366bet Privacy Policy

1.1 This Privacy Policy ("Policy") is published by 366bet ("we", "us", "our", "the Platform"), the operator of the online sportsbook and casino platform accessible at https://366bet.bio. This Policy applies to all players, visitors, and registered account holders ("you", "your") who access or use the 366bet platform from Bangladesh or any other location.

1.2 At 366bet, we take the privacy of our players seriously. This Policy is intended to give you a clear and honest account of how we handle personal information — what we collect, why we collect it, how long we keep it, who we share it with, and what controls you have over it.

1.3 By registering an account on 366bet, making a deposit, placing a bet, or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your personal data as described herein. This Policy forms part of the 366bet Terms & Conditions.

1.4 This Policy is written in English. Where any translation is made available for convenience, the English-language version shall prevail in the event of any inconsistency.

2.1 366bet collects the following categories of personal data during the course of your relationship with the platform:

2.2 We collect only the minimum data necessary for the purposes described in this Policy. We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is contained in standard identity documents submitted for KYC purposes.

3.1 Directly from you — when you register an account, complete identity verification, make a deposit or withdrawal, contact support, or update your account profile. This is the primary source of identity, contact, and financial data.

3.2 Automatically during platform use — when you browse the 366bet website or use any of its features, our servers automatically record technical data including your IP address, browser fingerprint, device identifiers, and session activity. This data is collected via server logs and first-party analytics tools.

3.3 From payment providers — when you initiate a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, we receive transaction confirmation data from the relevant payment provider. We do not receive or store your full payment credentials — only the information required to reconcile transactions and apply funds to your account.

3.4 From cookies and similar tracking technologies — please refer to Section 7 of this Policy for a full explanation of how 366bet uses cookies.

3.5 From third-party verification services — where we use a third-party identity verification provider to assist with KYC checks, we may receive a verification outcome and risk score from that provider. We do not receive raw data from government databases.

4.1 366bet uses your personal data for the following purposes:

• Account administration: Creating and maintaining your player account, verifying your identity, authenticating your logins, and enabling you to access all platform features.
• Transaction processing: Processing deposits, crediting winnings, executing withdrawal requests, and maintaining an accurate record of your financial activity on the platform.
• Identity verification (KYC): Confirming that you are who you say you are, that you are at least 18 years of age, and that your payment methods are legitimately owned by you. KYC is a legal and operational requirement for operating a fair and secure betting platform.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, bonus abuse, multi-accounting, and any other conduct that violates the 366bet Terms & Conditions or applicable law.
• Responsible gaming: Monitoring betting patterns to identify signs of problem gambling, applying account restrictions requested by the player, and fulfilling obligations related to self-exclusion requests.
• Customer support: Responding to your enquiries, resolving disputes, and maintaining records of support interactions for quality assurance and training purposes.
• Platform improvement: Analysing aggregate, anonymised usage data to understand how players interact with the platform, improve navigation, fix technical issues, and develop new features.
• Marketing communications: Sending promotional emails, SMS notifications, and bonus offers to players who have opted in to receive marketing communications. You may withdraw consent at any time via your account settings or by contacting support.
• Legal compliance: Retaining records and disclosing data as required by applicable laws, regulatory requests, or court orders.

4.2 We do not use your personal data for automated decision-making that produces legal or similarly significant effects on you without human review. Where automated tools are used to flag accounts for review (for example, fraud detection or responsible gaming monitoring), all flagged cases are subsequently reviewed by a member of the 366bet compliance or support team.

5.1 366bet processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations to you under the 366bet Terms & Conditions — including account management, transaction processing, and KYC verification — is necessary for the performance of the contract between us.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics is carried out on the basis of our legitimate interests in operating a safe, fair, and commercially viable betting platform. We have assessed these interests and concluded that they do not override your rights and freedoms.
• Legal obligation: Processing required to comply with applicable laws, regulatory requirements, or enforceable government requests is carried out on the basis of legal obligation.
• Consent: Processing of your data for marketing communications is carried out on the basis of your explicit consent. You may withdraw that consent at any time without affecting the lawfulness of prior processing.

6.1 366bet may share your personal data with the following categories of third parties, strictly for the purposes described in this Policy:

• Payment providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard — to process your deposits and withdrawals. These providers receive only the data necessary to complete your transaction.
• Identity verification providers: Third-party KYC and anti-fraud service providers who assist us in verifying player identity and detecting fraudulent activity. These providers are contractually bound to process your data only for the purposes we specify.
• Game providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and player identifier when you launch their games. They do not receive your full personal profile.
• IT and hosting providers: Technology partners who provide the servers, databases, content delivery networks, and security infrastructure that the 366bet platform runs on. These providers act as data processors under our instruction.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory request, we may disclose personal data to law enforcement agencies, government bodies, or other legally authorised parties. We will notify you of such disclosure where legally permitted to do so.

6.2 All third-party service providers with whom 366bet shares personal data are required to maintain appropriate technical and organisational security measures and to process your data only for the purposes instructed by 366bet.

7.1 366bet uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device by a website you visit. Cookies do not contain executable code and cannot access other files on your device.

7.2 The following categories of cookies are used on the 366bet platform:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: Used to remember your preferences such as preferred language, display settings, and last-visited game category. These cookies improve your experience but are not essential to platform operation.
• Analytics cookies: Used to collect anonymised, aggregate data about how visitors navigate the 366bet platform — which pages are visited most, where users drop off, and how long sessions last. This data informs platform improvement decisions.
• Security cookies: Used to detect and prevent fraudulent logins, bot activity, and other security threats. These cookies may record device fingerprints and behavioural patterns during your session.

7.3 You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling certain cookies may affect the functionality of the 366bet platform, including your ability to remain logged in or access certain game features.

7.4 366bet does not use third-party advertising cookies or allow advertising networks to place tracking pixels on the platform.

8.1 366bet retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, as described in this Policy, and for as long as required to comply with applicable legal and regulatory obligations.

8.2 The following general retention periods apply:

• Active account data (identity, contact, financial, and usage data): Retained for the full duration of your account relationship with 366bet and for a period of at least five (5) years after account closure, in accordance with anti-money laundering and financial record-keeping requirements.
• KYC documentation (NID scans, passport copies, utility bills): Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later.
• Support communications (live chat logs, email correspondence): Retained for three (3) years from the date of the last interaction, for dispute resolution and quality assurance purposes.
• Technical and session data (IP logs, device data, session records): Retained for twelve (12) months from the date of collection, unless longer retention is required for an ongoing security investigation.
• Marketing consent records: Retained for the duration of your consent and for three (3) years after you withdraw consent, as evidence that your consent was properly obtained.

8.3 When data is no longer required for any of the purposes described in this Policy and no legal obligation requires its continued retention, 366bet will securely delete or anonymise that data.

9.1 366bet implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the 366bet platform is encrypted using Transport Layer Security (TLS). The platform operates exclusively over HTTPS.
• Access controls: Access to personal data within 366bet's systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of access required to perform their role.
• Data storage security: Personal data is stored on secured servers with firewall protection, intrusion detection systems, and regular security patching.
• Password hashing: Account passwords are never stored in plain text. They are processed using a one-way cryptographic hashing algorithm before storage.
• Regular security reviews: 366bet conducts regular internal reviews of its data handling processes and security controls to identify and address potential vulnerabilities.

9.2 While 366bet applies robust security measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, 366bet will notify affected players without undue delay and will take all reasonable steps to contain the breach and minimise its impact.

9.3 You are responsible for keeping your account credentials confidential. 366bet will never ask you for your password via live chat, email, or any other channel. If you receive any such request, treat it as fraudulent and contact support immediately.

10.1 As a 366bet player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us via live chat or at [email protected]. We will respond to all rights requests within 30 days of receipt.