367bd Privacy
Policy

This Privacy Policy ("Policy") applies to all personal data processed by 367bd ("we", "us", "our") in connection with your use of the website at https://367bd.vip, including all betting markets, casino games, promotional features, account management tools and any communication channels operated by 367bd. References to "you", "your" and "the Player" mean any individual who accesses or uses the 367bd platform, whether as a registered account holder or as an unregistered visitor.

By registering a 367bd account or otherwise using the Service, you acknowledge that you have read and understood this Policy and consent to the collection, use and processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions and Responsible Gaming Guidelines, both of which are available on the 367bd website.

1. Information We Collect

367bd collects personal data through several channels — information you provide directly when you register or interact with the platform, information generated automatically as you use the Service, and in some cases information obtained from trusted third-party sources for identity verification purposes.

Information you provide directly:

• Registration data: Full legal name, date of birth, residential address in Bangladesh (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh or elsewhere), email address, mobile phone number, and chosen account credentials.
• Identity verification (KYC) documents: Scanned copies or photographs of your National Identity Card (NID), Bangladesh passport, driving licence, or utility bills and bank statements submitted to satisfy our Know Your Customer obligations.
• Payment information: Mobile wallet identifiers (bKash, Nagad, Rocket, Upay) and bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank and others) submitted when making deposits or requesting withdrawals. We do not store full card numbers; card transactions are handled by PCI-DSS-compliant payment processors.
• Communications data: The content of messages you send to our support team via email ([email protected]), live chat or any other contact channel, together with your contact details and the date and time of communication.
• Responsible gaming submissions: Self-exclusion requests, deposit limit preferences, session timeout settings and any information you voluntarily provide when seeking problem gambling support.

Information collected automatically:

• Device and browser data: IP address, device type, operating system, browser version, screen resolution and device identifiers.
• Usage data: Pages visited, time spent on each page, games played, bet history, login timestamps, session duration and navigation paths through the platform.
• Geolocation data: Approximate geographic location derived from your IP address, used to apply jurisdiction-appropriate access controls. We do not collect precise GPS coordinates without your explicit consent.
• Cookie and tracking data: Data collected through cookies, web beacons and similar technologies as described in the Cookies & Tracking section of this Policy.

Information from third parties:

• Identity verification providers: Third-party KYC services may return verification outcomes, fraud risk scores and document authenticity assessments in connection with your account.
• Payment processors: Transaction status, reference numbers and fraud screening results returned by our payment gateway partners.
• Fraud prevention databases: Where permitted, we may cross-reference your details against industry fraud-prevention registers to protect the integrity of the platform.

2. How We Use Your Data

367bd uses the personal data we collect for the following purposes. Each purpose is supported by a specific legal basis, which is set out in the Legal Basis for Processing section below.

3. Legal Basis for Processing

367bd processes your personal data on one or more of the following legal bases, depending on the purpose of each specific processing activity:

• Contractual necessity: The majority of our data processing is necessary to perform our contract with you — specifically, to operate your 367bd account, accept your bets, settle winnings and process payments. Without this processing, we cannot provide the Service.
• Legal obligation: Certain processing activities are required by law — in particular, our KYC identity verification, transaction monitoring and record-keeping obligations under applicable anti-money laundering frameworks. We are not able to waive these requirements regardless of your preferences.
• Legitimate interests: We process some data — particularly device data, IP addresses and usage logs — on the basis of our legitimate interests in maintaining platform security, preventing fraud and abuse, and improving the quality of our service. We apply a balancing test to ensure these interests do not override your rights and freedoms.
• Consent: Where processing is not required by contract or law, and where our legitimate interests do not provide a sufficient basis, we will ask for your explicit consent before processing — in particular, for direct marketing communications and for non-essential cookie categories. You may withdraw consent at any time; withdrawal does not affect the lawfulness of any processing that took place before withdrawal.
• Vital interests and public task: In rare circumstances — for example, where we become aware of a serious risk of harm — we may process data on the basis of vital interests or to assist authorities fulfilling a public task. These bases apply only in genuinely exceptional cases.

4. Data Sharing & Disclosure

367bd does not sell, rent or trade your personal data to third parties for their own commercial purposes. We share data only in the following limited, necessary circumstances:

• Payment processors and mobile wallet providers: To process your deposits and withdrawals, we share the minimum necessary payment details with our processing partners, including bKash, Nagad, Rocket, Upay and our card processing gateway. These partners are contractually bound to use your data solely for payment processing purposes and to maintain appropriate security standards.
• Identity verification (KYC) providers: To fulfil our legal KYC obligations, we share identity documents and personal details with our third-party verification service partners. These providers process your data under strict data processing agreements and are not permitted to use it for any purpose beyond verification.
• Game technology providers: Game studios and live casino operators — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe and Ezugi — may receive session tokens and game-round identifiers to deliver their games within the 367bd platform. These providers do not receive your full personal profile; only the data necessary to operate the game session is shared.
• Fraud prevention and security services: We share relevant data with fraud-detection and cybersecurity partners to identify and block suspicious activity, protect against account takeover and maintain the fairness of our betting markets.
• Legal and regulatory authorities: Where required by law, court order or a valid regulatory demand, 367bd will disclose personal data to the relevant authority. We will notify you of such disclosures where we are legally permitted to do so.
• Professional advisers: We may share data with our legal, accounting and auditing advisers on a strictly confidential, need-to-know basis where required to obtain professional advice or to conduct an audit of our business.
• Business transfers: In the event of a merger, acquisition or sale of all or part of 367bd's business, player data may be transferred as part of that transaction. We will give reasonable advance notice of any such transfer and the privacy terms that will apply following completion.

5. Cookies & Tracking

367bd uses cookies and similar tracking technologies (including web beacons and local storage objects) on the 367bd website to improve your experience, maintain session continuity, monitor platform performance and, where you have consented, to personalise promotional content. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential to enable you to navigate the 367bd platform and use its core features — including logging in, maintaining your session, and processing transactions. These cookies cannot be disabled because the Service cannot function without them. No consent is required for strictly necessary cookies.
• Performance and analytics cookies: These cookies collect anonymised information about how visitors use the 367bd website — which pages are visited most frequently, how long sessions last, and where errors are encountered. This data helps us improve the platform. These cookies are activated only with your consent.
• Functional cookies: These cookies remember your preferences — such as your preferred language setting, display preferences and previously entered form data — to personalise your experience. Activated with your consent.
• Marketing and personalisation cookies: Where you have opted in to promotional communications, these cookies help us understand your game and betting preferences so that we can present relevant offers and bonuses. Activated only with your explicit consent and can be withdrawn at any time.

You can manage your cookie preferences by adjusting your browser settings to block or delete cookies at any time. Please note that disabling all cookies may affect the functionality of the 367bd platform, particularly features that depend on session management. Refer to your browser's help documentation for instructions on managing cookie settings.

6. Data Security

367bd takes the security of your personal data seriously and maintains a comprehensive set of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your browser or app and the 367bd platform is encrypted using industry-standard SSL/TLS protocols. The padlock icon in your browser confirms that your connection is secure.
• Encrypted data storage: Sensitive data fields — including passwords (stored as salted hashes), payment identifiers and KYC document references — are encrypted at rest using AES-256 or equivalent standards.
• Access controls: Access to personal data within 367bd's systems is restricted on a strict need-to-know basis. Staff access is governed by role-based access controls, and all access is logged and auditable.
• Intrusion detection and monitoring: 367bd's technical infrastructure is monitored continuously for anomalous activity, attempted breaches and performance issues. Automated alerting is in place for detected threats.
• Regular security reviews: We conduct periodic security assessments of our platform, including vulnerability scanning, to identify and remediate potential weaknesses before they can be exploited.
• Staff training: All 367bd staff who handle personal data receive regular data protection and security awareness training as a condition of their role.

Despite these measures, no online platform can guarantee absolute security. If you believe your 367bd account has been compromised or if you become aware of any unauthorised use of your credentials, please contact us immediately at [email protected] so that we can take prompt action to protect your account.

7. Data Retention

367bd retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, taking into account our legal obligations, dispute resolution needs and legitimate business interests. The following general retention periods apply:

When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked back to you. Where deletion is not immediately possible due to backup cycle timing, the data is isolated and protected from further active processing until deletion is carried out.

8. Your Rights

367bd respects your rights over your own personal data. Depending on the applicable data protection framework, you may be entitled to exercise some or all of the following rights with respect to the personal data we hold about you:

• Right of access: You may request a copy of the personal data 367bd holds about you, together with information about how it is being used. We will respond to access requests within 30 days of receipt.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update certain details directly within your 367bd account settings.
• Right to erasure: You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to overriding legal obligations — for example, we are required to retain AML records for the statutory period regardless of an erasure request.
• Right to restrict processing: You may ask us to suspend the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested or while an objection to processing is being considered.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that we provide your personal data in a structured, machine-readable format so that you can transfer it to another service provider.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling. You also have an unconditional right to object to direct marketing processing at any time.
• Rights related to automated decision-making: Where 367bd makes decisions about your account solely through automated means (for example, automated fraud detection resulting in account restriction), you have the right to request human review of that decision, to express your point of view and to contest the outcome.

To exercise any of these rights, please contact our support team at [email protected]. We will verify your identity before processing any rights request to protect against unauthorised disclosure. We aim to respond to all rights requests within 30 calendar days. If your request is complex or if we receive a large number of requests simultaneously, we may extend this period by a further 60 days — we will notify you if an extension is required.