365age Privacy Policy

365age processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the player agreement — including account creation, identity verification, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML), know-your-customer (KYC), and fraud prevention obligations.
• Legitimate interests: Processing required to maintain platform security, detect fraud, improve services, and communicate service-related updates.
• Consent: Processing for optional activities such as marketing communications and non-essential cookies, where you have provided explicit opt-in consent. You may withdraw consent at any time.

The personal data collected by 365age is used exclusively for the following purposes:

• To create and manage your 365age player account.
• To verify your identity and confirm that you meet the 21+ age requirement.
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer.
• To detect and prevent fraud, money laundering, and unauthorised account access.
• To calculate and apply bonus eligibility under active promotions (BPL season offers, Eid promotions, Pohela Boishakh specials, etc.).
• To deliver responsible gaming tools including deposit limits, session reminders, cooling-off periods, and self-exclusion.
• To send transactional communications such as deposit confirmations, withdrawal receipts, and security alerts.
• To send marketing communications (only where you have opted in and not subsequently opted out).
• To analyse platform usage patterns and continuously improve the 365age user experience.

365age does not sell your personal data. We share data with third parties only in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and selected Bangladeshi banks (BRAC Bank, City Bank, Dutch-Bangla Bank, Islami Bank, Sonali Bank) receive the minimum financial data necessary to process transactions.
• Game technology providers: Suppliers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data to power game delivery and fair play certification.
• Identity verification services: Third-party KYC providers receive identity document data solely to complete mandatory verification procedures.
• Legal authorities: Where required by applicable law or a valid legal order, 365age may disclose personal data to law enforcement, regulatory bodies, or courts.

All third-party data processors are bound by contractual obligations to handle your data securely and only for the specific purpose for which it was shared.

365age retains your personal data for as long as your account remains active and for a defined period after account closure. Specifically:

• Account and identity data is retained for a minimum of five (5) years following account closure to meet AML and KYC regulatory requirements.
• Financial transaction records are retained for a minimum of seven (7) years for accounting and audit purposes.
• Gameplay and session logs are retained for two (2) years and then anonymised.
• Marketing consent records are retained for the duration of your account and for one (1) year after account closure.

Once the applicable retention period has elapsed, data is securely and permanently deleted or rendered irreversibly anonymous.

365age uses cookies and similar technologies to operate the platform effectively. The types of cookies we use include:

• Essential cookies: Required for the platform to function. These include session authentication cookies and security tokens. These cannot be disabled without impairing your ability to use 365age.
• Performance cookies: Used to collect anonymised data about page load times, navigation paths, and error events. This data helps us improve platform speed and reliability.
• Preference cookies: Used to remember your language preferences and platform settings between sessions.
• Analytics cookies: Used to understand aggregate player behaviour on the platform. These are only activated where you have provided consent.

You may manage your cookie preferences at any time through your browser settings. Note that disabling essential cookies will affect your ability to log in and use the platform.

As a 365age player, you hold the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data we hold about you at any time.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold.
• Right to erasure: You may request deletion of your personal data, subject to our legal retention obligations described in Section 4 above.
• Right to restrict processing: You may request that we limit how we use your personal data in certain circumstances.
• Right to object: You may object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected] (plain text — not a clickable link). We will respond to all valid requests within thirty (30) days.

365age employs a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These include:

• SSL/TLS encryption for all data in transit between your device and 365age servers.
• Encryption at rest for sensitive stored data including payment details and identity documents.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their specific job function.
• Regular independent security audits and penetration testing of the platform infrastructure.
• Continuous monitoring of server and network activity for anomalies indicating potential breaches or intrusions.
• Two-factor authentication options for player accounts to reduce the risk of unauthorised access.

While 365age takes every reasonable precaution to secure your data, no online platform can guarantee absolute security. You are responsible for keeping your own login credentials confidential.

365age is strictly an adult platform. We do not knowingly collect personal data from any individual under the age of 21. If you are under 21 years of age, you must not register an account or use the 365age platform in any capacity.

If we become aware that personal data has been submitted by a person under 21 — whether through misrepresentation during registration or any other means — that account will be immediately closed, all associated data will be securely deleted, and any funds held in the account will be forfeited in accordance with our Terms & Conditions.

If you believe a minor has registered on our platform, please notify us immediately at [email protected] (plain text only).

365age may send you promotional communications about new games, seasonal bonuses (e.g., BPL promotions, Eid special offers, T20 World Cup betting promotions), and platform updates, but only where you have explicitly opted in to receive such communications at the point of registration or through your account settings.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email you receive from 365age.
• Updating your communication preferences in your account settings.
• Contacting our support team directly at [email protected] (plain text only).

Opting out of marketing communications does not affect transactional messages such as deposit confirmations, security alerts, or account notices, which are sent regardless of marketing preference as they are essential to service delivery.

365age reserves the right to update this Privacy Policy at any time. The date of the most recent revision is displayed at the top of this page. Where changes are material — for example, where we introduce a new category of data collection or a new purpose for processing — we will notify registered players via their registered email address prior to the changes taking effect.

Your continued use of the 365age platform after a policy update constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to stay informed of how we protect your personal data.

For any questions, concerns, or requests relating to this Privacy Policy or the personal data that 365age holds about you, please contact our support team. We are available 24 hours a day, 7 days a week, operating in Bangladesh Standard Time (UTC+6).

Email: [email protected] (plain text — not a clickable link)

We aim to acknowledge all data-related inquiries within two (2) Bangladesh Standard Time business days and to resolve them fully within thirty (30) days of receipt.