dd345 Privacy Policy

This Privacy Policy ("Policy") describes how dd345 ("we", "us", "our") collects, uses, stores, shares, and protects the personal information of all individuals ("you", "your", "Player") who register an account, access the platform, or interact with any service available at dd345.io. By using the dd345 platform, you acknowledge that you have read, understood, and agree to the data practices described in this Policy. This Policy is incorporated by reference into the dd345 Terms & Conditions.

Who We Are

dd345 is an online betting and casino platform operating at dd345.io, offering sports betting, live casino, slot games, and associated services to players in Bangladesh and other eligible markets. References to "dd345", "we", "us", or "our" throughout this Policy refer to the operator entity responsible for the dd345.io platform and all data processing activities described herein.

For all data-related enquiries, including requests to exercise your rights under this Policy, the designated contact is our customer support team reachable at [email protected].

Data We Collect

dd345 collects personal data through several channels: account registration, identity verification, platform usage, payment transactions, and communications with our support team. The categories of data we collect are described in the table below.

How We Use Your Data

dd345 uses the personal data described in Section 2 strictly for the following defined purposes:

• Account Administration: Creating, maintaining, and managing your dd345 player account, including authentication, password resets, and account settings management.
• Identity Verification (KYC): Confirming your identity and age (21+) as required before processing withdrawals. This is a mandatory compliance measure applied to all players regardless of account balance.
• Payment Processing: Facilitating deposits and withdrawals through bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. Financial data is used solely for transaction purposes and is not stored beyond what is legally required.
• Fraud Prevention & Security: Monitoring account activity to detect and prevent fraudulent behaviour, multiple-account creation, bonus abuse, money laundering, and other prohibited conduct described in our Terms & Conditions.
• Customer Support: Responding to enquiries, resolving disputes, processing complaints, and providing assistance through live chat and email channels.
• Responsible Gaming: Monitoring player behaviour to identify signs of problem gambling and, where appropriate, reaching out to offer self-management tools or support resources. This use of data is in the interest of player welfare.
• Platform Improvement: Analysing aggregated, anonymised usage data to understand how players interact with the platform, identify technical issues, and improve the overall experience.
• Regulatory Compliance: Retaining records as required by applicable laws governing offshore gaming platforms, anti-money laundering (AML) obligations, and financial reporting requirements.
• Marketing Communications: Sending promotional emails and platform notifications about bonuses, new games, and seasonal offers — only if you have opted in to receive such communications during registration or subsequently through your account settings. You may opt out at any time.

Legal Basis for Processing

dd345 processes your personal data only where a valid legal basis exists. The primary legal bases applicable to our data processing activities are:

• Contractual Necessity: Processing that is required to fulfil the agreement between you and dd345 — specifically, to provide the betting and casino services you have registered to use. This includes account management, payment processing, and customer support.
• Legal Obligation: Processing required to comply with applicable laws, including KYC identity verification, AML record-keeping, and age verification enforcement.
• Legitimate Interests: Processing conducted to pursue dd345's legitimate business interests, provided those interests do not override your fundamental rights. This includes fraud detection, platform security monitoring, and aggregated analytics for product improvement.
• Consent: Processing based on your freely given, specific, and informed consent — principally for optional marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Cookies & Tracking Technologies

dd345 uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your session state while you are logged in, and to gather anonymised analytics that help us improve the player experience. The types of cookies used are described below:

• Essential Cookies: These cookies are strictly necessary for the platform to operate. They manage authentication sessions, security tokens, and basic platform functionality. They cannot be disabled without rendering the platform unusable.
• Analytics Cookies: Used to collect aggregated, anonymised information about how players navigate the platform — including which pages are visited most frequently and where players encounter errors. This data does not identify individual users.
• Preference Cookies: These cookies remember your platform preferences, such as display settings and notification choices, so they are preserved across sessions.
• Security Cookies: Used for fraud detection and to identify suspicious login patterns, including cross-device login attempts and unusual IP activity.

By continuing to use the dd345 platform after this Policy is displayed, you consent to the use of essential and security cookies as described above. Analytics and preference cookies may be declined through your browser settings without affecting core platform functionality.

dd345 does not use third-party advertising cookies or allow external advertising networks to place tracking pixels on the platform.

Data Sharing & Disclosure

dd345 does not sell, rent, or trade your personal data. We share personal data only in the following limited and controlled circumstances:

• Payment Service Providers: To process deposits and withdrawals, dd345 shares the minimum necessary financial data with payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. These providers act as data processors under contractual obligations that require them to protect your data and use it only for the specified payment purpose.
• Game Software Providers: Technical identifiers (such as anonymised session tokens) are shared with certified game software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe solely to deliver game content to your device. These providers do not receive personally identifying information beyond what is technically required to render the game.
• Identity Verification Partners: During the KYC process, identity documents may be processed by trusted third-party verification service providers operating under strict data processing agreements and equivalent data protection standards.
• Legal & Regulatory Authorities: dd345 will disclose personal data where required to do so by applicable law, court order, or governmental authority. We will notify affected players of such disclosures where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of dd345's assets, player data may be transferred to the acquiring entity. Affected players will be notified in advance and given the opportunity to close their accounts before any transfer takes effect.

International Data Transfers

dd345 operates as an offshore platform. As a result, the personal data you provide may be stored and processed in jurisdictions outside Bangladesh. Where data is transferred internationally, dd345 applies the following safeguards to protect your information:

• Data transfers to third-party processors outside the originating jurisdiction are governed by contractual data processing agreements that impose data protection obligations equivalent to those described in this Policy.
• dd345 conducts due diligence on all third-party processors to confirm that adequate technical and organisational security measures are in place before any data transfer occurs.
• Server infrastructure used by dd345 employs physical and logical access controls, encrypted storage, and regular security audits to protect data at rest and in transit.

By using the dd345 platform, you acknowledge and consent to the transfer of your personal data to servers and processing facilities outside Bangladesh, subject to the protections described in this section.

Data Retention

dd345 retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention guidelines apply:

• Active Account Data: Personal data associated with an active player account is retained for the duration of the account's existence plus a minimum of five (5) years following permanent account closure, to meet financial record-keeping and AML compliance obligations.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years following account closure or the completion of the last transaction, whichever is later.
• Transaction Records: Financial transaction records (deposit and withdrawal history) are retained for a minimum of seven (7) years in accordance with standard financial compliance requirements.
• Support Communications: Customer support chat logs and email correspondence are retained for three (3) years from the date of the interaction, unless the communication relates to an ongoing dispute, in which case it is retained until the dispute is fully resolved.
• Marketing Data: Where you have opted in to marketing communications, your contact details are retained for this purpose until you withdraw consent. Upon opt-out, your data is removed from active marketing lists within 30 days.
• Technical & Usage Data: Anonymised, aggregated analytics data may be retained indefinitely as it cannot be linked back to any individual player.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

Your Data Rights

As a player on the dd345 platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our support team at [email protected] with your account username and a clear description of your request. We aim to respond to all data rights requests within thirty (30) days of receipt.

• Right of Access: You have the right to request a copy of the personal data dd345 holds about you, along with information about how that data is used and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request that dd345 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that this right is subject to overriding legal retention obligations — for example, transaction records required for AML compliance cannot be erased on request.
• Right to Restriction of Processing: In certain circumstances, you may request that dd345 restrict the processing of your data — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive a structured, machine-readable copy of your personal data for transfer to another service provider.
• Right to Object: You have the right to object to processing carried out on the basis of dd345's legitimate interests. dd345 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

Data Security

dd345 takes the security of your personal data seriously. We implement a comprehensive suite of technical and organisational measures to protect your information against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the dd345 platform is encrypted in transit using industry-standard SSL/TLS protocols. This applies to login sessions, payment transactions, and all API communications.
• Encrypted Data Storage: Sensitive data at rest — including KYC documents, financial records, and authentication credentials — is stored using encryption algorithms that meet current security best practices.
• Access Controls: Access to personal data within dd345's internal systems is restricted on a need-to-know basis. Staff members are granted the minimum level of data access required to perform their job functions, and all access is logged and audited.
• Two-Factor Authentication (2FA): dd345 strongly encourages all players to enable 2FA on their accounts. Internal system access for dd345 staff handling personal data requires multi-factor authentication as a mandatory control.
• Penetration Testing & Security Audits: dd345's platform infrastructure undergoes regular security assessments, including third-party penetration testing, to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data breach that poses a risk to players' rights, dd345 will take immediate containment action and notify affected players via their registered email address within a reasonable timeframe. The notification will describe the nature of the breach, the data involved, and the steps taken to mitigate harm.

While dd345 employs robust security measures, no platform can guarantee absolute security against all conceivable threats. Players are encouraged to use strong, unique passwords for their dd345 accounts and to report any suspicious account activity to our support team immediately.

Children & Minors

dd345 strictly prohibits the use of its platform by any individual under the age of 21. The platform is designed, marketed, and operated exclusively for adults aged 21 and above. dd345 does not knowingly collect, store, or process personal data relating to individuals below this age threshold.

During account registration, all players are required to confirm that they are aged 21 or older. As part of the KYC process, dd345 verifies this declaration using government-issued identification documents. Any account found to belong to a person under the age of 21 will be immediately closed, all associated data will be deleted (subject to any mandatory legal retention obligations), and any deposited funds will be returned to the original payment source.

Third-Party Links

The dd345 platform may, from time to time, contain references to third-party services — for example, payment service providers or game software suppliers. Where such references include links to third-party websites or interfaces, please note that dd345 does not control those external environments and is not responsible for their privacy practices or content.

This Privacy Policy applies exclusively to data collected and processed by dd345 through the dd345.io platform. If you navigate to a third-party website from the dd345 platform, we strongly recommend that you review the privacy policy of that third party before providing any personal information.

Updates to This Privacy Policy

dd345 reserves the right to update, revise, or replace this Privacy Policy at any time. When material changes are made to the Policy, we will notify active players by sending a notification to the email address associated with their dd345 account and/or by displaying a prominent notice on the platform.

The revised Policy will take effect from the date indicated at the top of the updated document. Your continued use of the dd345 platform following the publication of a revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised Policy, you must stop using the platform and request the closure of your account by contacting [email protected].

We recommend bookmarking this page and reviewing it periodically. The "Last Reviewed" date displayed at the top of this Policy indicates when the content was most recently assessed or updated.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data dd345 holds about you, please contact our dedicated support team using the details below. All privacy-related enquiries are handled with strict confidentiality.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please use "Privacy Enquiry — [Your Username]" to ensure your message is routed to the correct team
• Support Hours: 24 hours a day, 7 days a week, 365 days a year
• Response Time: All privacy-related requests are acknowledged within 48 hours and fully responded to within 30 days (Bangladesh Standard Time, UTC+6)
• Live Chat: Available within the dd345 platform when you are logged in to your account

For data rights requests specifically (access, rectification, erasure, portability, objection), please include your full account username and a clear description of the right you wish to exercise. Providing this information upfront allows us to process your request as efficiently as possible.