Privacy Policy for bs338

Section 1

Information We Collect

bs338 collects personal data through several channels: directly from you when you register an account or contact support, automatically when you browse or use the platform, and from third-party payment providers and identity-verification services when you make a deposit or complete KYC verification. The categories of personal data we collect are described below.

Registration & Account Data

When you create a bs338 account, we collect the following information:

• Full legal name as it appears on your government-issued identity document.
• Date of birth — required to confirm that you are at least 18 years of age.
• Residential address in Bangladesh (city, district, and full postal address).
• Email address — used for account communication, transactional notifications, and support correspondence.
• Bangladeshi mobile phone number — used for two-factor authentication (2FA) and deposit/withdrawal confirmation via bKash, Nagad, or Rocket.
• Chosen username and encrypted password hash — we never store your password in plain text.

Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) programme, we may request and retain copies of the following documents:

• National Identity Card (NID), valid passport, or driving licence.
• Proof of address — a recent utility bill, bank statement, or official correspondence dated within the past three months.
• Proof of payment method — confirmation that the bKash, Nagad, Rocket, or Upay account used for deposits is registered in your name.
• Source of funds documentation in cases where unusually high transaction volumes are detected.

Financial Transaction Data

For every deposit and withdrawal processed on your bs338 account, we record the transaction amount in BDT, the payment channel used (e.g., bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard), the transaction reference number issued by your payment provider, the date and time of the transaction, and the resulting account balance. This data is retained for a minimum of five (5) years for financial audit and anti-money-laundering compliance purposes.

Gameplay & Betting Data

bs338 records a complete log of all gaming activity carried out under your account. This includes every bet placed, the game or sports market selected, the stake amount, the outcome, and the resulting balance change. This data is used to calculate bonus wagering progress, settle disputes, detect irregular betting patterns, and fulfil responsible gaming obligations.

Technical & Device Data

When you access the bs338 platform from any device, we automatically collect certain technical information including your IP address, device type, operating system, browser type and version, screen resolution, preferred language setting, and the pages or game titles visited during each session. This data is used solely for platform security, fraud prevention, and performance optimisation.

Section 2

How We Use Your Data

bs338 processes your personal data for a limited set of specific, legitimate purposes. We do not use your data for purposes incompatible with those stated below without first obtaining your explicit consent.

bs338 does not make automated decisions about your account — including decisions to restrict access or close an account — based solely on automated processing of your personal data without human review. Where automated systems flag unusual account activity (for example, a pattern of bets consistent with bonus abuse or match-fixing), a member of the bs338 compliance team will review the flagged activity before any account action is taken.

Section 3

Data Sharing & Third Parties

bs338 does not sell, rent, or trade your personal data. We share data with third parties only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

Payment Processing Partners

To process BDT deposits and withdrawals, bs338 shares relevant transaction data with the payment gateway or mobile financial service you select (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, or Mastercard). The data shared is limited to what that provider requires to execute the specific transaction and is governed by each provider's own privacy policy.

Identity Verification Services

bs338 may use a third-party KYC verification service to validate identity documents submitted during the account verification process. Such providers are bound by strict contractual data processing agreements and are not permitted to use your data for any purpose other than identity verification on behalf of bs338.

Game Software Providers

Game content on bs338 is supplied by licensed studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive only the session token and stake data necessary to deliver gameplay. They do not receive your full name, address, payment details, or KYC documents.

Legal & Regulatory Disclosure

bs338 will disclose personal data to law enforcement agencies, courts, or regulatory authorities where required to do so by applicable law, a valid court order, or a lawful demand from a competent authority. In such cases, we will disclose only the minimum data necessary to satisfy the legal requirement and will notify the account holder where we are legally permitted to do so.

• We do not share your data with social media advertising platforms for behavioural targeting.
• We do not sell your data to data brokers, market research companies, or any commercial third party.
• We do not share your data with other gambling operators or affiliate networks for cross-platform profiling.

Section 4

Cookies & Tracking Technologies

bs338 uses browser cookies and similar technologies to operate the platform, maintain your session, and understand aggregate usage patterns. The table below summarises every category of cookie used on the bs338 platform.

Most browsers allow you to view, manage, and delete cookies through the browser settings menu. Disabling strictly necessary cookies will prevent you from logging in and using the platform. Disabling performance or functional cookies will not affect your ability to play but may reduce the quality of certain personalised features.

Section 5

Data Retention & Storage

bs338 retains your personal data for as long as your account remains active and for a defined period after account closure, as required by applicable financial regulations and responsible gaming obligations. The specific retention periods for each data category are as follows:

• Account registration data — Retained for the lifetime of your account plus five (5) years after permanent account closure.
• KYC identity documents — Retained for five (5) years after the date of verification or five (5) years after account closure, whichever is later.
• Financial transaction records (deposits and withdrawals) — Retained for a minimum of five (5) years in compliance with anti-money-laundering requirements.
• Gameplay and betting logs — Retained for three (3) years from the date of the relevant gaming session.
• Customer support correspondence — Retained for two (2) years from the date of resolution of the relevant support case.
• Technical and device logs — Retained for ninety (90) days on a rolling basis, then automatically deleted.
• Marketing consent records — Retained for as long as you remain opted in, plus two (2) years after opt-out as evidence of prior consent.

All personal data held by bs338 is stored on servers located in secure data centres. Access to stored data is restricted to authorised bs338 personnel on a strict need-to-know basis. Data at rest is encrypted using industry-standard AES-256 encryption. Backup copies of data are maintained in geographically separate secure facilities to ensure continuity of service.

Upon expiry of the relevant retention period, personal data is securely and permanently deleted or irreversibly anonymised in accordance with our internal data disposal procedures. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for platform analytics and reporting purposes.

Section 6

Your Rights Over Your Data

As a registered bs338 player, you hold a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within five (5) business days of receiving a verified request.

• Right of Access: You may request a copy of all personal data that bs338 holds about you. We will provide this in a structured, commonly used format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You may also update most account details directly through your account dashboard.
• Right to Erasure: You may request deletion of your personal data. Note that this right is subject to our legal retention obligations — data required by anti-money-laundering or responsible gaming regulations cannot be deleted before the mandatory retention period expires.
• Right to Data Portability: You may request your personal and transaction data in a machine-readable format (JSON or CSV) so that you can transfer it to another service if you choose.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
• Right to Object: You have the right to object to processing carried out on the basis of bs338's legitimate interests. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Restriction: In certain circumstances — for example, while a dispute about data accuracy is being resolved — you may request that we restrict processing of your data to storage only.

Section 7

Data Security Measures

bs338 implements a multi-layered security framework designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our key security measures include:

• Transport Layer Security (TLS 1.2/1.3): All data transmitted between your browser or app and the bs338 platform is encrypted in transit. Connections using outdated or insecure TLS versions are rejected at the server level.
• AES-256 Encryption at Rest: Sensitive data fields — including KYC document files, payment reference numbers, and account passwords — are stored encrypted on our servers.
• Two-Factor Authentication (2FA): bs338 offers 2FA via SMS OTP for all account logins. We strongly recommend enabling 2FA from your account security settings.
• Access Controls: Access to production systems containing personal data is restricted to a small number of authorised personnel using role-based access controls and audit-logged administrative sessions.
• Intrusion Detection: Our platform is monitored continuously by automated intrusion detection systems that alert the security team to anomalous activity in real time, around the clock.
• Regular Security Audits: bs338 conducts periodic security assessments and penetration tests carried out by qualified third-party security professionals to identify and remediate vulnerabilities before they can be exploited.

Despite our best efforts, no online platform can guarantee absolute security against all possible threats. If you have reason to believe that your bs338 account has been accessed without your authorisation, you should change your password immediately and contact [email protected] without delay so that our team can take protective action on your account.

In the unlikely event of a data breach that is likely to result in a risk to your rights or freedoms, bs338 will notify affected account holders without undue delay and will take all reasonable steps to contain and remediate the breach. We maintain a documented Incident Response Plan for exactly this scenario.

Section 8

Policy Updates & Contact

bs338 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, changes to applicable laws, or improvements to our platform. The date of the most recent revision is always displayed at the top of this page in the metadata bar. Where changes are material — meaning they meaningfully affect the way we collect, use, or share your personal data — we will notify registered players by email at least seven (7) days before the updated policy takes effect.

Continued use of the bs338 platform after a Privacy Policy update takes effect constitutes your acceptance of the revised policy. If you do not agree with any change to this policy, you should stop using the platform and request account closure before the effective date of the change.

How to Contact Us About Privacy

For all privacy-related enquiries, data rights requests, or to report a suspected data security incident, please contact the bs338 data team using the details below. Please do not send sensitive identity documents via unsecured channels — our support team will provide a secure upload link upon request.

• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" for fastest routing.
• Response Time: We aim to acknowledge all privacy-related enquiries within one (1) business day and to resolve them fully within five (5) business days.
• Website: bs338.net — additional help resources are available in our FAQ section.

bs338 is committed to maintaining the trust of every player who chooses to game with us. Your privacy is not an afterthought — it is built into how we design, build, and operate every part of the platform. We welcome feedback on this policy and will take all reasonable suggestions into account during our next scheduled review.