Privacy Policy — dd345

Section 1

Data We Collect

dd345 collects personal data from players in Bangladesh in order to provide and operate the online casino and sports betting platform at dd345.bet. We collect data through a number of means: directly from you when you register an account, complete identity verification, make a deposit or withdrawal, contact our support team, or participate in promotions; automatically through your use of the platform; and, in limited circumstances, from third-party service providers such as payment processors and identity verification partners.

1.1 Registration Data

When you create a dd345 account, we collect the following information: your full legal name, date of birth, email address, mobile phone number (Bangladesh), and your chosen username. This information is required to create and manage your account, verify your eligibility to use the platform, and communicate with you about your account activity.

1.2 Identity Verification (KYC) Data

Before processing your first withdrawal, dd345 initiates a Know Your Customer (KYC) verification process. As part of this process, we may collect copies of the following documents: your Bangladesh National Identity Card (NID), a valid passport, a driving licence, or another government-issued photo identification document. We may also request proof of address and proof of your payment method. These documents are used solely for identity verification and anti-money laundering compliance purposes.

1.3 Financial & Transaction Data

We collect details of all financial transactions you conduct on the dd345 platform, including deposit amounts, withdrawal requests, payment method identifiers (e.g., your bKash or Nagad mobile number), transaction timestamps, and transaction reference numbers. We do not store full card numbers or complete bank account details — such sensitive financial credentials are handled directly by our payment processing partners under their own strict security standards.

1.4 Technical & Usage Data

When you access the dd345 platform, we automatically collect certain technical data including your IP address, device type and model, operating system, browser type and version, referring URL, pages visited on our platform, session duration, and in-app clickstream data. This data helps us maintain platform performance, detect fraud, and improve the player experience for users across Bangladesh.

1.5 Communications Data

When you contact the dd345 support team via live chat, email, or any other channel, we retain records of that communication. This includes the content of your messages and our responses. These records are kept to ensure continuity of support, resolve disputes, and maintain quality assurance standards across our customer service operations.

Section 2

How We Use Your Data

dd345 uses the personal data we collect for specific, clearly defined purposes. We process your data only where we have a lawful basis for doing so — either because it is necessary for the performance of our contract with you, because we are required to do so by applicable law, because you have given us your consent, or because we have a legitimate interest in doing so that does not override your own rights and interests.

2.1 Platform Operation

The primary use of your personal data is to operate the dd345 platform — creating and managing your account, processing your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfers, settling your bets and game results, managing your bonus balances, and providing you with access to casino games, live dealer tables, and sports betting markets.

2.2 Identity Verification & Fraud Prevention

We use your registration and KYC data to verify your identity, confirm your age eligibility (18+ only), and prevent fraudulent activity on the platform. Technical data such as IP addresses and device identifiers is used by our fraud prevention systems to detect and block suspicious activity, including multi-accounting, bonus abuse, and unauthorised access attempts.

2.3 Legal & Regulatory Compliance

dd345 uses your personal data to comply with applicable anti-money laundering (AML) obligations, which require us to monitor transactions for signs of suspicious financial activity and retain transaction records for defined periods. We may also be required to disclose personal data to law enforcement or regulatory authorities in response to a lawful request or court order.

2.4 Customer Support

Your personal data — particularly your account details and transaction history — is accessed by authorised dd345 support agents when you contact us for assistance. This enables our team to resolve your queries accurately and efficiently. Support communications are retained for quality assurance and dispute resolution purposes.

2.5 Marketing & Promotions

With your consent, dd345 may use your contact details to send you information about promotions, bonuses, new games, and platform updates that may be of interest to you. You may withdraw your consent to receive marketing communications at any time by contacting [email protected] or by using the unsubscribe mechanism included in every marketing message. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.

• Account creation, management, and authentication
• Processing deposits and withdrawals in BDT via bKash, Nagad, and other supported methods
• Verifying player identity and age to comply with 18+ restrictions
• Detecting and preventing fraud, multi-accounting, and bonus abuse
• Complying with anti-money laundering and financial crime obligations
• Providing customer support and resolving disputes
• Sending service-related notifications (account activity alerts, transaction confirmations)
• Sending promotional communications where you have opted in
• Analysing platform usage to improve performance and player experience

Section 3

Data Sharing & Third Parties

dd345 does not sell or rent your personal data to any third party. We share your data only with trusted service providers who assist us in delivering the platform, and only to the extent necessary for those specific purposes. All third-party service providers who handle personal data on our behalf are required to process that data securely and in accordance with our instructions, and are contractually prohibited from using it for any purpose beyond the scope of the service they provide to dd345.

3.1 Payment Processors

To process your deposits and withdrawals in BDT, dd345 shares the minimum necessary financial information with our payment processing partners, which include mobile financial service providers such as bKash, Nagad, and Rocket, as well as banking partners. These providers operate under their own security standards and privacy policies. dd345 shares only what is required to execute the transaction and verify its completion.

3.2 Identity Verification Providers

To fulfil KYC obligations, dd345 may use third-party identity verification service providers to assist in the review and validation of the documents you submit. These providers are contracted to process your identity data securely, to use it only for the verification purpose, and to retain it only as long as required under applicable law.

3.3 Technology & Infrastructure Providers

dd345 operates on cloud infrastructure and uses third-party software providers for functions including data hosting, platform analytics, fraud detection, and customer support tooling. These providers may have incidental access to certain personal data in the course of providing their services. They are bound by strict data processing agreements and are not permitted to use your data for any independent purpose.

3.4 Law Enforcement & Regulatory Authorities

dd345 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or regulatory direction. In such cases, dd345 will disclose only the minimum data required by the relevant legal obligation and will, where permitted by law, notify the affected player of the disclosure.

Section 4

Cookies & Tracking Technologies

The dd345 website uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience to players in Bangladesh. A cookie is a small text file placed on your device by your browser when you visit a website. Cookies help dd345 remember your preferences, maintain your login session, detect fraud, and understand how players interact with the platform so that we can improve it over time.

4.1 Types of Cookies Used

4.2 Managing Cookies

You may control cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, or to alert you when cookies are being placed on your device. Please note that disabling strictly necessary cookies will prevent certain core features of the dd345 platform — such as maintaining your login session — from functioning correctly. Analytics and marketing cookies can be disabled without affecting the core functionality of the platform.

4.3 No Cross-Site Tracking

dd345 does not use tracking technologies to monitor your browsing activity on third-party websites outside of the dd345.bet domain. The cookies and tracking tools deployed by dd345 are limited to activity within the dd345 platform itself. We do not participate in cross-site advertising networks that track users across the broader internet.

Section 5

Data Retention

dd345 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as we are required to retain it under applicable law. Our data retention periods are set with reference to our operational needs, legal obligations, and the rights of our players. When data is no longer required, it is securely deleted or irreversibly anonymised.

5.1 Active Account Data

While your dd345 account remains active, we retain all personal data associated with your account — including registration data, KYC documents, transaction records, and support communications — for as long as necessary to provide the platform services, manage your account, and comply with our legal obligations.

5.2 Post-Closure Retention

Following the closure of your dd345 account — whether voluntary, involuntary, or via self-exclusion — dd345 retains your personal data for a minimum period of five (5) years. This retention period supports our anti-money laundering compliance obligations, enables the resolution of any post-closure disputes, and satisfies any applicable statutory record-keeping requirements. After this period, your data is securely deleted unless further retention is required by a specific legal obligation.

5.3 Transaction Records

Financial transaction records — including deposit and withdrawal histories — are retained for a minimum of five (5) years following the date of the transaction. This is consistent with standard financial record-keeping requirements and enables dd345 to respond to any transaction-related queries or investigations within a reasonable timeframe.

5.4 Marketing Data

If you have opted in to receive marketing communications from dd345, we retain your marketing consent record and contact preferences until you withdraw your consent. Following withdrawal of marketing consent, we retain a suppression record — containing only the minimum information necessary to honour your opt-out — indefinitely, to ensure we do not inadvertently send you future marketing communications.

Section 6

Your Privacy Rights

dd345 respects your rights over your own personal data. Players in Bangladesh who use the dd345 platform have the following rights with respect to their personal data. To exercise any of these rights, please contact the dd345 support team via live chat inside your account or by emailing [email protected]. We will respond to all privacy rights requests within 30 days of receipt, and at no charge to you.

6.1 Right of Access

You have the right to request a copy of the personal data that dd345 holds about you. Upon a valid access request, dd345 will provide a structured summary of the data we hold in a readable format, together with information about the purposes for which it is processed, the categories of data held, and the third parties with whom it has been shared.

6.2 Right to Correction

If you believe that any personal data dd345 holds about you is inaccurate or incomplete, you have the right to request that we correct or update it. In some cases, we may need to verify the corrected information before updating our records. You may also update certain account information directly via your dd345 account profile settings.

6.3 Right to Deletion

You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and there is no other lawful basis for processing), or where you believe the data has been unlawfully processed. Please note that dd345 may be required to retain certain data for legal or regulatory compliance purposes even after a deletion request is received, in which case we will explain what data we are required to retain and why.

6.4 Right to Restrict Processing

In certain circumstances, you have the right to request that dd345 restricts the processing of your personal data — for example, while the accuracy of data you have contested is being verified, or while an objection to processing is being considered. During a restriction period, dd345 will continue to store the data but will not process it for any other purpose without your consent.

6.5 Right to Object to Marketing

You have an absolute right to object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of a valid objection to marketing, dd345 will immediately cease processing your data for that purpose and update our records to reflect your preference. You may object via the unsubscribe link in any marketing email, or by contacting [email protected].

• Right of access — obtain a copy of your personal data held by dd345
• Right to correction — request correction of inaccurate or incomplete data
• Right to deletion — request deletion of data no longer needed or unlawfully processed
• Right to restrict processing — pause non-essential processing while issues are resolved
• Right to object to marketing — opt out of promotional communications at any time
• Right to data portability — receive your data in a structured, machine-readable format
• Right to withdraw consent — where processing is based on consent, withdraw it at any time

Section 7

Data Security

The security of your personal data is a top priority at dd345. We apply a layered approach to data security that combines technical controls, organisational policies, and staff training to protect against unauthorised access, accidental loss, destruction, or disclosure of personal data. While no system can guarantee absolute security, dd345 takes all reasonable and proportionate steps to maintain the integrity and confidentiality of your information.

7.1 Technical Security Measures

• 256-bit SSL/TLS encryption on all data transmitted between your device and the dd345 platform
• Encryption at rest for sensitive data stored on dd345 servers, including KYC documents and financial records
• Role-based access controls limiting internal access to personal data to authorised personnel only
• Two-factor authentication (2FA) available and recommended for all player accounts
• Automated intrusion detection and monitoring systems that flag suspicious access patterns in real time
• Regular security audits and penetration testing of the dd345 platform infrastructure

7.2 Organisational Security Measures

Access to personal data within dd345 is limited to staff members who genuinely require it to perform their job functions. All staff with access to personal data receive regular training on data protection obligations and security best practices. dd345 maintains internal data protection policies that govern how personal data is handled, stored, transferred, and disposed of across the organisation.

7.3 Data Breach Response

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, dd345 will notify affected players without undue delay, providing information about the nature of the breach, the data affected, the likely consequences, and the measures dd345 has taken or proposes to take to address the breach and mitigate its effects.

Section 8

Policy Updates & Contact

dd345 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform functionality, or applicable legal requirements. Where a material change is made to this policy, dd345 will provide reasonable notice by posting a prominent notice on the platform or by sending a notification to the email address registered to your account. The date at the top of this policy indicates when it was last updated. Your continued use of the dd345 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

8.1 How to Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or to dd345's handling of your personal data, please contact our support team. We are available 24 hours a day, 7 days a week, and will respond to all privacy-related enquiries within 30 days.

You may reach the dd345 data support team via:

• Live chat — available inside your dd345 account at any time
• Email — [email protected] (plain text; not a clickable link)

This Privacy Policy was last updated on 1 January 2026 and is effective from that date. It applies to all players who access or use the dd345 platform, including players located in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other regions of Bangladesh.