Privacy Policy — How 378bd Handles Your Personal Data
At 378bd, protecting your personal information is a core responsibility. This Privacy Policy explains exactly what data we collect, why we collect it, how we use it, and what rights you have as a player based in Bangladesh. We are committed to handling your data with transparency and care.
Data Controller Information
This Privacy Policy applies to all personal data collected and processed by 378bd ("378bd", "we", "us", "our") in connection with your use of the 378bd platform at https://378bd.app, including all associated games, betting services, cashier functions, customer support interactions, and marketing communications.
For the purposes of data protection law, 378bd acts as the data controller in respect of personal data collected through the platform. As data controller, 378bd determines the purposes and means by which your personal data is processed. If you have any questions, concerns, or requests relating to your personal data and how 378bd handles it, you may contact our dedicated data protection team at:
This Privacy Policy was last reviewed and updated in January 2026. 378bd reserves the right to amend this policy at any time to reflect changes in applicable law, platform functionality, or data processing practices. When material changes are made, the "Last updated" date at the top of this document will be revised. We encourage you to review this policy periodically. Your continued use of the 378bd platform following an update to this policy constitutes your acceptance of the revised version.
Information We Collect
378bd collects personal data from you through several means — directly when you register and interact with the platform, automatically through technical systems as you browse and play, and occasionally from trusted third-party sources such as payment processors and KYC verification partners. The categories of personal data we collect are described in detail below.
| Data Category | Examples | How Collected |
|---|---|---|
| Identity Data | Full name, date of birth, NID number, passport number, photograph | Registration form, KYC document upload |
| Contact Data | Email address, mobile phone number, residential address (city, district) | Registration form, account settings |
| Financial Data | bKash/Nagad/Rocket account numbers, bank account details, transaction history, deposit and withdrawal records | Cashier interactions, payment processor feeds |
| Gaming Data | Game history, bet amounts, win/loss records, bonus usage, session duration | Platform gameplay, betting engine logs |
| Technical Data | IP address, device type, operating system, browser type, login timestamps | Automated collection via server logs and cookies |
| Communication Data | Live chat transcripts, support ticket content, email correspondence | Customer support interactions |
| Marketing Preferences | Opt-in/opt-out status for promotional communications, preferred contact channel | Account settings, consent forms |
378bd does not intentionally collect sensitive personal data beyond what is strictly required for identity verification (KYC) and responsible gaming compliance. We do not collect data relating to racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data used for unique identification, health data, or data concerning sexual orientation — except to the extent that such information is incidentally contained in identity documents submitted for KYC purposes, in which case it is processed solely for verification and immediately disregarded for all other purposes.
How We Use Your Data
378bd processes your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was collected. The following table summarises how we use your personal data and the legal basis on which each processing activity relies.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and management | Identity, Contact | Contract performance |
| Age and identity verification (KYC) | Identity | Legal obligation |
| Processing deposits and withdrawals | Financial, Identity | Contract performance |
| Providing gaming and betting services | Gaming, Technical | Contract performance |
| Fraud prevention and AML compliance | Identity, Financial, Technical | Legal obligation / Legitimate interests |
| Responsible gaming monitoring | Gaming, Identity | Legal obligation / Legitimate interests |
| Customer support | Communication, Identity | Contract performance |
| Marketing and promotional communications | Contact, Marketing Preferences | Consent |
| Platform improvement and analytics | Technical, Gaming | Legitimate interests |
Where we rely on consent as the legal basis for processing — such as for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal. You can manage your marketing preferences at any time via your account settings or by contacting our support team.
Cookies and Tracking Technologies
378bd uses cookies and similar tracking technologies on its platform to improve your experience, maintain your session, measure platform performance, and deliver relevant content. This section explains what cookies we use and how you can control them.
A cookie is a small text file that is stored on your device (computer, smartphone, or tablet) when you visit a website. Cookies cannot run programs or deliver viruses — they are used solely to record information about your visit and preferences.
- Strictly necessary cookies: These cookies are essential for the 378bd platform to function correctly. They maintain your login session, remember your account preferences, and ensure that the cashier and game engine operate securely. These cookies cannot be disabled without affecting platform functionality.
- Functional cookies: These cookies remember your preferences — such as language settings, your last visited game category, and notification preferences — so that your experience is personalised each time you visit 378bd. They do not track your activity across other websites.
- Performance and analytics cookies: These cookies collect anonymised information about how players use the 378bd platform — which pages are visited most, how long sessions last, and where errors occur. This data is used exclusively to improve platform performance and is not linked to individual identities.
- Marketing cookies: These cookies are only placed if you have consented to receiving personalised promotions. They allow 378bd to show you relevant bonus offers and promotional content based on your gaming activity and preferences. You can opt out at any time.
378bd does not use cookies to collect data about your activity on other websites, nor does it sell cookie-derived data to third parties. All data collected through cookies is used solely by 378bd for the purposes described above.
Sharing and Disclosure of Data
378bd does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.
- Payment processors: When you make a deposit or withdrawal, your financial data is shared with the relevant payment processor — including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank, or BRAC Bank — solely for the purpose of completing the transaction. Each payment processor is bound by its own data protection obligations.
- KYC verification partners: Your identity documents (NID, passport) are shared with our trusted KYC verification partner for the purpose of age and identity verification. This partner processes your data under a strict data processing agreement and is prohibited from using it for any other purpose.
- Game providers: When you play a game on the 378bd platform, certain technical data (such as session identifiers and game round results) is shared with the relevant game provider (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi) to facilitate gameplay and resolve disputes.
- Fraud prevention and security partners: Technical data and transaction data may be shared with specialised fraud detection and anti-money laundering (AML) service providers to help identify and prevent fraudulent or criminal activity on the platform.
- Legal and regulatory authorities: 378bd may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, or where disclosure is necessary to protect the legal rights of 378bd or any third party.
- Business transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of 378bd's business, your personal data may be transferred to the successor entity as part of the transaction. You will be notified of any such transfer and your rights in relation to your data will be preserved.
Data Retention Periods
378bd retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, and to comply with our legal, regulatory, and contractual obligations. The retention periods set out below are guidelines — in some circumstances, data may need to be retained for longer periods where required by law or where there is a legitimate ongoing need (such as an unresolved dispute or an active regulatory investigation).
| Data Type | Standard Retention Period | Reason |
|---|---|---|
| Account and Identity Data | Duration of account + 5 years after closure | Legal and regulatory compliance, AML obligations |
| Financial Transaction Records | 7 years from transaction date | Financial record-keeping obligations |
| KYC Documents | 5 years after account closure | AML / identity verification compliance |
| Gaming History | Duration of account + 3 years after closure | Dispute resolution, responsible gaming monitoring |
| Customer Support Records | 3 years from last interaction | Dispute resolution, quality assurance |
| Marketing Consent Records | Until consent is withdrawn + 1 year | Proof of consent for regulatory purposes |
| Technical / Log Data | 12 months from collection | Security monitoring, fraud detection |
When your personal data is no longer required, 378bd will securely delete or anonymise it in accordance with our internal data destruction procedures. Anonymised data — from which it is not possible to identify an individual — may be retained indefinitely for analytical and statistical purposes.
Your Privacy Rights
As a 378bd player, you have a number of rights in relation to the personal data that we hold about you. 378bd is committed to facilitating the exercise of these rights promptly and without unnecessary obstruction. To exercise any of the rights listed below, please contact us at support@378bd.app with the subject line "Privacy / Data Request".
- Right to access: You have the right to request a copy of the personal data that 378bd holds about you — commonly known as a Subject Access Request (SAR). We will provide this information within 30 calendar days of receiving a valid request. The first copy is provided free of charge; additional copies may attract a reasonable administrative fee.
- Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may update basic account information directly via your account settings at any time. For corrections to KYC documents or historical records, please contact our support team.
- Right to erasure ("right to be forgotten"): You may request that 378bd delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and there is no other legal basis for processing), or where processing is unlawful. Please note that this right is subject to our legal retention obligations — we cannot delete data that we are required to retain by law.
- Right to restrict processing: In certain circumstances, you may request that we restrict the processing of your personal data — for example, while the accuracy of the data is being contested, or while an objection to processing is being assessed. During a restriction, 378bd may store the data but may not actively process it.
- Right to object: You have the right to object to the processing of your personal data where we rely on legitimate interests as our legal basis. You also have an unconditional right to object to processing for direct marketing purposes at any time.
- Right to data portability: Where processing is based on your consent or on contract performance, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another data controller where technically feasible.
- Right to withdraw consent: Where we process your data based on your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.
Data Security Measures
378bd takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it from unauthorised access, disclosure, alteration, or destruction. No system can guarantee absolute security, but we maintain industry-standard controls appropriate to the nature and sensitivity of the data we process.
- 256-bit SSL/TLS encryption: All data transmitted between your device and the 378bd platform is encrypted using 256-bit SSL/TLS technology. This ensures that data in transit — including login credentials, payment information, and personal details — cannot be intercepted by third parties.
- Encryption at rest: Sensitive data stored in 378bd's systems — including identity documents, financial records, and password hashes — is encrypted at rest using industry-standard encryption algorithms. Passwords are stored as salted cryptographic hashes and are never stored in plain text.
- Access controls: Access to personal data within 378bd's systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data necessary to perform their specific role. All staff with access to personal data are subject to confidentiality obligations and receive data protection training.
- Two-factor authentication: 378bd encourages all players to enable two-factor authentication (2FA) on their accounts for an additional layer of security. 2FA requires a one-time code — sent to your registered mobile number — in addition to your password when logging in.
- Regular security audits: The 378bd platform undergoes regular security assessments, including vulnerability scanning and penetration testing, to identify and remediate potential security weaknesses before they can be exploited.
- Incident response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 378bd will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.
This Privacy Policy was last reviewed and updated in January 2026. For questions or data-related requests, contact our support team at support@378bd.app with the subject line "Privacy / Data Request". We aim to respond within 14 calendar days.
How 378bd Protects Your Privacy
Our Privacy Policy reflects six core commitments that underpin how we handle your personal data at 378bd — from collection through to deletion.
Every byte of data exchanged between you and 378bd is protected by 256-bit SSL/TLS encryption. Your login credentials, payment details, and personal information are shielded from interception at all times.
378bd never sells, rents, or trades your personal data to advertisers, data brokers, or any other commercial third party. Your information is used solely to deliver and improve the 378bd service for you.
Access, correct, delete, or port your personal data at any time by contacting our support team. 378bd responds to all verified data subject requests within 30 calendar days without unnecessary obstruction.
We keep your data only as long as legally required or operationally necessary. Once the retention period expires, your data is securely deleted or anonymised — not held indefinitely.
Promotional communications — bonus alerts, BPL cricket offers, seasonal promotions — are only sent to players who have explicitly opted in. You can withdraw consent and update preferences at any time.
Identity documents submitted for KYC verification at 378bd are used solely for age and identity checks. They are processed by a trusted partner under strict data processing agreements and never used for marketing.
Questions About Your Privacy?
If you have any questions about this Privacy Policy, want to exercise your data rights, or need help with your account, our support team is available 24/7 in English. You can also explore our FAQ for quick answers.
18+ Only. Gambling involves financial risk. Please play responsibly and within your means.