Privacy Policy for 3bdd

Data We Collect

3bdd collects personal data for clearly defined and lawful purposes only. The categories of data we collect from players registered on the 3bdd platform are described below. We collect only what is necessary for the purposes for which it is processed — we do not collect data speculatively or without a legitimate purpose.

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, biometric data, or health data unless you voluntarily disclose health-related information in the context of a responsible gaming self-exclusion request, in which case it is used solely to administer that request.

Data collected from minors is not knowingly processed by 3bdd. If we become aware that a player is under 18 years of age, all data associated with that account will be deleted following the account suspension and investigation process described in our Terms & Conditions.

How We Use Your Data

3bdd processes personal data only where a lawful basis exists for doing so. The primary lawful bases we rely on are: performance of a contract (your player account agreement with us), compliance with a legal obligation, our legitimate business interests, and — where neither of the foregoing applies — your explicit consent. The specific purposes for which 3bdd uses your personal data are as follows:

• To create and manage your 3bdd player account, including verifying your identity and age as required before full account activation.
• To process deposits and withdrawals in Bangladeshi Taka (BDT) via bKash, Nagad, Rocket, Upay, and other supported payment channels.
• To provide the sports betting and casino gaming services you have contracted with 3bdd to receive, including settlement of bets, calculation of winnings, and management of bonus balances.
• To conduct anti-money-laundering (AML) checks, know-your-customer (KYC) verification, and fraud detection in accordance with applicable legal obligations.
• To deliver customer support via live chat and email, and to maintain records of support interactions for quality assurance and dispute resolution.
• To send transactional notifications relating to your account, including deposit confirmations, withdrawal status updates, and security alerts — these communications cannot be opted out of as they are necessary for the provision of the service.
• To send marketing communications about 3bdd promotions, cricket betting specials (BPL, IPL, T20 World Cup), seasonal offers, and new game launches — only where you have not opted out of such communications.
• To monitor platform usage patterns, identify and investigate suspected fraud or Terms breaches, and improve the security and performance of the 3bdd platform.
• To comply with applicable laws, respond to lawful requests from regulatory authorities, and enforce our Terms & Conditions.
• To support responsible gaming obligations, including administering self-exclusion requests, deposit limits, and cool-off periods activated by players in their account settings.

Data Sharing & Third Parties

3bdd does not sell your personal data to third parties under any circumstances. We share personal data with external parties only where strictly necessary, and only in the categories described below. All third-party recipients who process personal data on our behalf are bound by contractual data processing agreements that require them to protect your information to at least the same standard as 3bdd applies internally.

• Payment Processors: To facilitate BDT deposits and withdrawals, relevant transaction reference data is shared with our certified payment gateway partners, including the mobile financial service providers you select (e.g., bKash, Nagad, Rocket). Only the minimum data necessary to complete a transaction is shared.
• KYC & Identity Verification Providers: Where automated identity verification services are used to authenticate NID documents or cross-reference public records, your identity data is processed by our contracted verification partner under strict data processing terms.
• Game Studio Providers: Live casino and slot game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive session tokens and anonymised player identifiers necessary to load and operate games. These providers do not receive your name, contact details, or financial information.
• Analytics Platforms: Aggregated, anonymised usage data may be processed by analytics partners to help 3bdd understand platform performance and user experience. No personally identifiable information is included in these analytics data sets.
• Legal & Regulatory Authorities: 3bdd will disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required to do so by applicable law, court order, or binding regulatory instruction. We will notify you of such disclosure where we are legally permitted to do so.
• Business Transfers: In the event that 3bdd undergoes a merger, acquisition, or asset sale, your personal data may be transferred to the successor entity. You will be notified of any such transfer and the privacy terms that will apply going forward before it takes effect.

3bdd does not share player data with third-party advertisers for the purpose of targeted advertising on external platforms. Any marketing to 3bdd players is conducted directly by 3bdd through our own communications channels.

Cookies & Tracking Technologies

3bdd uses cookies and similar tracking technologies (including local storage objects and session tokens) to operate the platform and deliver a consistent, personalised experience. The following categories of cookies are used on the 3bdd website:

Most web browsers allow you to control cookies through their settings. You can instruct your browser to refuse all cookies or to notify you when a cookie is being set. However, disabling strictly necessary or security cookies will prevent you from logging in and using core platform features. Instructions for managing cookies in popular browsers are available through your browser's help documentation.

3bdd does not use cross-site tracking cookies to follow your browsing activity across unrelated websites. Our cookie use is limited to what is necessary for operating the 3bdd platform and understanding how it is used in aggregate.

Data Security & Storage

3bdd implements a layered approach to data security, combining technical controls, organisational policies, and staff training to protect your personal data against unauthorised access, loss, alteration, or disclosure. The core security measures applied to all personal data processed by 3bdd include:

• Transport Layer Security (TLS 1.2 and above) on all data connections between your browser or app and the 3bdd servers.
• AES-256 encryption for all personally identifiable data stored at rest in our databases, including identity documents and financial records.
• Role-based access controls ensuring that only authorised personnel with a demonstrated need can access personal data — and only the minimum data required for their specific role.
• Two-factor authentication (2FA) enforced for all 3bdd staff accessing systems that process player personal data.
• Regular independent security audits and penetration testing of the 3bdd platform infrastructure.
• Incident response procedures that require notification to affected players and, where applicable, relevant authorities, within 72 hours of a confirmed data breach that poses a risk to player rights.

Personal data is stored on servers located within secure data centre facilities. Data may be processed in countries outside Bangladesh where our technology service providers operate. In all such cases, 3bdd ensures that appropriate data transfer safeguards are in place, and that the receiving entity provides a level of data protection equivalent to the standards described in this policy.

Your Privacy Rights

As a player on 3bdd, you hold the following rights in relation to your personal data. Requests to exercise any of these rights should be submitted to our support team using the contact details provided in Section 8 of this policy. 3bdd will respond to all valid requests within 30 days.

• Right of Access: You may request a copy of all personal data that 3bdd holds about you. We will provide this in a structured, commonly used, machine-readable format where technically feasible.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. You may also update certain data directly through your account settings without needing to contact support.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent (where consent was the lawful basis for processing). This right is subject to overriding legal retention obligations — see Section 7 below.
• Right to Restrict Processing: You may request that we pause processing of your personal data in certain circumstances, for example while a rectification request is under review.
• Right to Object: You may object to processing based on our legitimate interests, and you may withdraw consent to marketing communications at any time without affecting the lawfulness of prior processing.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that your data be transferred to another service provider in a machine-readable format, where technically feasible.
• Right Not to Be Subject to Automated Decisions: Where a significant decision affecting your account is made solely by automated means, you may request human review of that decision by contacting our support team.

Please note that some rights may be limited where exercising them would conflict with 3bdd's legal obligations — for example, we cannot delete financial records that are subject to mandatory retention periods under anti-money-laundering regulations. Where a limitation applies, we will explain the reason clearly in our response to your request.

Data Retention

3bdd retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, and in compliance with applicable legal retention obligations. The following retention periods apply as a general guide — specific categories may be retained for longer where required by law or ongoing legal proceedings:

• Active Account Data: Retained for the duration of your active account relationship with 3bdd, plus a minimum of 5 years following account closure.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction in accordance with anti-money-laundering record-keeping requirements.
• KYC & Identity Documents: Retained for a minimum of 5 years from the date of submission, or from the date of account closure, whichever is later.
• Support Communications: Retained for 3 years from the date of the last communication in a thread, to support dispute resolution and quality assurance.
• Technical & Usage Logs: Typically retained for 12 months in rolling archives, after which they are anonymised or deleted.
• Self-Exclusion Records: Retained indefinitely where a permanent self-exclusion has been requested, to prevent the player from re-registering in breach of their own exclusion request.
• Marketing Preferences: Records of consent and opt-out status are retained for the duration of the account relationship and for 5 years thereafter, to demonstrate compliance in the event of a regulatory inquiry.

When retention periods expire and no overriding legal obligation requires continued storage, personal data is securely deleted or irreversibly anonymised. Anonymised aggregate data (e.g., statistical reports on platform usage with all personal identifiers removed) may be retained indefinitely for business intelligence purposes.

Policy Updates & Contact

3bdd reserves the right to update this Privacy Policy at any time. When material changes are made — for example, changes to the categories of data collected, the purposes of processing, or third-party sharing arrangements — we will notify registered players via email at least 14 days before the updated policy takes effect. The effective date at the top of this policy will always reflect the date of the most recent revision.

We encourage you to review this Privacy Policy periodically to stay informed about how 3bdd protects your personal data. For older versions of this policy, contact our support team and we will provide the version applicable to a specific date upon request.

This Privacy Policy was last reviewed and updated in January 2026. It governs all personal data processing conducted by 3bdd in connection with the platform available at https://3bdd.bet. Your continued use of the 3bdd platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any part of this policy, please discontinue use of the platform and contact our support team to request account closure.