bb365 Privacy Policy

bb365 collects personal data that is necessary to provide a safe, fair, and fully functional online casino and sports betting service to players based in Bangladesh. We collect data in three broad categories: information you provide directly, information generated automatically through your use of the platform, and information obtained from trusted third parties for verification purposes.

The following table summarises the categories of personal data bb365 collects, the primary source of each category, and the purpose for which it is collected:

bb365 processes personal data only where we have a lawful basis for doing so. The primary lawful bases we rely on are: (a) performance of a contract — processing your data is necessary to provide the betting and gaming services you have signed up for; (b) legal obligation — certain data processing is required by anti-money laundering laws, age verification regulations, and financial reporting obligations; (c) legitimate interests — we process technical and behavioural data to maintain platform security, detect fraud, and improve the quality of our services; and (d) consent — we rely on your explicit consent for non-essential marketing communications, which you may withdraw at any time.

Specifically, bb365 uses your personal data for the following purposes:

• Account management: Creating, maintaining, verifying, and securing your bb365 player account, including processing login attempts, OTP authentication, and password resets.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard in Bangladesh Taka (BDT), and maintaining a complete transaction record for your account.
• Identity and age verification: Confirming that you are at least 18 years of age and that the identity provided at registration is genuine, using KYC document checks and third-party verification services where required.
• Fraud prevention and AML: Monitoring account activity for patterns consistent with fraud, money laundering, or other financial crime, and reporting suspicious activity to relevant authorities as required by law.
• Responsible gaming: Analysing wagering patterns and session data to identify signs of problem gambling, triggering self-exclusion tools, enforcing deposit limits, and communicating responsible gaming resources to players who may need them.
• Customer support: Investigating and resolving account queries, payment disputes, game complaints, and technical issues raised through our support channels.
• Platform improvement: Analysing aggregated, anonymised behavioural data to improve game selection, page design, betting market availability, and overall platform performance.
• Marketing communications (with consent only): Sending promotional emails, SMS notifications, and app push alerts about bb365 bonuses, new games, BPL season offers, Eid promotions, and other relevant campaigns — only where you have opted in and only until you withdraw consent.

bb365 does not sell your personal data to any third party. We share player data only in limited, controlled circumstances where sharing is necessary to deliver our services, meet legal obligations, or protect the safety and integrity of the platform. All third parties who receive bb365 player data are contractually bound to process that data only for the specified purpose and to maintain security standards consistent with our own.

The categories of third parties with whom bb365 may share your data, and the reasons for sharing, are as follows:

• Payment service providers: bKash, Nagad, Rocket, Upay, and card payment processors require certain transaction data (mobile wallet number, transaction amount, timestamp) to process your deposits and withdrawals. bb365 shares only the minimum data required for each transaction.
• Identity verification services: Third-party KYC and AML screening providers receive identity document data for the purpose of verifying your age, identity, and screening against financial crime watchlists. These providers operate under strict data processing agreements.
• Game content providers: Game studios such as Pragmatic Play, Evolution Gaming, Ezugi, Spribe, NetEnt, and Microgaming may receive a player session token and anonymised player ID to deliver game sessions. These studios do not receive your full personal profile.
• Technology and hosting providers: Cloud hosting and infrastructure providers who store and process bb365 platform data are located in jurisdictions with adequate data protection standards. All hosting providers operate under strict data processing agreements.
• Law enforcement and regulatory bodies: bb365 will disclose personal data to law enforcement agencies, financial intelligence units, or regulatory authorities in Bangladesh or internationally when legally compelled to do so, or where disclosure is necessary to prevent or detect serious crime.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all assets of bb365, player data may be transferred to the acquiring entity as part of the transaction. Players will be notified in advance of any such transfer and their data will continue to be processed under the terms of this Privacy Policy.

bb365 uses cookies and similar tracking technologies (including local storage, session storage, and pixel tags) to enable essential platform functionality, maintain your login session, remember your preferences, and gather anonymised analytics data that helps us improve the platform over time. This section explains the types of cookies we use, their purpose, and how you can manage your cookie preferences.

You can manage or disable non-essential cookies at any time through your browser settings. Most modern browsers allow you to block or delete cookies via the privacy or security settings menu. Please be aware that disabling essential cookies will prevent the bb365 platform from functioning correctly and you will be unable to log in or place bets.

bb365 implements a multi-layered security framework to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures are reviewed and updated regularly to address emerging threats and industry best practices.

Key technical and organisational security measures in place at bb365 include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the bb365 platform, ensuring that login credentials, payment details, and session data cannot be intercepted in transit.
• Password hashing using industry-standard one-way cryptographic algorithms. bb365 never stores your password in plain text. Even internal team members cannot read your password.
• Two-factor authentication (2FA) via OTP delivered to your registered Bangladesh mobile number, available for all player accounts as an additional layer of login security.
• Access controls that restrict internal access to personal data on a strict need-to-know basis. Staff members are granted access only to the data categories required to perform their specific role.
• Regular security audits and penetration testing of the bb365 platform infrastructure, conducted by qualified independent security professionals on a scheduled basis.
• Intrusion detection systems that monitor platform traffic in real time for anomalous patterns, brute force login attempts, and other indicators of unauthorised access.
• Data breach response plan: In the event of a data breach that poses a risk to players, bb365 will notify affected individuals without undue delay and take immediate steps to contain the breach and prevent further exposure.

As a bb365 player, you have meaningful rights over your personal data. bb365 is committed to honouring these rights promptly and without unnecessary friction. All rights requests should be submitted to [email protected] with the subject line "Data Rights Request" and your registered account email address included in the message body for identity verification purposes.

• Right of Access: You may request a copy of all personal data that bb365 holds about you. We will provide this in a structured, machine-readable format within 30 days of a verified request.
• Right to Rectification: If any personal data bb365 holds about you is inaccurate or incomplete, you have the right to request correction. Basic account details (email, mobile number) can be updated directly in your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data. We will fulfil erasure requests within 30 days, subject to exceptions where retention is required by law (for example, financial transaction records required for AML compliance must be retained for a minimum period).
• Right to Restrict Processing: You may request that bb365 restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to Data Portability: You may request a copy of personal data you have provided to bb365 in a structured, commonly used format, allowing you to transfer it to another service provider.
• Right to Object: You have the right to object to bb365's processing of your data where processing is based on legitimate interests. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where bb365 processes your data based on consent (primarily for marketing communications), you may withdraw that consent at any time through your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.

bb365 retains personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable legal obligations. The following retention periods apply to the main categories of personal data we hold:

Once the applicable retention period has expired, bb365 will securely delete or anonymise the relevant personal data so that it can no longer be associated with an identifiable individual. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have concerns about the way bb365 handles your personal data, please contact our privacy team using the details below. All privacy enquiries are handled confidentially and with the same priority as financial account queries.

Privacy Contact:
[email protected]
Subject line: Privacy Enquiry — [Your Registered Email]

bb365 aims to respond to all privacy-related enquiries within five business days. For formal data rights requests (access, erasure, portability, rectification), please allow up to 30 calendar days for a full response, as set out in the Your Rights section above.

If you are not satisfied with bb365's response to a privacy complaint, you have the right to escalate the matter. bb365 takes all escalated complaints seriously and will engage in good faith to reach a fair resolution. We are committed to transparency in how we handle personal data and will cooperate fully with any independent review process initiated by a player or relevant authority.