ad365 Privacy Policy — How We Collect, Use, and Safeguard Your Personal Data

When you register, use, or interact with the ad365 platform, we collect certain categories of personal data. The specific data collected depends on how you engage with the platform — whether you are browsing as a guest, registering a new account, depositing funds via bKash or Nagad, submitting a KYC document, or contacting our support team.

The following table sets out the main categories of personal data that ad365 collects, the typical source of that data, and the lawful basis under which it is processed:

Data You Choose Not to Provide: Where collection of a particular category of data is optional, we will make this clear at the point of collection. However, certain data — particularly identity data and financial data — is mandatory for KYC compliance and cannot be waived. If you decline to provide mandatory data, ad365 may be unable to open your account, process withdrawals, or continue providing services to you.

Data About Third Parties: You must not provide ad365 with personal data about any third party (for example, a family member's payment method or ID document) without that person's knowledge and consent. Using a third-party payment method to fund your ad365 account is a breach of our Terms & Conditions regardless of privacy considerations.

ad365 uses your personal data only for purposes that are directly connected to the operation of the platform, the fulfilment of our contractual obligations to you, and the discharge of our legal and regulatory responsibilities. We do not use your data for purposes that are incompatible with those for which it was originally collected.

The key purposes for which ad365 processes personal data are as follows:

• Account Registration and Management: Creating and maintaining your ad365 player account, authenticating your identity at login, and managing your account preferences, game history, and balance information in BDT.
• Payment Processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks including Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank. Financial data is shared with payment processors solely to execute your transactions.
• Identity Verification (KYC): Complying with our Know Your Customer obligations to verify that you are who you say you are, that you are aged 18 or above, and that your source of funds is legitimate. KYC is also required to combat fraud, money laundering, and the financing of prohibited activities.
• Customer Support: Responding to your queries, complaints, and support requests via live chat, email, and other communication channels. Support interaction records may be retained to improve service quality and for training purposes.
• Responsible Gaming: Monitoring gameplay patterns to identify potential signs of problem gambling, enforcing deposit limits and self-exclusion requests you have activated, and ensuring that players who have self-excluded from ad365 are prevented from accessing the platform.
• Fraud Prevention and Security: Detecting and investigating suspicious account activity, unauthorised access, bonus abuse, multi-accounting, collusion, and other prohibited conduct as defined in our Terms & Conditions.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the design, performance, game offering, and overall user experience of the ad365 platform for Bangladeshi players.
• Marketing Communications: Sending you promotional offers, bonus notifications, and seasonal promotions (such as Eid offers, BPL cricket promotions, and Pohela Boishakh specials) where you have given your explicit consent to receive marketing communications. You may withdraw this consent at any time by updating your notification preferences in Account Settings or by contacting [email protected].
• Legal and Regulatory Compliance: Retaining transaction records, KYC documentation, and account activity logs for the minimum periods required by applicable law and as reasonably required to defend ad365 in the event of a legal dispute or regulatory enquiry.

ad365 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file stored on your device by your web browser when you visit the ad365 website. Cookies help us keep you logged in securely, remember your preferences, understand how the platform is being used, and protect the platform from fraud.

The cookies used by ad365 fall into the following categories:

Managing Your Cookie Preferences: You can manage your cookie preferences at any time via the Cookie Preferences panel accessible from the footer of the ad365 website. You can also control cookies through your browser settings — most modern browsers allow you to block or delete cookies. Note that disabling strictly necessary or fraud prevention cookies may prevent you from logging into your account or using certain platform features.

Third-Party Cookies: Some cookies on the ad365 platform are set by third-party service providers, including game providers such as Pragmatic Play, Evolution Gaming, and Spribe, as well as our payment processing partners. These third-party cookies are governed by the respective providers' privacy policies. ad365 does not control these cookies and is not responsible for the data practices of third-party providers.

ad365 does not sell, rent, or trade your personal data. We share personal data with third parties only in the limited circumstances described in this section, and only to the extent necessary to fulfil the stated purpose.

• Payment Processors: To process your BDT deposits and withdrawals, ad365 shares the minimum necessary financial data with our payment processing partners — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and international card processors (Visa/Mastercard). These partners are contractually bound to handle your data securely and are prohibited from using it for any purpose other than processing your transaction.
• Identity Verification Providers: To comply with KYC and anti-money laundering obligations, ad365 uses third-party identity verification services to validate the identity documents you submit. Your name, date of birth, ID document images, and liveness check data are shared with these providers for verification purposes only. Results are returned to ad365 as a pass/fail determination; your document images are not retained indefinitely by verification providers.
• Game Providers: Live casino and RNG game sessions are delivered by providers including Evolution Gaming, Pragmatic Play, Ezugi, Spribe, NetEnt, and Microgaming. These providers may process certain technical data (session ID, bet history within the game session) to deliver their games. They do not receive your full personal profile, contact details, or financial data.
• Fraud Prevention and Security Services: ad365 uses specialist fraud detection and cybersecurity services that process technical and behavioural data (device fingerprint, IP address, session pattern) to identify and prevent fraudulent activity on the platform.
• Legal and Regulatory Authorities: ad365 may be required to disclose personal data to law enforcement agencies, regulatory bodies, or courts in Bangladesh or other applicable jurisdictions in response to a lawful request, court order, or legal obligation. We will notify you of such disclosure where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of assets involving ad365, your personal data may be transferred to the successor entity as part of the transaction. You will be notified of any such transfer and the privacy practices of the acquiring entity before the transfer takes effect.

All third-party service providers that process personal data on behalf of ad365 are required to enter into a Data Processing Agreement that imposes obligations of confidentiality, data security, and purpose limitation consistent with the standards described in this Privacy Policy. ad365 conducts due diligence on the data protection practices of all significant third-party processors before engaging their services.

ad365 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law, regulatory obligation, or legitimate business need. The following retention schedule applies to the main categories of personal data held by ad365:

Data Storage Location: Personal data collected from Bangladeshi players is stored on servers located in secure, access-controlled data centre facilities. ad365 employs physical and technical security controls at all storage facilities, including restricted access, 24/7 monitoring, and encrypted storage for sensitive data categories such as identity documents and payment references.

International Transfers: Some of the third-party service providers used by ad365 — particularly game providers and identity verification services — may process data on servers located outside Bangladesh. Where such transfers occur, ad365 takes reasonable steps to ensure that the receiving party provides an adequate level of data protection, including contractual safeguards and technical security measures consistent with industry standards.

Deletion Process: When a retention period expires and no legal obligation requires continued retention, ad365 deletes or anonymises the data in a manner that makes re-identification impossible. Deletion requests submitted by players are processed in accordance with the rights described in Section 06 of this Privacy Policy.

As a player on the ad365 platform, you have a range of rights over your personal data. These rights are set out below. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request" and a description of the right you wish to exercise. ad365 will respond to all valid requests within 30 days. We may need to verify your identity before processing your request to prevent unauthorised access to another person's data.

Limitations on Rights: Some rights are not absolute. In certain circumstances, ad365 may be required to retain and process your data notwithstanding an erasure or restriction request — for example, where legal or regulatory obligations require that transaction records be kept for a minimum period, or where data must be retained to investigate a suspected fraud or money laundering case. Where ad365 is unable to fulfil a rights request in full, we will explain the reason clearly and in writing.

ad365 takes data security seriously and implements a layered set of technical, organisational, and physical controls designed to protect your personal data from unauthorised access, disclosure, alteration, loss, or destruction. The following security measures are in place across the ad365 platform:

• TLS/SSL Encryption in Transit: All data transmitted between your device and the ad365 platform is encrypted using TLS 1.2 or higher (256-bit SSL). This protects your login credentials, personal details, and payment information from interception during transmission.
• Encryption at Rest: Sensitive personal data stored on ad365 servers — including identity documents, financial references, and password hashes — is encrypted at rest using AES-256 encryption. Passwords are never stored in plain text; they are hashed using a strong, salted cryptographic algorithm.
• Access Controls: Access to personal data within the ad365 organisation is restricted on a strict need-to-know basis. System permissions are role-based and reviewed regularly. No employee has unrestricted access to the entire database of player information.
• Two-Factor Authentication (2FA): 2FA is available to all players via SMS OTP and is strongly recommended. Internal ad365 systems that access personal data require mandatory multi-factor authentication for all staff members.
• Intrusion Detection and Monitoring: ad365 operates continuous network monitoring, intrusion detection systems, and automated alerting for anomalous access patterns. Security incidents are investigated and remediated promptly by our dedicated security team.
• Regular Security Assessments: ad365 conducts periodic vulnerability assessments and security reviews of its platform infrastructure. Third-party penetration testing is performed on a scheduled basis to identify and address potential weaknesses before they can be exploited.
• Data Breach Response: In the event of a data breach that is likely to result in a risk to your rights and freedoms, ad365 will notify affected players without undue delay — and in no event later than 72 hours after becoming aware of the breach — providing details of the nature of the breach, the categories and approximate number of individuals affected, and the steps taken to address it.

Your Role in Data Security: While ad365 takes every reasonable technical measure to protect your data, security is a shared responsibility. You are responsible for maintaining the confidentiality of your login credentials, using a strong and unique password, enabling 2FA, logging out after each session on shared devices, and promptly notifying ad365 if you suspect unauthorised access to your account. ad365 will never ask for your password via email, live chat, or any other channel.

ad365 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, regulatory requirements, or the services we offer. When we make a material change to this Privacy Policy, we will notify registered players via email to the address on file, via an in-platform notification visible on next login, and by updating the "Last Updated" date displayed at the top of this page.

Minor Updates: Non-material clarifications — such as correcting typographical errors, improving the readability of existing provisions, or updating contact details — may be made without specific advance notice. The updated policy will take effect immediately upon publication. We encourage you to review this Privacy Policy periodically to stay informed about how ad365 handles your personal data.

Material Changes: If a proposed change to this Privacy Policy would materially affect the way we process your personal data — for example, introducing a new data sharing arrangement, extending retention periods, or adding a new processing purpose — we will give registered players at least 14 days' advance notice before the change takes effect, and will request fresh consent where the lawful basis for processing requires it.

Continued Use as Acceptance: Your continued use of the ad365 platform after a Privacy Policy update has been notified to you constitutes your acceptance of the updated policy. If you do not accept an updated Privacy Policy, you should stop using the platform and contact [email protected] to discuss your options, which may include closing your account.

Governing Language: This Privacy Policy is written in English. In the event of any inconsistency between the English version and any translated version, the English version shall prevail. This policy is intended for players based in Bangladesh and is written with the needs of Bangladeshi players in mind.

Effective Date: This Privacy Policy is effective as of January 2026 and supersedes all previous versions of the ad365 Privacy Policy. The current version will always be accessible at ad365.club/privacy-policy.