br345 Privacy Policy

This Privacy Policy ("Policy") explains how br345 ("br345", "we", "us", "our") collects, uses, stores, and protects the personal data of individuals ("you", "your", "Player", "User") who access or use the br345 platform available at br345.app (the "Platform"). This Policy is incorporated by reference into the br345 Terms & Conditions and forms part of the overall agreement between you and br345. By using the Platform, you acknowledge that you have read and understood this Policy.

br345 respects your privacy and handles all personal data responsibly. We collect only what is necessary to operate the Platform, verify player identity, process transactions, and comply with our legal obligations. We do not sell your personal data to any third party, and we do not use your data for purposes beyond those described in this Policy without your prior consent.

br345 collects several categories of personal data depending on how you interact with the Platform. The following table summarises the primary categories of data we collect and the context in which each is gathered.

br345 uses the personal data it collects solely for legitimate purposes directly connected to operating the Platform and serving players in Bangladesh. The specific purposes for which we process your data are as follows.

• Account creation and management: to register your account, verify your identity, manage your account settings, and communicate with you about your account status.
• Transaction processing: to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, and other supported payment methods, and to maintain an accurate record of all financial activity on your account.
• Fraud prevention and security: to monitor for suspicious activity, detect and prevent fraud, and protect the integrity of the Platform and all players using it.
• Legal compliance: to comply with applicable anti-money laundering (AML) regulations, age verification requirements, and any other legal obligations applicable to br345's operations.
• Customer support: to respond to your support enquiries, investigate complaints, and resolve disputes relating to your account or any transactions.
• Platform improvement and analytics: to analyse aggregated, anonymised usage patterns in order to improve Platform performance, add new features, and enhance the overall player experience.

br345 processes your personal data on one or more of the following legal bases, depending on the category of data and the purpose of processing.

• Contractual necessity: processing is necessary to perform the contract between you and br345, for example to create your account, process deposits and withdrawals, and deliver the gaming services you have requested.
• Legal obligation: processing is necessary to comply with applicable laws and regulations, including AML obligations, age verification requirements, and any lawful authority request.
• Legitimate interests: processing is in the legitimate interests of br345 or a third party, for example to prevent fraud, secure the Platform, and improve services — except where those interests are overridden by your data protection rights.
• Consent: where we rely on your consent (for example for optional marketing communications), you may withdraw that consent at any time by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

br345 does not sell, rent, or trade your personal data to any third party. We may share your data only in the limited circumstances described below, and always subject to appropriate data protection safeguards.

• Payment processors: we share necessary transaction data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other payment service providers solely to process your deposits and withdrawals. These providers handle payment credentials under their own security policies.
• Identity verification providers: we may share identity data with third-party KYC verification services to confirm that players meet the minimum age requirement of 21 and to satisfy our anti-fraud obligations.
• Regulatory and law enforcement authorities: we may disclose personal data to competent authorities where required to do so by applicable law, court order, or in response to a lawful request from a government or regulatory body.
• IT and infrastructure service providers: we use trusted third-party providers for hosting, cloud storage, and platform security. These providers access personal data only to the extent necessary to deliver their contracted services and are bound by strict data processing agreements.

br345 takes the security of your financial data with the utmost seriousness. When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, or any other supported payment method, the actual payment credentials (such as your bKash PIN, bank account password, or card number) are entered directly through the respective payment provider's interface. br345 does not receive, store, or have access to these sensitive payment credentials at any point in the transaction process.

The data br345 does retain in connection with your financial activity is limited to: transaction reference numbers, transaction timestamps, the payment method type used (e.g. "bKash"), the amount transacted in BDT, and the outcome (success or failure). This data is retained to support your account history, resolve disputes, and comply with financial record-keeping obligations. All retained financial data is stored in an SSL-encrypted environment and is accessible only to authorised br345 personnel on a need-to-know basis.

br345 uses cookies and similar tracking technologies on the Platform to ensure the Platform functions correctly, to improve your experience, and to support security monitoring. The following categories of cookies are used.

• Essential cookies: strictly necessary for the Platform to function. These include session authentication tokens that keep you logged in and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without preventing the Platform from working correctly.
• Functional cookies: used to remember your preferences such as language setting and to personalise your experience on the Platform. Disabling these cookies may limit some features of the Platform.
• Analytics cookies: used to collect anonymised data about how players navigate and use the Platform. This data is aggregated and used solely to improve Platform performance and content. br345 does not use analytics cookies to build personal profiles or share data with advertisers.

You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will impair the functionality of the Platform and may prevent you from logging in or completing transactions. Continued use of the Platform after reviewing this Policy constitutes acceptance of our cookie practices as described here.

br345 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply. Account data (identity and contact data) is retained for the duration of your active account and for a minimum of five years following account closure, in order to satisfy our AML and financial record-keeping obligations. Transaction data is retained for a minimum of five years from the date of each transaction. Technical and usage data is retained for up to twelve months from the date of collection, after which it is anonymised or deleted.

When your account is closed, br345 will anonymise or delete your personal data at the end of the applicable retention period. During the retention period following account closure, your data is stored securely and is not used for any active processing purpose beyond legal compliance and dispute resolution.

br345 respects your rights in relation to your personal data. Depending on your circumstances and applicable law, you may have the following rights regarding the personal data br345 holds about you. To exercise any of these rights, please contact us at [email protected] with your registered account username and a clear description of your request.

• Right of access: you may request a copy of the personal data br345 holds about you, along with information about how it is being used and with whom it has been shared.
• Right to rectification: if any personal data br345 holds about you is inaccurate or incomplete, you may request that it be corrected or completed.
• Right to erasure: in certain circumstances you may request that br345 delete your personal data. This right is subject to our legal retention obligations — data that must be retained for AML or financial compliance purposes cannot be erased on request before the end of the applicable retention period.
• Right to restriction: you may request that br345 restrict its processing of your personal data in certain circumstances, for example while a dispute about accuracy is being resolved.
• Right to data portability: where processing is based on your consent or on a contract with you and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to object: you may object to processing based on legitimate interests, including profiling. You may also object at any time to the use of your personal data for direct marketing purposes.

br345 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include end-to-end SSL encryption on all data transmitted between your device and the br345 Platform; encrypted storage of sensitive personal data at rest; strict role-based access controls limiting data access to authorised personnel only; regular security audits and vulnerability assessments of the Platform infrastructure; and multi-factor authentication requirements for administrative access to systems that process personal data.

Whilst br345 takes all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. br345 cannot guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, br345 will notify affected players without undue delay and will take all steps necessary to contain and remedy the breach.

br345 is strictly an adult platform for players aged 21 and above. br345 does not knowingly collect, process, or store personal data belonging to individuals under the age of 21. Age verification is a mandatory part of the registration and KYC process. If br345 becomes aware that personal data from an individual under the age of 21 has been collected — whether through a misrepresentation at registration or any other means — br345 will immediately suspend the relevant account, delete all associated personal data, and void any transactions or winnings recorded on that account. If you believe a person under 21 has registered on br345, please contact us immediately at [email protected].

br345 reserves the right to update or amend this Privacy Policy at any time. The most current version will always be available at /privacy-policy on the br345 Platform. The effective date at the top of this page will be updated to reflect when the current version was last revised. br345 will make reasonable efforts to notify registered players of material changes to this Policy via the contact details associated with their account. However, it is your responsibility to review this Policy periodically.

Your continued use of the br345 Platform following the publication of a revised Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with any changes to this Policy, you should stop using the Platform and may contact support to request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way br345 handles your personal data, please contact our support team. We aim to respond to all privacy-related enquiries within 30 days. Please include your registered account username and a clear description of your request so we can assist you efficiently.