bd344 Privacy Policy — How We Handle Your Personal Data

bd344 collects personal data in several distinct categories depending on the nature of your interaction with the platform. The categories below represent the full scope of personal data that may be collected from bd344 players. Not all categories apply to every player — the specific data collected will depend on your account status, the services you use, and the verification requirements applicable at any given time.

bd344 collects personal data through a combination of direct provision by you, automated technical collection during platform use, and in limited circumstances, from authorised third-party sources. The primary collection methods are as follows:

• Direct submission: Data you enter voluntarily into registration forms, account settings panels, deposit and withdrawal request forms, responsible gaming tool activation requests, and customer support communications.
• Automated collection: Technical and usage data collected automatically via server logs, cookies, and similar tracking technologies each time you access the platform. See Section 8 for full details on cookie use.
• Payment processor data: Transaction confirmation data relayed from payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank) when you initiate deposits or withdrawals. bd344 does not receive raw payment credentials from these processors — only transaction reference data and confirmation status.
• Identity verification services: In certain circumstances, bd344 may use a third-party identity verification provider to cross-reference the details you have supplied against authoritative data sources for the purpose of Know Your Customer (KYC) compliance. Any such provider operates under a strict data processing agreement with bd344.
• Publicly available sources: bd344 may, where legally permissible, supplement your account data with information from publicly available sources (such as government sanction lists or fraud prevention registers) for the purpose of anti-money laundering (AML) compliance.

bd344 processes personal data only where there is a clearly identified and documented purpose and a valid legal basis for that processing. The table below summarises the primary processing purposes and the corresponding legal basis for each:

bd344 does not sell your personal data to any third party under any circumstances. We do not share your personal data with advertising networks, data brokers, or social media platforms for commercial purposes. Your data may be shared in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment processors: Transaction data is shared with your chosen payment provider (bKash, Nagad, Rocket, Upay, DBBL, City Bank, BRAC Bank, Islami Bank, Sonali Bank) to the extent necessary to process your deposit or withdrawal request. Each provider processes this data under their own privacy policy and applicable financial services regulations.
• Game content providers: When you launch a game supplied by a third-party provider (such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, Play'n GO, Spribe, or Hacksaw Gaming), limited session and player-ID data is transmitted to that provider's gaming server to enable gameplay. bd344's data processing agreements with these providers restrict them from using this data for any purpose other than delivering the game session.
• Identity verification providers: Where third-party KYC services are used to verify your identity, the specific data required for that verification (typically name, date of birth, and document details) will be shared with the provider under a strictly scoped data processing agreement.
• Legal and regulatory authorities: bd344 may disclose personal data to law enforcement agencies, financial intelligence units, courts, or regulatory bodies where required to do so by applicable law, a valid court order, or a legally binding regulatory requirement. In such cases, bd344 will disclose only the minimum data required to satisfy the legal obligation.
• Professional advisers: Legal counsel, auditors, and compliance consultants engaged by bd344 may have access to personal data on a strictly need-to-know basis and are bound by confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of bd344's business, personal data held by the platform may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy terms applicable to your data under the new entity's ownership.

bd344 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, after which data is securely deleted or anonymised. The following retention periods apply as a general framework:

• Active account data (identity, contact, financial, usage) is retained for the full duration of your active account relationship with bd344, plus a minimum post-closure period required by applicable law — typically five years from the date of account closure for financial and identity records, to satisfy anti-money laundering record-keeping obligations.
• KYC and verification documents (copies of National ID, passport, utility bills) are retained for a minimum of five years from the date of the last transaction on your account, in accordance with financial crime prevention requirements.
• Transaction records are retained for a minimum of five years from the date of each transaction, consistent with standard financial record-keeping requirements.
• Customer support communications (support tickets, live chat logs, email correspondence) are retained for a period of three years from the date of the interaction, for the purpose of dispute resolution and service quality review.
• Technical and usage data (IP address logs, session records) is retained for a maximum of twelve months, after which it is automatically purged from active systems.
• Marketing consent records are retained for the full duration of your account plus three years post-closure, for the purpose of demonstrating consent compliance.

Where a legal hold is in place (for example, where your account is subject to an ongoing investigation or legal proceedings), retention periods may be extended beyond the standard timelines stated above until the hold is lifted.

bd344 implements a layered approach to data security, combining technical controls, procedural safeguards, and access management practices to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. The security measures in place include, but are not limited to:

• TLS/SSL encryption for all data in transit between your device and bd344 servers. All platform pages are served over HTTPS exclusively.
• Encryption at rest for stored personal data and verification documents, using industry-standard symmetric encryption algorithms.
• Role-based access controls restricting access to personal data to only those members of the bd344 team whose role specifically requires it, governed by a least-privilege access policy.
• Two-factor authentication on all internal administrative systems that can access player data.
• Regular security assessments including vulnerability scanning and penetration testing of platform infrastructure.
• Incident response procedures governing the detection, containment, and notification processes in the event of a data security incident. Affected players will be notified without undue delay where a security incident poses a risk to their rights and freedoms.

While bd344 applies strong security measures, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials (username and password) and for notifying bd344 immediately at [email protected] if you believe your account has been compromised.

As a player whose personal data is processed by bd344, you hold a set of individual rights with respect to that data. bd344 is committed to facilitating the exercise of these rights promptly and without undue obstacle. Your rights are as follows:

• Right of access: You have the right to request a copy of all personal data that bd344 holds about you, along with information about how it is being used. Access requests will be fulfilled within 30 days of receipt.
• Right to rectification: If any personal data bd344 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Many data fields can be updated directly within your account settings dashboard without needing to contact support.
• Right to erasure ("right to be forgotten"): You may request that bd344 delete your personal data. This right is not absolute — we may be required to retain certain data to comply with legal obligations (such as AML record-keeping). Where erasure is not possible in full, we will inform you of the specific data categories we are required to retain and the reason for retention.
• Right to restriction of processing: You may request that bd344 suspend the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data while we verify it.
• Right to data portability: You may request that bd344 provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to object: You may object to the processing of your personal data where the legal basis for that processing is our legitimate interest. bd344 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

To exercise any of the rights listed above, please submit a written request to [email protected] with the subject line "Data Rights Request — [Your Registered Email Address]". bd344 will acknowledge your request within five business days and aim to fulfil it within 30 calendar days. In cases of complexity or high volume, this period may be extended by a further 30 days, with prior notification.

bd344 uses cookies and similar tracking technologies on its platform for the purposes of session management, security, platform functionality, and aggregate usage analytics. A cookie is a small text file stored on your device by your web browser when you visit the bd344 platform.

The categories of cookies used by bd344 are as follows:

• Strictly necessary cookies: Essential for the platform to function. These cookies manage your login session, maintain your shopping basket state between page loads, and protect against cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without impairing your ability to use the platform.
• Functional cookies: Store your preferences (such as language settings, interface layout choices, and responsible gaming notification preferences) so that the platform behaves consistently between visits.
• Analytics cookies: Collect aggregate, anonymised data about how players navigate the platform — which pages are visited most frequently, where players exit the site, and how features are used. This data is used solely to improve platform performance and user experience. bd344 does not use third-party advertising analytics cookies.
• Security cookies: Assist in detecting and preventing suspicious account activity, including detection of multiple simultaneous logins from geographically distant IP addresses.

bd344 does not use third-party advertising cookies, pixel trackers for social media retargeting, or any tracking technology designed to build a cross-site behavioural advertising profile of individual players. Your browsing activity on bd344 is not shared with or sold to any advertising platform.

You may manage cookie preferences through your browser settings. Blocking strictly necessary cookies may impair your ability to log in and use the platform effectively. Blocking analytics or functional cookies will not prevent you from accessing the platform.

The bd344 platform is strictly intended for adults aged 21 and above. bd344 does not knowingly collect, store, or process personal data from any individual under the age of 21, and does not permit any person under that age to create an account, access real-money gaming content, or participate in any betting or gambling activity on the platform.

Age verification is a mandatory step in the bd344 registration process, and additional identity documentation may be requested at any time to confirm a player's age. If bd344 becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted immediately and the associated account will be permanently closed.

If you have reason to believe that a person under the age of 21 has registered on bd344 or is accessing the platform, please report this immediately to [email protected]. bd344 takes underage gambling prevention very seriously and will act swiftly on any credible report of underage access.

bd344 reserves the right to update, amend, or replace this Privacy Policy at any time. Where a material change is made — meaning a change that significantly affects how your personal data is collected, used, or shared — bd344 will notify registered players by email to the address on their account prior to the change taking effect.

The effective date of the current version of this Policy is stated at the top of the page and reflected in the "Last Updated" badge displayed at the beginning of this document. The most current version of this Policy is always accessible at bd344.io/privacy-policy.

Continued use of the bd344 platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with any amendment, you must discontinue use of the platform and may request account closure by contacting the support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bd344 handles your personal data, please contact the bd344 support team using the details below. All privacy-related enquiries are handled by dedicated team members with appropriate data protection training.

• Email (privacy enquiries): support@bd 344.io — please use the subject line "Privacy Enquiry — [Your Registered Email Address]" for faster routing.
• Response time: bd344 aims to acknowledge all privacy-related enquiries within two business days and to provide a substantive response within 14 calendar days.
• Support availability: 24/7 — Bangladesh Standard Time (UTC+6).
• Live chat: Available inside your bd344 account dashboard for general account queries. For formal data rights requests, written email correspondence is preferred to ensure a clear audit trail.

bd344 is committed to resolving all privacy concerns raised directly with us. If after contacting us you remain unsatisfied with the outcome of your enquiry, you may have the right to escalate your concern to the relevant data protection authority in your jurisdiction.