Privacy Policy

1. Introduction

Welcome to 365a. We are a trusted online casino and sports betting platform serving players across Bangladesh, from Dhaka and Chittagong to Sylhet, Khulna, and beyond. This Privacy Policy explains how 365a collects, processes, stores, and protects the personal information of users who access and use our platform.

By registering an account with 365a, making a deposit, placing a bet, or simply browsing our site, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, we kindly ask that you discontinue use of our platform.

This policy covers all digital touchpoints of the 365a platform including the main website at 365a.ws, any mobile-optimised version of the site, and communications sent to you by 365a. This document should be read alongside our Terms and Conditions and Responsible Gaming policy for a complete understanding of your obligations and our commitments to you.

2. Information We Collect

365a collects several categories of personal information in order to provide, maintain, and improve our services. The types of data we collect fall into three broad categories: information you provide directly, information we collect automatically, and information received from third parties.

Information You Provide Directly

• Full name, date of birth, and national identification details for KYC verification.
• Contact information including email address, mobile phone number (used for bKash, Nagad, or Rocket verification), and residential address.
• Financial information including payment method preferences, transaction history, and deposit/withdrawal records.
• Username, password (stored in encrypted form), and any profile preferences you set within your account.

Information Collected Automatically

• IP address, device type, operating system, and browser type for security and fraud prevention purposes.
• Geolocation data at city or country level to ensure compliance with applicable regulations.
• Session activity logs including pages viewed, games played, bet amounts, and time spent on the platform.
• Cookies and similar tracking technologies as described in Section 6 of this policy.

Information from Third Parties

• Identity verification data from KYC and anti-money laundering (AML) service providers.
• Payment confirmation data from bKash, Nagad, Rocket, Upay, and other payment processors used on our platform.
• Fraud and risk scoring data from third-party security services to protect all players on the platform.

3. How We Use Your Information

365a processes personal data only for lawful, specified, and transparent purposes. We do not process data in a manner that is incompatible with the purpose for which it was originally collected. Specifically, we use your information to:

• Create and manage your 365a account, including identity verification and responsible gaming compliance.
• Process deposits and withdrawals via bKash, Nagad, Rocket, Visa, Mastercard, and other supported payment channels.
• Deliver customer support, resolve account disputes, and respond to queries submitted via email or live chat.
• Send you promotional communications about bonuses, free spins, cricket betting promotions, and seasonal offers — only where you have opted in.
• Detect, investigate, and prevent fraudulent transactions, money laundering, underage gambling, and other prohibited activities.
• Improve the platform's performance, game selection, user interface, and overall player experience through aggregate analytics.

We rely on legitimate interest, contractual necessity, and — where required — your explicit consent as the legal basis for processing each category of personal data. You may withdraw consent at any time, though doing so may impact your ability to use certain features of the platform.

4. Sharing of Information

365a does not sell, rent, or disclose your personal information to unauthorised third parties. We may, however, share data with trusted partners under strict contractual obligations and only to the extent necessary to deliver our services.

Payment Processors

When you make a deposit or withdrawal, relevant transaction details are shared with payment service providers including bKash, Nagad, Rocket, Upay, Visa, and Mastercard solely for the purpose of completing the transaction. These providers are bound by their own privacy policies and are not permitted to use your data for any other purpose.

Identity Verification Services

To comply with KYC and AML requirements, we share identification documents and verification data with accredited identity verification and anti-fraud service providers. This sharing is strictly limited to the purpose of account verification and is protected by data processing agreements.

Legal and Regulatory Obligations

We may be required by law to disclose certain personal information to government authorities, law enforcement agencies, or regulatory bodies. In such cases, 365a will disclose only the minimum amount of information strictly required to meet the legal obligation, and will notify you where legally permissible.

5. Payment Data and Financial Security

365a takes the security of financial data extremely seriously. All payment transactions processed on our platform — whether via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, or card payments — are conducted over encrypted SSL connections. We do not store full card numbers, CVV codes, or mobile banking PINs on our servers.

Transaction records are retained for a period required by applicable financial regulations and are accessible only to authorised 365a personnel and, where legally required, to financial regulatory authorities. All payment data is processed in a PCI-DSS compliant manner to the extent applicable.

If you suspect any unauthorised transaction on your 365a account, you must notify us immediately by emailing [email protected]. We will investigate and, where appropriate, place a temporary hold on your account to prevent further unauthorised activity.

6. Cookies and Tracking Technologies

365a uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, and analyse user behaviour to improve our services. A cookie is a small text file placed on your device when you visit our website.

Essential Cookies

These cookies are required for the basic functioning of the 365a platform — including maintaining your login session, securing your account, and processing transactions. They cannot be disabled without significantly impairing your ability to use the site.

Analytics Cookies

These cookies help us understand how players interact with 365a — which games are most popular, which pages have high exit rates, and how long users spend on the platform. The data collected through analytics cookies is aggregated and anonymised; it does not identify you personally. You may opt out of analytics cookies via your browser settings.

Marketing and Preference Cookies

These cookies remember your language preference, regional settings, and — where you have given consent — allow us to show you relevant promotional messages. Marketing cookies are non-essential and may be disabled at any time via your browser's cookie management settings without affecting the core functionality of the platform.

7. Data Retention

365a retains your personal data only for as long as is necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable law. As a general principle: account data is retained for the duration of your active account and for a minimum period thereafter as required by financial regulations; transaction records and KYC documents are retained for a minimum of 5 years following the closure of your account, consistent with standard AML compliance requirements; and communications and support tickets are retained for up to 3 years.

When your personal data is no longer required, 365a will securely delete or anonymise it in a manner that prevents reconstruction. You may request early deletion of your data subject to legal retention obligations by contacting our support team at [email protected].

8. Your Rights

As a user of the 365a platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected]. We will respond to all verified requests within 30 days.

• Right of access: you may request a copy of the personal data we hold about you at any time.
• Right to rectification: if any data we hold about you is inaccurate or incomplete, you may request that we correct it.
• Right to erasure: subject to legal retention requirements, you may request deletion of your personal data.
• Right to restrict processing: you may ask us to pause processing of your data while a dispute or accuracy concern is being investigated.
• Right to withdraw consent: where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Please note that certain rights may be limited where 365a has a legal obligation to retain or process your data. We will always explain any such limitation clearly when responding to your request.

9. Security Measures

365a employs a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include SSL/TLS encryption for all data in transit, encrypted storage of sensitive data at rest, role-based access controls limiting staff access to personal data, regular security audits and penetration testing, and two-factor authentication (2FA) options for player accounts.

Despite our best efforts, no system is entirely immune to security threats. In the unlikely event of a data breach that poses a risk to your rights and freedoms, 365a will notify affected users promptly and take all reasonable steps to mitigate harm. We encourage all players to use strong, unique passwords for their 365a accounts and to never share account credentials with others.

10. Third-Party Links

The 365a platform may from time to time contain references to third-party services, game providers such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi, and payment partners. While we strive to associate only with reputable organisations, 365a is not responsible for the privacy practices of external parties. We strongly recommend that you review the privacy policies of any third-party service you interact with via our platform. This Privacy Policy applies only to data collected and processed by 365a directly.

11. Age Restriction

365a is strictly an adult platform. Our services are available only to individuals who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21. If you are a parent or guardian and believe that a minor has registered an account or provided personal data to 365a without your consent, please contact us immediately at [email protected] so that we may delete such data promptly.

Age verification is a core part of our KYC process. All new players are required to submit valid government-issued identification confirming they are 21 years or older before any withdrawal can be processed. This is a non-negotiable requirement and is consistent with our Responsible Gaming commitments.

12. Changes to This Policy

365a reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will update the effective date shown at the top of this document and, where practicable, notify registered users via email or an in-platform notification. Your continued use of the 365a platform following such notification constitutes your acceptance of the revised policy.

We recommend that you review this Privacy Policy periodically to stay informed about how 365a handles your personal data. If you have any objection to any revision of this policy, you should cease use of the platform and contact us to request account closure.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 365a processes your personal data, please contact our dedicated privacy support team. We are committed to addressing all privacy-related queries with care and in a timely manner.

Email: [email protected] (plain text — not a clickable link). Our support team operates 24/7 Bangladesh Standard Time (BST, UTC+6) and aims to respond to all privacy requests within 48 hours.