332bd Privacy Policy — Your Data, Our Responsibility

About This Privacy Policy

332bd ("we", "us", "our") is the operator of the online casino and sports betting platform accessible at 332bd.bet. This Privacy Policy applies to all users of the 332bd platform — including visitors who browse without a registered account and registered members who access betting, gaming, and payment features. This Policy describes our practices regarding the collection, storage, use, disclosure, and protection of your personal data.

By registering an account with 332bd or by continuing to use the 332bd platform, you acknowledge that you have read this Privacy Policy and consent to the practices described within it. If you do not consent to these practices, you must discontinue your use of the 332bd platform. For any privacy-related queries or requests, you may contact 332bd at the official support email address published on the platform.

Information We Collect

When you use the 332bd platform, we collect the following categories of personal and technical information. The specific data collected depends on how you interact with the platform and whether you hold a registered account:

• Identity information: your full name, date of birth, and nationality as provided during account registration or KYC verification.
• Contact information: your mobile phone number, email address, and residential address as provided during registration or verification.
• Financial information: transaction records including deposit amounts, withdrawal requests, payment method identifiers (e.g., your bKash or Nagad mobile number), and account balance history. Full payment credentials (card numbers, mobile banking PINs) are never stored by 332bd.
• Gaming and betting activity: records of games played, bets placed, sports betting selections, win and loss history, and bonus usage within your 332bd account.
• Device and technical information: IP address, device type, operating system, browser type and version, session timestamps, and referring URL. This data is collected automatically when you access the platform.
• Verification documents: copies of government-issued identification (e.g., National Identity Card, passport), proof of address documents, and payment method ownership confirmations submitted as part of KYC verification.

332bd does not collect sensitive personal data beyond what is required for identity verification, anti-money laundering compliance, and responsible gaming obligations. We do not collect biometric data, racial or ethnic origin data, religious belief data, or health data unless you voluntarily provide such information in the context of a responsible gaming self-exclusion or support request.

How We Use Your Information

332bd uses the personal information we collect for the following purposes. Each purpose is tied to a legitimate operational or compliance need:

• Account management: to create, verify, maintain, and close your 332bd account, including processing registration, verifying your identity, managing account security, and responding to account-related requests.
• Transaction processing: to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate records of all financial transactions on your account.
• Regulatory compliance: to meet our obligations under applicable anti-money laundering, counter-terrorism financing, and responsible gaming regulations, including KYC verification, suspicious activity monitoring, and age verification.
• Platform security: to detect, investigate, and prevent fraud, unauthorised account access, bonus abuse, money laundering, and other prohibited conduct as defined in the 332bd Terms and Conditions.
• Service improvement: to analyse platform usage patterns, identify technical issues, improve game performance, optimise payment flows, and develop new features that better serve Bangladesh players.
• Marketing communications: to send you promotional offers, bonus notifications, and event announcements related to 332bd — but only where you have provided consent to receive such communications. You may opt out of marketing communications at any time by contacting 332bd support.

Legal Basis for Processing Your Data

332bd processes your personal data only where there is a legitimate legal basis for doing so. The relevant legal bases that apply to 332bd's data processing activities are:

• Contractual necessity: the majority of 332bd's data processing is necessary to perform the contract between you and 332bd — specifically, to operate your account, process your bets and payments, and deliver the services you have registered for.
• Legal obligation: certain processing activities — including KYC identity verification, transaction monitoring, and record-keeping — are legally required of 332bd as an online platform operating in the gaming and financial services space.
• Legitimate interests: 332bd processes certain technical and usage data on the basis of legitimate interests — specifically, the interests of maintaining platform security, preventing fraud, and improving the quality of the service for all users.
• Consent: where 332bd relies on your consent as the legal basis for processing — most commonly for direct marketing communications — you may withdraw that consent at any time without affecting the lawfulness of any processing carried out prior to your withdrawal.

Cookies and Tracking Technologies

The 332bd platform uses cookies and similar tracking technologies to support core platform functionality and improve your experience. A cookie is a small text file that is stored on your device when you visit a website. 332bd uses the following categories of cookies:

• Essential cookies: required for the platform to function. These include session authentication cookies that keep you logged in during your visit, security tokens, and cookies that remember your language preference. Essential cookies cannot be disabled without breaking core platform functionality.
• Analytics cookies: used to understand how visitors interact with the 332bd platform — which pages are visited most frequently, how long sessions last, and where users encounter issues. This data is aggregated and anonymised; it is not used to build individual profiles.
• Functional cookies: used to remember your platform preferences — such as your last-used payment method display or session settings — to make your experience more consistent across visits.
• Security cookies: short-lived cookies used to detect and prevent cross-site request forgery (CSRF) and other common web security threats during your active 332bd session.

How We Share Your Information

332bd does not sell, rent, or trade your personal data to third parties. We share personal data only in the following limited and specific circumstances, and only to the extent necessary for the stated purpose:

• Payment processors: 332bd shares transaction-related data (such as your mobile number and transaction amount) with payment service providers including bKash, Nagad, Rocket, Upay, Visa, and Mastercard, solely to facilitate deposit and withdrawal processing. These providers handle data under their own privacy policies and security standards.
• Game providers: 332bd shares session identifiers and account-level identifiers with licensed game providers (such as Pragmatic Play, Evolution Gaming, Spribe, and others) to authenticate your access to their games within the 332bd platform. These providers do not receive your full personal profile.
• Regulatory and law enforcement authorities: 332bd may disclose personal data to regulatory bodies, law enforcement agencies, or financial intelligence units where we are legally required to do so, or where disclosure is necessary to prevent or detect crime. Such disclosures are made only to the extent required by the applicable legal obligation.
• Technical service providers: 332bd may engage third-party technical providers (such as cloud hosting, data storage, and cybersecurity services) who process data on our behalf. All such providers are bound by data processing agreements that restrict them to processing data only on 332bd's instructions and prohibit any independent use of your data.

Beyond the categories listed above, 332bd will not share your personal data with any other party without your prior written consent, except where required by law. In particular, 332bd will never share your data with third-party advertisers, data brokers, or any organisation for their own independent marketing or profiling purposes.

Data Retention

332bd retains your personal data for as long as your account remains active and for a defined period after account closure. The specific retention periods applicable to different categories of data are determined by our legal and compliance obligations. As a general rule, account data and transaction records are retained for a minimum of five years following account closure to satisfy anti-money laundering record-keeping requirements. After the applicable retention period has expired, personal data is securely deleted or anonymised so that it can no longer be linked to you as an individual.

Verification documents (such as copies of your National Identity Card or passport) submitted for KYC purposes are retained for the same minimum five-year period following account closure, or longer where required by applicable law. If you request deletion of your personal data before the expiry of an applicable retention period, 332bd will inform you of the minimum period for which the data must be retained and the legal basis for that retention.

Data Security Measures

332bd implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data transmitted between your device and the 332bd platform, encrypted storage of sensitive account data, hashed password storage (passwords are never stored in plain text), access controls that restrict internal access to personal data on a need-to-know basis, and regular security reviews of platform infrastructure.

No data transmission over the internet or electronic storage system is 100% secure. While 332bd takes all reasonable steps to protect your personal data, we cannot guarantee absolute security against all possible threats. In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected users, 332bd will take prompt steps to contain the breach and, where required, notify affected users and relevant authorities in accordance with applicable data protection obligations.

Your Data Rights

As a user of the 332bd platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact 332bd support using the official email address published on the platform. 332bd will respond to all data rights requests within a reasonable timeframe and will not charge a fee for handling standard requests:

Payment Data and Financial Privacy

332bd treats financial data with the highest level of care. When you make a deposit via bKash, Nagad, Rocket, or Upay, the transaction is initiated through your mobile banking app and confirmed via the respective payment provider's secure API. 332bd receives a transaction confirmation reference and the transaction amount — we do not receive or store your mobile banking PIN, OTP codes, or full card number. When you use a Visa or Mastercard, payment is processed through a PCI-DSS compliant payment gateway. 332bd receives only a transaction token and the last four digits of your card for reference purposes.

All financial transaction records on 332bd are retained in accordance with the data retention policy described in Section 6 above. Transaction records are used for account management, dispute resolution, withdrawal verification, and regulatory compliance. They are not shared with third parties beyond the payment processors and regulatory authorities described in Section 5.

Children's Privacy

The 332bd platform is strictly intended for adults aged 21 and above. 332bd does not knowingly collect personal data from individuals under the age of 21. If 332bd becomes aware that personal data has been collected from a person who is under 21, that data will be deleted promptly and the associated account will be closed. If you are a parent or guardian and believe that a minor has registered a 332bd account or provided personal data to 332bd, please contact us immediately at the official support email address published on this platform so that we can take appropriate action.

Changes to This Privacy Policy

332bd reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made, 332bd will update the "Last Updated" date displayed at the top of this page. We may also notify registered players of significant changes via email or an in-platform notification where we consider it appropriate to do so.

Your continued use of the 332bd platform after any update to this Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with the changes, you should discontinue using the platform and contact 332bd support to close your account. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 332bd handles your personal data, please contact the 332bd support team using the official email address published on this platform. Please include "Privacy Request" in the subject line of your message, along with your registered account details, so that your request can be routed to the appropriate team member promptly.

332bd is committed to handling all privacy enquiries and data rights requests promptly, fairly, and with respect for your personal data. We aim to acknowledge receipt of all privacy-related communications within two business days and to provide a substantive response within 30 days of receipt, in line with standard data protection practice.