bad365 Privacy Policy

This Privacy Policy applies to all personal data collected, processed, and stored by bad365 in connection with the operation of the online gaming and sports betting platform accessible at bad365.vip and all associated service interfaces. It governs the privacy practices of bad365 with respect to all registered players and visitors to the bad365 website.

bad365 takes the privacy of its players seriously. We understand that you are entrusting us with sensitive personal information when you register an account, make a deposit, or interact with our support team. This Privacy Policy is designed to give you clear and complete information about how that trust is honoured.

By creating a bad365 account or continuing to use the bad365 platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with the terms of this Privacy Policy, you must discontinue your use of bad365 immediately.

For the purposes of this Privacy Policy, bad365 acts as the data controller in respect of all personal data collected from players and visitors to the bad365 platform. As data controller, bad365 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

All data protection queries, access requests, and complaints relating to the processing of personal data by bad365 should be directed to the bad365 Data Protection contact as set out in Section 14 of this Privacy Policy.

bad365 collects personal data in the following categories, depending on how you interact with the platform:

bad365 does not knowingly collect special categories of sensitive personal data (such as health data, religious beliefs, or biometric data) unless explicitly required by a specific regulatory obligation, in which case the relevant player will be notified in advance.

bad365 uses the personal data it collects for the following purposes:

• Account Management: To create, maintain, and secure your bad365 account, including processing your registration, verifying your identity, and managing your account settings.
• Service Delivery: To provide access to the full range of bad365 gaming and sportsbook products, process your deposits and withdrawals, and apply bonus offers to your account.
• Legal Compliance: To fulfil our obligations under applicable anti-money-laundering (AML), know-your-customer (KYC), and responsible gambling regulations, including age verification and fraud prevention.
• Customer Support: To respond to your support queries, resolve disputes, and communicate important account-related information to you.
• Platform Improvement: To analyse aggregate usage patterns on the bad365 platform in order to improve game selection, site performance, and user experience. This analysis uses anonymised or pseudonymised data wherever possible.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, account abuse, collusion, and other activities that may violate bad365's Terms and Conditions or applicable law.
• Marketing Communications: Where you have explicitly opted in, to send you promotional offers, bonus notifications, and relevant gaming updates by email or other electronic channels. You may withdraw this consent at any time.
• Responsible Gaming: To monitor gaming activity for indicators of problem gambling behaviour and to fulfil our responsible gaming obligations, including administering self-exclusion and deposit limit requests.

bad365 processes personal data on the following legal bases:

• Contractual Necessity: Processing that is required to fulfil the contract between bad365 and the player — including account registration, transaction processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML legislation, KYC requirements, and responsible gambling mandates.
• Legitimate Interests: Processing carried out for bad365's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by the player's privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — in particular, the sending of direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

bad365 does not sell, rent, or commercially disclose your personal data to third parties for their own marketing purposes. Personal data may be shared in the following limited and controlled circumstances only:

• Payment Processors: bad365 shares financial data with payment service providers — including bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partnered Bangladeshi banks — solely to process your deposits and withdrawals. These providers are bound by their own data protection obligations.
• Identity Verification Services: bad365 may share identity documents and personal details with third-party KYC/AML verification providers to fulfil our legal compliance obligations. These providers act as data processors under contract with bad365.
• Game Content Providers: Where technically necessary, limited technical data (such as session tokens) may be shared with third-party game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) to deliver their gaming content within the bad365 platform. No personally identifiable data beyond what is technically required for game delivery is shared.
• Regulatory & Law Enforcement Authorities: bad365 may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required by law or where such disclosure is necessary to protect the rights, property, or safety of bad365 or others.
• Professional Advisors: bad365 may share personal data with its legal advisors, accountants, or auditors where strictly necessary and under appropriate confidentiality obligations.

All third parties with whom bad365 shares personal data are required to process that data in accordance with applicable data protection law and are prohibited from using it for any purpose beyond that for which it was shared.

bad365 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected or as required by applicable law. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active bad365 account and for a minimum of five years following account closure, to comply with AML record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of five years from the date of each transaction in accordance with financial record-keeping requirements.
• Gaming Activity Data: Retained for up to three years following your last gaming session on bad365, after which it is anonymised for aggregate analytics or deleted.
• Support Communications: Retained for two years from the date of the last communication, to facilitate resolution of any follow-up queries or disputes.
• Marketing Consent Records: Retained for as long as you remain opted in and for one year following opt-out, to demonstrate compliance with consent requirements.

Where personal data is no longer required, bad365 will securely delete or anonymise it in accordance with our internal data disposal procedures.

bad365 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device by the bad365 website when you visit. The following types of cookies are used by bad365:

• Strictly Necessary Cookies: These cookies are essential for the bad365 platform to function. They maintain your login session, preserve your language and currency settings, and enable secure navigation between pages. These cookies cannot be disabled without preventing core platform functions from operating.
• Performance & Analytics Cookies: These cookies collect anonymised information about how players use the bad365 platform — including which pages are visited most frequently and how long sessions last — to help bad365 identify performance issues and improve the user experience.
• Functional Cookies: These cookies remember your preferences and personalisation choices (such as your preferred game category or deposit method) so that bad365 can provide a more relevant experience on your next visit.

bad365 does not use third-party advertising or cross-site tracking cookies. You can manage or delete cookies at any time via your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the bad365 platform.

bad365 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the bad365 platform is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser's address bar when visiting bad365.vip.
• At-Rest Encryption: Sensitive personal data and payment details stored on bad365's servers are protected by strong at-rest encryption algorithms.
• Access Controls: Access to personal data within bad365's systems is restricted to authorised personnel only, on a strict need-to-know basis. All staff with access to player data are subject to confidentiality obligations.
• Regular Security Audits: bad365 conducts periodic reviews of its data security infrastructure and processes to identify and address potential vulnerabilities.
• Incident Response: bad365 maintains a data breach response procedure. In the event of a personal data breach that poses a risk to player rights, affected players will be notified in accordance with applicable data protection law.

While bad365 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. Players are advised to use strong, unique passwords for their bad365 accounts and to report any suspected unauthorised access immediately to bad365 support.

Subject to applicable law, you have the following rights in relation to the personal data that bad365 holds about you:

• Right of Access: You may request a copy of all personal data that bad365 holds about you. bad365 will provide this within 30 days of receiving a valid request.
• Right to Rectification: If any personal data that bad365 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain details directly within your bad365 account settings.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that certain data may be retained where required by law (e.g., AML record-keeping obligations).
• Right to Restriction: You may request that bad365 restricts the processing of your personal data in certain circumstances, such as while a dispute over data accuracy is being resolved.
• Right to Object: You may object to the processing of your personal data where bad365 relies on legitimate interests as its legal basis, or where your data is being used for direct marketing purposes.
• Right to Data Portability: Where processing is carried out by automated means on the basis of consent or contractual necessity, you may request a copy of your data in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of any processing carried out before the withdrawal.

To exercise any of these rights, please contact bad365 support using the details in Section 14. bad365 will respond to all valid data rights requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days, in which case you will be notified of the extension and the reason for it.

bad365 operates an absolute minimum age requirement of 18 years. The bad365 platform is not directed at, and does not knowingly collect personal data from, individuals under the age of 18. If bad365 becomes aware that personal data has been collected from a minor, that data will be deleted immediately and the associated account will be closed without refund of any balance.

Parents and guardians who believe that a minor may have registered a bad365 account are urged to contact bad365 support immediately at the contact details provided in Section 14. bad365 takes underage gambling extremely seriously and cooperates fully with parental requests to investigate and close accounts where minor registration is suspected.

bad365 operates as an international online gaming platform. In the course of delivering its services, personal data may be transferred to and processed in countries outside Bangladesh. Where such transfers occur, bad365 ensures that appropriate safeguards are in place to protect your personal data, including contractual protections with data recipients that impose data protection standards equivalent to those described in this Privacy Policy.

bad365 does not transfer personal data to jurisdictions that lack adequate legal frameworks for data protection without implementing supplementary protective measures. If you have questions about the specific safeguards applicable to a particular international transfer of your data, please contact bad365 support.

bad365 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the bad365 platform. When material changes are made, bad365 will publish a notice on the platform and update the effective date shown at the top of this document.

It is your responsibility to review this Privacy Policy periodically. Your continued use of the bad365 platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with a revised version of this Privacy Policy, you must cease using bad365 and may request account closure in accordance with bad365's Terms and Conditions.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a data protection concern, please contact the bad365 team through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: For data rights requests, use "Data Rights Request — [Your Username]" to ensure prompt routing to our data protection team.
• Live Support: Available 24/7 within the bad365 platform after login
• Response Time: bad365 acknowledges all data-related queries within 48 hours (Bangladesh Standard Time, UTC+6) and provides a full response within 30 calendar days.