b345 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

b345 ("b345", "we", "us", "our") is the operator of the online casino and cricket betting platform accessible at https://b345.io (the "Platform"). b345 acts as the data controller in respect of all personal data collected and processed in connection with the operation of the Platform and the provision of gaming services to players located in Bangladesh.

This Privacy Policy applies to all individuals who interact with the Platform, including registered account holders, visitors who browse the Platform without registering, and individuals who contact us via our support channels. By accessing the Platform or registering an account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, processing, and storage of your personal data as described herein.

This Privacy Policy should be read alongside our Terms & Conditions, which are available at https://b345.io/terms-conditions, and our Responsible Gaming Policy, available at https://b345.io/responsible-gaming. Together these documents form the complete agreement governing your relationship with b345.

b345 collects two broad categories of personal data: information that you provide to us directly, and information that we collect automatically when you use the Platform. The specific data points we collect are described in the table below.

We do not collect sensitive special-category personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, or data concerning health, except where a player voluntarily discloses health-related information in the context of a responsible gaming request (for example, when requesting self-exclusion due to a gambling disorder). Any such information is handled with the highest level of confidentiality and is used solely to action the responsible gaming request.

b345 collects personal data through the following channels and mechanisms:

• Direct submission: When you complete the registration form, update your account profile, submit a payment request, contact customer support, or respond to a promotional survey, you provide data to us directly.
• Automated technologies: When you browse the Platform, our servers automatically log technical data including your IP address, browser fingerprint, session duration, and pages visited. This is standard practice for all web-based platforms and is essential for security monitoring and fraud prevention.
• Payment processors: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank, the relevant payment processor shares transactional reference data with b345 to confirm the status of your transaction. b345 does not receive or store your full mobile banking PIN or online banking password at any point in this process.
• Identity verification partners: Where b345 uses a third-party KYC (Know Your Customer) service to verify your identity document, that partner may share verification results and extracted identity data points with b345. All KYC partners engaged by b345 are contractually required to apply data protection standards equivalent to those described in this policy.
• Cookies and similar technologies: Please see Section 7 of this Privacy Policy for a full description of how b345 uses cookies and tracking technologies on the Platform.

b345 uses the personal data we collect for the following specific purposes. We process your data only where we have a valid legal basis for doing so, as described in Section 5.

• Account management: To create, maintain, and administer your b345 account, including verifying your identity and eligibility in accordance with our Terms & Conditions.
• Service delivery: To provide you with access to casino games, live dealer tables, slots, crash games, sports betting, and cricket betting markets available on the Platform.
• Payment processing: To process deposits and withdrawals in Bangladeshi Taka (BDT) via your chosen payment method, to reconcile transactions, and to maintain accurate financial records.
• Customer support: To respond to your queries, investigate complaints, and provide assistance through our 24/7 English-language support team operating on Bangladesh Standard Time.
• Fraud prevention and security: To detect, prevent, and investigate fraudulent activity, money laundering, account sharing, and other prohibited conduct as defined in our Terms & Conditions.
• Legal and regulatory compliance: To fulfil our obligations under applicable law, including anti-money-laundering (AML) requirements, age verification obligations, and responses to lawful requests from competent authorities.
• Responsible gaming: To monitor gaming activity for indicators of problem gambling, to administer deposit limits, cooling-off periods, and self-exclusion requests, and to contact you where we have genuine concern about your wellbeing.
• Marketing communications: Where you have given explicit consent, to send you promotional offers, bonus notifications, and news about new games and features on the Platform. You may withdraw your marketing consent at any time by updating your account preferences or contacting [email protected].
• Platform improvement: To analyse aggregated, anonymised usage data to improve the performance, design, and content of the Platform. This analysis does not identify you as an individual.

b345 relies on the following legal bases to process your personal data, depending on the specific processing activity involved:

• Contract performance: The majority of data processing carried out by b345 — including account registration, payment processing, game delivery, and customer support — is necessary for the performance of the contract between you and b345 as set out in the Terms & Conditions. Without this processing, b345 could not provide you with access to the Platform or its services.
• Legal obligation: Certain processing activities, including identity verification, transaction record-keeping, and responses to law enforcement requests, are required by applicable law and are carried out on the legal basis of compliance with a legal obligation.
• Legitimate interests: b345 processes technical and gaming data on the basis of legitimate interests, specifically the prevention of fraud, the maintenance of Platform security, and the improvement of our services. In each case, we have assessed that our legitimate interests are not overridden by your data protection rights.
• Consent: Where b345 processes your data for marketing communications or for the placement of non-essential cookies, we do so on the basis of your explicit consent, which you can withdraw at any time as described in Sections 4 and 7 of this policy.

b345 does not sell your personal data to third parties. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment service providers: We share transactional data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank solely for the purpose of processing your deposit and withdrawal requests.
• Identity verification partners: We may share identity document data with third-party KYC providers for the purpose of verifying your age and identity. All such providers are contractually bound to handle your data in accordance with standards equivalent to this policy.
• Game providers: To deliver casino games, live dealer tables, and slots to you, b345 transmits certain session data to game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. This data is limited to what is technically necessary to operate the game round and attribute winnings correctly.
• Legal and regulatory authorities: b345 may disclose personal data to competent authorities in Bangladesh or other jurisdictions where required to do so by law, court order, or lawful regulatory request. Where permitted by law, b345 will notify you of such a disclosure.
• Business transfers: In the event that b345's business is sold, transferred, or merged, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any change to the applicable privacy policy before it takes effect.

b345 uses cookies and similar tracking technologies on the Platform to deliver a functional, secure, and personalised experience for players across Bangladesh. A cookie is a small text file placed on your device by the Platform when you visit. The following categories of cookies are in use on the b345 Platform:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They manage your login session, maintain your account authentication state, and enable secure payment flows. These cookies cannot be disabled without affecting Platform functionality.
• Performance and analytics cookies: These cookies collect anonymised data about how visitors interact with the Platform, including pages visited, time spent, and error events encountered. This data is used solely to improve Platform performance and user experience.
• Functional cookies: These cookies remember your preferences, such as your preferred language display, last-used payment method, and responsible gaming settings, so that you do not need to re-enter them on each visit.
• Marketing cookies: Where you have given consent, these cookies allow b345 to deliver personalised promotional content based on your gaming history and preferences on the Platform. They do not track your activity on third-party websites.

You can manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your account and using Platform features. Most browsers allow you to block or delete cookies through the settings or preferences menu. For guidance specific to your browser, refer to its official help documentation.

b345 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law. The following retention periods apply as a general guide:

• Account data: Retained for the lifetime of your active account and for a period of five years following account closure, in accordance with standard financial record-keeping requirements.
• Transaction and payment records: Retained for a minimum of five years from the date of each transaction to satisfy anti-money-laundering and financial regulatory obligations.
• Gaming history: Retained for three years from the date of each game session to support dispute resolution, bonus auditing, and responsible gaming monitoring.
• Customer support communications: Retained for two years from the date of the most recent interaction, to support follow-up queries and complaint investigations.
• Marketing consent records: Retained for the duration of your marketing consent plus three years from the date of withdrawal, to provide an audit trail of consent decisions.
• Technical and log data: Retained for twelve months from the date of collection for security monitoring and fraud investigation purposes.

Once the applicable retention period has expired and there is no remaining legal basis for continued storage, b345 will securely delete or anonymise the relevant personal data. Anonymised data that can no longer be linked to any individual may be retained indefinitely for aggregated statistical and analytical purposes.

As a player using the b345 platform from Bangladesh, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within five business days and aim to provide a substantive response within thirty calendar days.

• Right of access: You have the right to request a copy of the personal data that b345 holds about you, together with information about how that data is being processed.
• Right to rectification: You have the right to request that b345 correct any inaccurate or incomplete personal data held about you. You may also update certain profile information directly through your account dashboard.
• Right to erasure: In certain circumstances, you have the right to request that b345 delete your personal data. This right does not apply where b345 is required by law to retain the data, for example for anti-money-laundering compliance purposes.
• Right to restriction of processing: You have the right to request that b345 restrict the processing of your personal data in certain circumstances, for example while a correction request is being assessed.
• Right to data portability: Where processing is carried out on the basis of your consent or the performance of a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to b345 processing your personal data on the basis of legitimate interests. b345 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications or non-essential cookies), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.

The b345 Platform is strictly intended for adults aged 21 years and above. b345 does not knowingly collect personal data from any person under the age of 21. Our registration process includes an age declaration step, and b345 actively conducts identity verification to confirm that all account holders meet the minimum age requirement.

If b345 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to close the associated account, void any transactions, return any deposited funds to the original payment source, and securely delete all personal data associated with that individual. If you believe that a person under the age of 21 has registered on the b345 Platform, please notify us immediately at [email protected].

b345 takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure. Key security measures in place include the following:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the b345 Platform is encrypted using industry-standard SSL/TLS protocols, preventing interception by third parties.
• Secure server infrastructure: Personal data is stored on servers secured with firewall protection, intrusion detection systems, and restricted physical and logical access controls.
• Access controls: Access to personal data within b345 is restricted to authorised personnel who require it to perform their specific job functions. All staff with access to player data receive regular data protection training.
• Password hashing: Account passwords are never stored in plain text. b345 uses cryptographic hashing algorithms to store password credentials so that they cannot be recovered even in the unlikely event of a data breach.
• Regular security audits: b345 conducts periodic security reviews and vulnerability assessments to identify and address potential weaknesses in Platform security.
• Incident response: In the event of a data security incident that poses a risk to your rights and freedoms, b345 has an established incident response procedure. We will notify affected players and relevant authorities within the timeframes required by applicable law.

While b345 applies rigorous security standards, no online platform can guarantee absolute security. You also play an important role in keeping your account secure by choosing a strong password, keeping your credentials confidential, and notifying b345 immediately if you suspect unauthorised access to your account.

b345 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the scope of services offered on the Platform. When material changes are made, b345 will notify registered players by email to their registered address and by prominent notice on the Platform at least fourteen days before the changes take effect.

Minor amendments, such as clarifications of existing provisions or corrections of typographical errors, may be made without prior notice and will take effect immediately upon publication. The date of the most recent revision is always displayed at the top of this document.

Your continued use of the b345 Platform following the effective date of any amendment to this Privacy Policy constitutes your acceptance of the revised terms. The current version of this Privacy Policy is always accessible at https://b345.io/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way b345 handles your personal data, please get in touch with our English-language support team. We are committed to responding to all privacy-related queries promptly and transparently.

This Privacy Policy constitutes the complete and authoritative statement of b345's data protection practices with respect to all personal data collected and processed through the Platform. It supersedes all prior privacy notices and representations made by b345 on the same subject matter. If any provision of this Privacy Policy is found to be invalid or unenforceable, the remaining provisions shall continue in full force and effect.