Privacy Policy — Your Data at u365bd

This Privacy Policy ("Policy") is issued by u365bd ("u365bd", "we", "us", or "our") and applies to all personal data collected from individuals ("you", "your", or "the player") who access, register on, or otherwise use the u365bd online gaming and sports betting platform available at https://u365bd.app (the "Platform").

u365bd is Bangladesh's premier online casino and sports betting destination, serving adult players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other areas of Bangladesh. We are committed to handling all personal data entrusted to us with the highest standards of care, transparency, and security.

By accessing or using the Platform, creating an account, making a deposit, or otherwise interacting with u365bd, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy. If you do not agree with any part of this Policy, you should not use the Platform.

u365bd acts as the data controller in respect of the personal data collected through the Platform. As data controller, u365bd determines the purposes and means by which your personal data is processed. All data collected in connection with the Platform is processed under u365bd's oversight and in accordance with this Privacy Policy.

If you have any questions, concerns, or requests regarding how u365bd processes your personal data, you may contact our data support team directly using the contact information provided in Section 15 of this Policy. We will respond to all legitimate privacy-related enquiries within a reasonable period.

u365bd collects personal data across several categories depending on the nature of your interaction with the Platform. The table below summarises the main categories of personal data we collect and the context in which each category is typically obtained:

u365bd collects personal data through the following primary channels:

• Direct interactions: Data you provide directly when you register an account, complete identity verification (KYC), make deposits or withdrawals, contact our support team, respond to surveys, or otherwise communicate with u365bd.
• Automated technologies: Technical and usage data collected automatically as you navigate and interact with the Platform, including through cookies, web beacons, server logs, and similar tracking technologies. See Section 8 for details on our cookie practices.
• Payment service providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank (DBBL), City Bank, BRAC Bank, and other approved payment partners when you initiate a deposit or withdrawal. This data is limited to what is necessary to confirm and record the transaction.
• Identity verification services: Where u365bd engages a third-party KYC service to assist in verifying the identity of a player, that service may return a verification outcome and associated identity confirmation to u365bd. The underlying identity documents are handled in accordance with that service's own privacy standards.
• Fraud prevention and security tools: Data returned by third-party fraud detection and security monitoring services used to protect the Platform and its players against fraudulent activity, account takeover, and money laundering.

u365bd processes your personal data for the following specific purposes:

• Account creation and management: To register your account, verify your eligibility (including age verification to ensure players are 18 years or older), and maintain your account in good standing throughout your use of the Platform.
• Transaction processing: To process deposits from and withdrawals to your local payment methods including bKash, Nagad, Rocket, Upay, and supported bank accounts, and to maintain an accurate record of all financial activity on your account.
• Identity verification (KYC): To comply with our obligations to verify the identity of registered players, prevent the use of the Platform by minors, and detect fraudulent or multi-account registration activity.
• Platform security and fraud prevention: To monitor for suspicious activity, unauthorised account access, collusion between players, exploitation of technical errors, and any other activity that threatens the security or integrity of the Platform.
• Customer support: To respond to your queries, process complaints, handle responsible gaming requests (including self-exclusion, deposit limit adjustments, and cool-off periods), and manage account closure requests.
• Personalisation and platform improvement: To analyse aggregate usage patterns in order to improve the Platform's user interface, game catalogue, performance, and overall player experience. This analysis is conducted at an aggregated level and does not involve profiling individual players for marketing purposes.
• Legal and regulatory compliance: To comply with applicable anti-money laundering (AML) obligations, record-keeping requirements, and any other legal obligations to which u365bd is subject.
• Responsible gaming: To monitor player activity for signs of problem gambling and, where appropriate, to apply responsible gaming tools such as deposit limits, session limits, or self-exclusion in accordance with u365bd's Responsible Gaming Policy.

u365bd processes your personal data on the basis of one or more of the following legal grounds:

• Contractual necessity: Processing is necessary for the performance of the contract between you and u365bd — namely, the Terms & Conditions that govern your use of the Platform. This covers account creation, transaction processing, KYC verification, and customer support.
• Legitimate interests: Processing is necessary for u365bd's legitimate interests in operating a secure, fair, and commercially viable gaming platform. This includes fraud prevention, security monitoring, responsible gaming monitoring, and platform analytics, provided such interests are not overridden by your own privacy rights.
• Legal obligation: Processing is necessary to comply with u365bd's legal obligations, including anti-money laundering obligations, identity verification requirements, and record-keeping duties.
• Consent: Where u365bd relies on your consent as a legal basis (for example, for optional promotional communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

u365bd does not sell, rent, or otherwise commercially transfer your personal data to third parties. We share personal data only in the following limited circumstances, and only to the extent necessary for the purpose described:

• Payment service providers: bKash, Nagad, Rocket, Upay, DBBL, City Bank, BRAC Bank, and other approved payment partners receive the minimum necessary transaction data to process your deposits and withdrawals. These providers are subject to their own privacy policies and data protection obligations.
• Game providers: Certified third-party game studios (including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi) may receive a session token and account reference necessary to deliver game content within the Platform. These studios do not receive your full identity details and process data under their own certified privacy frameworks.
• Identity verification and KYC services: Where a third-party KYC service is engaged to assist in verifying player identity, the minimum necessary identity data is shared with that provider under a strict data processing agreement.
• Fraud prevention and security services: Technical and usage data may be shared with fraud detection service providers to protect the Platform and its players from fraudulent activity.
• Legal authorities: u365bd may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or governmental authority. u365bd will notify you of such a disclosure where legally permitted to do so.

u365bd uses cookies and similar tracking technologies to operate the Platform effectively, maintain your session, and understand how players interact with the site. The following types of cookies are used on the Platform:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They enable core features such as session authentication (keeping you logged in), security token management, and load balancing. The Platform cannot operate without these cookies and they cannot be disabled.
• Functional cookies: These cookies remember your preferences such as your preferred language display setting or any layout customisations you may have applied. They improve your experience but are not strictly required for the Platform to function.
• Analytics cookies: u365bd uses aggregated, anonymised analytics data to understand Platform usage patterns — for example, which pages are most visited, where players spend most time, and which features generate the most engagement. This data does not identify individual players and is used solely to improve the Platform.
• Security cookies: These cookies assist in detecting and preventing fraudulent activity, unauthorised account access, and bot traffic. They are a component of u365bd's overall platform security architecture.

Most web browsers allow you to control cookie settings through your browser preferences. You may choose to disable or delete cookies, though doing so may affect the functionality of the Platform — in particular, disabling strictly necessary cookies will prevent you from maintaining an authenticated session.

u365bd employs a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures currently in place include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and u365bd's servers, ensuring that your login credentials, financial data, and personal information cannot be intercepted in transit.
• Encrypted data storage: Personal and financial data stored on u365bd's servers is maintained in encrypted form, with decryption keys held under strict access controls.
• Access control: Access to personal data within u365bd's systems is restricted on a strict need-to-know basis. Only authorised personnel with a documented operational need to process specific data categories are granted access.
• Regular security audits: u365bd's systems are subject to regular security reviews and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Intrusion detection systems: Automated monitoring systems detect and flag unusual access patterns, potential data breaches, and other security anomalies in real time.
• Secure data disposal: When personal data is no longer required, it is securely deleted or anonymised in accordance with u365bd's data retention schedule, ensuring it cannot be recovered or reconstructed.

u365bd retains personal data for no longer than is necessary to fulfil the purposes for which it was originally collected, or as required by applicable law. The following general retention principles apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data (which can no longer be linked to an individual) may be retained indefinitely for statistical and analytical purposes without restriction.

As a player whose personal data is processed by u365bd, you hold the following rights in respect of your personal information. To exercise any of these rights, please contact our support team using the details in Section 15:

• Right of Access: You have the right to request a copy of the personal data u365bd holds about you, along with an explanation of how that data is being used.
• Right to Rectification: If any personal data u365bd holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update basic account details directly from your account settings; for identity and financial data corrections, please contact support.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. Note that this right is subject to limitations — for example, u365bd cannot delete data that it is required to retain under applicable anti-money laundering laws or other legal obligations.
• Right to Restriction of Processing: In certain circumstances, you may request that u365bd restrict its processing of your personal data — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: You have the right to receive a copy of personal data you have provided to u365bd in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to u365bd's processing of your personal data where that processing is based on legitimate interests. Upon receiving an objection, u365bd will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests or rights.
• Right to Withdraw Consent: Where u365bd's processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

The u365bd Platform may contain references to or integrations with third-party services — in particular, the game content delivered by certified third-party studios such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi is rendered within the Platform under licence but ultimately originates from those providers' own infrastructure.

u365bd is not responsible for the privacy practices or data handling policies of any third-party game providers, payment service providers, or other external services. Each third party operates under its own privacy policy and data protection framework. u365bd encourages players to review the privacy policies of any third-party service with which they interact.

Where u365bd engages any third-party processor that handles personal data on u365bd's behalf, it does so under a formal data processing agreement that requires the processor to maintain appropriate security standards and to use the data only for the purposes specified by u365bd.

The u365bd Platform is strictly for adults aged 18 years and above. u365bd does not knowingly collect personal data from individuals under the age of 18. Age verification is a mandatory step in the u365bd registration and KYC process, and any account found to belong to a person under 18 will be immediately closed and all associated data handled in accordance with applicable legal requirements.

If a parent or guardian believes that a minor has registered on u365bd or has submitted personal data to the Platform, they should contact our support team immediately at [email protected]. u365bd will investigate promptly and, where confirmed, will close the account and delete all associated personal data to the extent legally permissible.

u365bd reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, operational requirements, or applicable legal obligations. When material changes are made, u365bd will post the updated Policy on this page with a revised effective date and, where the changes are significant, will provide notice to registered players via an in-platform notification.

Your continued use of the u365bd Platform following the publication of any updated Privacy Policy constitutes your acknowledgement of, and agreement to, the revised terms. We encourage you to review this Policy periodically to stay informed about how u365bd protects your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way u365bd processes your personal data — including requests to exercise your data rights under Section 11 — please contact our support team using the details below:

• Email: [email protected] (plain text only — not a clickable link)
• Support Availability: 24/7, including all Bangladesh public holidays
• Time Zone: Bangladesh Standard Time (BST, UTC+6)
• Typical Response Time: Most privacy-related enquiries are acknowledged within a few hours and substantively resolved within 30 days

For account-specific privacy requests, including data access, rectification, or erasure requests, please include your registered mobile number and a brief description of your request so that our team can locate your account and respond efficiently.