3bdd Privacy Policy

3bdd operates an online casino and sports betting platform at 3bdd.io, serving players across Bangladesh including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh. In the course of providing our services, we necessarily collect and process certain personal data about the individuals who register accounts, make deposits, place bets, and interact with our support team.

This Privacy Policy sets out in clear, plain English exactly what data we collect, why we collect it, how long we keep it, who we share it with, and what rights you have as a data subject. We have written this document to be as transparent and accessible as possible — if you have any questions about any part of it, our support team is available 24/7 and will be happy to assist.

This Privacy Policy should be read alongside the 3bdd Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement governing your use of the platform. In the event of any conflict between this Privacy Policy and another document, this Privacy Policy shall prevail with respect to data protection matters.

The personal data we collect falls into the following categories. We collect only what is necessary for the purposes described in this Policy.

We do not collect special category data (such as health information, biometric data beyond liveness verification, or political opinions) unless you have explicitly provided such information in the context of a responsible gaming self-assessment or support request.

3bdd collects personal data through the following channels:

• Direct Submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to a survey or promotion.
• Automated Collection: Technical and gaming activity data collected automatically as you navigate and interact with the platform, using server logs, session tracking, and similar technologies.
• Cookies and Similar Technologies: Data collected via cookies, pixel tags, and local storage as described in Section 7 of this Policy.
• Third-Party Verification Services: Identity and age verification data returned to us by KYC service providers following your submission of identity documents.
• Payment Processors: Transaction confirmation data returned by bKash, Nagad, Rocket, Upay, Visa, and Mastercard following deposit and withdrawal processing. We do not receive or store full payment card numbers.
• Fraud Prevention Partners: Risk signals and device fingerprint data from fraud detection services used to protect accounts and prevent unauthorised access.

Every instance of personal data processing at 3bdd is conducted on one of the following lawful bases:

• Contractual Necessity: Processing required to fulfil the agreement between 3bdd and a registered player — including account creation, payment processing, game delivery, and customer support.
• Legal Obligation: Processing required for 3bdd to comply with applicable legal obligations, including anti-money laundering (AML) requirements, age verification mandates, and fraud reporting duties.
• Legitimate Interests: Processing conducted for purposes that serve 3bdd's legitimate business interests — such as platform security, fraud prevention, product improvement, and responsible gaming monitoring — provided those interests are not overridden by your rights and interests.
• Consent: Processing conducted on the basis of your freely given, specific, informed, and unambiguous consent — including the sending of marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

The personal data 3bdd collects is used for the following purposes:

• Account Management: To create, maintain, and administer your player account, including login authentication, password resets, and account history.
• Identity & Age Verification: To confirm that you are who you say you are and that you meet the minimum age requirement of 21 years before full account functionality is enabled.
• Payment Processing: To facilitate deposits and withdrawals via your chosen payment method, verify that payment instruments belong to you, and maintain accurate financial records.
• Game Delivery & Personalisation: To deliver casino and sports betting content, remember your game preferences, and where applicable, personalise your platform experience based on gaming history.
• Responsible Gaming: To monitor gaming patterns for signs of problem gambling, enforce self-imposed limits and exclusion periods, and reach out proactively where our responsible gaming systems flag a concern.
• Fraud Prevention & Security: To detect and prevent fraudulent activity, unauthorised account access, money laundering, bonus abuse, and other prohibited conduct described in the Terms & Conditions.
• Customer Support: To investigate and resolve complaints, answer queries, and maintain records of communications for quality assurance and dispute resolution purposes.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform news — but only where you have opted in to receive such communications. You may opt out at any time.
• Legal Compliance & Reporting: To meet our obligations under applicable anti-money laundering, tax, and regulatory reporting requirements.
• Platform Improvement: To analyse aggregated, anonymised usage data to understand how players interact with the platform and to improve the user experience, game selection, and payment processes.

3bdd does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share personal data only in the circumstances described below, and only to the extent necessary for the stated purpose.

• Game Content Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical data (session tokens, bet data) necessary to deliver game content within the platform. These providers are contractually bound to process this data solely for game delivery purposes.
• Payment Processors: Transaction data is shared with bKash, Nagad, Rocket, Upay, Visa, and Mastercard solely to facilitate the processing of deposits and withdrawals you have initiated.
• KYC & Identity Verification Providers: Identity documents and verification data are shared with contracted KYC service providers to perform age and identity verification on our behalf.
• Fraud Prevention & Security Services: Technical and behavioural data may be shared with fraud detection partners for the purpose of protecting the platform and its players from fraudulent activity.
• Legal Authorities: We may be legally required to disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities where such disclosure is mandated by applicable law or a valid legal order. Where permitted, we will notify you of such disclosures.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of 3bdd's business assets, player data may be transferred to the acquiring entity as part of that transaction. Affected players will be notified in advance of any such transfer.

3bdd uses cookies and similar technologies to operate the platform, remember your preferences, maintain session security, and analyse platform usage. The following types of cookies may be set when you visit 3bdd.io:

Strictly necessary cookies cannot be disabled as they are essential for platform operation. Functional, analytics, and marketing cookies may be managed via your browser settings. Please note that disabling certain cookies may affect the functionality of the platform.

3bdd does not use cross-site tracking technologies to follow your browsing behaviour outside of the 3bdd.io domain.

3bdd retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following retention periods apply:

• Account & Identity Data: Retained for the duration of the account's active life and for a minimum of 5 years following account closure, in order to comply with anti-money laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, consistent with applicable financial record-keeping obligations.
• KYC Verification Documents: Retained for the duration of the active account and for 5 years following account closure. Copies of identity documents are stored in encrypted form and access is restricted to authorised personnel.
• Gaming Activity Logs: Retained for 3 years following the last recorded activity, used for dispute resolution, responsible gaming monitoring, and fraud prevention.
• Customer Support Communications: Retained for 2 years from the date of the last communication, for quality assurance and dispute resolution purposes.
• Marketing Preference Data: Retained until you withdraw consent or close your account. Opt-out records are retained indefinitely to ensure we honour your preferences.
• Technical / Log Data: Server logs and IP address records are retained for 12 months for security monitoring and fraud prevention purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Data that is subject to an ongoing legal hold will be retained until the hold is lifted.

3bdd takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures to protect it against unauthorised access, loss, destruction, alteration, or disclosure:

• Encryption in Transit: All communications between your browser or mobile device and our servers are encrypted using TLS 1.3 and 256-bit SSL certificates.
• Encryption at Rest: Sensitive personal data stored on our systems — including identity documents, financial records, and password hashes — is encrypted using AES-256. Plain-text passwords are never stored.
• Access Controls: Access to systems containing personal data is restricted to authorised 3bdd personnel on a strict need-to-know basis. All access is authenticated, logged, and audited.
• Penetration Testing: Our platform undergoes regular penetration testing by independent security specialists to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: 3bdd maintains a documented incident response plan. In the event of a confirmed data breach, the plan specifies containment, investigation, notification, and remediation procedures with defined timelines.
• Employee Training: All 3bdd personnel with access to personal data receive data protection and security awareness training upon joining and on a recurring annual basis.

As a player whose personal data is processed by 3bdd, you have the following rights with respect to your information. To exercise any of these rights, please contact our support team at [email protected] (plain text — not a clickable link). We will respond to all data rights requests within 30 calendar days.

• Right of Access: You may request a copy of the personal data 3bdd holds about you, along with information about how it is used, where it came from, and who it has been shared with.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it. Identity-critical data such as name and date of birth may require documentary verification before correction is applied.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where processing was unlawful. This right is subject to legal retention obligations — data we are required to retain for AML or regulatory purposes cannot be deleted on request during the mandatory retention period.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute about accuracy is being resolved.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your personal data in a structured, machine-readable format for transfer to another provider.
• Right to Object: You may object to processing based on legitimate interests at any time. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

The 3bdd platform is strictly for individuals aged 21 years and older. We do not knowingly collect personal data from persons under the age of 21. Age verification checks are conducted during the registration process and as part of KYC verification prior to the processing of withdrawals.

If 3bdd discovers that a player account was created by or on behalf of a person under the age of 21, the account will be immediately closed, all activity will be voided, and any deposited funds will be returned to the payment source. Any personal data associated with the underage account will be deleted promptly, subject to any mandatory legal reporting obligations.

Parents and guardians who believe that a minor in their care has created an account on the 3bdd platform are encouraged to contact our support team immediately so that the matter can be investigated and resolved without delay.

3bdd may send you promotional emails, SMS messages, and in-platform notifications about bonuses, new games, seasonal promotions (such as Eid and Pohela Boishakh offers), cricket betting markets, and platform news — but only where you have given your explicit consent to receive such communications during registration or via your account preferences.

Opting Out. You may withdraw your consent to receive marketing communications at any time by: (a) clicking the unsubscribe link included in every promotional email; (b) replying STOP to any promotional SMS; or (c) updating your communication preferences in the Account Settings section of the platform. Opt-out requests are processed within 5 business days. Please note that opting out of marketing communications does not affect transactional and account-related messages, which we may send regardless of marketing preference.

No Third-Party Marketing. 3bdd will never share your personal data with third-party businesses for their own marketing purposes. Any third-party marketing that references 3bdd but is sent without your direct consent from a 3bdd channel should be treated as unsolicited and reported to our support team.

3bdd operates primarily to serve players in Bangladesh. However, certain third-party service providers we engage — including game content studios, KYC verification platforms, and cloud infrastructure providers — may process personal data on servers located outside Bangladesh. Where such international transfers occur, 3bdd takes the following steps to ensure your data remains adequately protected:

• Contractual Safeguards: We require all third-party processors handling data outside Bangladesh to enter into data processing agreements that impose data protection obligations at least equivalent to those described in this Privacy Policy.
• Security Standards: We assess the security practices of international processors prior to engagement and require them to maintain encryption, access controls, and incident response capabilities consistent with industry standards.
• Data Minimisation on Transfer: Where data must be transferred internationally, we apply data minimisation principles — transferring only the minimum data necessary for the processor to fulfil their contracted function.

By using the 3bdd platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Bangladesh in the circumstances described above, subject to the safeguards set out in this section.

3bdd reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or the services we offer. When we make material changes to this Policy, we will notify registered players by email to their registered address and by displaying a prominent notice on the platform for a minimum of 30 days prior to the changes taking effect.

The effective date at the top of this document will be updated each time the Policy is revised. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Your continued use of the 3bdd platform following the effective date of any revision constitutes your acceptance of the updated Policy. If you do not agree with the revised Policy, you should close your account before the updated version takes effect.

A version history of material Policy changes is available on request from our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 3bdd processes your personal data, please contact our support team using the details below. Our data protection point of contact is available 24/7 and will acknowledge your enquiry within 24 hours.