366bt Privacy Policy — How We Handle Your Personal Data
At 366bt, protecting your personal information is a core responsibility we take seriously. This Privacy Policy explains exactly what data we collect from players in Bangladesh, why we collect it, how it is used and stored, and what rights you have over your own information. We are committed to full transparency so you can engage with our platform with complete confidence.
Your Privacy Matters: This Privacy Policy applies to all personal data collected through the 366bt website at 366bt.io, including all betting, casino, and gaming services. By registering an account or using the platform, you acknowledge that you have read and understood this policy. If you disagree with any provision, please discontinue use of the platform and contact our support team.
Table of Contents
- 1. Data Controller
- 2. Data We Collect
- 3. How We Collect Your Data
- 4. Legal Basis for Processing
- 5. How We Use Your Data
- 6. Data Sharing and Disclosure
- 7. Cookies and Tracking Technologies
- 8. Data Retention
- 9. Data Security
- 10. Your Rights Over Your Data
- 11. Children and Minors
- 12. Changes to This Policy
- 13. Contact Us
1 Data Controller
For the purposes of this Privacy Policy, the data controller responsible for the personal information collected through the 366bt platform is 366bt (referred to throughout this document as "366bt", "we", "us", or "our"). As the data controller, 366bt determines the purposes and means by which your personal data is processed.
If you have any questions or concerns relating to how 366bt handles your personal data, or if you wish to exercise any of your data rights as described in Section 10, you may contact our dedicated data protection team directly at: [email protected]
366bt operates the online betting and casino platform accessible at 366bt.io, which is primarily targeted at adult players aged 21 and above residing in Bangladesh. All personal data processed by 366bt in connection with your use of the platform is subject to the terms of this Privacy Policy.
2 Data We Collect
366bt collects the minimum personal data necessary to provide a secure, compliant, and personalised betting and gaming experience. The categories of data we may collect about you include, but are not limited to, the following:
2.1 Identity and Registration Data
- Full legal name as it appears on your government-issued identification document.
- Date of birth, used strictly for age verification to confirm you are 21 years of age or older.
- Gender (optional, collected only where you voluntarily provide it during registration).
- Username and account password (stored in encrypted, non-recoverable form).
- National Identity Card (NID) number or passport number, collected during KYC verification.
2.2 Contact Data
- Email address, used for account communications, security alerts, and support correspondence.
- Mobile phone number, used for account security, two-factor authentication where enabled, and payment verification.
- Residential address, including division, district, and postal code within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh).
2.3 Financial and Transaction Data
- Details of all deposits and withdrawals processed through your 366bt account, including transaction amounts in Bangladeshi Taka (BDT), timestamps, and payment method used.
- Mobile wallet identifiers associated with bKash, Nagad, Rocket, or Upay transactions.
- Partial card details (last four digits and card type) for Visa or Mastercard transactions — full card numbers are never stored by 366bt.
- Account balance history and bonus credit records.
2.4 Betting and Gaming Activity Data
- Records of all bets placed, including stake amounts, odds accepted, markets selected, and settlement outcomes.
- Casino and slot game session data, including games played, session durations, wagering volumes, and win/loss records.
- Bonus and promotion usage history, including wagering requirement progress.
2.5 Technical and Device Data
- IP address, browser type and version, operating system, and device type (desktop, mobile, or tablet).
- Geolocation data derived from IP address, used to detect access from prohibited jurisdictions.
- Session logs, login timestamps, and activity timestamps.
- Cookies and similar tracking technologies as described in Section 7.
2.6 KYC and Verification Documents
- Copies of government-issued photo identification (National Identity Card or passport).
- Proof of address documentation (utility bills, bank statements, or other acceptable documents issued within the past three months).
- Proof of payment method ownership where required.
- Any additional documentation requested by the 366bt compliance team during an enhanced due diligence review.
3 How We Collect Your Data
366bt collects your personal data through the following channels:
3.1 Directly from You
The majority of personal data we hold is provided directly by you when you register an account, complete your KYC verification, make a deposit or withdrawal request, contact our support team, participate in a promotion, or update your account settings. We rely on you to ensure that the information you provide is accurate and up to date.
3.2 Automatically through Platform Use
When you access and use the 366bt platform, certain technical data is collected automatically by our systems. This includes your IP address, browser fingerprint, device identifiers, session duration, pages visited, and in-app interactions. This data is collected through server logs, cookies, and similar tracking mechanisms as further described in Section 7.
3.3 From Third-Party Service Providers
366bt may receive personal data about you from trusted third-party service providers in the following contexts:
- Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard networks) may share transaction confirmation data with us to reconcile your deposits and withdrawals.
- Identity verification services may share the results of automated document checks during KYC processing.
- Fraud prevention and anti-money-laundering screening services may share risk flags or watchlist matches as part of our compliance obligations.
- Game studios and content providers (such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi) may share session-level gaming data with us for dispute resolution and technical support purposes.
4 Legal Basis for Processing
366bt processes your personal data on the following legal bases:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of a contract (the 366bt Terms & Conditions you accepted upon registration) |
| Processing deposits and withdrawals | Performance of a contract; legal obligation (anti-money-laundering compliance) |
| KYC and age verification | Legal obligation; legitimate interests (fraud prevention and platform integrity) |
| Fraud detection and security monitoring | Legitimate interests (protecting players and the platform from fraudulent activity) |
| Customer support communications | Performance of a contract; legitimate interests |
| Responsible gaming monitoring | Legitimate interests (player welfare); legal obligation |
| Marketing and promotional communications | Consent (you may opt out at any time by contacting support) |
| Platform analytics and improvement | Legitimate interests (improving the quality and reliability of services) |
5 How We Use Your Data
366bt uses the personal data it collects for the following purposes:
5.1 Account and Service Delivery
Your registration data, contact data, and financial data are used to create and manage your 366bt account, process your deposit and withdrawal requests, credit bonuses to your account, and communicate with you about your account activity. Without this data, we would be unable to provide the core services of the platform.
5.2 Identity Verification and Compliance
366bt is required to verify the identity and age of all players before processing withdrawal requests. Your KYC documents and identity data are used solely for this verification purpose, as well as to fulfil our anti-money-laundering and fraud-prevention obligations. We do not use KYC data for any commercial profiling purpose.
5.3 Security and Fraud Prevention
Technical and device data, combined with transaction and betting activity data, is analysed by our security systems to detect and prevent fraudulent behaviour, account takeover attempts, bonus abuse, collusion, and money laundering. Automated alerts and human review processes both form part of this security infrastructure.
5.4 Responsible Gaming Monitoring
366bt uses your gaming activity data — including session length, betting frequency, loss patterns, and deposit volumes — to monitor for signs of problem gambling behaviour. Where our systems or support team identify a potential concern, we may reach out proactively with responsible gaming information or, where appropriate, apply account-level safeguards in line with our Responsible Gaming policy.
5.5 Platform Improvement and Analytics
Aggregated and anonymised technical data is used to analyse platform usage patterns, identify performance bottlenecks, improve the user experience, and inform decisions about which games, features, and promotions to offer. This analytics data is not linked to any individually identifiable player profile.
5.6 Marketing Communications
Where you have provided consent, 366bt may use your email address and mobile number to send you promotional communications about new games, deposit bonus offers, seasonal promotions (such as those tied to BPL cricket season, Eid, or Pohela Boishakh), and platform updates. You may withdraw your consent at any time by contacting [email protected] — withdrawal of consent does not affect the lawfulness of processing that occurred prior to that withdrawal.
6 Data Sharing and Disclosure
366bt does not sell, rent, or trade your personal data to any third party for marketing purposes. We share your data only in the limited circumstances described below, and always with appropriate contractual safeguards in place.
6.1 Payment Service Providers
To process your deposits and withdrawals, we share relevant transaction data with our payment partners, including bKash, Nagad, Rocket, Upay, and the Visa and Mastercard card networks. These providers act as independent data processors and handle your payment data under their own privacy policies and security standards. 366bt shares only the minimum data necessary to complete each transaction.
6.2 Game Studios and Content Providers
When you play a game hosted by a third-party studio (such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, or Ezugi), limited session data — including your account identifier and wager amounts — is shared with that studio to facilitate gameplay, calculate real-time results, and enable dispute resolution. Game studios do not receive your identity documents or full contact details.
6.3 KYC and Compliance Services
366bt may share your identity and verification documents with approved third-party identity verification and anti-money-laundering screening services. These providers are contractually bound to process your data solely for the purposes of completing the verification or screening process on 366bt's behalf.
6.4 Legal and Regulatory Authorities
366bt may disclose your personal data to law enforcement agencies, regulatory authorities, or other competent public bodies where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of 366bt, its players, or the public. Such disclosures are made on a case-by-case basis and are limited to the minimum data required.
6.5 Business Transfers
In the event that 366bt undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy implications via a notice on the platform or by direct communication, prior to the effective date of the transfer.
Data Protection Agreements: All third parties with whom 366bt shares personal data are required to enter into appropriate data processing agreements that bind them to process your data only for specified, lawful purposes and to maintain security standards equivalent to those employed by 366bt itself.
7 Cookies and Tracking Technologies
366bt uses cookies and similar tracking technologies to operate the platform, maintain your session state, detect fraud, and analyse usage patterns. The following categories of cookies may be active when you use the 366bt platform:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintain your login session, prevent cross-site request forgery, and ensure core platform functionality operates correctly. | Session / up to 24 hours |
| Functional | Remember your display preferences, language settings, and last-visited game categories to personalise your experience. | Up to 30 days |
| Analytics | Collect anonymised data about how players navigate the platform, which pages are most visited, and where technical issues are encountered, to inform platform improvements. | Up to 12 months |
| Security and Fraud Detection | Identify unusual access patterns, detect device spoofing, and flag potentially fraudulent account activity in real time. | Session / up to 7 days |
You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair the core functionality of the 366bt platform, including your ability to log in and place bets. Disabling analytics or functional cookies will not prevent you from using the platform but may reduce the quality of your personalised experience.
8 Data Retention
366bt retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:
| Data Category | Retention Period |
|---|---|
| Account registration and identity data | For the duration of your account, plus 5 years following account closure |
| KYC verification documents | For the duration of your account, plus 5 years following account closure |
| Financial transaction records | 7 years from the date of each transaction (to satisfy financial record-keeping obligations) |
| Betting and gaming activity logs | 3 years from the date of each session or wager |
| Support and correspondence records | 3 years from the date of the last communication |
| Technical and device data (server logs) | 90 days from date of collection |
| Marketing consent records | Until consent is withdrawn, plus 2 years thereafter |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an individual player. Where data is retained beyond account closure for legal compliance purposes, it is held in restricted storage accessible only to authorised compliance personnel.
9 Data Security
366bt employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes:
- 256-bit SSL/TLS encryption on all connections between your browser or device and the 366bt platform, ensuring that data transmitted over the internet cannot be intercepted in readable form.
- Encrypted password storage using industry-standard cryptographic hashing algorithms. Passwords are never stored in plain text and cannot be retrieved by 366bt staff.
- Access controls and role-based permissions ensuring that 366bt employees can only access the player data necessary for their specific job function. KYC documents, for example, are accessible only to trained compliance staff.
- Intrusion detection and monitoring systems that continuously scan platform infrastructure for unauthorised access attempts, unusual traffic patterns, and security anomalies.
- Regular security audits and penetration testing conducted by qualified security professionals to identify and remediate vulnerabilities before they can be exploited.
- Secure data centre infrastructure with physical access controls, redundant power and cooling systems, and off-site backup procedures to protect against data loss from hardware failure or environmental incident.
Despite these measures, no security system is completely impenetrable. In the event of a data breach that poses a risk to your rights and freedoms, 366bt will notify affected players promptly and without undue delay, and will take all reasonable steps to contain and remediate the incident.
You also have a role to play in keeping your account secure. Never share your password with anyone, use a unique password that you do not use for other services, and contact [email protected] immediately if you suspect any unauthorised access to your account.
10 Your Rights Over Your Data
As a player on the 366bt platform, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected] with your request. We will respond within 30 days of receipt.
10.1 Right of Access
You have the right to request a copy of all personal data that 366bt holds about you. We will provide this information in a clear, structured format. Please note that certain data may be withheld where disclosure would prejudice an ongoing fraud investigation or conflict with our legal obligations.
10.2 Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. For changes to core identity data (such as your legal name or date of birth), we may require supporting documentary evidence before making the amendment.
10.3 Right to Erasure
You may request the deletion of your personal data in circumstances where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to our legal data retention obligations — financial transaction records, for example, must be retained for the periods specified in Section 8 regardless of an erasure request.
10.4 Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or while a complaint about our processing is under review. During a restriction, we will continue to store your data but will not actively process it.
10.5 Right to Data Portability
Where processing is based on your consent or on the performance of a contract, you have the right to receive a copy of your personal data in a structured, machine-readable format, and to request that we transmit this data directly to another service provider where technically feasible.
10.6 Right to Object
You have the right to object to the processing of your personal data where that processing is based on legitimate interests, including profiling for marketing purposes. Where you object to marketing processing, we will cease that processing immediately. Where you object to processing for other legitimate interests, we will review your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
10.7 Right to Withdraw Consent
Where processing is based on your consent (such as for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing that occurred prior to the withdrawal. To withdraw consent, contact us at [email protected].
11 Children and Minors
Strict Age Restriction — 21+ Only: The 366bt platform is strictly prohibited for individuals under the age of 21. We do not knowingly collect personal data from anyone under 21 years of age. If we discover or are informed that a player is under 21, we will immediately close the account, forfeit any associated balance, and securely delete all personal data collected in connection with that account.
366bt employs age verification procedures as a mandatory step before any withdrawal request can be processed. We take our obligation to prevent underage gambling seriously and actively cooperate with responsible gaming organisations and the families or guardians of individuals who may have accessed the platform in breach of our age policy.
If you are a parent or guardian and believe that a minor under your care has registered an account on the 366bt platform, please contact us immediately at [email protected] with the relevant details. We will investigate and act promptly on all such reports.
12 Changes to This Policy
366bt reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. Where a material change is made, we will notify registered players by email or through a prominent notice displayed on the platform, at least 7 days before the change takes effect.
The "Last updated" date shown at the top of this document indicates when the most recent revision was made. We encourage you to review this Privacy Policy periodically so that you remain fully informed about how your data is being used. Your continued use of the 366bt platform following the effective date of any amendment constitutes your acknowledgement of the updated policy.
If you object to any change to this Privacy Policy, you may request the closure of your account in accordance with Section 8.3 of the 366bt Terms & Conditions, and any real-money balance will be returned to you via your nominated payment method, subject to KYC requirements being satisfied.
13 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 366bt processes your personal data, please do not hesitate to reach out to our data protection team. We are committed to responding to all privacy-related enquiries promptly and transparently.
Email: [email protected] (plain text — not a clickable link)
Please include your registered account username, a clear description of your query or request, and your preferred contact method. We aim to acknowledge all privacy-related requests within 48 hours and to provide a substantive response within 30 days, in line with applicable data protection standards.
For formal complaints that cannot be resolved through direct communication with our team, you may escalate the matter to the relevant consumer protection or data protection authority in your jurisdiction. 366bt commits to engaging with any formal complaint process in good faith.
Data Protection Contact: All data access requests, erasure requests, objections to processing, and privacy complaints should be sent to: [email protected] — available 24 hours a day, 7 days a week, including Bangladesh public holidays such as Victory Day (December 16) and Independence Day (March 26).
Our Privacy Commitments to You
Six core principles that guide how 366bt collects, uses, and protects your personal data — every day, on every interaction.
256-Bit SSL Encryption
Every connection between your device and the 366bt platform is protected by 256-bit SSL/TLS encryption. Whether you are depositing via bKash, withdrawing to Nagad, or browsing your betting history, your data travels over a fully encrypted channel that cannot be intercepted in readable form.
No Data Sales — Ever
366bt does not sell, rent, or trade your personal information to third parties for commercial marketing purposes. Your data is shared only with the service providers directly involved in delivering our platform — payment processors, game studios, and KYC services — and only to the minimum extent necessary.
Minimal Data Collection
We collect only the personal data that is genuinely required to operate your account, process your transactions, and comply with our legal obligations. We do not request unnecessary information during registration, and we do not build behavioural marketing profiles based on your gaming or betting activity.
Full Transparency on Data Use
This Privacy Policy sets out every purpose for which 366bt processes your personal data. There are no hidden uses, undisclosed sharing arrangements, or covert data practices. If we ever need to use your data for a new purpose, we will update this policy and notify you before the change takes effect.
Your Rights, Respected
You have the right to access, correct, export, restrict, or delete the personal data 366bt holds about you. We treat all data rights requests seriously and respond within 30 days. Simply contact our support team at [email protected] with your request and we will guide you through the process promptly and without unnecessary friction.
Defined Retention Periods
Your data is not kept indefinitely. 366bt applies clear, documented retention periods to every category of personal data we hold — from 90-day server logs through to 7-year financial transaction records required by law. Once the retention period expires, data is securely deleted or fully anonymised so it can never be traced back to you.
Ready to Explore 366bt?
Now that you understand how 366bt protects your personal data, discover everything the platform has to offer — from live cricket betting and slot titles to live casino games, all with instant bKash and Nagad deposits.