Privacy Policy — How bo345 Protects Your Personal Data

Introduction

This Privacy Policy ("Policy") describes how bo345 ("bo345", "we", "our", or "us") collects, uses, stores, discloses, and protects personal information about individuals ("you", "your", or "the Player") who access or use the online betting and casino platform available at https://bo345.io (the "Platform"). This Policy applies to all users of the Platform regardless of device, location, or method of access.

By registering an account, making a deposit, placing a bet, or otherwise using any feature of the bo345 Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the Platform and request account closure through our support team.

This Policy is to be read in conjunction with our Terms & Conditions, which are incorporated herein by reference and are available at Terms & Conditions. In the event of any conflict between this Policy and the Terms & Conditions on a data-related matter, this Policy shall prevail.

Data We Collect

bo345 collects personal data in the following categories, depending on how you interact with the Platform:

2.1 Registration & Identity Data

When you create a bo345 account, we collect your full legal name, date of birth, gender (where provided), residential address, email address, and mobile phone number. This information is required to establish your account, verify your identity, and comply with our Know Your Customer (KYC) obligations.

2.2 Identity Verification (KYC) Documents

To comply with anti-money-laundering (AML) and fraud-prevention requirements, bo345 may collect copies of government-issued photo identification documents such as your National Identity Card (NID) or passport, proof-of-address documents, and, where applicable, source-of-funds documentation. These documents are processed securely and retained only for as long as required by applicable legal obligations.

2.3 Financial & Transaction Data

bo345 records all deposits, withdrawals, betting transactions, bonus activations, and account balance changes associated with your account. We collect details of the payment method used (e.g., bKash wallet number, Nagad number, Rocket number, Upay identifier, or masked card number for Visa/Mastercard transactions). Full payment credentials are processed exclusively by our third-party payment service providers and are not stored on bo345 servers.

2.4 Technical & Device Data

When you access the Platform, we automatically collect certain technical data, including your IP address, browser type and version, operating system, device type and identifier, screen resolution, time zone, and referring URL. This data is used for security monitoring, fraud detection, and Platform optimisation.

2.5 Usage & Behavioural Data

We collect data about how you interact with the Platform, including the pages you visit, games you play, bets you place, session duration, click paths, and feature usage patterns. This data is used in aggregate and at the individual level to personalise your experience, identify responsible gaming concerns, and improve the Platform.

2.6 Communications Data

If you contact bo345 support via email or any in-Platform messaging tool, we retain records of that correspondence, including the content of your messages, timestamps, and any attachments. This data is used to handle your query, maintain quality standards, and resolve any disputes that may arise.

2.7 Data Collected from Third Parties

bo345 may receive personal data about you from third-party sources including KYC verification providers, payment processors, fraud-prevention services, and publicly available databases. Such data is used solely to verify your identity, prevent fraud, and fulfil our legal obligations.

How We Use Your Data

bo345 uses the personal data it collects for the following purposes:

• Account Management: To create, maintain, and administer your bo345 account, including processing your registration, verifying your identity, and managing your account settings.
• Payment Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer, and to maintain accurate financial records of all transactions.
• Service Delivery: To provide access to sports betting markets (including BPL, IPL, T20 World Cup, and international cricket), live casino games, slots, and all other features available on the bo345 Platform.
• KYC & AML Compliance: To verify your identity, confirm your age (21+), prevent fraud, and detect and report money laundering or other financial crimes as required by applicable law.
• Customer Support: To respond to your enquiries, resolve disputes, and maintain records of communications for quality assurance and compliance purposes.
• Responsible Gaming: To monitor your betting behaviour, identify potential problem gambling indicators, and enforce responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion requests.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, bonus abuse, and other prohibited activities on the Platform.
• Platform Improvement: To analyse usage patterns and technical performance data in order to improve the reliability, speed, and user experience of the bo345 Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and news about bo345 products where you have given your consent to receive such communications. You may withdraw marketing consent at any time via your account settings or by contacting support.
• Legal & Regulatory Compliance: To comply with all applicable laws, regulations, court orders, and requests from competent authorities.

Lawful Basis for Processing

Every processing activity conducted by bo345 is grounded in a recognised lawful basis. The primary lawful bases we rely on are as follows:

• Contractual Necessity: Processing that is necessary to perform our contract with you — i.e., to operate your account and deliver the services you have signed up for — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing carried out to comply with AML regulations, KYC requirements, tax reporting obligations, and other applicable laws is undertaken on the basis of legal obligation.
• Legitimate Interests: Processing for purposes such as fraud prevention, security monitoring, Platform improvement, and responsible gaming monitoring is carried out where bo345 has a legitimate interest that is not overridden by your rights and interests.
• Consent: Where bo345 sends you direct marketing communications or places non-essential cookies on your device, it does so on the basis of your freely given, specific, and informed consent, which you may withdraw at any time.

Cookies & Tracking Technologies

5.1 What Are Cookies

Cookies are small text files placed on your device by websites you visit. bo345 uses cookies and similar tracking technologies (including web beacons and pixel tags) to operate the Platform, remember your preferences, and analyse usage patterns.

5.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Performance & Analytics Cookies: Used to collect aggregate data about how visitors use the Platform, such as which pages are visited most frequently and where errors occur. This data is used solely to improve Platform performance.
• Functionality Cookies: Used to remember your preferences such as language settings and preferred game categories, enabling a more personalised experience on return visits.
• Marketing Cookies: Used only where you have given explicit consent, to track interactions with bo345 promotional content and measure the effectiveness of our campaigns. These do not track your activity on third-party websites.

5.3 Managing Cookies

You may control cookie settings through your browser's privacy settings. Please note that disabling strictly necessary cookies will impair your ability to use the bo345 Platform. Withdrawing consent for non-essential cookies will not affect the lawfulness of any processing carried out prior to withdrawal.

Sharing Your Data

bo345 does not sell or rent your personal data to third parties. We share personal data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment Service Providers: We share transaction and identity data with licensed payment processors (including mobile financial service operators such as bKash, Nagad, and Rocket, and international card networks) solely to process your deposits and withdrawals.
• KYC & AML Service Providers: We engage specialist identity verification and AML screening services to assist with our compliance obligations. These providers process your identity documents under strict data-processing agreements.
• Game Technology Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive limited gameplay and session data necessary to deliver their games on the bo345 Platform. These providers operate under their own privacy policies and are independent data controllers for their game products.
• IT & Infrastructure Providers: Cloud hosting, content delivery, and security service providers who process data on behalf of bo345 as data processors, under contractual obligations that restrict them to processing data only as instructed by bo345.
• Legal & Regulatory Authorities: Where required by law, court order, or a competent regulatory authority, bo345 will disclose personal data to the relevant body. bo345 will, where permitted, notify you of such a disclosure request before complying.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of bo345's business assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

Data Retention

bo345 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention principles apply:

• Active Account Data: Data associated with an active bo345 account (including registration details, transaction history, and game history) is retained for the duration of your account's active status.
• Closed Account Data: Following voluntary or involuntary account closure, bo345 retains your personal data for a minimum period of five (5) years to comply with AML regulations, financial record-keeping obligations, and to defend against any legal claims that may arise.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years following account closure, in line with standard AML compliance requirements.
• Support Communications: Records of customer support interactions are retained for a period of three (3) years from the date of the interaction.
• Marketing Data: Where you have consented to marketing communications, your marketing preferences are retained until you withdraw consent. Following withdrawal, we retain a suppression record to ensure we do not re-add you to marketing lists inadvertently.

Upon expiry of the applicable retention period, bo345 will securely delete or anonymise your personal data so that it can no longer be associated with you as an identifiable individual.

Security Measures

bo345 implements a multi-layered approach to data security, combining technical controls, organisational measures, and contractual safeguards to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• TLS/SSL encryption for all data transmitted between your device and bo345 servers.
• Encryption of sensitive data fields (including passwords and payment identifiers) at rest using industry-standard algorithms.
• Role-based access controls that restrict internal access to personal data to authorised personnel who have a legitimate business need.
• Regular security audits, vulnerability assessments, and penetration testing of the Platform and its underlying infrastructure.
• Intrusion detection and monitoring systems that generate alerts for anomalous access patterns or potential security incidents.
• Data breach response procedures, including notification protocols designed to inform affected users and relevant authorities within required timeframes where a breach is likely to result in a high risk to your rights and freedoms.

While bo345 takes all reasonable precautions to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the security of your own device and account credentials. If you suspect any unauthorised access to your bo345 account, please contact our support team immediately at [email protected].

Your Rights

As a data subject, you hold the following rights with respect to your personal data held by bo345. To exercise any of these rights, please submit a written request to [email protected]. bo345 will respond to all valid requests within thirty (30) calendar days of receipt, or notify you if an extension is required.

• Right of Access: You have the right to request a copy of the personal data bo345 holds about you, together with information about how it is processed, the categories of data held, and the third parties with whom it has been shared.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data that bo345 holds about you. You may update certain details directly through your account settings panel.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to bo345's overriding legal obligations, which may require us to retain certain data for a statutory minimum period.
• Right to Restriction: You may request that bo345 restricts processing of your personal data in certain circumstances, for example while the accuracy of data is being contested or while an objection is under consideration.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests. bo345 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., direct marketing), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

Children & Minors

The bo345 Platform is strictly intended for individuals aged 21 years and above. bo345 does not knowingly collect personal data from any person under the age of 21. If bo345 becomes aware that it has inadvertently collected personal data from a minor, it will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that your child has registered an account or provided personal data to bo345 without your knowledge, please contact us immediately at [email protected]. bo345 will investigate and take appropriate action promptly upon receiving such a report.

bo345 employs age verification procedures during the registration process and may request documentary proof of age at any time. Accounts for which satisfactory age verification cannot be provided will be suspended pending investigation.

International Data Transfers

bo345 operates a Platform that is accessed primarily by players located in Bangladesh. However, some of the third-party service providers we engage — including cloud infrastructure providers and game technology partners — may process personal data in data centres located outside Bangladesh. Where such international transfers occur, bo345 ensures that appropriate safeguards are in place to protect your personal data, including:

• Contractual clauses in agreements with service providers that impose data protection obligations equivalent to those described in this Policy.
• Selection of service providers that maintain internationally recognised security certifications, such as ISO 27001.
• Transfer only of the minimum data necessary for the service provider to perform its contracted function.

By using the bo345 Platform and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to service providers in other jurisdictions as described above, subject to the safeguards stated herein.

Third-Party Links

The bo345 Platform may contain references to third-party game providers and payment partners. bo345 does not control the privacy practices of these independent third parties and is not responsible for their data collection or use. This Privacy Policy applies solely to data collected by bo345 through the bo345 Platform. We encourage you to review the privacy policies of any third-party services you interact with.

Changes to This Policy

bo345 reserves the right to update or amend this Privacy Policy at any time. Where a material change is made, bo345 will notify registered players by email or through a prominent on-Platform notice prior to the change taking effect. The effective date at the top of this document will be updated accordingly, and the most current version of the Policy will always be accessible via the footer navigation of the bo345 Platform.

Your continued use of the Platform following notification of any amendment constitutes your acceptance of the revised Policy. If you do not agree with the revised Policy, you must cease using the Platform and submit a voluntary account closure request.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bo345 processes your personal data, please contact our dedicated data protection team. We are available 24 hours a day, 7 days a week, on Bangladesh Standard Time (BST, UTC+6).

Support email: [email protected]

The email address above is displayed as plain text. bo345 does not accept service of legal process by email and does not accept unsolicited commercial communications at this address.