Privacy Policy — bd378

bd378 is Bangladesh's premier online casino and sports betting platform, offering cricket betting, live casino games, slots, and instant payments via bKash, Nagad, and Rocket. The protection of our players' personal data is a responsibility we take seriously across every level of our organisation.

This Policy applies to all personal data collected through the bd378 website (bd378.io), our mobile-optimised site, any associated applications, and all communications between bd378 and its registered players. It covers data collected during the account registration process, during active gameplay and betting, during financial transactions, and through customer support interactions.

By using the bd378 platform, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with any aspect of this Policy, you should not use the bd378 platform. For questions about this Policy, please contact our support team at [email protected].

bd378 collects personal data through several channels, including information you provide directly when registering, information generated through your use of the platform, and information received from trusted third-party verification and payment partners. The categories of personal data we collect are set out below.

2.1 Information You Provide Directly

• Registration Data: Full legal name, date of birth, email address, mobile phone number, and residential address (including city and district, e.g., Dhaka, Chittagong, Sylhet, Khulna).
• Identity Verification (KYC) Documents: Copies of government-issued photo ID (National ID card, passport, or driving licence), proof of address, and payment method ownership documentation.
• Financial Data: Payment method details (bKash number, Nagad number, Rocket number, Upay number, bank account details, card details where applicable). Note: bd378 does not store full card numbers — payment card data is handled by our PCI-DSS-compliant payment processors.
• Support Communications: The content of messages you send to our support team via live chat or email, including any attachments you provide.
• Responsible Gaming Data: Any self-disclosed information relating to deposit limits, cooling-off periods, or self-exclusion requests you submit through the responsible gaming tools in your account dashboard.

2.2 Information Generated Through Platform Use

• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage Data: Pages visited on bd378.io, time spent on each page, games launched, betting history, deposit and withdrawal records, and session timestamps.
• Location Data: Approximate geographic location derived from your IP address. bd378 does not collect precise GPS-level location data.
• Cookie Data: Information collected through cookies and similar tracking technologies, as described in Section 5 of this Policy.

bd378 uses the personal data it collects for the following specific, legitimate purposes. We do not use your data for any purpose that is incompatible with these stated uses without first obtaining your explicit consent.

bd378 processes your personal data on the following legal bases:

• Contractual Necessity: Processing your registration data, KYC documents, and financial data is necessary for bd378 to fulfil its contractual obligations to you — namely, opening and maintaining your account and processing your deposits, bets, and withdrawals.
• Legitimate Interests: bd378 processes technical and usage data on the basis of its legitimate interests in maintaining platform security, detecting fraud, preventing bonus abuse, improving user experience, and ensuring responsible gaming compliance. These interests are balanced against your privacy rights and do not override them.
• Legal Obligation: Certain processing — such as retaining financial transaction records and conducting identity verification — is required by applicable anti-money-laundering and responsible gaming obligations.
• Consent: Where bd378 processes your data for marketing communications (promotional emails, SMS offers), this is done on the basis of your explicit consent provided during or after registration. You may withdraw this consent at any time.

bd378 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the platform. The following table describes the categories of cookies we use.

Essential cookies are necessary for the bd378 platform to function and cannot be disabled without significantly impairing your ability to use the service. You may manage non-essential cookies through your browser settings. Note that disabling analytics or functional cookies may affect your experience on the platform.

bd378 shares personal data with third parties only in the specific, limited circumstances described below. We do not sell, rent, or trade your personal data to unrelated parties for their own commercial purposes.

• Payment Processors: Financial data is shared with our payment processing partners — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and card payment processors — solely for the purpose of executing your deposit and withdrawal transactions. These partners are independently responsible for the security of data within their own systems.
• Identity Verification Partners: Where bd378 uses a third-party KYC provider to assist with document verification, your identity documents and personal details will be shared with that provider for the sole purpose of completing the verification process.
• Game Content Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and minimal gameplay data necessary to operate their game software. They do not receive your full personal profile or financial data.
• Anti-Fraud and Security Services: In order to detect and prevent fraudulent activity, money laundering, and bonus abuse, bd378 may share limited technical and transactional data with specialised fraud prevention service providers.
• Legal and Regulatory Authorities: bd378 will disclose personal data to law enforcement, regulatory bodies, or other governmental authorities when required to do so by applicable law, court order, or other legal process. bd378 will, where legally permitted, notify affected players of such disclosures.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of bd378's business assets, your personal data may be transferred as part of that transaction. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

All third parties with whom bd378 shares personal data are required to handle that data in accordance with applicable data protection standards and are not permitted to use your data for any purpose beyond the scope for which it was shared.

bd378 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to maintain your active player account, and to comply with applicable legal and regulatory obligations. The following retention periods apply:

Following the expiry of the applicable retention period, and where there is no overriding legal requirement to retain data further, bd378 will securely delete or irreversibly anonymise your personal data. Anonymised data (from which you cannot be identified) may be retained indefinitely for statistical and platform improvement purposes.

bd378 implements a multi-layered approach to data security, combining technical, organisational, and procedural safeguards to protect your personal data against unauthorised access, disclosure, alteration, or destruction.

• TLS/SSL Encryption: All data in transit between your device and bd378 servers is encrypted using TLS 1.2 or higher. The padlock icon in your browser confirms that your connection to bd378.io is encrypted at all times.
• Data Encryption at Rest: Sensitive personal and financial data stored on bd378 servers is encrypted at rest using AES-256 encryption.
• Access Controls: Internal access to personal data is governed by role-based access controls. Only staff members with a legitimate operational need to access specific categories of data are permitted to do so. All staff access is logged and audited.
• Password Security: Account passwords are stored in hashed form using modern cryptographic hashing algorithms. bd378 never stores plaintext passwords.
• Fraud Detection Systems: Automated fraud detection and anomaly detection systems monitor account activity in real time to identify and flag potentially suspicious behaviour, including unauthorised login attempts.
• Staff Training: All bd378 staff who handle personal data receive regular data protection and security training. Confidentiality obligations are embedded in all employment and contractor agreements.
• Incident Response: bd378 maintains a data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, affected players will be notified promptly and provided with guidance on protective steps they can take.

As a bd378 player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact the bd378 support team via live chat or email at [email protected]. bd378 will respond to all valid requests within thirty (30) days.

• Right of Access: You have the right to request a copy of the personal data that bd378 holds about you. This is sometimes called a Subject Access Request (SAR). bd378 will provide this information in a clear, structured format within 30 days of receiving your request.
• Right to Rectification: If you believe that any personal data bd378 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update many account details directly through your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request that bd378 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that bd378 may be unable to comply fully with deletion requests where retention is required by law (e.g., financial transaction records).
• Right to Restrict Processing: You may request that bd378 temporarily restrict the processing of your personal data — for example, while a dispute about its accuracy is resolved — without requiring its deletion.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on bd378's legitimate interests, although bd378 may continue processing if it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where bd378 processes your data on the basis of your consent (e.g., for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

bd378 will not charge a fee for handling your privacy rights requests unless a request is manifestly unfounded or excessive. In such cases, bd378 reserves the right to charge a reasonable administrative fee or to refuse to act on the request, with an explanation provided.

The bd378 platform is strictly intended for adults aged 21 and above. bd378 does not knowingly collect, solicit, or process personal data from any individual under the age of 21. Age verification is a mandatory part of the account registration and KYC process, and bd378 reserves the right to suspend or permanently close any account where it suspects the account holder may be under the minimum age requirement.

If you are a parent or guardian and you believe that a minor has registered an account with bd378 or has provided personal data to bd378 without your knowledge, please contact our support team immediately at [email protected]. bd378 will promptly investigate the matter and, where confirmed, will delete any data relating to the minor and close the associated account without delay.

With your consent, bd378 may send you promotional communications about new games, seasonal bonuses (such as Eid or Pohela Boishakh offers), cricket betting promotions tied to BPL or T20 World Cup fixtures, and other platform updates via email or SMS. These communications are entirely optional and you are under no obligation to receive them.

• Opt-In: Marketing communications are sent only where you have given explicit consent during registration or at a later point through your account notification preferences.
• Opt-Out: You may withdraw your consent to receive marketing communications at any time by updating your notification preferences in your account dashboard, or by contacting our support team and requesting to be removed from all marketing lists. Opt-out requests will be processed within five (5) business days.
• Transactional Messages: Opting out of marketing communications will not affect transactional and account-related messages — such as deposit confirmations, withdrawal notifications, security alerts, and KYC request emails — which are necessary for the operation of your account and will continue to be sent regardless of your marketing preferences.
• No Third-Party Marketing: bd378 will never share your contact details with third parties for the purpose of those third parties sending you their own marketing communications.

bd378 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, the services we offer, or applicable legal and regulatory requirements. When we make material changes to this Policy, we will take appropriate steps to notify affected players.

• Notification of Changes: Material changes to this Policy will be communicated to registered players via email notification to the address associated with your account, or via a prominent notice displayed on bd378.io when you next log in.
• Effective Date: The updated Policy will become effective on the date stated at the top of the document. Continued use of the bd378 platform after the effective date of a revised Policy constitutes your acceptance of the updated terms.
• Version History: The current version of this Policy is dated January 2026. If you would like to review a previous version of this Policy, please contact our support team.
• Review Recommendation: We recommend that you review this Privacy Policy periodically to remain informed about how bd378 protects your data. The "Last Updated" date at the top of this page will always reflect the date on which the most recent changes were made.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which bd378 handles your personal data, please contact our support team using the details below. We are committed to resolving all privacy-related enquiries promptly and transparently.

If you believe that bd378 has not handled your personal data in accordance with this Privacy Policy or applicable data protection standards, you have the right to raise a complaint. bd378 takes all such complaints seriously and will investigate them thoroughly. Please contact our support team in the first instance so that we have the opportunity to address your concern directly before you escalate the matter further.