Privacy Policy — How 367bet Protects Your Data

When you register for and use a 367bet account, we collect certain categories of personal information. The following table summarises the types of data we collect, the source of that data, and the reason we collect it.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or health information unless this is strictly required by law or to fulfil our responsible gaming obligations (for example, where you disclose a gambling-related health concern when requesting self-exclusion).

367bet processes your personal data only where we have a lawful basis for doing so. We use your information for the following purposes:

• Account Management: To create, maintain, and administer your 367bet account, including verifying your identity and age at registration and upon withdrawal requests.
• Transaction Processing: To process deposits and withdrawals in BDT via bKash, Nagad, Rocket, and Upay, and to maintain accurate financial records of all transactions associated with your account.
• Platform Delivery: To provide you with access to the full range of 367bet services including cricket betting, live casino, slots, Golden Bank, Dragon Fortune, and all other available games and features.
• Security and Fraud Prevention: To monitor for suspicious activity, prevent unauthorised access to your account, detect and investigate fraud, money laundering, and other illegal activities, and to enforce our Terms & Conditions.
• Responsible Gaming: To monitor your betting patterns and game activity in order to identify signs of problem gambling and, where applicable, to enforce responsible gaming measures including deposit limits, session limits, and self-exclusion.
• Legal Compliance: To comply with applicable laws, regulatory requirements, and lawful requests from competent authorities, including Anti-Money Laundering (AML) obligations and Know Your Customer (KYC) requirements.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance through our 24/7 live chat and email support channels.
• Service Improvement: To analyse anonymised usage patterns and platform performance data in order to improve the quality, reliability, and feature set of the 367bet platform.
• Marketing Communications: Where you have provided explicit consent, to send you promotional offers, bonus notifications, and platform updates. You may withdraw this consent at any time by contacting support at [email protected].

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you, except where expressly required for fraud detection or responsible gaming interventions, in which case you have the right to request human review of any automated decision that affects your account.

367bet does not sell your personal data. We share your information only in the limited circumstances described below, and only to the minimum extent necessary for each purpose:

• Payment Providers: We share transaction reference data with bKash, Nagad, Rocket, and Upay as required to process your deposits and withdrawals. These providers process your payment data under their own privacy policies and security standards.
• Game Software Providers: Certain game providers such as Evolution Gaming, Pragmatic Play, Microgaming, Spribe, and Ezugi may receive anonymised session data necessary to deliver their games through the 367bet platform. No personally identifiable information beyond what is technically required for game delivery is shared with these providers.
• Identity Verification Services: Where KYC verification is required, we may share identity documents with accredited third-party verification service providers who operate under strict confidentiality and data security obligations.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where we are required to do so by applicable law, court order, or regulatory direction. We will notify you of such disclosures where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of the assets of 367bet, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy terms that will apply to your data following the transaction.

367bet uses cookies and similar tracking technologies to operate the platform, remember your preferences, and understand how players interact with our services. The following categories of cookies are used on the 367bet platform:

367bet does not use advertising cookies, retargeting pixels, or any tracking technology that follows your browsing behaviour across external websites. Our analytics data is anonymised and aggregated before being used for any internal reporting purpose.

You can control cookie settings through your web browser at any time. Please note that disabling strictly necessary cookies will prevent you from logging into your 367bet account and using core platform features. Instructions for managing cookies in common browsers are available in your browser's help documentation.

367bet implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following measures:

• Transport Layer Security: All data transmitted between your browser or mobile device and the 367bet platform is encrypted using TLS 1.2 or higher. Our SSL certificate is maintained and regularly renewed.
• Password Hashing: Account passwords are stored as cryptographic hashes using a one-way hashing algorithm. 367bet staff cannot view your password in plain text under any circumstances.
• Access Controls: Access to personal data held in our systems is strictly limited to 367bet staff members who require it to perform their designated job functions. All staff with data access are subject to confidentiality obligations.
• Database Security: Player databases are isolated from public-facing platform infrastructure, protected by firewalls, and subject to regular security audits and penetration testing.
• Incident Response: 367bet maintains a documented data breach response procedure. In the event of a confirmed data breach that is likely to result in a risk to your rights, we will notify affected users as promptly as possible via the registered email address on their account.
• Two-Factor Authentication: 367bet offers optional two-factor authentication (2FA) to provide an additional layer of protection for your account. We strongly encourage all players to enable 2FA via their account security settings.

While we take every reasonable precaution to protect your data, no internet-based system can be guaranteed to be completely secure. You play an important role in keeping your account safe by choosing a strong, unique password, enabling 2FA, and never sharing your login credentials with anyone.

367bet retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply to the main categories of personal data we hold:

• Account Data: Retained for the lifetime of your active account plus a period of five (5) years following account closure. This period is required to meet our AML record-keeping obligations and to resolve any post-closure disputes.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with applicable financial record-keeping requirements.
• KYC Verification Documents: Retained for five (5) years following the completion of the KYC process or the closure of the account, whichever is later.
• Customer Support Communications: Retained for three (3) years from the date of the last communication in each support case.
• Analytics Data: Anonymised and aggregated analytics data may be retained indefinitely as it contains no personal identifiers. Raw technical log data is deleted after ninety (90) days.
• Marketing Consent Records: Retained for five (5) years from the date consent was given or withdrawn, to provide evidence of the consent decision.

When the applicable retention period expires, personal data is securely deleted or irreversibly anonymised in accordance with our internal data destruction procedures. Data that is required to be retained by a specific legal obligation will be kept for the full period required by that obligation, even if this exceeds the standard retention periods set out above.

As a player on the 367bet platform, you hold a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact our support team at [email protected] with a clear description of your request. We will respond within thirty (30) days of receiving your request.

• Right of Access: You have the right to request a copy of all personal data that 367bet holds about you, together with information about how that data is used and with whom it has been shared.
• Right to Rectification: You have the right to request that 367bet correct any inaccurate or incomplete personal data held about you. Some corrections may require supporting documentation for verification purposes.
• Right to Erasure: You have the right to request that 367bet delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other lawful basis applies), or where the data has been processed unlawfully. This right is subject to our legal retention obligations, which may require us to retain certain data even following an erasure request.
• Right to Restriction: You have the right to request that 367bet restrict the processing of your personal data in certain circumstances, such as while a data accuracy dispute is being resolved.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests where you believe your rights and freedoms override those interests.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where 367bet processes your data on the basis of consent (for example, for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

367bet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the features and services offered on the platform. When we make material changes to this Policy, we will take the following steps to inform you:

• Update the "Effective Date" at the top of this page to reflect the date of the most recent revision.
• Display a prominent notice on the 367bet platform informing logged-in users of the update at their next session.
• Where the changes are significant, send a notification to the email address registered on your account.

Your continued use of the 367bet platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically so that you remain informed about how 367bet handles your personal data.

If you have any questions, concerns, or complaints about this Privacy Policy or the way 367bet handles your personal data, please contact our Data Support team in the first instance at [email protected]. Our support team is available 24 hours a day, 7 days a week in English, and will aim to address your concern as promptly as possible.