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or biometric data beyond the identity verification photograph required for KYC compliance.

3 How We Collect Data

3.1 Data You Provide Directly

The majority of personal data held by bd353 is provided directly by players at specific points in their account journey, including during account registration, during KYC verification document submission, when contacting the support team, when setting responsible gaming tools, and when completing account profile updates.

3.2 Data Collected Automatically

When you access the bd353 platform, our servers automatically log technical data about your connection and session. This includes your IP address, the device and browser used to access the Platform, the pages or games you navigate to, the timestamps of your sessions, and any error events encountered during your session. This data is collected using server logs and, where applicable, first-party cookies and local storage mechanisms described in Section 9.

3.3 Data From Third Parties

bd353 may receive personal data about you from third parties in limited circumstances, including:

• Payment providers (bKash, Nagad, Rocket, Upay) — transaction confirmation data and the registered mobile number associated with each transaction.
• Identity verification services — confirmation of identity document authenticity where bd353 uses a third-party KYC verification partner.
• Fraud prevention databases — flags or indicators associated with your IP address, device fingerprint, or payment method that are relevant to bd353's fraud prevention obligations.
• Responsible gaming organisations — self-exclusion status data, where bd353 participates in cross-operator responsible gaming programmes.

4 Why We Use Your Data

bd353 processes personal data for the following specific purposes. Where we rely on consent as the legal basis for a processing activity, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

• Account creation and management: To register your account, authenticate your identity at login, and maintain your account preferences and settings.
• KYC compliance: To verify your identity and age (21+) as required under bd353's international gaming licence obligations and anti-money laundering (AML) programme.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and to maintain a record of all financial transactions for regulatory and dispute resolution purposes.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent account activity, bonus abuse, money laundering, and other prohibited conduct defined in the bd353 Terms & Conditions.
• Responsible gaming monitoring: To identify indicators of problem gambling behaviour and to enforce self-exclusion, deposit limit, and cooling-off period tools that you have activated on your account.
• Customer support: To respond to your enquiries, resolve disputes, and maintain a record of support interactions for quality assurance purposes.
• Promotional communications: Where you have opted in, to send you information about bd353 promotions, bonuses, and new features that may be of interest to you. You may opt out at any time from your account communication preferences.
• Platform improvement: To analyse aggregate usage patterns across the bd353 platform in order to improve game selection, user experience, and technical performance. This analysis uses anonymised or pseudonymised data wherever possible.
• Legal and regulatory compliance: To comply with requests from regulatory authorities, law enforcement agencies, or courts of competent jurisdiction, and to maintain records as required under applicable gaming licence conditions.

5 Legal Basis for Processing

bd353 processes personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between bd353 and the player — including account registration, payment processing, game access, and dispute resolution.
• Legal obligation: Processing required to comply with bd353's obligations under its international gaming licence, AML regulations, and tax record-keeping requirements.
• Legitimate interests: Processing carried out in pursuit of bd353's legitimate interests in fraud prevention, platform security, and business analytics, where those interests do not override the player's fundamental privacy rights.
• Consent: Processing activities for which bd353 has obtained your specific, informed consent — primarily marketing communications and optional analytics participation. You may withdraw consent at any time.

6 Data Sharing & Third Parties

6.1 Who We Share Data With

bd353 does not sell your personal data to third parties for their own marketing or commercial purposes. We share personal data with third parties only where necessary and under appropriate data protection safeguards, including the following categories of recipient:

• Payment processors: bKash, Nagad, Rocket, and Upay receive the minimum data necessary to process your transactions, including your registered mobile number and transaction amount.
• KYC and identity verification partners: Where bd353 uses a third-party provider to assist with identity document verification, that provider receives a copy of your submitted identity document and verification selfie for authentication purposes only.
• Game content providers: Third-party providers including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi operate the game engines accessible through the bd353 platform. These providers may receive anonymised session data — such as a pseudonymous player ID and wager data — required for game operation and regulatory reporting. They do not receive your name, NID, or contact details.
• Fraud prevention and security services: bd353 uses third-party fraud detection services that may process your IP address, device fingerprint, and transaction patterns to identify suspicious activity.
• Regulatory authorities and law enforcement: bd353 will disclose personal data to gaming regulators, financial intelligence units, or law enforcement agencies where required to do so by a valid legal obligation, court order, or regulatory request.
• IT and infrastructure providers: bd353 uses cloud hosting, content delivery, and security monitoring services. These providers process personal data on behalf of bd353 as data processors and are bound by contractual data processing agreements.

6.2 International Transfers

Some of the third-party service providers used by bd353 are based outside Bangladesh. Where personal data is transferred internationally, bd353 ensures that appropriate safeguards are in place — including standard contractual clauses or equivalent mechanisms — to provide a level of protection equivalent to that which you would receive under applicable data protection standards.

7 Data Retention

bd353 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, and licence obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the duration of your account and updated as changes occur.
• Transaction and financial records: Retained for a minimum of five years following the relevant transaction date, in accordance with standard AML record-keeping requirements applicable under bd353's gaming licence.
• KYC verification documents: Retained for a minimum of five years following account closure or the completion of the last transaction, whichever is later.
• Support communications: Retained for 24 months from the date of the interaction, after which they are deleted or anonymised.
• Technical and usage logs: Retained for 13 months from the date of collection for security and fraud analysis purposes, then deleted.
• Self-exclusion records: Retained for the duration of the exclusion period plus five years thereafter, to prevent a self-excluded player from re-registering during an active exclusion.
• Marketing consent records: Retained for as long as you remain a registered player and for three years following account closure, to demonstrate compliance with consent requirements.

At the end of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identified or identifiable individual.

8 Your Data Rights

As a bd353 player, you hold the following rights in relation to your personal data. bd353 will respond to all verified data rights requests within 30 days of receipt. In cases of complexity or high volume, we may extend this period by a further 30 days and will notify you of any such extension.

To exercise any of the above rights, please contact bd353 support via live chat or email at [email protected] (plain text — not a link). bd353 may need to verify your identity before processing a data rights request to ensure we do not disclose or delete data belonging to another person.

9 Cookies & Tracking

9.1 What We Use

bd353 uses first-party cookies and browser local storage to support the operation of the Platform. We do not use third-party advertising cookies or cross-site tracking technologies for advertising purposes. The cookies and storage mechanisms we use fall into the following categories:

• Essential session cookies: Required for you to log in, navigate the Platform, and maintain a secure, authenticated session. These cannot be disabled without preventing access to the Platform.
• Functional cookies: Used to remember your preferences such as language settings, game category filters, and responsible gaming tool configurations, so that you do not need to re-enter these on each visit.
• Analytics and performance cookies: Used to collect anonymised or pseudonymised data about how players interact with the Platform, which pages are visited most frequently, and where errors occur. This data helps bd353 improve the Platform experience.
• Security cookies: Used to detect fraudulent or automated access patterns, protect login endpoints from credential stuffing attacks, and enforce session timeouts.

9.2 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the bd353 Platform, including the ability to maintain a logged-in session. Instructions for managing cookies in the most commonly used browsers are available through the support documentation of your browser provider.

10 Security Measures

bd353 applies a layered security framework to protect your personal data against unauthorised access, loss, alteration, or disclosure. The key technical and organisational measures in place include:

• Encryption in transit: All data transmitted between your device and the bd353 Platform is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to account login, game sessions, payment processing, and all API communications.
• Encryption at rest: Sensitive personal data — including identity documents, financial records, and authentication credentials — is encrypted at rest using AES-256 encryption within bd353's secure data infrastructure.
• Access controls: Access to personal data within the bd353 organisation is restricted to authorised personnel on a strict need-to-know basis. Role-based access controls prevent staff from accessing data categories beyond those required for their specific function.
• Audit logging: All access to personal data by bd353 staff is logged and subject to periodic audit review to detect and investigate any unauthorised or anomalous access activity.
• Penetration testing: bd353's platform infrastructure is subject to regular independent security assessments to identify and remediate potential vulnerabilities before they can be exploited.
• Incident response: bd353 maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to players, bd353 will notify affected individuals and, where required, relevant regulatory authorities within the timeframes prescribed by applicable obligations.

While bd353 takes all reasonable steps to protect your personal data, no transmission over the internet or electronic storage system is completely secure. You play an important role in your own account security by using a strong, unique password for your bd353 account and not sharing your login credentials with any third party.

11 Children & Minors

The bd353 platform is strictly restricted to individuals who are 21 years of age or older. bd353 does not knowingly collect personal data from any person under the age of 21. If bd353 becomes aware that personal data has been collected from a player who is under 21, that account will be suspended immediately, all associated data will be reviewed in accordance with our responsible gaming obligations, and the data will be deleted to the extent permitted by applicable AML and regulatory requirements.

If you are a parent or guardian and believe that a minor in your care has registered a bd353 account, please contact our support team immediately at [email protected] (plain text — not a link) so that we can investigate and take appropriate action.

12 Policy Amendments

bd353 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Material amendments — meaning changes that significantly affect how your personal data is collected or used — will be notified to registered players via the email address on file at least 14 days before the changes take effect. Minor amendments, such as clarifications of existing practices or corrections of typographical errors, may be made without advance notice.

The effective date at the top of this Privacy Policy will be updated whenever changes are made. Continued use of the bd353 Platform after the effective date of an amendment constitutes acceptance of the revised Privacy Policy. If you do not agree with an amendment, you should close your account before the effective date of the change and contact support to arrange for the return of any real-money balance.

13 Contact & Data Requests

All privacy-related enquiries, data rights requests, and complaints regarding bd353's data handling practices should be directed to the bd353 support team through one of the following channels:

• Live Chat: Available 24/7 directly from the bd353 Platform — the fastest channel for urgent privacy concerns.
• Email: [email protected] (plain text — not a link). Please include "Privacy Request" in the subject line of your email to ensure it is routed to the appropriate team.
• Response Time: bd353 aims to acknowledge all privacy requests within 48 hours and to provide a substantive response within 30 calendar days of receipt.
• Support Hours: All support is provided in English, Bangladesh Standard Time (BST, UTC+6), 24 hours a day, 7 days a week.

If you are not satisfied with the resolution provided by bd353 in response to a privacy complaint, you may have the right to escalate your complaint to the relevant supervisory authority or gaming regulator in the jurisdiction in which bd353 holds its international gaming licence. Details of the applicable escalation path are available from the bd353 support team upon request.