Privacy Policy — How 3kbd Collects, Uses, and Protects Your Personal Data

1. Introduction

This Privacy Policy ("Policy") is published by 3kbd ("the Platform", "we", "us", "our") and governs the collection, use, storage, and disclosure of personal data obtained from individuals ("you", "your", "the Member") who access, register on, or use any service provided through https://3kbd.io and its associated pages and subdomains.

3kbd is an online entertainment platform offering sports betting, live casino, and slot game services to adults aged 21 and above in Bangladesh. As part of delivering these services, 3kbd necessarily processes certain categories of personal data. We are committed to handling that data responsibly, transparently, and in accordance with the principles set out in this Policy.

This Policy should be read alongside the 3kbd Terms and Conditions, which is available at https://3kbd.io/terms-conditions, and the Responsible Gaming Policy available at https://3kbd.io/responsible-gaming. Together, these documents form the complete framework governing your relationship with 3kbd.

This Policy was last revised and is effective from 1 January 2026. We recommend reviewing this page periodically to stay informed of any updates. Material changes will be communicated to registered members via the email address held on account.

2. Personal Data We Collect

3kbd collects personal data across several categories depending on the nature of your interaction with the platform. The categories below summarise the types of data we may hold about you:

We do not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for age and identity verification purposes.

3. How We Collect Your Data

3kbd collects personal data through the following channels:

• Direct submission: When you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact customer support, or update your account profile, you provide data directly to 3kbd.
• Automated collection: When you browse the 3kbd platform, certain technical and behavioural data is collected automatically through cookies, server logs, and analytics tools. This includes your IP address, device identifiers, pages visited, and time spent on specific sections of the site.
• Payment providers: When you initiate a transaction via bKash, Nagad, Rocket, or Upay, the relevant payment provider shares transaction confirmation data with 3kbd to enable crediting of your account or processing of your withdrawal.
• Identity verification partners: Where a third-party KYC provider is used to validate your identity documents, that provider returns a verification result and relevant data points to 3kbd as part of the verification process.
• Fraud prevention tools: Automated risk-screening tools may collect and analyse data about your device, location, and behaviour patterns to detect potentially fraudulent account activity.

4. How We Use Your Personal Data

3kbd uses the personal data it holds for the following specific purposes:

• Account creation and management: To register your account, verify your identity and age, maintain your account settings, and provide access to the platform's services.
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and to maintain an accurate record of your financial activity on 3kbd.
• Service delivery: To provide access to sports betting markets, live casino games, slot games, and all other features available on the 3kbd platform.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide account-related assistance via email and live chat.
• Responsible gaming: To monitor account behaviour for indicators of problem gambling, to apply restrictions you have set yourself (such as deposit limits or time-outs), and to fulfil our obligations to promote responsible gambling among our membership.
• Fraud and security: To detect, investigate, and prevent fraudulent activity, money laundering, and any other form of abuse of the platform.
• Legal compliance: To comply with applicable legal obligations, including responding to lawful requests from regulatory or law enforcement authorities.
• Marketing communications: Where you have given explicit consent, to send you promotional offers, bonus notifications, tournament announcements, and other marketing communications via email or SMS. You may withdraw this consent at any time.
• Platform improvement: To analyse aggregated, anonymised usage data for the purpose of improving the functionality, performance, and user experience of the 3kbd platform.

5. Legal Basis for Processing

3kbd processes your personal data on one or more of the following legal bases depending on the specific processing activity:

• Contractual necessity: Processing that is required to perform the contract between you and 3kbd — including account registration, payment processing, and service delivery — is carried out on the basis that it is necessary to fulfil our contractual obligations to you.
• Legitimate interests: Certain processing activities — including fraud prevention, security monitoring, and platform analytics — are carried out on the basis of 3kbd's legitimate interest in operating a safe, secure, and commercially viable platform, where those interests do not override your fundamental rights and freedoms.
• Legal obligation: Where processing is required to comply with applicable law — such as retaining financial records or responding to a lawful authority request — it is carried out on the basis of legal obligation.
• Consent: Where processing is optional and not strictly necessary for the provision of the service — such as sending marketing communications — it is carried out only where you have given freely given, specific, and informed consent. You may withdraw consent at any time without detriment to your use of the platform.

6. Sharing Your Personal Data

3kbd does not sell, rent, or trade your personal data to any third party for their independent commercial use. Data is shared with third parties only in the following limited and defined circumstances:

• Payment processors: bKash, Nagad, Rocket, and Upay receive the transaction data necessary to process your deposits and withdrawals. Each provider operates under its own privacy policy and is responsible for the data it independently holds about you as its customer.
• Identity verification providers: Where a third-party KYC provider is engaged to verify your identity documents, your name, date of birth, document number, and document image are shared with that provider solely for the purpose of verification. Results are returned to 3kbd and the document data is not retained by the provider beyond the verification process.
• Game software providers: Game providers such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming may receive a pseudonymous player identifier to facilitate gameplay and to maintain game-level transaction records. These providers do not receive your full identity or financial data.
• Fraud and risk screening services: Technical data including IP addresses and device identifiers may be shared with automated fraud screening tools to assess the risk profile of transactions and login events.
• Legal and regulatory authorities: 3kbd will disclose personal data to law enforcement, regulatory bodies, or other public authorities where required to do so by applicable law, court order, or to protect the safety and security of our members and the platform.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the 3kbd business, member data may be transferred to the acquiring entity. Members will be notified in advance of any such transfer and of any resulting change to this Privacy Policy.

All third-party service providers engaged by 3kbd are required to maintain the confidentiality of personal data, to use it only for the specified purpose, and to apply appropriate technical and organisational security measures.

7. Cookies and Tracking Technologies

3kbd uses cookies and similar tracking technologies to enable the platform to function correctly, to remember your preferences, and to analyse how the site is used. The following categories of cookies are used:

• Strictly necessary cookies: These are essential for the platform to operate. They include session cookies that maintain your logged-in state, security tokens, and load-balancing cookies. These cannot be disabled without affecting platform functionality.
• Functional cookies: These remember your preferences such as your preferred language, display settings, and responsible gaming tools you have activated. Disabling them will result in a reduced user experience.
• Analytics cookies: These collect anonymised or pseudonymised data about how visitors use the platform — including pages visited, time on site, and navigation paths — to help 3kbd improve its services. No personally identifiable information is included in analytics reports.
• Session security cookies: These are used to detect and prevent fraudulent login attempts and to identify unusual session behaviour that may indicate account compromise.

You may manage your cookie preferences through your browser settings. Blocking all cookies may impair your ability to log in or use certain features of the 3kbd platform. No cookies are used to track your activity across third-party websites unaffiliated with 3kbd.

8. Data Retention

3kbd retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention principles apply:

• Active account data: Personal data associated with an active member account is retained for the duration of the membership and for a period of five years following account closure, to satisfy any applicable financial record-keeping and anti-money laundering obligations.
• KYC documents: Identity verification documents are retained for a minimum of five years following the completion of the verification process, in line with standard financial services compliance requirements.
• Transaction records: Records of all deposits, withdrawals, bets, and game play activity are retained for a minimum of five years from the date of each transaction.
• Support communications: Customer support correspondence is retained for up to two years from the date of the last message in the relevant support thread.
• Marketing consent records: Records of marketing consent and opt-out requests are retained for the lifetime of the member account to demonstrate compliance with consent requirements.
• Technical and log data: Server logs and IP address records are retained for up to 12 months for security monitoring purposes, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, data is either securely deleted or anonymised in a manner that permanently prevents re-identification. You may request early deletion of specific data categories where no overriding legal retention obligation applies by contacting [email protected].

9. Your Data Rights

As a member of the 3kbd platform, you have the following rights with respect to your personal data. These rights may be exercised by submitting a written request to [email protected]:

• Right of access: You have the right to request a copy of the personal data 3kbd holds about you. We will provide a summary of your data within 30 days of a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update most account details directly through your account profile.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected and where no legal retention obligation requires its continued storage. Note that financial records and KYC documents are subject to mandatory retention periods and cannot be deleted on request during those periods.
• Right to restrict processing: You may request that 3kbd temporarily halt the processing of your personal data while a dispute regarding its accuracy or lawfulness is resolved.
• Right to data portability: You may request that the personal data you have provided to 3kbd be supplied to you in a structured, machine-readable format, to the extent technically practicable.
• Right to withdraw consent: Where processing is based on your consent — for example, marketing communications — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object: You may object to processing carried out on the basis of legitimate interests where you believe your rights and freedoms override those interests. 3kbd will consider and respond to such objections within 30 days.

3kbd will acknowledge all data rights requests within 5 business days and will endeavour to resolve them within 30 calendar days. Where a request is complex or involves a large volume of data, the resolution period may be extended by a further 30 days with notice provided to you.

10. Data Security

3kbd takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the 3kbd platform.
• Encryption at rest for sensitive stored data including identity documents and payment method records.
• Role-based access controls limiting staff access to personal data to those with a legitimate operational need.
• Regular security assessments and vulnerability monitoring of the platform infrastructure.
• Multi-factor authentication options for member accounts to reduce the risk of unauthorised login.
• Logging and monitoring of administrative access to member data, with alerts triggered by anomalous activity.

Despite these measures, no digital platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to the rights and freedoms of affected members, 3kbd will notify those members without undue delay and will take all reasonable steps to contain and remediate the breach.

You also have a role in keeping your account secure. Choose a strong, unique password, do not share your login credentials, and log out from shared devices. Report any suspected unauthorised access to your account immediately by emailing [email protected].

11. Children and Minors

The 3kbd platform is strictly for adults aged 21 and above. 3kbd does not knowingly collect personal data from individuals under the age of 21. The registration process requires applicants to confirm their date of birth, and 3kbd conducts age verification checks as part of the KYC process.

If 3kbd becomes aware that personal data has been collected from a person under the age of 21, the relevant account will be immediately suspended, all data associated with the account will be deleted in accordance with our data retention obligations, and any funds held in the account will be handled in accordance with our Terms and Conditions.

If you believe that a minor has registered on the 3kbd platform, please contact us immediately at [email protected] so that we can take prompt action.

12. Changes to This Privacy Policy

3kbd reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to the platform. When changes are made, the "Effective Date" at the top of this document will be updated accordingly.

Where a change is material — meaning it significantly affects your rights or the way in which your data is processed — 3kbd will provide advance notice via the platform or by email to the address registered on your account, at least 7 days before the revised Policy takes effect. Minor or clarificatory amendments may be made without advance notice.

Continued use of the 3kbd platform after the effective date of any revised Privacy Policy constitutes your acceptance of the changes. If you do not accept the revised Policy, you must discontinue use of the platform and close your account before the effective date of the change.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data 3kbd holds about you, please contact our support team using the details below. We aim to respond to all privacy-related enquiries within 5 business days.

Support Email: [email protected] (plain text — not a clickable link)

When submitting a data rights request by email, please include your registered username and mobile number so that we can verify your identity before processing the request. We will not action data rights requests that cannot be matched to a verified account holder.

For urgent security concerns — such as suspected unauthorised access to your account or a potential data breach — please mark your email with the subject line "Security – Urgent" to ensure it is routed to the appropriate team and handled as a priority matter.