Privacy Policy — 345db Data Protection Commitment

1. Who We Are

345db is an online betting and casino entertainment platform serving players across Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. Our platform offers cricket betting, live casino games, slots, and instant games, accessible via our website at https://345db.io.

For the purposes of this Privacy Policy, 345db acts as the data controller — meaning we determine the purposes and means by which your personal data is processed. When you create an account and use our services, you enter into a data relationship with 345db as described in this document.

If you have any questions or concerns about how 345db handles your personal data, you may contact our support team at any time. Our contact details are provided in Section 13 of this policy.

2. Information We Collect

345db collects personal data through several channels: directly from you when you register and use our services, automatically through your device and browsing activity, and from third-party service providers as part of identity verification and payment processing.

2.1 Registration and Account Data

When you create a 345db account, we collect:

• Full legal name
• Date of birth (for age verification — you must be 21 or older)
• Email address
• Mobile phone number
• Residential address (including city and district in Bangladesh)
• Username and encrypted password
• Preferred language and currency settings

2.2 Identity Verification (KYC) Data

To comply with our Know Your Customer obligations and prevent fraud and underage gambling, we may collect:

• Copies of government-issued photo identification (National ID card, passport, or driving license)
• Proof of address documents (utility bills, bank statements dated within 3 months)
• Selfie or live photo for identity matching purposes
• Source of funds documentation where required by our compliance team

2.3 Financial and Payment Data

When you make deposits or withdrawals, we collect transaction-related information including:

• Payment method type (bKash, Nagad, Rocket, Upay, bank transfer, card)
• Account or wallet identifiers (mobile number for MFS, masked account numbers for banks)
• Transaction amounts, dates, and reference numbers
• Deposit and withdrawal history

345db does not store full card numbers or complete MFS PINs. Payment credential handling is delegated to our certified payment processing partners.

2.4 Gameplay and Betting Activity Data

As part of providing our gaming services and maintaining fair-play standards, we record:

• Bets placed, bet types, selections, stakes, and outcomes
• Casino game sessions (game title, provider, duration, wagers, wins, losses)
• Bonus activity and promotional participation history
• Responsible gaming tool usage (limit settings, self-exclusion requests)

2.5 Technical and Device Data

When you access 345db, our systems automatically collect certain technical data:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Session timestamps, pages visited, and navigation patterns
• Referring URLs and search terms (if arriving via a search engine)
• Cookie and tracking identifiers (see Section 6)

2.6 Communications Data

When you contact our support team or respond to promotional communications, we retain records of those interactions including email correspondence, live chat transcripts, and feedback submissions.

3. How We Use Your Information

345db processes personal data for clearly defined purposes. We do not use your data for any purpose beyond what is described below without first obtaining your consent or being required to do so by law.

Purpose	Data Used
Account creation and management	Registration data, contact details
Identity verification and fraud prevention	KYC documents, payment data, IP address
Processing deposits and withdrawals	Payment data, account data, transaction history
Delivering gaming and betting services	Account data, gameplay data
Customer support and dispute resolution	Communications data, account data, transaction history
Responsible gaming monitoring	Gameplay data, deposit history, behavioural patterns
Sending promotional communications (with consent)	Contact details, gameplay preferences
Legal and regulatory compliance	All categories as required
Platform security and anti-cheat systems	Technical data, device data, behavioural patterns
Service improvement and analytics	Anonymised or aggregated technical and gameplay data

4. Legal Basis for Processing

345db relies on the following legal bases to process your personal data:

• Contract performance: Processing necessary to create and manage your account, deliver gaming services, and process financial transactions.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML), Know Your Customer (KYC), and age verification obligations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where these interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications and certain non-essential cookies, where you have provided explicit, freely given consent. You may withdraw consent at any time.

5. Data Sharing and Disclosure

345db does not sell or rent your personal data to any third party. We may share your data with carefully selected third parties only in the following circumstances:

5.1 Payment Processing Partners

To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and other supported methods, we share relevant transaction data with our payment processing partners. These partners are contractually bound to process data solely for payment purposes and must maintain equivalent data security standards.

5.2 Identity Verification Providers

345db uses certified third-party KYC verification services to authenticate user identity documents and prevent fraud. These providers receive identity data on a temporary basis and are prohibited from retaining it beyond the verification process unless required by law.

5.3 Game Content Providers

Casino games on 345db are delivered by third-party studios including Pragmatic Play, Evolution Gaming, Ezugi, Microgaming, NetEnt, and others. These providers may receive anonymised session identifiers to facilitate gameplay. They do not receive your full personal profile or financial data.

5.4 Legal and Regulatory Authorities

345db may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities when required by applicable law, court order, or to protect the rights, property, or safety of 345db, its users, or the public.

5.5 Business Transfers

In the event of a merger, acquisition, or transfer of 345db's business or assets, user data may be transferred to the acquiring entity. You will be notified via email and/or a prominent notice on our website prior to any such transfer becoming effective.

6. Cookies and Tracking Technologies

345db uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files placed on your device that help us remember your preferences, keep you logged in, and understand how you use our website.

6.1 Types of Cookies We Use

• Essential cookies: Required for core platform functionality, including session management, security tokens, and login persistence. These cannot be disabled without affecting platform usability.
• Performance cookies: Collect anonymised data about how visitors navigate 345db, which pages are most visited, and where errors occur. This data helps us improve platform performance.
• Functional cookies: Remember your preferences such as language settings, preferred deposit method, and display options to personalise your experience across sessions.
• Analytics cookies: Used to measure overall platform traffic and user behaviour patterns using aggregated, anonymised data. No individual user is identified in analytics reports.

6.2 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the 345db platform. Instructions for managing cookies are available in your browser's help documentation.

7. Data Retention

345db retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. General retention guidelines are as follows:

• Active account data: Retained for the duration of your account's active status plus a minimum of 5 years after account closure, in compliance with financial record-keeping requirements.
• KYC and identity documents: Retained for a minimum of 5 years following account closure or the last transaction, as required by anti-money laundering regulations.
• Transaction records: Retained for a minimum of 5 years for financial compliance and dispute resolution purposes.
• Support communications: Retained for 2 years following the resolution of a support interaction, or longer if the matter is subject to ongoing legal proceedings.
• Marketing consent records: Retained until consent is withdrawn plus 1 year for compliance evidence purposes.
• Technical and device logs: Retained for up to 12 months for security and fraud investigation purposes.

When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be associated with an individual user.

8. Your Rights

As a user of 345db, you hold the following rights over your personal data. To exercise any of these rights, please contact our support team at [email protected] with your full name, registered email address, and a description of your request. We will respond within 30 days.

• Right of access: You may request a copy of all personal data 345db holds about you, along with information about how it is processed.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restriction: You may request that we temporarily suspend processing of your data while a rectification or objection request is being assessed.
• Right to data portability: You may request a structured, machine-readable copy of the personal data you provided to us, for transfer to another service provider.
• Right to object: You may object to processing of your data where it is based on legitimate interests, including profiling for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

9. Children and Minors

345db services are strictly for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we discover that a user is under 21, their account will be immediately closed, all data will be deleted (subject to legal obligations), and any deposited funds will be returned to the payment source.

If you believe a minor is using 345db, please contact us immediately at [email protected]. We take underage gambling extremely seriously and cooperate fully with parents, guardians, and authorities to address such cases promptly.

10. Third-Party Services and Links

345db may reference or integrate with third-party services (such as game studios, payment gateways, and analytics providers). This Privacy Policy applies solely to data processed by 345db. We are not responsible for the privacy practices of third-party providers. We encourage you to review the privacy policies of any third-party service you interact with through our platform.

345db does not embed third-party advertising networks on our platform. We do not share your behavioural data with external advertising platforms for retargeting purposes.

11. Security Measures

345db implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
• Encrypted database storage for sensitive fields including passwords, payment identifiers, and identity documents
• Multi-factor authentication (MFA) options for account access
• Role-based access control (RBAC) limiting internal data access to authorised personnel only
• Regular security audits and penetration testing of our platform infrastructure
• Automated anomaly detection to identify and flag unusual login attempts, transactions, or betting patterns
• Secure data backup procedures with encrypted off-site storage

While we maintain industry-standard security practices, no online platform can guarantee absolute security. We encourage you to use a strong, unique password for your 345db account and to never share your login credentials with anyone.

12. Changes to This Privacy Policy

345db reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. All changes will be published on this page with an updated revision date at the top of the document.

For material changes that significantly affect how we handle your personal data, we will provide advance notice via email to your registered address or through a prominent notice on the 345db website. Continued use of our services following publication of an updated policy constitutes acceptance of the revised terms.

We recommend reviewing this Privacy Policy periodically to stay informed about how 345db protects your information.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or 345db's handling of your personal data, please contact our support team using the details below. We aim to respond to all privacy-related inquiries within 5 business days.

For account-specific privacy requests (data access, correction, deletion), please include your full name, registered email address, and a clear description of your request. For identity verification purposes, we may ask you to confirm your identity before actioning sensitive data requests.