xxx365 Privacy Policy — Your Data, Your Rights

xxx365 collects personal data only to the extent necessary to deliver a safe, personalised, and compliant gaming experience to our players in Bangladesh and across our supported markets. We collect information in three primary ways: directly from you when you register or interact with the platform, automatically as you use our services, and from trusted third parties where relevant.

1.1 Information You Provide Directly

When you register an account, complete identity verification, make a deposit or withdrawal, or contact customer support, you may provide us with the following categories of personal data:

1.2 Information Collected Automatically

When you visit xxx365.app or use our mobile platform, we automatically collect certain technical and behavioural data through cookies, log files, and similar tracking technologies. This includes:

• Device & Technical Data: IP address, device type (mobile/tablet/desktop), operating system, browser type and version, screen resolution.
• Usage Data: Pages visited, game sessions played, bet history, session duration, click patterns, navigation path through the platform.
• Location Data: General geographic location derived from IP address (country and city level — we do not collect precise GPS coordinates).
• Performance Data: Error logs, crash reports, page load times, and technical diagnostics used to improve platform stability.

1.3 Information From Third Parties

xxx365 may receive supplementary personal data about you from the following trusted third-party sources:

• Payment Processors: Transaction confirmation data from bKash, Nagad, Rocket, Upay, and banking partners (Dutch-Bangla Bank, BRAC Bank, City Bank, etc.) to verify deposit and withdrawal status.
• Identity Verification Partners: Results from third-party KYC service providers used to cross-reference identity documents.
• Fraud & Risk Partners: Risk signals from fraud prevention networks used to protect the platform and its players.
• Game Providers: Game session data from our certified third-party game studios including Evolution Gaming, Ezugi, Pragmatic Play, and Spribe, to resolve disputes and maintain game integrity records.

xxx365 processes personal data only for specific, clearly defined purposes. We do not use your data for purposes that are incompatible with those stated here, and we never sell your personal data to third parties for their own marketing use. The following table summarises the primary purposes for which xxx365 processes personal data and the corresponding lawful basis for each.

2.1 Marketing Communications

xxx365 will only send you promotional emails, SMS messages, or push notifications about bonuses, game launches, cricket betting events (BPL, IPL, T20 World Cup), and seasonal promotions (Eid, Pohela Boishakh) if you have explicitly opted in to receive such communications at account registration or through your account preferences. You may withdraw your consent and opt out of marketing communications at any time by updating your notification preferences in your xxx365 account settings, or by contacting support at [email protected]. Opting out of marketing communications will not affect your receipt of essential transactional messages related to your account.

2.2 Automated Decision-Making

xxx365 uses automated processing in limited circumstances, primarily for real-time fraud detection and responsible gaming pattern analysis. Where an automated process makes a decision that significantly affects you — such as temporarily blocking a withdrawal pending a fraud investigation — you have the right to request human review of that decision. Please contact [email protected] to invoke this right.

xxx365 uses cookies and similar tracking technologies to operate essential platform functions, understand how players use the site, and deliver a personalised experience. A cookie is a small text file stored on your device when you visit a website. It does not contain executable code and cannot access other files on your device.

3.1 Types of Cookies We Use

3.2 Managing Your Cookie Preferences

You can control non-essential cookies through your xxx365 account privacy settings. You may also manage cookie preferences at the browser level — most modern browsers (Chrome, Firefox, Safari, Edge) allow you to block or delete cookies through their settings menus. Please note that disabling strictly necessary cookies will prevent you from logging in to your xxx365 account and using the platform's core features.

xxx365 does not sell, rent, or trade your personal data to any third party for commercial gain. We share your data only in the specific circumstances described below, and only to the extent necessary for the stated purpose.

4.1 When We Share Your Data

• Payment Processing Partners: We share financial data with bKash, Nagad, Rocket, Upay, Visa, Mastercard, and our banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank) solely to process your deposit and withdrawal transactions. These partners are bound by their own regulatory obligations and data protection commitments.
• Identity Verification Services: We share identity document data with our KYC providers to complete the account verification process. KYC providers are contractually prohibited from using your data for any purpose other than identity verification on behalf of xxx365.
• Game Providers: We share your account ID and game session data with certified game studios (Evolution Gaming, Ezugi, Pragmatic Play, Netent, Microgaming, Spribe) to enable gameplay and support dispute resolution. Game providers do not receive your full identity or financial data.
• Fraud Prevention Networks: We may share risk signals (such as device fingerprints and anonymised transaction patterns) with fraud prevention partners to protect the platform and all players from financial crime.
• Legal & Regulatory Authorities: We will disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of xxx365, its players, or the wider public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of xxx365's business operations, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and your rights will be preserved.

4.2 International Data Transfers

Some of our third-party service providers — particularly game studios and analytics platforms — may be based outside Bangladesh and may process your data in other countries. xxx365 ensures that all international data transfers are subject to appropriate safeguards, including data processing agreements that require the recipient to maintain data protection standards equivalent to those applied by xxx365. Where possible, xxx365 selects service providers with data centres in Asia to minimise cross-border transfer distances and latency for Bangladeshi players.

xxx365 takes the security of your personal data seriously and applies industry-standard technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction.

5.1 Security Measures

• SSL/TLS Encryption: All data transmitted between your device and xxx365.app is encrypted using SSL/TLS protocols, protecting it from interception during transit.
• AES-256 Data Encryption: Personal data and financial records stored in xxx365 databases are encrypted at rest using AES-256 encryption.
• Access Controls: Access to player personal data is restricted to xxx365 staff members who have a specific operational need. All internal access is logged and subject to regular audit review.
• Two-Factor Authentication: xxx365 account holders are encouraged to enable two-factor authentication (2FA) to provide an additional layer of security beyond their password.
• Penetration Testing: xxx365 conducts regular third-party security assessments and penetration testing of its platform infrastructure to identify and address vulnerabilities proactively.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, xxx365 will notify affected players promptly and take immediate remediation steps.

5.2 Data Retention

xxx365 retains personal data for as long as is necessary for the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following general retention periods apply:

When personal data is no longer required, xxx365 securely deletes or anonymises it in accordance with our internal data disposal procedures. Anonymised aggregate data (from which no individual can be identified) may be retained indefinitely for statistical and platform improvement purposes.

As a user of the xxx365 platform, you hold a set of meaningful rights over your personal data. xxx365 is committed to honouring these rights promptly and without unnecessary barriers. To exercise any of the rights listed below, please contact our Data Protection team at [email protected] with the subject line "Privacy Rights Request" and your registered account username.

xxx365 will acknowledge your request within 3 business days (Bangladesh Standard Time, UTC+6) and will aim to fulfil it within 30 days. In complex cases, this period may be extended by a further 30 days, and we will notify you if an extension is required.

xxx365 is committed to keeping this Privacy Policy current, accurate, and reflective of our actual data practices. We review this policy at least annually and update it whenever our data processing activities change in a material way.

7.1 Policy Updates

When we make significant updates to this Privacy Policy, we will notify registered players by posting a notice within the xxx365 platform and, where the change is material, by sending a notification to your registered email address or mobile number. The revised policy will be published at xxx365.app/privacy-policy with an updated effective date. Your continued use of the xxx365 platform after the effective date of a revised policy constitutes your acceptance of the changes. If you do not accept the revised policy, you should stop using the platform and contact support to request account closure.

7.2 Contacting Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or xxx365's handling of your personal data, please contact our Data Protection team:

• Email: [email protected] (subject line: "Privacy Enquiry")
• Response Time: All privacy-related enquiries are acknowledged within 24 hours and fully responded to within 5 business days (BST, UTC+6).

xxx365 values every privacy concern raised by its players. We are committed to handling all data-related queries with respect, transparency, and genuine care for your rights.