bf345 Privacy Policy

1 Introduction

This Privacy Policy (hereinafter referred to as "Policy") describes how bf345 (hereinafter referred to as "bf345", "we", "us", or "our") collects, processes, stores, and protects the personal data of individuals (hereinafter referred to as "you", "the Player", or "User") who access or use the bf345 online casino and sports betting platform at https://bf345.io and any associated services, features, or products (collectively, "the Platform").

bf345 is committed to protecting your privacy and handling your personal data in a transparent, lawful, and responsible manner. This Policy has been drafted to clearly explain what data we collect, why we collect it, how we use it, and what rights you have in relation to it.

By registering an account with bf345 or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. This Policy should be read alongside the bf345 Terms and Conditions, which together govern your use of the Platform.

If you do not agree with any part of this Privacy Policy, you must cease using the Platform immediately and may contact [email protected] to request the closure of your account and the deletion of your data, subject to applicable legal retention obligations.

2 Data Controller

For the purposes of applicable data protection law, bf345 acts as the data controller in respect of all personal data collected through the Platform. As the data controller, bf345 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in accordance with applicable data protection principles.

All data protection queries, access requests, erasure requests, and formal complaints should be directed to the bf345 data support team at [email protected]. Our support team operates 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).

3 Data We Collect

bf345 collects the following categories of personal data from players who register and use the Platform. The data collected is proportionate to the purposes for which it is used, as described in Section 6 of this Policy.

bf345 does not collect special category data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless this is strictly required to comply with a legal obligation and you have given explicit consent for that purpose.

4 How We Collect Your Data

bf345 collects your personal data through the following channels:

• Direct interactions: Data you provide when you create an account, complete KYC verification, make a deposit or withdrawal, contact support, submit a complaint, or update your account settings.
• Automated technologies: Data collected automatically when you visit or interact with the Platform, including IP addresses, session data, device identifiers, and browser information collected via cookies, pixels, and server logs.
• Payment providers: Transaction confirmation data received from mobile money providers (bKash, Nagad, Rocket, Upay, SureCash) and banking partners when you initiate a deposit or withdrawal.
• Game providers: Gameplay outcome data and session records provided by third-party game suppliers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Habanero, and Ezugi in connection with your activity on their products hosted within the Platform.
• Identity verification providers: Results from third-party KYC and identity verification services used to confirm the authenticity of documents submitted during account verification.
• Fraud detection systems: Risk signals and behavioural patterns generated by automated fraud detection systems that monitor account activity in real time.

5 Legal Basis for Processing

bf345 processes your personal data on the following legal bases:

• Contractual necessity: Processing is necessary to fulfil our contractual obligations to you as a registered player, including account management, transaction processing, game delivery, and customer support.
• Legal obligation: Processing is required to comply with applicable legal obligations, including anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and age verification mandates. Compliance with these obligations is non-negotiable and cannot be opted out of.
• Legitimate interests: Processing is necessary for the legitimate interests of bf345, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided that these interests are not overridden by your fundamental rights and freedoms.
• Consent: For specific processing activities such as direct marketing communications, the use of non-essential cookies, and the processing of any special category data, bf345 will seek your explicit consent before processing. You may withdraw consent at any time by contacting [email protected], though withdrawal will not affect the lawfulness of processing carried out prior to withdrawal.

6 How We Use Your Data

bf345 uses the personal data we collect for the following specific purposes:

• Account creation and management: To register your player account, maintain your account profile, and manage account settings including responsible gaming preferences.
• Identity verification and KYC: To verify your identity, confirm your age (21+ requirement), and authenticate the payment methods linked to your account in compliance with AML obligations.
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, SureCash, and bank transfer, and to maintain a complete and accurate record of all financial transactions on your account.
• Game delivery: To provide access to casino games, sports betting markets (including cricket BPL, IPL, T20 World Cup, and Bangladesh Tigers fixtures), and other gaming products on the Platform.
• Customer support: To respond to your queries, investigate complaints, and resolve disputes relating to your account or gameplay.
• Responsible gaming: To monitor your gaming behaviour for signs of problem gambling, to enforce deposit limits and self-exclusion requests, and to deliver responsible gaming tools and interventions where necessary.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, and other prohibited activities on the Platform.
• Platform optimisation: To analyse aggregated usage data for the purpose of improving the user experience, game selection, payment processing performance, and overall platform reliability.
• Marketing communications: Where you have given explicit consent, to send you information about promotions, bonuses, new games, and seasonal offers relevant to players in Bangladesh. You may withdraw marketing consent at any time.
• Legal compliance: To comply with applicable legal and regulatory obligations, including the production of records in response to lawful requests from competent authorities.

7 Data Sharing and Disclosure

bf345 does not sell or commercially transfer your personal data to any third party. However, we may share your personal data with the following categories of recipients where strictly necessary:

• Game providers: Third-party game studios and live casino providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Habanero, Spribe, and Ezugi) receive the minimum data necessary to authenticate your session and deliver game content. These providers are contractually prohibited from using your data for any purpose beyond service delivery.
• Payment processors: Mobile money providers (bKash, Nagad, Rocket, Upay, SureCash) and banking partners receive transaction reference data necessary to process your deposits and withdrawals. No additional personal data beyond what is required for the transaction is transmitted.
• Identity verification services: KYC platform providers receive copies of identity documents submitted during the account verification process for the sole purpose of authenticating those documents. These providers operate under data processing agreements consistent with applicable data protection standards.
• Fraud detection and security vendors: Third-party fraud prevention and cybersecurity partners receive technical and behavioural data (such as IP addresses and session patterns) for the purpose of detecting and preventing fraudulent account activity.
• Legal and regulatory authorities: bf345 will disclose personal data to law enforcement agencies, financial intelligence units, or other competent governmental bodies where required to do so by applicable law, a valid court order, or a lawful regulatory request. bf345 will notify you of such disclosures where it is legally permitted to do so.
• Professional advisers: Legal counsel, auditors, and other professional advisers engaged by bf345 may have access to your personal data on a confidential, need-to-know basis in connection with the services they provide to bf345.

All third-party recipients of your personal data are required to implement appropriate technical and organisational measures to protect that data and to process it only in accordance with the instructions of bf345.

8 Cookies and Tracking

bf345 uses cookies and similar tracking technologies on the Platform to support the delivery of essential platform functions and to improve the quality of your experience. The following types of cookies are used:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They maintain your login session, preserve your responsible gaming settings, and enable secure transactions. These cookies cannot be disabled without significantly impairing your ability to use the Platform.
• Functional cookies: These cookies remember your preferences (such as language settings and game lobby filters) to personalise your experience across sessions. They do not track you for advertising purposes.
• Analytical cookies: With your consent, bf345 uses anonymised analytical cookies to understand how players interact with the Platform — including which pages are visited most frequently and where users encounter technical difficulties. This data is used solely for platform improvement purposes.
• Security cookies: These cookies support the Platform's fraud detection and account security systems by identifying unusual session patterns or suspicious login behaviour.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of the Platform. bf345 does not use third-party advertising cookies or behavioural retargeting cookies on the Platform.

9 Data Retention

bf345 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account data: Retained for the duration of your active account and for a minimum of five years following account closure, to comply with anti-money laundering record-keeping obligations.
• Transaction records: Retained for a minimum of five years from the date of each transaction, in accordance with AML and financial record-keeping requirements.
• KYC documents: Retained for a minimum of five years from the date of account closure. Original document images are destroyed once verification is completed, with only the verification outcome record retained thereafter.
• Support communications: Retained for three years from the date of the last interaction, to support dispute resolution and quality assurance processes.
• Gameplay and betting history: Retained for three years from the date of each session for responsible gaming monitoring and dispute resolution purposes.
• Marketing consent records: Retained for as long as your account is active or until consent is withdrawn, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised in accordance with bf345's internal data destruction procedures.

10 Data Security

bf345 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures in place include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the bf345 platform is encrypted using 256-bit TLS/SSL encryption, preventing interception during transit.
• Data encryption at rest: Sensitive data stored on bf345 servers — including identity documents, financial data, and authentication credentials — is encrypted at rest using AES-256 encryption.
• Two-factor authentication (2FA): All player accounts are protected with OTP-based two-factor authentication. We strongly recommend that all players keep 2FA enabled at all times.
• Access controls: Access to personal data within bf345 is restricted on a strict need-to-know basis. Staff members are granted access only to the data necessary to perform their specific job functions, and all access is logged and audited.
• Regular security audits: bf345 conducts periodic security assessments and penetration testing of the Platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident response: bf345 maintains a documented incident response plan. In the event of a confirmed data breach, affected players will be notified in accordance with applicable notification obligations.

While bf345 takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. You remain responsible for maintaining the confidentiality of your login credentials and for ensuring the security of the device from which you access the Platform.

11 Your Rights

As a player registered with bf345, you have the following rights in relation to your personal data. To exercise any of these rights, please contact [email protected] with your request. All requests will be acknowledged within 24 hours and fulfilled within 30 days.

• Right of access: You have the right to request a copy of all personal data that bf345 holds about you. We will provide this information in a clear, structured format.
• Right to rectification: You have the right to request the correction of any inaccurate or incomplete personal data we hold about you. You may update certain account details directly through your account settings dashboard.
• Right to erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations under AML regulations.
• Right to restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing pending verification of our legitimate grounds.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to have that data transmitted to another controller where technically feasible.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to withdraw consent: Where processing is based on your consent (including consent to receive marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

If you believe that bf345 has processed your personal data in a manner that does not comply with applicable data protection law, you have the right to lodge a formal complaint. Please first raise the matter with our support team at [email protected] so that we have the opportunity to investigate and resolve your concern directly.

12 Children and Minors

bf345 strictly prohibits access to the Platform by persons under the age of 21. The Platform is designed exclusively for adults aged 21 and above. bf345 does not knowingly collect personal data from individuals under the age of 21.

If bf345 becomes aware that personal data has been collected from a person under the age of 21, that account will be closed immediately, all associated data will be deleted (subject to any legal retention obligations), and any deposits will be returned to the original funding source where possible.

If you are a parent or guardian and you believe that your child has registered an account with bf345, please contact us immediately at [email protected] so that we can take appropriate action without delay.

13 Changes to This Policy

bf345 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or our internal data processing practices. Where a material change is made to this Policy, bf345 will notify registered players via email or via a prominent notice on the Platform at least seven days before the change takes effect.

The "Last Updated" date at the top of this document will be revised each time this Policy is amended. We encourage you to review this Policy periodically to stay informed about how bf345 protects your personal data.

Your continued use of the Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not accept the changes, you must cease using the Platform and may request account closure by contacting [email protected].

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by bf345, please contact our data support team using the details below. All communications are handled in English by our dedicated support staff.

• Support Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Response Time: Data rights requests acknowledged within 24 hours and fulfilled within 30 days
• Language: English
• Platform: https://bf345.io

All formal data rights requests must be submitted in writing via email. Please include your registered account email address and a clear description of your request to allow us to locate your data and respond accurately.