bd378 Privacy Policy — How We Protect Your Personal Data
Your privacy matters to bd378. This policy explains exactly what personal information we collect, why we collect it, how we use it, and what rights you have over your own data as a player on our platform.
This Privacy Policy ("Policy") describes how bd378 ("we", "us", "our") collects, uses, stores, and discloses personal information about individuals ("you", "your") who access or use the bd378 website, mobile web platform, and related services (collectively, the "Platform"). By accessing or using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately.
bd378 is committed to handling your personal data responsibly and in a manner consistent with applicable data protection principles. We collect only the data that is necessary for the legitimate operation of the Platform, and we do not sell your personal data to third parties for marketing purposes under any circumstances.
1. Information We Collect
bd378 collects personal information from players through a number of channels, including account registration, payment processing, gameplay activity, and your interactions with our customer support team. The categories of personal information we may collect are set out below.
When you create a bd378 account, we collect your full legal name, date of birth, Bangladeshi mobile phone number, and the login credentials you choose (username and encrypted password). This information is required to create and maintain your account and to verify your identity as part of our KYC process.
Before processing withdrawal requests, bd378 requires identity verification documents. These may include a scanned copy or photograph of a government-issued National Identity Card, passport, or driving licence, and in some cases a document confirming your address such as a utility bill or bank statement. These documents are used exclusively for identity verification and fraud prevention purposes.
When you make a deposit or withdrawal, bd378 records the transaction amount, currency, date and time, payment method used (for example bKash, Nagad, Rocket, Upay, Visa, or Mastercard), and a transaction reference number. We do not store your full payment credentials such as card numbers or mobile banking PINs. Payment processing is handled by our payment partners, and only the minimum necessary transaction metadata is retained by bd378.
When you use the Platform, we automatically collect certain technical data including your device type, operating system, browser type and version, IP address, the pages you visit within the Platform, session duration, and referral source. This data is used in aggregate to improve Platform performance and security, and to detect suspicious or fraudulent access patterns.
2. How We Use Your Information
bd378 uses the personal information we collect for the following purposes. We will only use your personal data for a purpose that is compatible with the basis on which it was originally collected. If we need to use your data for a materially different purpose, we will notify you before doing so.
- To create, verify, and maintain your player account, including processing login requests and managing account settings on your behalf.
- To process deposits, withdrawals, and any other financial transactions you initiate on the Platform, including verifying payment method ownership as part of our fraud prevention procedures.
- To comply with applicable KYC (Know Your Customer) requirements, including verifying your identity and age before processing withdrawal requests or at any other point during the account lifecycle where verification is required.
- To provide customer support services, including responding to your queries, resolving complaints, and communicating with you about your account or any transactions that require your attention.
- To monitor and improve the security of the Platform, detect and prevent fraud, money laundering, and other prohibited conduct as defined in our Terms and Conditions, and to report such activity to relevant authorities where required by applicable law.
- To send you service-related communications such as account notifications, deposit confirmations, withdrawal status updates, and security alerts. bd378 does not send unsolicited marketing emails; any promotional communications are sent only to players who have opted in to receive them.
3. Legal Basis for Processing
bd378 processes your personal data on one or more of the following legal bases, depending on the specific purpose for which the data is being processed. In all cases, we process only the minimum data necessary to fulfil the stated purpose.
The majority of the personal data we process is necessary for the performance of the contract between you and bd378 — that is, to provide you with access to the Platform, to manage your account, and to process your deposits and withdrawals. Without this processing, we would be unable to operate your account or fulfil our obligations under our Terms and Conditions.
Certain processing activities — in particular KYC identity verification, age verification, and the monitoring and reporting of suspicious financial activity — are carried out because they are required by applicable law. bd378 is obligated to conduct these activities regardless of your consent preferences. Failure to provide the required information for these activities may result in account suspension or the inability to process withdrawals.
Some processing activities are carried out on the basis of bd378's legitimate interests, where those interests are not overridden by your rights and interests. This includes Platform security monitoring, fraud detection, technical performance analytics, and the improvement of the overall user experience. Where we rely on legitimate interests as a legal basis, we balance our interests against yours and will not proceed where the processing would be disproportionately prejudicial to you.
4. Data Sharing and Disclosure
bd378 does not sell, rent, or trade your personal data to any third party. We may, however, share your personal information with the following categories of third parties, strictly on a need-to-know basis and only to the extent required for the purpose stated.
- Payment service providers (including bKash, Nagad, Rocket, Upay, and card processing partners) who process financial transactions on our behalf. These providers receive only the transaction data necessary to process the specific payment and are contractually prohibited from using that data for any other purpose.
- Identity verification and KYC service providers who assist bd378 in verifying the identity and age of players as required by applicable regulations. These providers process your KYC documents under strict confidentiality obligations and may not retain them beyond the period required to complete the verification.
- Government authorities, regulatory bodies, and law enforcement agencies, where disclosure is required by applicable law, court order, or regulatory instruction. bd378 will only disclose the minimum information required to comply with the legal obligation and will, where permitted by law, endeavour to notify you before making such disclosure.
- Technology and infrastructure service providers, including cloud hosting providers and Platform analytics tools, who process data on bd378's behalf under data processing agreements that require them to maintain appropriate security measures and prohibit the use of data for their own purposes.
5. Cookies and Tracking Technologies
bd378 uses cookies and similar tracking technologies (such as local storage and session tokens) to operate the Platform, maintain your login session, remember your preferences, and gather aggregate technical data about how the Platform is used. Cookies are small text files placed on your device by your browser when you visit the Platform. They do not contain your name, payment details, or any sensitive personal data in readable form.
The Platform uses the following types of cookies: (a) Essential cookies, which are strictly necessary for the Platform to function and cannot be disabled. These include session authentication tokens that keep you logged in during your current visit. (b) Analytics cookies, which collect aggregate information about how players use the Platform, allowing bd378 to identify and fix performance issues. These cookies do not identify you personally. You may disable non-essential cookies through your browser settings; however, doing so may affect the functionality of certain features of the Platform.
6. Data Retention
bd378 retains your personal data for as long as your account remains active and for a reasonable period thereafter to fulfil the purposes described in this Policy, to comply with legal retention obligations, and to resolve any disputes or enforce our agreements. The specific retention periods applicable to different categories of data are as follows: account registration data is retained for the duration of account activity plus a minimum of 5 years; KYC verification documents are retained for the period required by applicable anti-money laundering regulations; financial transaction records are retained for a minimum of 5 years from the date of the transaction; technical and usage data is retained in aggregate form for up to 2 years.
When your data is no longer required for the purpose for which it was collected, and no legal retention obligation requires us to keep it, bd378 will securely delete or anonymise the data so that it can no longer be linked to you as an individual. Anonymised aggregate data may be retained indefinitely for statistical and analytical purposes.
7. Your Data Protection Rights
As a player on bd378, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with your full name, registered mobile number, and a description of your request. We will respond within a reasonable timeframe and in no case later than 30 days from receipt of your request.
8. Data Security
bd378 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include SSL/TLS encryption for all data transmitted between your device and the Platform, encrypted storage of sensitive account data, access controls that restrict internal access to personal data on a need-to-know basis, regular security assessments, and monitoring systems designed to detect and respond to potential security incidents.
While bd378 takes data security seriously and employs industry-standard safeguards, no online platform can guarantee complete security against all possible threats. In the event of a data security incident that is likely to result in a risk to your rights and freedoms, bd378 will take prompt action to contain the incident, assess its impact, and notify affected players without undue delay in accordance with applicable notification obligations.
9. Children and Minors
bd378 is strictly an adult platform. The Platform is not directed at, and is not intended for use by, any person under the age of 21. bd378 does not knowingly collect, process, or store personal data from persons under 21. If bd378 becomes aware that personal data has been collected from a person under 21 without appropriate age verification, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that a minor in your care has accessed bd378 or provided personal data to us, please contact us immediately at [email protected] so that we can investigate and take appropriate action.
10. Changes to This Privacy Policy
bd378 reserves the right to update or amend this Privacy Policy at any time. When we make material changes to this Policy, we will update the "Last Updated" date at the top of this page and, where we consider the changes to be significant, we will endeavour to notify registered players by way of an in-platform notification or by email to the address associated with your account. Your continued use of the Platform after the effective date of any such change constitutes your acceptance of the updated Policy. We encourage you to review this Policy periodically to stay informed about how we are protecting your data.