378bd Privacy Policy — How We Protect Your Personal Data

1 Who We Are

378bd is an internationally licensed online casino and sports betting platform operating at https://378bd.io. We serve adult players aged 21 and above, with a primary focus on the Bangladesh market. References to "378bd", "we", "us", or "our" in this Privacy Policy refer to the operator of the 378bd platform.

As the operator of the platform, 378bd acts as the data controller in respect of all personal data collected through the website, mobile interface, account registration process, KYC procedures, and any customer support interactions. This means we are responsible for determining how and why your personal data is processed.

If you have any questions about this Privacy Policy or about how your personal data is handled, you may contact our Data Protection team at [email protected]. We will respond to all data-related enquiries within 72 hours of receipt.

2 Data We Collect

378bd collects several categories of personal data in the course of providing our services. The table below summarises each category, specific data points within that category, and the primary reason for collection.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or health data, except where health or wellbeing information is voluntarily provided by a Player in the context of a responsible gaming self-exclusion or cooling-off request.

3 How We Collect Data

378bd collects personal data through the following channels and mechanisms:

• Direct registration: When you create an account on the platform, you provide identity and contact data directly through the registration form.
• KYC submission: When you submit identity documents during the account verification process — either at registration or at the time of your first withdrawal request.
• Deposit and withdrawal transactions: When you initiate a payment through bKash, Nagad, Rocket, Upay, or any supported banking channel, financial data is captured to process and record the transaction.
• Platform activity: Usage data is automatically recorded as you navigate the platform, place bets, play casino games, use live dealer tables, or interact with any platform feature.
• Technical tracking: Our servers and analytics tools automatically log technical data including your IP address, device characteristics, and browser information each time you access the platform.
• Cookies and similar technologies: First-party cookies and session tokens are used to maintain your logged-in session, remember your preferences, and support platform security. See Section 7 for full details.
• Customer support interactions: When you contact our support team via live chat or email, the content of those communications is recorded and stored as part of your account record.
• Third-party verification providers: In cases where automated KYC tools are used to verify identity documents, those providers may return structured identity data to 378bd as part of the verification result.

4 Why We Use Your Data

378bd processes your personal data for the following defined purposes:

• Account creation and management: To register your account, authenticate your login sessions, and maintain your account settings and preferences.
• Identity and age verification: To confirm that you are at least 21 years of age and that the identity information you have provided is accurate, in compliance with our responsible gaming obligations and international licensing requirements.
• Payment processing: To process deposits and withdrawals through supported Bangladesh payment channels, verify that payment accounts are registered in your name, and maintain accurate financial records.
• Fraud and money-laundering prevention: To monitor account activity for patterns consistent with fraud, bonus abuse, multi-accounting, or money laundering, and to take appropriate protective action where such patterns are identified.
• Responsible gaming: To monitor your gambling activity against responsible gaming indicators, apply deposit limits or session limits you have requested, process cooling-off or self-exclusion requests, and proactively identify players who may be at risk.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance.
• Legal and regulatory compliance: To meet obligations under our international gaming licence, anti-money-laundering regulations, and any applicable legal requirements, including the production of records for regulatory audits.
• Platform improvement: To analyse aggregate usage data and identify opportunities to improve platform performance, game selection, user experience, and support quality.
• Marketing communications: To send you promotional offers, bonus notifications, and seasonal campaign information by email or SMS, where you have provided explicit consent to receive such communications. You may withdraw consent at any time.

5 Legal Basis for Processing

378bd processes your personal data on the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing your identity data, contact data, and financial data is necessary to perform the contract between you and 378bd — that is, to provide the platform services you have registered to use. Without this data, we cannot create your account, verify your identity, or process your transactions.
• Legal obligation: Processing your KYC documents and financial records is required to comply with 378bd's anti-money-laundering obligations, age verification requirements under our gaming licence, and any applicable regulatory reporting duties.
• Legitimate interests: Processing technical and usage data for fraud detection, platform security, responsible gaming monitoring, and service improvement is carried out on the basis of 378bd's legitimate interest in operating a safe, fair, and compliant gaming platform. We have conducted a balancing assessment and determined that these interests do not override your fundamental privacy rights.
• Consent: Processing your data for direct marketing communications (promotional emails, SMS bonus alerts) is carried out only on the basis of your explicit, freely given, informed consent. You may withdraw this consent at any time by adjusting your notification preferences in your account dashboard or by contacting [email protected].

6 Sharing Your Data

378bd does not sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes. Personal data is shared only in the following circumstances, and only to the minimum extent necessary:

• Payment processors: When you make a deposit or withdrawal, the relevant payment service (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, or City Bank) receives the financial data necessary to execute the transaction. Each payment provider is independently regulated and subject to its own data protection obligations.
• KYC and identity verification providers: Where third-party automated KYC tools are used to verify the authenticity of identity documents, document images and identity data are shared with those providers solely for verification purposes. Providers are bound by data processing agreements with 378bd.
• Game studios and platform providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session tokens and anonymised player identifiers to deliver their games on the 378bd platform. These providers do not receive your personally identifiable information such as your full name, address, or payment details.
• Regulatory and law enforcement authorities: 378bd may be required by law, court order, or regulatory instruction to disclose personal data to relevant authorities. Where legally permissible, 378bd will notify the affected player of such a disclosure request before complying.
• Fraud and security service providers: Third-party fraud detection and cybersecurity services may process IP address data and device fingerprint data to assist in identifying fraudulent access or suspicious account activity. These providers act as data processors under binding contracts with 378bd.
• Professional advisors: In limited circumstances, personal data may be disclosed to 378bd's legal advisors, auditors, or insurers on a strictly confidential basis, to the extent necessary for them to provide their professional services.

7 Cookies & Tracking Technologies

The 378bd platform uses cookies and similar session technologies to maintain platform functionality, support security, and improve your experience. We do not use third-party advertising trackers or cross-site behavioural advertising cookies.

The categories of cookies used on the 378bd platform are as follows:

Strictly necessary cookies cannot be disabled as they are essential for the platform to function. Functional and analytics cookies may be managed through your browser settings. Disabling functional cookies may affect certain platform features such as saved preferences.

378bd does not use third-party advertising cookies, retargeting pixels, social media tracking scripts, or any cookie technology that would allow your browsing activity on the 378bd platform to be tracked by external organisations for advertising purposes.

8 Data Security

The security of your personal data is a primary operational concern at 378bd. We implement a layered set of technical and organisational security measures designed to protect your data against unauthorised access, loss, destruction, or disclosure.

• Transport encryption: All data transmitted between your device and the 378bd platform is encrypted using 256-bit SSL/TLS protocols. The padlock icon in your browser confirms this encryption is active during your session.
• Data at rest encryption: Personal data stored on 378bd servers — including KYC documents, financial records, and account information — is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data within 378bd's systems is restricted on a strict need-to-know basis. Employees and contractors with access to personal data are subject to confidentiality agreements and regular data protection training.
• Infrastructure security: 378bd's platform infrastructure is hosted in secure, access-controlled data centres. Regular vulnerability assessments and penetration testing are conducted to identify and remediate potential weaknesses before they can be exploited.
• Incident response: In the event of a confirmed personal data breach that poses a risk to your rights or interests, 378bd will notify affected players and relevant regulatory authorities without undue delay and in accordance with applicable legal obligations.
• Two-factor authentication: Where 2FA is available on your account, 378bd strongly encourages its activation as an additional layer of protection against unauthorised access.

While 378bd takes every reasonable technical precaution, no internet-based platform can guarantee absolute security against all conceivable threats. You play an important role in keeping your account secure by using a strong, unique password and never sharing your login credentials with any third party.

9 Data Retention

378bd retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The table below sets out our standard retention periods by data category.

At the end of the applicable retention period, personal data is either securely and permanently deleted from our systems or anonymised such that it can no longer be linked to any individual. Anonymised aggregate data may be retained indefinitely for statistical and platform improvement purposes.

10 Your Rights

As a user of the 378bd platform, you have the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected]. 378bd will acknowledge your request within 48 hours and respond substantively within 30 days.

• Right of access: You have the right to request a copy of the personal data 378bd holds about you, along with information about how it is being used. This is sometimes called a Subject Access Request (SAR).
• Right to rectification: If the personal data held by 378bd is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis for processing applies. Note that this right is subject to 378bd's legal retention obligations; data required for AML compliance cannot be deleted before its mandatory retention period expires.
• Right to restrict processing: You have the right to request that 378bd restricts the processing of your personal data in certain circumstances, such as while the accuracy of the data is being contested, or while you have objected to processing based on legitimate interests.
• Right to object: You have the right to object to the processing of your personal data where 378bd relies on legitimate interests as its legal basis. 378bd will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
• Right to data portability: In cases where data is processed on the basis of consent or contract, and where technically feasible, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format.

11 Children & Minors

The 378bd platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. The platform's registration process requires users to declare their date of birth, and this is verified through mandatory KYC procedures before any real-money features are accessible.

If 378bd becomes aware — through any means — that personal data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete the personal data in question (subject to any mandatory regulatory retention obligations), and report the matter to relevant authorities where required by law.

If you are a parent or guardian and believe that a person under your care has registered on the 378bd platform, please contact us immediately at [email protected] with the subject line "Underage Account Report". We will investigate and act within 24 hours.

12 Marketing Communications

378bd may send you promotional communications — including information about new games, deposit bonus offers, seasonal promotions (such as Eid, Pohela Boishakh, or Victory Day specials), cricket betting tips for BPL and T20 tournaments, and platform feature updates — by email or SMS, but only where you have given your explicit, freely given consent to receive such communications.

You may withdraw your consent to receive marketing communications at any time through either of the following methods:

• Adjusting your notification preferences in the Communication Settings section of your account dashboard after logging in.
• Clicking the unsubscribe link included at the bottom of every marketing email sent by 378bd.
• Sending a written opt-out request to [email protected] with the subject line "Unsubscribe".

Withdrawal of consent for marketing communications does not affect your receipt of transactional and service communications — such as deposit confirmations, withdrawal notifications, account security alerts, and KYC status updates — which are sent on the basis of contractual necessity and cannot be individually opted out of while your account remains active.

378bd does not share your email address or mobile number with any third-party advertiser for the purpose of that third party marketing their own products or services to you.

13 International Data Transfers

As an internationally licensed platform, 378bd may process or store certain categories of personal data on servers or through service providers located outside of Bangladesh. Where such international transfers occur, 378bd ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within Bangladesh.

These safeguards include:

• Binding data processing agreements with all international service providers, requiring them to process your data only in accordance with 378bd's documented instructions and to maintain security measures equivalent to our own.
• Selection of service providers that operate under recognised international data protection frameworks or are subject to equivalent national data protection legislation.
• Regular review of international data transfer arrangements to ensure continued adequacy of protections as regulatory frameworks evolve.

The categories of data most likely to be processed internationally include KYC document verification results (processed by specialist identity verification providers), technical log data (processed by cloud infrastructure providers), and game session data (processed by licensed game studio providers such as Pragmatic Play, Evolution Gaming, and Spribe).

14 Changes to This Privacy Policy

378bd reserves the right to update or revise this Privacy Policy at any time. Where a material change is made to how we collect or use your personal data, we will provide advance notice to active account holders via the email address registered to their account, and a prominent notice will be displayed on the platform for a minimum of 14 days before the change takes effect.

Minor updates — such as corrections to language, clarifications that do not alter the substance of data practices, or updates to contact information — may be made without individual notification. The "Last Reviewed" date at the top of this page and in the hero section will be updated to reflect the date of any revision.

Continued use of the 378bd platform after the effective date of a Privacy Policy update constitutes your acceptance of the revised policy. If you disagree with any changes, you should cease using the platform and may request account closure by contacting [email protected].

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 378bd handles your personal data, please contact our Data Protection team using the details below. All privacy-related communications will be treated with strict confidentiality and handled by trained personnel.

• Email: [email protected] — please include "Privacy Policy Enquiry" in the subject line for fastest routing to the relevant team.
• Live Chat: Available 24/7 through the chat interface within your logged-in account at 378bd.io.
• Response Time: All data protection enquiries will receive an acknowledgement within 48 hours and a substantive response within 30 days.
• Support Hours:: Our support team operates around the clock, 24 hours a day, 7 days a week, across all time zones including Bangladesh Standard Time (BST, UTC+6).

378bd is committed to resolving all privacy-related concerns fairly and promptly. We regard your trust as the foundation of our relationship, and we take every data protection enquiry seriously regardless of its nature or scope.