bg349 Privacy Policy

1 Introduction and Scope

This Privacy Policy sets out the data protection practices of bg349, the online betting and casino platform available at https://bg349.io ("bg349", "we", "us", "our"). It describes the categories of personal data we collect from players and visitors, the purposes for which that data is processed, the legal bases on which we rely, and the rights available to individuals whose data we hold.

This Policy applies to:

• All registered account holders on the bg349 platform.
• All visitors who browse https://bg349.io, regardless of whether they hold a registered account.
• All individuals who contact bg349 by email, live chat, or any other communication channel.
• All individuals whose personal data is submitted in connection with a KYC verification request or a payment transaction processed through the bg349 platform.

This Policy should be read alongside the bg349 Terms & Conditions. Where any conflict exists between this Policy and the Terms & Conditions, the Terms & Conditions shall prevail to the extent of the inconsistency, except where this Policy expressly provides for a higher standard of data protection.

2 Data Controller Information

For the purposes of this Privacy Policy, bg349 acts as the data controller in respect of all personal data collected and processed through the bg349 platform. As data controller, bg349 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection obligations.

All data protection enquiries, access requests, and complaints should be directed to the bg349 data protection contact point:

• Email: [email protected]
• Subject Line: Data Protection Enquiry
• Response Time: Within 10 business days of receipt of a complete request

3 Categories of Personal Data Collected

bg349 collects the following categories of personal data, depending on how you interact with the platform:

Data Category	Examples	Collection Trigger
Identity Data	Full legal name, date of birth, National ID number, passport number	Account registration, KYC verification
Contact Data	Mobile number, email address, residential address (city, district)	Account registration, support contact
Financial Data	bKash/Nagad/Rocket mobile number, transaction amounts in BDT, deposit and withdrawal history	Deposit, withdrawal, KYC verification
Account Data	Username, account balance, betting history, bonus usage, login timestamps	Account activity on the bg349 platform
Device and Technical Data	IP address, browser type and version, device model, operating system, screen resolution	Automatic collection via cookies and server logs
Usage Data	Pages visited, games played, session duration, click paths, search queries within the platform	Automatic collection via analytics tools
KYC Documentation	Scanned or photographed identity documents, proof of address documents, selfie photographs	KYC verification request
Communications Data	Content of emails, live chat transcripts, support tickets submitted to bg349	When you contact the bg349 support team

bg349 does not collect or process special categories of sensitive personal data (such as health data, racial or ethnic origin, political opinions, religious beliefs, or biometric data) except where such data is volunteered by you in the context of a responsible gaming self-assessment or a support communication, in which case it is processed solely for the purpose for which it was provided.

4 How We Collect Your Data

bg349 collects personal data through the following channels and methods:

• Direct submission: Data you provide when completing the bg349 account registration form, submitting KYC documentation, initiating a deposit or withdrawal, or contacting the support team.
• Automated collection: Technical and usage data collected automatically via server logs, cookies, and first-party analytics tools when you visit or interact with the bg349 website.
• Payment processing partners: Transaction confirmation data received from mobile financial service providers (bKash, Nagad, Rocket, Upay) and banking partners when you conduct a deposit or withdrawal on the platform.
• KYC verification providers: Identity verification outcomes and risk signals shared with bg349 by third-party identity verification services engaged to process KYC submissions.
• Fraud and security systems: Risk scores, device fingerprints and behavioural signals generated by fraud detection systems integrated into the bg349 platform for the purpose of protecting accounts and preventing money laundering.

5 Lawful Basis for Processing

bg349 processes personal data only where a valid lawful basis exists for that processing. The lawful bases applicable to bg349's processing activities are as follows:

• Contract performance: Processing necessary to open and operate your account, process deposits and withdrawals, settle bets, and deliver the gaming services you have requested. Without this processing, bg349 cannot provide its services to you.
• Legal obligation: Processing required to comply with anti-money laundering obligations, KYC and age verification requirements, fraud prevention duties, and any other legal obligation applicable to bg349's operations.
• Legitimate interests: Processing conducted in pursuit of bg349's legitimate interests in operating a safe, fair and commercially sustainable platform — including fraud detection, security monitoring, responsible gaming analysis, platform improvement, and aggregate usage analytics — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for which bg349 has obtained your freely given, specific and informed consent — primarily in the context of marketing communications. You may withdraw consent at any time without penalty by contacting [email protected].

6 How We Use Your Personal Data

bg349 uses the personal data it collects for the following purposes:

• To create, verify and maintain your bg349 account, including processing your registration information and confirming your eligibility to use the platform.
• To process deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and banking partners, including reconciling transactions and handling payment disputes.
• To carry out KYC verification procedures to confirm your identity, age (21+), and ownership of the payment methods associated with your account.
• To detect, investigate and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and other conduct prohibited under the bg349 Terms & Conditions.
• To enforce the bg349 Terms & Conditions and respond to disputes, complaints and legal claims.
• To deliver responsible gaming tools and interventions, including monitoring account activity for indicators of problem gambling and applying account restrictions where necessary.
• To communicate with you regarding account matters, transaction confirmations, security alerts, promotional offers (where consent has been given), and updates to bg349 policies.
• To analyse platform usage in aggregate to improve the bg349 product, optimise the user experience, and develop new features relevant to the Bangladesh market.
• To fulfil any legal or regulatory reporting obligations applicable to bg349.

7 Cookies and Tracking Technologies

bg349 uses cookies and similar tracking technologies on the bg349 website to improve platform functionality, maintain your login session, and gather anonymised usage analytics. The categories of cookies used by bg349 are described below:

• Strictly Necessary Cookies: Essential for core platform functionality, including maintaining your authenticated session, storing your language preference, and preserving items in your active bet slip. These cookies cannot be disabled without rendering the platform non-functional.
• Functional Cookies: Used to remember preferences you have set during previous sessions, such as display settings, notification preferences, and responsible gaming tool configurations.
• Analytics Cookies: First-party analytics cookies that collect anonymised data about how visitors navigate the bg349 website, which pages are most visited, and where users encounter difficulties. This data is used exclusively to improve the bg349 platform and is not shared with third-party advertising networks.
• Security Cookies: Short-lived session tokens and CSRF protection cookies that help bg349 detect and prevent session hijacking, cross-site request forgery, and other security threats.

bg349 does not use third-party advertising cookies or behavioural tracking cookies for the purpose of serving targeted advertisements on external websites. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to use the bg349 platform.

8 Data Sharing and Third-Party Disclosure

bg349 does not sell your personal data. bg349 may share your personal data with third parties only in the following limited circumstances:

• Payment processing partners: Mobile financial service providers (bKash, Nagad, Rocket, Upay) and banking partners receive the minimum personal data necessary to process your deposits and withdrawals, including your registered mobile number and transaction amount.
• Identity verification providers: Third-party KYC and identity verification services receive copies of your identity documents and contact details for the purpose of verifying your identity and age in accordance with bg349's legal obligations.
• Fraud prevention and security services: Fraud detection platforms integrated into the bg349 infrastructure may process your device data, IP address and behavioural signals to generate risk assessments used to protect your account and the integrity of the platform.
• IT infrastructure and hosting providers: Cloud hosting and infrastructure providers who store and process platform data on bg349's behalf under contractual data processing agreements that impose equivalent data protection obligations.
• Legal and regulatory authorities: Where bg349 is required by applicable law, court order, or regulatory direction to disclose personal data to law enforcement agencies, financial intelligence units, or other competent public authorities.
• Professional advisers: Solicitors, accountants, auditors and insurers who require access to certain account or transaction data in the course of providing professional services to bg349, subject to professional confidentiality obligations.

All third parties with whom bg349 shares personal data are required to process that data only for the specified purpose, to maintain appropriate technical and organisational security measures, and to comply with applicable data protection obligations. bg349 does not authorise any third party to use your personal data for their own independent commercial purposes.

9 International Data Transfers

bg349 is a platform focused on the Bangladesh market. The majority of personal data collected by bg349 is processed and stored on servers located in jurisdictions with adequate data protection frameworks. Where personal data is transferred to a third-party service provider located outside Bangladesh, bg349 takes steps to ensure that such transfers are subject to appropriate contractual safeguards, including standard data processing clauses that impose obligations equivalent to those set out in this Privacy Policy.

If you have questions about the specific countries to which your data may be transferred or the safeguards in place, please contact the bg349 data protection team at [email protected] with the subject line "International Transfer Enquiry".

10 Data Retention

bg349 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply to the principal categories of personal data held by bg349:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping obligations.
• Financial transaction data: Retained for a minimum of five (5) years from the date of the relevant transaction, in line with financial record-keeping requirements.
• KYC documentation: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure.
• Communications data: Support emails and live chat transcripts are retained for two (2) years from the date of the communication, unless the communication relates to an ongoing dispute or legal claim, in which case retention is extended for the duration of that matter.
• Analytics and usage data: Anonymised aggregate analytics data is retained indefinitely. Identifiable usage logs are retained for a maximum of thirteen (13) months.
• Cookies: Session cookies expire at the end of your browsing session. Persistent functional cookies expire as specified in their individual cookie properties, typically between 30 and 365 days.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to an identified individual.

11 Security Measures

bg349 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the bg349 platform.
• Encryption of sensitive data fields (including identity document data and payment credentials) at rest within bg349's database infrastructure.
• Role-based access controls that restrict bg349 staff access to personal data on a strict need-to-know basis.
• Multi-factor authentication for all bg349 administrative system access.
• Regular security assessments and penetration testing of the bg349 platform infrastructure.
• Automated anomaly detection systems that identify and flag unusual access patterns or suspicious account activity in real time.
• Formal incident response procedures for handling suspected data breaches, including notification protocols.

No data transmission over the internet is entirely without risk. While bg349 employs industry-standard security practices, we cannot guarantee the absolute security of data transmitted to or from the platform. Players are encouraged to use strong, unique passwords for their bg349 accounts and to enable two-factor authentication (2FA) within Account Settings.

12 Your Data Rights

As an individual whose personal data is processed by bg349, you hold the following rights with respect to that data. Requests to exercise any of these rights should be submitted to [email protected] with the subject line "Data Rights Request", along with your registered account username and a description of the right you wish to exercise.

• Right of Access: You have the right to request a copy of the personal data bg349 holds about you, together with information about how that data is being used. bg349 will respond to access requests within 10 business days.
• Right to Rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. Some data corrections (such as legal name changes) may require supporting documentation.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the processing was unlawful. This right is subject to bg349's legal obligation to retain certain data for compliance purposes, as described in Section 10.
• Right to Restriction of Processing: You have the right to request that bg349 restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or have objected to processing pending verification of bg349's legitimate grounds.
• Right to Data Portability: You have the right to receive a copy of personal data you have provided to bg349 in a structured, commonly used and machine-readable format, and to have that data transmitted to another controller where technically feasible.
• Right to Object: You have the right to object to processing based on bg349's legitimate interests where you have grounds relating to your particular situation. You also have an absolute right to object to processing of your personal data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

bg349 will not charge a fee for handling data rights requests submitted in good faith. bg349 reserves the right to request identity verification before processing a data rights request to ensure that personal data is not disclosed to an unauthorised third party.

13 Children's Privacy

The bg349 platform is strictly for individuals aged 21 years and above. bg349 does not knowingly collect or process personal data relating to individuals under the age of 21. If bg349 becomes aware that personal data has been collected from an individual who is under 21, that data will be deleted immediately and the associated account will be closed.

If you believe that bg349 may have inadvertently collected data from an individual under the age of 21, please notify us immediately at [email protected] so that appropriate remedial action can be taken without delay.

14 Marketing Communications

bg349 may send you promotional communications relating to bg349 offers, bonuses, tournaments, and platform updates where you have provided explicit consent to receive such communications during account registration or via your account notification preferences.

Marketing communications from bg349 may be delivered by email or SMS to the contact details registered on your account. You may withdraw your consent to receive marketing communications at any time by:

• Clicking the unsubscribe link included in any bg349 marketing email.
• Updating your notification preferences within bg349 Account Settings.
• Contacting [email protected] with the subject line "Marketing Opt-Out" and your registered account username.

Withdrawal of consent to marketing communications will not affect the delivery of transactional communications (such as deposit confirmations, withdrawal notifications, and security alerts), which are necessary for the operation of your account and are sent on the basis of contract performance rather than consent.

15 Amendments to This Policy

bg349 reserves the right to update or amend this Privacy Policy at any time to reflect changes in data processing practices, applicable law, or platform functionality. Material changes to this Policy will be communicated to registered players by email or via a prominent notice on the bg349 platform, not less than seven (7) days before the amended Policy takes effect.

The version of this Privacy Policy currently published at https://bg349.io/privacy-policy is the version in force. The "Last Updated" date at the top of this document reflects the most recent substantive revision. Your continued use of the bg349 platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

16 Contact and Complaints

If you have any questions, concerns or complaints about this Privacy Policy or bg349's data processing practices, please contact the bg349 data protection team using the details below:

• Email: [email protected]
• Subject Line: Privacy Policy Enquiry
• Response Time: Within 10 business days
• Support Hours: 24/7, Bangladesh Standard Time (UTC+6)

bg349 is committed to resolving all data protection complaints fairly and promptly. If you are not satisfied with bg349's response to a complaint, you may have the right to refer the matter to the relevant supervisory or data protection authority applicable in your jurisdiction.