br365 Privacy Policy — How We Handle Your Data

br365 is committed to protecting the privacy of all players who use our platform. This Privacy Policy sets out in clear terms how br365 collects, stores, processes, and shares personal information in connection with the operation of the br365 online gaming platform, which is accessible to players in Bangladesh. It should be read alongside our Terms & Conditions, which govern the overall relationship between br365 and registered players.

By registering an account on br365 or by continuing to use the platform after this policy has been published or updated, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not consent to any part of this policy, you should not use the br365 platform.

br365 collects personal information through several means: directly from you when you register, make deposits or withdrawals, contact customer support, or interact with the platform; automatically through technical systems as you use the platform; and from third-party service providers involved in identity verification and payment processing. The categories of personal information we collect include:

• Identity information: full name, date of birth, gender, and copies of government-issued identification documents such as National ID Card or passport, collected as part of our KYC process.
• Contact information: email address, phone number, and residential address in Bangladesh (city, division, and postcode where applicable).
• Financial information: the mobile wallet identifiers (bKash, Nagad, Rocket, Upay) or bank account details used for deposits and withdrawals, together with a full record of all transactions conducted on the platform.
• Technical and usage data: IP address, device type and model, operating system version, browser type and version, session timestamps, pages visited, games played, bets placed, and outcomes recorded.
• Communications data: the content of messages exchanged with br365 customer support via live chat, email, or any other support channel, including the date, time, and nature of each interaction.

br365 does not collect information that is not necessary for the operation of the platform or for our compliance obligations. We do not collect information from players about third parties without their explicit consent, and we do not purchase data from data brokers or third-party marketing lists.

br365 uses the personal information we collect strictly for the purposes described below. We do not use your information for any purpose that is incompatible with these stated purposes without first obtaining your consent or being required to do so by law.

• Account registration and management: to create, verify, and administer your br365 player account, including identity verification via our KYC process, password resets, and account security monitoring.
• Payment processing: to process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported Bangladesh payment methods, and to maintain an accurate transaction record for your account.
• Platform operation and improvement: to deliver the gaming services you have requested, to monitor platform performance and identify technical issues, and to improve the quality and reliability of our services based on aggregated, anonymised usage data.
• Legal and regulatory compliance: to meet our obligations under applicable laws and regulations, including anti-money laundering requirements, financial crime prevention, responsible gaming obligations, and cooperation with lawful requests from Bangladeshi authorities.
• Customer support and dispute resolution: to respond to your enquiries, resolve complaints, investigate reported issues, and maintain a record of communications for the purposes of quality assurance and dispute resolution.

br365 does not sell, rent, or trade your personal information to any third party. We share your personal information only in the specific circumstances described below, and only to the extent necessary for the stated purpose.

• Payment service providers: we share transaction data with the mobile wallet operators (bKash, Nagad, Rocket, Upay) and bank partners required to process your deposits and withdrawals. These providers are bound by their own privacy policies and applicable Bangladesh financial regulations.
• Identity verification providers: we share identity documents and personal details with third-party KYC service providers solely for the purpose of verifying player identity and age. These providers are contractually obligated to handle data securely and confidentially.
• Technology and platform providers: we share necessary technical data with third-party game studio providers (such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi) and platform infrastructure providers solely to deliver their respective gaming services on the br365 platform.
• Legal and regulatory authorities: we may disclose personal information to Bangladeshi government authorities, law enforcement agencies, or courts when required to do so by applicable law, or when we believe in good faith that disclosure is necessary to prevent fraud, money laundering, or other criminal activity.

Where br365 engages third-party processors, we ensure through contractual arrangements that those processors apply data security standards that are consistent with this Privacy Policy. We do not permit third-party processors to use your personal data for their own independent purposes.

br365 uses cookies and similar tracking technologies on its platform to enable core functionality, remember your login state, maintain session security, and analyse usage patterns to improve the platform experience. Cookies are small text files stored on your device by your browser. br365 uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device until they expire or are manually deleted).

You may configure your browser to refuse all cookies or to alert you when a cookie is being set. However, disabling cookies may affect the functionality of certain parts of the br365 platform, including the ability to stay logged in across sessions. br365 does not use third-party advertising cookies and does not permit advertising networks to track players on the br365 platform.

br365 retains personal information for as long as is necessary to fulfil the purposes for which it was collected, to provide ongoing gaming services to active players, and to comply with our legal and regulatory obligations. In practice, this means that account data for active players is retained for the duration of the account relationship. Following account closure, br365 retains transaction records, KYC documents, and communications for a minimum of five years in accordance with anti-money laundering and financial recordkeeping obligations applicable in Bangladesh.

When personal information is no longer required for any lawful purpose, br365 will securely delete or anonymise it so that it can no longer be associated with an identifiable individual. Where complete deletion is not technically feasible (for example, due to backup storage systems), br365 will isolate the data from further processing until deletion is possible.

br365 takes the security of your personal data seriously and implements appropriate technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. These measures include SSL/TLS encryption for all data transmitted between your device and the br365 platform, encrypted storage of sensitive account data at rest, role-based access controls limiting internal staff access to personal data on a need-to-know basis, and regular security reviews of platform systems and third-party integrations.

While br365 takes every reasonable precaution to protect your data, no online platform can guarantee absolute security against all possible threats. If you become aware of any unauthorised access to your br365 account or suspect that your account credentials have been compromised, you should contact br365 customer support immediately. br365 will investigate all credible reports of security incidents promptly and will take appropriate remedial action.

As a user of the br365 platform, you have the following rights in relation to your personal information. To exercise any of these rights, please contact br365 customer support with your request. br365 will respond to all valid requests within a reasonable timeframe and will not charge a fee for exercising these rights unless a request is manifestly unfounded or excessive.

• Right of access: you may request a copy of the personal information br365 holds about you, together with information about how it is being used and with whom it has been shared.
• Right to rectification: if any personal information held by br365 is inaccurate or incomplete, you may request that it be corrected or completed. Identity-related corrections may require submission of updated documentation.
• Right to erasure: you may request deletion of your personal information where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to br365's legal retention obligations.
• Right to restriction: you may request that br365 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing pending verification of br365's legitimate grounds.
• Right to object: you may object to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests grounds, in which case br365 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.

To submit a data rights request, contact br365 customer support via the email address listed on the platform. br365 may need to verify your identity before processing your request to ensure we do not disclose or alter data belonging to another person. br365 aims to respond to all data rights requests within 30 days.

br365 strictly prohibits the use of its platform by persons under the age of 21. We do not knowingly collect personal information from individuals under 21 years of age. If br365 becomes aware that personal information has been submitted by a person under the age of 21, that information will be immediately deleted and the associated account will be closed. Parents and guardians who believe that a minor may have accessed or registered on the br365 platform are encouraged to contact br365 customer support immediately so that the matter can be investigated and resolved without delay.

br365 reserves the right to update this Privacy Policy at any time. When we make material changes, we will notify registered players via an in-platform notification or email before the changes take effect. The most current version of this Privacy Policy is always available at br365.ws/privacy-policy. Your continued use of the platform after any update constitutes acceptance of the revised policy. We recommend reviewing this page periodically to stay informed of how br365 handles your personal data.

If you have any questions, concerns, or complaints about this Privacy Policy or about how br365 handles your personal data, please contact our customer support team. All privacy-related enquiries are handled with strict confidentiality, and br365 is committed to resolving any privacy concern raised by a player in a fair, transparent, and timely manner.