Data Protection

Privacy Policy —
How 367bd Protects Your Personal Data

At 367bd, your privacy is a core commitment, not an afterthought. This Privacy Policy explains in plain terms what personal information we collect, why we collect it, how we use and protect it, and the rights you have over your own data. We encourage every 367bd user to read this policy carefully before creating an account or making a deposit.

Effective: January 2026 Jurisdiction: Bangladesh SSL 256-bit Encrypted Language: English
Privacy at a Glance

Our Data Protection Principles

These six principles define how 367bd approaches data privacy. They summarise our obligations to you as a registered user of the platform. The full legal text in the policy sections below governs in all cases.

Minimal Data Collection
367bd only collects the personal data that is strictly necessary to operate the platform, verify your identity, process payments via bKash, Nagad, and Rocket, and comply with applicable legal obligations. We do not collect data speculatively or for purposes beyond those disclosed in this policy.
Secure Storage & Transmission
All data transmitted between your device and the 367bd platform is protected by 256-bit SSL/TLS encryption. Personal data at rest is stored on hardened servers with restricted access. Payment credentials are never stored by 367bd directly — they are handled by PCI-DSS compliant payment partners.
Your Rights Over Your Data
You have the right to access, correct, and request deletion of your personal data held by 367bd at any time. You may also request a copy of your data in a portable format, object to certain processing activities, and withdraw consent where processing is consent-based. Contact our support team to exercise any of these rights.
No Sale of Personal Data
367bd does not sell, rent, or trade your personal information to third-party marketers or data brokers under any circumstances. Data sharing with third parties is strictly limited to service providers who assist in running the platform — such as KYC verification, fraud detection, and payment processing — and only under binding confidentiality agreements.
Defined Retention Periods
367bd retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Account data is retained for a minimum of five years following account closure to satisfy anti-money laundering recordkeeping obligations. After the retention period, data is securely deleted or anonymised.
Breach Notification
In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, 367bd will notify affected users without undue delay. We maintain an incident response plan and conduct regular security audits to minimise the likelihood and impact of any data security event on the 367bd platform.
Contents
Summary Notice: This Privacy Policy ("Policy") describes how 367bd ("367bd", "we", "us", "our") collects, uses, stores, and protects personal data provided by users ("you", "your") of the 367bd platform at 367bd.io. By registering an account or using any 367bd service, you acknowledge that you have read and understood this Policy. This Policy is incorporated by reference into the 367bd Terms & Conditions. Defined terms used herein carry the same meaning as in the Terms & Conditions unless otherwise stated.

367bd is committed to protecting the privacy and security of all personal information entrusted to us by our users. As Bangladesh's trusted online betting and casino platform, we serve players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar who rely on us to handle their data responsibly alongside their bKash, Nagad, and Rocket financial transactions.

This Policy sets out the types of personal data we collect, the purposes for which we process it, the legal grounds upon which we rely, the third parties with whom we share it, the controls we have in place to protect it, and the rights available to you as a data subject. We encourage you to read this Policy in full and to contact us if you have any questions about how your data is handled.

This Policy applies to all 367bd services including the website at 367bd.io, any mobile-optimised versions of the platform, and all communications we send to you by email, SMS, or push notification. It does not apply to third-party websites or services that may be linked from the 367bd platform.

367bd collects personal data across several categories depending on how you interact with the platform. The table below summarises the categories of data we collect and the primary reason for collecting each category.

Data Category Examples Primary Purpose
Identity Data Full name, date of birth, national ID number, passport number Account registration, KYC age and identity verification
Contact Data Mobile number, email address, residential address Account communications, support, transaction notifications
Financial Data bKash / Nagad / Rocket wallet numbers, bank account details, transaction history Processing deposits and withdrawals, fraud prevention
Account Data Username, account balance, betting history, game activity logs, bonus usage Service delivery, account management, responsible gaming monitoring
Technical Data IP address, device type, browser type, operating system, session duration Platform security, fraud detection, technical troubleshooting
Usage Data Pages visited, search queries, features used, click paths, session timestamps Platform improvement, personalisation, analytics
Communications Data Live chat transcripts, email correspondence, support ticket content Customer support, quality assurance, dispute resolution
Marketing Preferences Opt-in / opt-out status for emails, SMS promotions, push notifications Sending relevant promotional communications where consent is given
Sensitive Data: 367bd does not intentionally collect special category data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless it is strictly required for responsible gaming purposes (e.g., a self-exclusion request that references a gambling disorder). Where sensitive data is collected, it is processed under a heightened protection framework and is never used for commercial purposes.

367bd collects personal data through the following channels and mechanisms:

  • Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or filling in any platform form.
  • Automated technical collection: Data collected automatically as you interact with the platform, including log files, cookies, pixel tags, and similar tracking technologies (see Section 7).
  • Payment partners: Confirmation and reference data received from bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks when you initiate or complete a financial transaction.
  • KYC and identity verification providers: Results from identity checks conducted by third-party KYC service providers who verify the authenticity of documents you submit.
  • Fraud prevention services: Risk signals and screening results from third-party fraud detection providers that help us identify suspicious account activity.
  • Publicly available sources: Sanctions lists, politically exposed persons (PEP) databases, and other publicly available sources used for anti-money laundering screening.

367bd processes your personal data on one or more of the following legal bases:

  • Contractual necessity: Processing that is necessary to perform our contract with you — including account creation, payment processing, and service delivery — is carried out on this basis.
  • Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, KYC requirements, and responsible gaming regulations, is carried out on this basis.
  • Legitimate interests: Processing for purposes such as fraud prevention, platform security, analytics, and service improvement, where these interests are not overridden by your fundamental rights and freedoms.
  • Consent: Processing for marketing communications and optional personalisation features is carried out on the basis of your explicit consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

367bd uses the personal data we collect for the following purposes:

  • To create, maintain, and administer your 367bd account and provide access to the platform's betting, casino, and sports wagering services.
  • To process financial transactions including deposits via bKash, Nagad, Rocket, and Upay, and to process withdrawal requests to your verified payment method.
  • To verify your identity and age in accordance with our KYC policy and our 21+ age restriction.
  • To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and other prohibited activities outlined in the Terms & Conditions.
  • To monitor and enforce responsible gaming obligations, including identifying players who may be showing signs of problem gambling and offering intervention tools such as deposit limits or self-exclusion.
  • To communicate with you regarding your account, transactions, promotions (where consented), and updates to platform policies.
  • To personalise your experience on the 367bd platform, including surfacing relevant markets, game recommendations, and seasonal promotions during events such as BPL, IPL, T20 World Cup, and Eid.
  • To improve the 367bd platform through analytics, A/B testing, and user experience research, using aggregated or anonymised data where possible.
  • To comply with legal and regulatory obligations and to respond to lawful requests from government authorities.

367bd does not sell or rent your personal data to any third party. We share personal data only in the following limited circumstances, and only to the minimum extent necessary for the stated purpose:

  • Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank receive transaction data necessary to process your deposits and withdrawals.
  • KYC and identity verification providers: Documents you submit for identity verification are shared with our contracted KYC service provider to confirm authenticity and age.
  • Fraud and AML screening providers: Technical and identity data may be cross-checked against sanctions lists and fraud databases to fulfil our legal obligations.
  • Platform hosting and infrastructure providers: Our hosting and cloud infrastructure partners process data on our behalf under strict data processing agreements that prohibit independent use of your data.
  • Customer support platforms: Live chat and email support tools process your communications data solely to facilitate support interactions.
  • Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, court order, or regulatory direction.
Third-Party Agreements: All third-party service providers who process personal data on behalf of 367bd are required to sign binding data processing agreements. These agreements restrict their use of your data to the purpose for which it was shared, require them to maintain equivalent security standards, and prohibit onward transfer without 367bd's prior written consent.

367bd uses cookies and similar tracking technologies on the platform to deliver core functionality, improve performance, and understand how users interact with the site. A cookie is a small text file placed on your device when you visit a website. Cookies set by 367bd are used for the following purposes:

  • Strictly necessary cookies: These are essential for the platform to function and cannot be switched off. They include session authentication cookies that keep you logged into your account and security cookies that help protect against cross-site request forgery attacks.
  • Performance cookies: These collect anonymous information about how users navigate the platform — such as which pages are visited most often and any error messages encountered — to help us improve the user experience.
  • Functionality cookies: These remember your preferences (such as your preferred payment method and language settings) so you do not have to re-enter them on every visit.
  • Analytics cookies: These help us understand aggregate usage patterns, session durations, and feature adoption rates using anonymised data.

You can control cookie settings through your browser preferences. Note that disabling strictly necessary cookies may prevent you from accessing certain platform features including your account dashboard and payment functions. 367bd does not use third-party advertising or behavioural targeting cookies.

367bd retains personal data for the periods set out below, after which data is securely deleted or irreversibly anonymised:

  • Account and identity data: Retained for the duration of your account plus a minimum of five (5) years following account closure, in compliance with anti-money laundering recordkeeping obligations.
  • Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction for regulatory and audit purposes.
  • KYC documents: Retained for the period required by applicable AML regulations, typically five (5) years from the end of the business relationship.
  • Customer support communications: Retained for three (3) years from the date of the interaction for dispute resolution and quality assurance purposes.
  • Technical and usage logs: Retained for up to twelve (12) months for security monitoring and fraud detection, after which they are anonymised or deleted.
  • Marketing preferences: Retained until you withdraw consent or request deletion, whichever occurs first.

Where a legal claim, regulatory investigation, or dispute is active, relevant data may be retained beyond the standard periods described above until the matter is fully resolved.

367bd implements a multi-layered security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include the following:

  • 256-bit SSL/TLS encryption for all data transmitted between your device and 367bd servers
  • Encryption of sensitive data at rest using industry-standard algorithms
  • Role-based access controls limiting staff access to personal data on a strict need-to-know basis
  • Multi-factor authentication requirements for platform staff accessing administrative systems
  • Regular penetration testing and vulnerability assessments conducted by qualified security professionals
  • Automated anomaly detection systems that flag unusual login patterns, large withdrawal requests, and other indicators of potential account compromise
  • Secure data centre infrastructure with physical access controls and environmental safeguards
Your Responsibility
While 367bd takes extensive measures to protect your data on our end, you also play an important role in keeping your account secure. Use a strong, unique password for your 367bd account, enable any available two-factor authentication options, never share your login credentials with anyone, and contact our support team immediately if you suspect unauthorised access to your account.

As a user of the 367bd platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us via live chat or at [email protected]. We will respond to all valid requests within 30 days of receipt.

  • Right of access: You may request a copy of all personal data we hold about you, together with information about how it is processed.
  • Right to rectification: You may request that we correct any inaccurate or incomplete personal data we hold about you.
  • Right to erasure: You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
  • Right to restriction: You may request that we restrict processing of your data in certain circumstances, such as while the accuracy of data is being contested.
  • Right to data portability: Where processing is based on your consent or contract, you may request that we provide your data in a structured, machine-readable format.
  • Right to object: You may object to processing based on legitimate interests or for direct marketing purposes at any time.
  • Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.
Identity Verification for Rights Requests: To protect your privacy and prevent unauthorised access, 367bd may require you to verify your identity before fulfilling a data rights request. This may involve confirming account details or providing a copy of a government-issued ID. We will not charge a fee for fulfilling standard requests; however, we reserve the right to charge a reasonable administrative fee for repetitive or manifestly unfounded requests.

The 367bd platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you must not use the 367bd platform, create an account, or submit any personal information to us.

If 367bd discovers or is notified that personal data has been collected from a user who is under 21, we will immediately suspend the associated account, void any bonus funds, and securely delete the personal data in question. Real-money deposits will be returned to the originating payment method following identity verification of the account holder.

Parents and guardians who have reason to believe that a minor has provided personal data to 367bd are encouraged to contact us immediately at [email protected] so that the matter can be investigated and resolved without delay.

367bd's primary operations and data infrastructure are designed to serve the Bangladesh market. However, some of our third-party service providers — including KYC verification platforms, fraud screening services, and cloud infrastructure providers — may process data in jurisdictions outside Bangladesh. Where such transfers occur, 367bd ensures that adequate safeguards are in place to protect your data, including:

  • Contractual clauses in data processing agreements that require overseas processors to maintain equivalent data protection standards
  • Use of service providers who maintain internationally recognised security certifications (such as ISO 27001 or SOC 2 Type II)
  • Transfers to processors located in jurisdictions that maintain data protection standards considered adequate for cross-border data flows

By using the 367bd platform and consenting to this Privacy Policy, you acknowledge that your data may be transferred and processed in jurisdictions outside Bangladesh in accordance with the safeguards described above.

The 367bd platform may, from time to time, contain references to or integrations with third-party services such as game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) and payment infrastructure. While these providers are vetted partners, their own privacy policies govern the data they independently collect and process.

367bd is not responsible for the privacy practices, content, or security of any third-party service. We encourage you to review the privacy policies of any third-party provider before interacting with their services through or alongside the 367bd platform.

With your explicit consent, 367bd may send you promotional communications about new features, upcoming sports events (such as BPL matches, IPL tournaments, and T20 World Cup fixtures), seasonal bonuses during Eid, Pohela Boishakh, and other cultural events, and other offers available on the platform.

You may opt out of marketing communications at any time by using the unsubscribe link in any marketing email, updating your notification preferences in your account dashboard, or contacting 367bd support directly. Opting out of marketing communications does not affect transactional communications such as deposit confirmations, withdrawal notifications, or security alerts, which are sent based on contractual necessity.

No Unsolicited Marketing: 367bd does not send unsolicited SMS or push notification marketing without prior consent. If you receive any communication claiming to be from 367bd that you did not opt in to, please report it to our support team immediately, as it may indicate a phishing or impersonation attempt.

367bd may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When we make changes to this Policy, we will update the effective date displayed in the hero section of this page and, where changes are material, notify registered users via email or a prominent platform notification.

Material changes include but are not limited to: new categories of data being collected, new purposes for which existing data is used, new categories of third parties with whom data is shared, or changes to your rights as a data subject. We encourage you to review this Policy periodically to stay informed about how 367bd protects your personal information.

Your continued use of the 367bd platform following publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you should cease using the platform and may request account closure in accordance with the Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or how 367bd handles your personal data, please contact our support team through the following channels:

  • Live Chat: Available 24/7 from within your 367bd account dashboard — average response time under 3 minutes (Bangladesh Standard Time, UTC+6)
  • Email: [email protected] (plain text — not a clickable link)
  • Response Time: Written correspondence responded to within 10 business days of receipt

For data rights requests (access, rectification, erasure, portability, objection), please include your registered account username or email address and a description of your request in your message. We may ask you to verify your identity before processing the request.

Your Data Is Safe with 367bd

Now that you understand how 367bd protects your personal information, you can bet with confidence. Log in to explore cricket betting, live casino, and slots — all backed by instant bKash and Nagad payments. For adults aged 21 and above only.

367bd Login Cricket Betting View FAQ
21+ Only