356ac Privacy Policy

1. Who We Are

356ac is an internationally licensed online betting and casino platform serving registered players across Bangladesh and other permitted jurisdictions. References to "356ac", "we ", "us", or "our" in this document refer to the 356ac platform and its operating entity. Our primary communication channel for privacy-related enquiries is [email protected].

This Privacy Policy applies to all personal data processed in connection with your use of the 356ac website at 356ac.io, its subdomains, mobile-optimised pages, and any associated customer support channels. It applies to all registered players, prospective players who browse without registering, and any individual who contacts 356ac through our support channels.

2. Data We Collect

356ac collects personal data across several categories, each tied to a specific operational purpose. The table below summarises what we collect and why:

Data Category	Specific Data Points	Primary Purpose
Identity Data	Full legal name, date of birth, NID / passport number, photograph (if submitted for KYC)	Age and identity verification, regulatory compliance
Contact Data	Email address, Bangladesh mobile number, residential address	Account communications, transaction notifications, support
Financial Data	bKash / Nagad / Rocket account numbers, DBBL or other bank account identifiers, transaction reference numbers, deposit and withdrawal amounts in BDT (৳)	Payment processing, fraud prevention, withdrawal verification
Account Activity Data	Game play history, betting records, session duration, bonus usage, wagering history	Account management, responsible gaming monitoring, dispute resolution
Technical Data	IP address, device type, browser type and version, operating system, screen resolution, time zone (Bangladesh Standard Time, UTC+6)	Security monitoring, fraud detection, platform optimisation
Communications Data	Content of live chat transcripts, email correspondence, support ticket text	Customer support quality, dispute resolution, staff training

3. How We Collect Your Data

3.1 Data You Provide Directly

The majority of personal data 356ac holds about you is information you provide directly when you register an account, complete KYC verification, make a deposit or withdrawal request, contact our support team, or respond to any optional surveys or promotional communications we send.

3.2 Data Collected Automatically

When you access the 356ac platform, certain technical data is collected automatically by our servers and analytics systems. This includes your IP address, the pages you visit within the platform, the duration of each session, device identifiers, and browser configuration. This data is collected passively and does not require any action on your part beyond visiting the site.

3.3 Data from Third Parties

In limited circumstances, 356ac may receive personal data about you from authorised third parties. This includes identity verification data returned by KYC service providers, fraud risk scores from payment security partners, and geolocation data used to confirm your jurisdiction of access. All third-party data sources used by 356ac are contractually bound to handle your data in a manner consistent with this Privacy Policy.

4. Legal Basis for Processing

356ac processes your personal data only where a valid legal basis exists. The legal bases we rely on are:

• Contractual necessity: Processing required to open and operate your account, process deposits and withdrawals, and deliver the services you have requested from 356ac.
• Legal obligation: Processing required to comply with KYC/AML regulations, age verification requirements, tax reporting obligations, and any other legal duties applicable to 356ac's operating licence.
• Legitimate interests: Processing that is necessary for 356ac's legitimate business interests, such as fraud prevention, platform security, responsible gaming monitoring, and improving service quality — provided those interests are not overridden by your rights and freedoms.
• Consent: Processing for optional purposes such as marketing communications. Where consent is the basis, you may withdraw it at any time by contacting support or updating your account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

5. How We Use Your Data

356ac uses the personal data it holds for the following purposes:

• To create, verify, and maintain your player account on the 356ac platform.
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other accepted Bangladesh payment methods.
• To carry out identity verification (KYC) and anti-money-laundering (AML) screening as required by our operating licence.
• To enforce the minimum age requirement of 21 years and ensure platform access is restricted to eligible players.
• To detect and prevent fraudulent activity, account takeovers, bonus abuse, and collusion.
• To monitor gambling behaviour for responsible gaming purposes and to apply protective account controls where appropriate.
• To respond to your support enquiries, process complaints, and resolve disputes.
• To send transactional communications including deposit confirmations, withdrawal status updates, and security alerts to your registered email or Bangladesh mobile number.
• To send promotional communications about 356ac bonuses, new games, and seasonal offers — only where you have provided consent or where legitimate interest applies and you have not opted out.
• To improve the performance, security, and content of the 356ac platform through aggregated, anonymised analytics.

6. Sharing Your Personal Data

6.1 Third Parties We Work With

356ac shares personal data with a limited set of trusted third-party service providers who assist in operating the platform. Each of these providers is bound by a data processing agreement that restricts them from using your data for any purpose other than the specific service they provide to 356ac. Categories of third parties include:

• Payment processors: Operators of bKash, Nagad, Rocket, Upay, and banking payment gateways that process your financial transactions.
• Identity verification providers: KYC and AML screening services that validate the identity documents you submit.
• Game content providers: Software studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised session data only — they do not receive your name, contact details, or financial information.
• Customer support infrastructure: Live chat and ticketing platforms that store support correspondence on 356ac's behalf.
• Security and fraud detection services: Providers who analyse technical data to identify suspicious account behaviour.

6.2 Legal Disclosures

356ac may disclose your personal data to law enforcement agencies, regulatory bodies, or other government authorities where required to do so by applicable law, a valid court order, or the requirements of our operating licence. We will notify you of any such disclosure to the extent permitted by law.

6.3 What We Never Do

356ac does not sell your personal data to any third party. We do not share your data with third-party advertisers, data brokers, or social media platforms. We do not share individual player data with other players under any circumstances.

7. Cookies & Tracking Technologies

The 356ac platform uses cookies and similar tracking technologies to operate core site functionality and to understand how players interact with our pages. Cookies are small text files placed on your device by your browser when you visit the platform.

356ac uses the following categories of cookies:

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during a visit, and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking core platform functionality.
• Analytics cookies: Used to collect aggregated, anonymised data about page visits, navigation paths, and session durations. This data helps 356ac improve platform performance. No personally identifiable information is associated with analytics cookies.
• Preference cookies: Store non-sensitive user preferences such as your last visited game category or preferred display language, so you do not need to re-select them on each visit.

You may control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of some platform features. 356ac does not use third-party advertising or retargeting cookies.

8. Data Retention

356ac retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. The following retention periods apply:

• Account and identity data: Retained for the lifetime of your active account plus a minimum of five years after account closure, to comply with AML and KYC regulatory requirements.
• Financial transaction records: Retained for a minimum of six years following the transaction date, in accordance with standard financial record-keeping obligations.
• Support communications: Retained for three years from the date of the last interaction, to support dispute resolution and quality assurance.
• Technical and session data: Retained for a maximum of 13 months on a rolling basis, after which it is anonymised or deleted.
• Marketing consent records: Retained for the duration of your account to evidence the basis on which marketing communications were sent.

When data reaches the end of its defined retention period, it is securely deleted or anonymised using processes that prevent reconstruction of the original information.

9. Data Security

356ac employs a layered approach to data security. Technical measures include 256-bit SSL/TLS encryption for all data in transit, AES-256 encryption for sensitive data at rest, role-based access controls limiting employee access to personal data on a strict need-to-know basis, multi-factor authentication requirements for all internal administrative systems, and continuous automated monitoring for anomalous access patterns.

Organisational measures include regular security training for all staff who handle personal data, mandatory background checks for employees with access to sensitive account information, periodic third-party penetration testing of the platform infrastructure, and a documented incident response procedure for any data breach event.

In the event of a data breach that poses a risk to your rights and freedoms, 356ac will notify affected players as promptly as practicable and will take all reasonable steps to contain the breach and prevent recurrence.

10. Your Privacy Rights

Regardless of your location within Bangladesh — whether you are based in Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, or Mymensingh — you hold the following rights over your personal data held by 356ac:

• Right of access: You may request a copy of all personal data 356ac holds about you. We will provide this within 30 days of a verified request.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data. Corrections to identity fields may require supporting documentation.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations. We cannot delete data we are required to retain under AML or KYC regulations.
• Right to restriction: You may request that we restrict processing of your data while the accuracy of that data is contested or while a complaint is pending.
• Right to data portability: You may request that we provide your personal data in a structured, machine-readable format so you can transfer it to another service provider.
• Right to object: You may object to processing carried out on the basis of legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact the 356ac support team at [email protected]. We will acknowledge your request within 48 hours and provide a substantive response within 30 calendar days.

11. Children's Privacy

The 356ac platform is strictly restricted to persons aged 21 years or older. We do not knowingly collect, process, or store personal data belonging to individuals under the age of 21. If 356ac becomes aware that data belonging to an underage individual has been collected, that data will be deleted immediately and the associated account permanently closed. If you believe that a person under the age of 21 has registered an account with 356ac, please notify us immediately at [email protected].

12. International Data Transfers

To deliver the 356ac platform and associated services, your personal data may be transferred to and processed in countries other than Bangladesh. This may occur when data is processed by our payment partners, game content providers, or cloud infrastructure providers operating in different jurisdictions.

Wherever your data is transferred outside Bangladesh, 356ac takes appropriate steps to ensure that it receives an equivalent level of protection to that provided within Bangladesh. This includes ensuring that recipient organisations are bound by contractual data protection obligations consistent with the standards described in this Privacy Policy.

13. Changes to This Privacy Policy

356ac reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable law. When material changes are made, we will notify registered players via their registered email address and post a prominent notice on the platform at least 14 days before the revised policy takes effect.

The "Last updated" date at the top of this document will always reflect when the most recent revision was made. We encourage you to review this Privacy Policy periodically. Continued use of the 356ac platform after the effective date of any revision constitutes acceptance of the updated policy.

14. Contact & Complaints

If you have questions about this Privacy Policy, wish to exercise a data subject right, or want to raise a complaint about how 356ac has handled your personal data, please contact our support team:

• Email: [email protected] (plain text only — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week, from within your 356ac account dashboard after login
• Response time: Privacy-related enquiries acknowledged within 48 hours; substantive response within 30 calendar days

If you are not satisfied with our response to a privacy complaint, you have the right to escalate your concern to the relevant data protection authority in your jurisdiction, or to the supervisory authority under 356ac's operating licence.