bg367 Privacy Policy — How We Handle Your Personal Data

1. Introduction

bg367 operates an online betting and casino platform accessible at bg367.io, serving players based in Bangladesh. In the course of providing our services — including sports betting, live casino, slots, esports wagering, and the WM Live section — bg367 necessarily collects and processes certain personal information about the individuals who use our platform.

This Privacy Policy sets out, in clear and formal terms, the categories of personal data bg367 collects, the purposes for which that data is processed, the parties with whom it may be shared, the period for which it is retained, and the rights available to you as a data subject. bg367 is the data controller in respect of all personal data processed in connection with the bg367 platform.

This Privacy Policy should be read in conjunction with the bg367 Terms & Conditions, which form part of the overall agreement between bg367 and its registered players. Terms used but not defined herein carry the meaning assigned to them in the Terms & Conditions.

2. Data We Collect

bg367 collects personal data through several channels: directly from you when you register an account or contact support, automatically as you navigate the platform, and from third-party verification and payment providers. The categories of personal data bg367 may collect include:

2.1 Identity and Contact Data

• Full legal name, date of birth, and gender
• Residential address (including city, district, and postcode within Bangladesh)
• Email address and mobile phone number registered in Bangladesh
• Government-issued identification document details (National ID number, passport number, or driving licence number)
• Photograph or scan of identity documents submitted for KYC verification purposes

2.2 Financial Data

• Mobile banking account identifiers (bKash, Nagad, Rocket, or Upay account numbers registered in your name)
• Bank account details where bank transfer methods are used (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank)
• Transaction history including deposit amounts, withdrawal requests, and payment method references
• Card details where Visa or Mastercard payments are made — note that full card numbers are never stored by bg367; payment card processing is handled by our PCI-DSS compliant payment partners

2.3 Account and Activity Data

• Username, encrypted password, and account registration date
• Betting history, including sports markets selected, stake amounts in BDT, odds accepted, and settlement outcomes
• Casino game activity, including games played, session durations, bet amounts, and win/loss records
• Bonus claims, promotion participation history, and wagering progress records
• Responsible gaming settings, including any deposit limits, session reminders, or self-exclusion requests you have applied to your account

2.4 Technical and Usage Data

• IP address, device type, operating system, and browser type
• Pages visited on the bg367 platform, time spent on each section, and click-path data
• Referring URL (the page or source from which you arrived at bg367.io)
• Session timestamps and log-in/log-out records
• Cookie identifiers and similar tracking technologies (see Section 6)

2.5 Communications Data

• Content of messages you send to bg367 customer support via email or live chat
• Records of any disputes, complaints, or feedback submitted to bg367
• Marketing preferences and opt-in/opt-out records for promotional communications

3. How We Use Your Data

bg367 processes your personal data only for specific, legitimate purposes directly related to the provision and improvement of our services. The table below summarises the primary purposes for which your data is used and the corresponding data categories involved:

Purpose of Processing	Data Categories Used
Account registration and identity verification (KYC)	Identity & contact data, identity documents
Processing deposits and withdrawals in BDT	Financial data, identity data
Providing betting, casino, and gaming services	Account & activity data, financial data
Administering bonuses, promotions, and loyalty rewards	Account & activity data, communications data
Fraud detection, anti-money laundering, and security monitoring	All categories as required
Responsible gaming monitoring and self-exclusion enforcement	Account & activity data, communications data
Customer support and dispute resolution	Identity data, communications data, activity data
Platform analytics, performance optimisation, and bug resolution	Technical & usage data
Sending transactional notifications (account alerts, withdrawal confirmations)	Identity & contact data, financial data
Sending marketing communications (where you have opted in)	Identity & contact data, communications data

bg367 does not use your personal data to make fully automated decisions that produce significant legal effects on you without the ability to request human review. Where automated risk-scoring tools are used (for example, in fraud detection), a human review process is available upon request.

4. Legal Basis for Processing

bg367 processes your personal data on the following legal bases, depending on the purpose of the processing:

• Contractual Necessity: Processing required to enter into or perform the contract between you and bg367, including account registration, KYC verification, payment processing, and the provision of betting and gaming services.
• Legal Obligation: Processing required to comply with applicable legal obligations, including anti-money laundering requirements, record-keeping obligations, and responses to lawful requests from regulatory authorities or law enforcement bodies.
• Legitimate Interests: Processing carried out in furtherance of bg367's legitimate business interests, including fraud prevention, platform security, abuse detection, responsible gaming monitoring, and platform analytics — provided that such processing does not override your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent, including the sending of optional marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

5. Data Sharing & Third Parties

bg367 does not sell, rent, or trade your personal data to any third party for their own independent marketing or commercial purposes. bg367 may share your personal data with third parties only in the following circumstances:

5.1 Service Providers

bg367 engages third-party service providers who process personal data on our behalf under strict data processing agreements. These include KYC and identity verification providers, payment processors (including the operators of bKash, Nagad, Rocket, and Upay integrations), game content providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), cloud hosting and infrastructure providers, and customer support platform operators. All such service providers are contractually prohibited from using your personal data for any purpose beyond the specific service they are engaged to provide.

5.2 Regulatory and Legal Authorities

bg367 may disclose personal data to governmental bodies, regulatory agencies, tax authorities, law enforcement agencies, or courts where required to do so by applicable law, regulatory directive, or valid legal order. bg367 will endeavour to notify you of any such disclosure where legally permitted to do so.

5.3 Business Transfers

In the event that bg367 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified in advance of any such transfer and of any changes to the data controller's identity.

5.4 Fraud Prevention and Security

bg367 may share account activity data, device fingerprints, and IP information with fraud prevention networks, cyber-security service providers, or shared industry databases for the purpose of detecting and preventing fraudulent activity, money laundering, and other unlawful behaviour on the platform.

6. Cookies & Tracking Technologies

bg367 uses cookies and similar tracking technologies on the bg367.io website to enhance your browsing experience, maintain your session, analyse platform usage, and deliver relevant content. The categories of cookies used by bg367 are as follows:

• Strictly Necessary Cookies: These cookies are essential for the bg367 platform to function. They enable core features such as account authentication, session management, and security functions. These cookies cannot be disabled without impairing your ability to use the platform.
• Functional Cookies: These cookies remember your preferences (such as language settings and display preferences) and enable enhanced, personalised features on the bg367 platform.
• Analytics Cookies: bg367 uses analytics tools to collect aggregated, anonymised data about how players navigate and use the platform. This data is used solely for internal performance monitoring and platform improvement purposes.
• Marketing Cookies: Where you have provided consent, bg367 may use cookies to track your interaction with promotional content and to deliver relevant offers. You may withdraw consent for marketing cookies at any time via your account settings or browser controls.

You may control your cookie preferences through your web browser settings. Please note that disabling certain categories of cookies may affect the functionality of the bg367 platform. Most modern browsers provide options to view, manage, block, and delete cookies stored on your device.

7. Data Retention

bg367 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active account with bg367, and for a minimum of five (5) years following account closure, in compliance with applicable record-keeping and anti-money laundering requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, in line with standard financial record-keeping obligations.
• Betting and Gaming Activity Records: Retained for a minimum of three (3) years following the conclusion of the relevant activity, for dispute resolution, fraud investigation, and responsible gaming assessment purposes.
• Customer Support Communications: Retained for a minimum of two (2) years following the resolution of the relevant enquiry or complaint.
• Technical and Usage Data (including cookies): Retained for periods ranging from session duration (session cookies) to a maximum of thirteen (13) months (persistent analytics cookies), unless a shorter period is required.

Upon expiry of the applicable retention period, bg367 will securely delete or anonymise your personal data in a manner that prevents its reconstruction or re-identification.

8. Data Security

bg367 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the bg367 platform
• Encryption of sensitive stored data fields, including identity document references and financial identifiers
• Role-based access controls ensuring that only authorised bg367 personnel with a legitimate operational need can access personal data
• Regular security assessments, penetration testing, and vulnerability scanning of the bg367 infrastructure
• Incident response procedures to detect, contain, and notify affected parties in the event of a data breach, within timeframes consistent with applicable obligations
• Secure password hashing using industry-standard cryptographic algorithms — bg367 does not store plaintext passwords

While bg367 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the security of your own bg367 account credentials and for notifying bg367 support immediately if you suspect any unauthorised access to your account.

9. Your Rights

As a data subject whose personal data is processed by bg367, you hold the following rights in respect of that data. To exercise any of these rights, please contact bg367 using the details provided in Section 14 of this Policy.

• Right of Access: You have the right to request a copy of the personal data that bg367 holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request that bg367 correct any inaccurate or incomplete personal data held about you without undue delay.
• Right to Erasure: You may request that bg367 delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected. This right is subject to bg367's legal obligations to retain certain data for regulatory and record-keeping purposes.
• Right to Restriction of Processing: You may request that bg367 temporarily limit the processing of your personal data in specific circumstances, such as while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on bg367's legitimate interests. You also have an unconditional right to object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

bg367 will respond to all valid data subject requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further sixty (60) days, with prior notification. bg367 will not charge a fee for exercising your rights unless requests are manifestly unfounded or excessive.

10. Children & Minors

The bg367 platform is strictly intended for adults aged 21 years and above. bg367 does not knowingly collect, process, or store personal data relating to any person under the age of 21. If bg367 becomes aware that personal data has been collected from a person under the minimum age, that data will be deleted immediately and the associated account will be closed. If you are a parent or guardian and believe that a minor under your care has created a bg367 account or provided personal information to bg367, please contact our support team at [email protected] immediately so that we may take the appropriate action without delay.

11. Cross-Border Data Transfers

bg367 operates internationally and may transfer your personal data to third-party service providers located outside Bangladesh, including in countries where data protection laws may differ from those applicable in Bangladesh. Where such transfers occur, bg367 takes appropriate steps to ensure that your personal data receives an adequate level of protection, including by implementing contractual safeguards with the relevant data recipients. bg367 does not transfer personal data to jurisdictions that do not provide adequate protections without first ensuring that appropriate contractual, technical, and organisational safeguards are in place.

12. Third-Party Links

The bg367 platform may contain references or links to third-party content, including game provider platforms and payment service interfaces. This Privacy Policy applies solely to personal data processed by bg367 in connection with the bg367.io platform. bg367 is not responsible for the privacy practices of any third-party platforms that you may access in connection with using the bg367 service. You are encouraged to review the privacy policies of any third-party services you interact with independently of the bg367 platform.

13. Updates to This Privacy Policy

bg367 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform services. The revised Privacy Policy will be published at bg367.io/privacy-policy with an updated effective date. Where changes are material, bg367 will provide advance notice via a platform notification or by email to your registered address. Your continued use of the bg367 platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the updated Privacy Policy, you must cease using the platform and may request account closure by contacting our support team.

14. Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by bg367, please contact our dedicated data protection team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)
• Response Time: bg367 aims to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 days

If you are not satisfied with bg367's response to your privacy concern, you have the right to escalate your complaint to the relevant data protection authority or supervisory body in your jurisdiction. bg367 will cooperate fully with any such authority in the resolution of complaints concerning the processing of personal data.