der365 Privacy Policy

der365 ("we", "us", "our") operates the online gaming platform at der365.org (the "Platform"). This Privacy Policy explains how we collect, use, store, share, and protect personal data relating to individuals who visit or register on the Platform, with particular reference to players based in Bangladesh.

This policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which form part of the agreement between you and der365. Where this Privacy Policy conflicts with any other document, this Privacy Policy shall govern with respect to data protection matters.

We are committed to handling your personal data responsibly and transparently. If you have any questions about this policy or how your data is processed, please contact us at [email protected].

der365 collects personal data from you in several ways: directly when you register and use the Platform, automatically when you interact with our services, and occasionally from third-party sources for verification purposes. The categories of personal data we collect include:

Identity and Contact Data: When you register an account on der365, we collect your full legal name, date of birth, residential address (including city and district within Bangladesh), email address, and mobile phone number. This information is required to create and maintain your account and to comply with our identity verification obligations.

Payment Data: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, we collect your mobile wallet number or card details as required by the relevant payment provider. der365 does not store full card numbers or mobile banking PINs on our servers. Payment transactions are processed through encrypted, tokenised channels provided by our payment partners.

Identity Verification Documents: As part of our Know Your Customer (KYC) process, we may request copies of your National Identity Card (NID), passport, or other government-issued identification documents. We may also request proof of address and, in certain cases, proof of source of funds.

Technical and Device Data: We automatically collect your IP address, device type, operating system, browser type and version, session timestamps, and geolocation data (at city level) when you access der365. This data is used for security monitoring, fraud prevention, and to ensure you are accessing the Platform from a permitted location.

Gaming and Transaction Data: We maintain records of all bets placed, games played, deposits made, withdrawals processed, bonuses claimed, and account balance history. This data is required for regulatory compliance, dispute resolution, and responsible gaming monitoring.

Communications Data: If you contact our customer support team, we retain records of that communication, including chat transcripts, email correspondence, and any supporting documents you provide. This enables us to track and resolve your enquiries effectively.

der365 uses your personal data only for the purposes described below. We do not use your data for purposes that are incompatible with the reason it was originally collected without first seeking your consent.

• Account management: To create, maintain, verify, and secure your der365 account, including processing your registration details and managing your account preferences.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate transaction records for your account history.
• Identity verification (KYC/AML): To verify your identity, confirm your age (21+), and satisfy our anti-money-laundering obligations. Verification is required before your first withdrawal and may be requested at other times during your account lifetime.
• Fraud prevention and security: To detect, investigate, and prevent unauthorised access to your account, fraudulent transactions, collusion, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming: To monitor your gaming activity for signs of problem gambling, to enforce self-exclusion and deposit limit requests, and to provide you with responsible gaming tools and resources as described on our Responsible Gaming page.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and generally assist you with your account.
• Platform improvement: To analyse aggregated, anonymised usage data that helps us improve the Platform's performance, game selection, and user experience.
• Marketing communications: Where you have given consent, to send you promotional offers, bonus notifications, and event updates relevant to cricket betting, BPL season promotions, and other der365 events. You may withdraw your marketing consent at any time by contacting support or updating your account preferences.

der365 processes your personal data on the following legal bases, depending on the purpose of the processing:

• Contractual necessity: Processing your registration data, payment data, and gaming activity records is necessary to perform our contractual obligations to you as a registered player on the Platform.
• Legal obligation: Identity verification (KYC), anti-money-laundering checks, and the retention of transaction records are required by applicable law and the operational standards of our licensing framework.
• Legitimate interests: Fraud detection, security monitoring, and Platform improvement activities are conducted on the basis of der365's legitimate business interests, balanced against your privacy rights. We ensure that our legitimate interest assessments do not override your fundamental privacy interests.
• Consent: Where we send you marketing communications or use non-essential cookies, we do so on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

der365 does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment processors: We share necessary payment data with bKash, Nagad, Rocket, Upay, Visa, and Mastercard to facilitate your deposit and withdrawal transactions. Each payment provider processes your data under its own privacy policy and is independently responsible for its own data security.
• Game providers: To deliver gaming services, we share your account identifier (not your full personal details) with certified game providers including Pragmatic Play, Evolution Gaming, Ezugi, Microgaming, NetEnt, and Spribe. These providers are contractually prohibited from using your data for any purpose other than delivering the game service.
• Identity verification services: We use third-party KYC service providers to verify your identity documents. These providers process your data solely for the purpose of verification and are bound by strict confidentiality obligations.
• Fraud prevention and security partners: We share technical data (IP address, device fingerprint, session data) with fraud detection partners to protect the Platform and all players from malicious activity.
• Legal and regulatory bodies: We may disclose your personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required to do so by law, court order, or in connection with the prevention or investigation of financial crime.

der365 uses cookies and similar tracking technologies to operate the Platform effectively, maintain your session while you are logged in, remember your preferences, and gather aggregated analytics about how the Platform is used.

We use the following categories of cookies:

• Strictly necessary cookies: These are essential to the operation of the Platform. They enable core functions such as login session management, account security, and navigation. These cookies cannot be disabled.
• Functional cookies: These remember your preferences (such as language and display settings) to improve your experience. They are enabled by default but you may disable them via your browser settings.
• Analytics cookies: We use anonymised analytics data to understand how players navigate the Platform, which pages are most visited, and where performance improvements can be made. No personally identifiable information is included in analytics reports.

You can control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform, including your ability to stay logged in during a session.

der365 retains your personal data for as long as your account remains active and for a defined period thereafter, as required by our legal and regulatory obligations. Our standard retention periods are as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, to satisfy anti-money-laundering record-keeping requirements.
• Transaction records: All deposit, withdrawal, and betting records are retained for a minimum of five (5) years from the date of each transaction.
• KYC documents: Identity verification documents are retained for five (5) years after account closure, after which they are securely destroyed.
• Customer support communications: Retained for three (3) years from the date of the last correspondence, unless the matter relates to an ongoing dispute or legal proceeding.
• Marketing consent records: Retained for as long as your marketing consent remains active, and for one (1) year following any withdrawal of consent, as evidence of your prior consent.

At the end of each applicable retention period, your personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual.

der365 employs a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encrypted storage of all personal data and identity documents at rest.
• Role-based access controls that limit which staff members can access personal data, based on operational necessity.
• Continuous automated monitoring for suspicious login activity, including detection of unusual IP addresses, multiple failed login attempts, and concurrent sessions from different locations.
• Regular internal security audits and penetration testing conducted by qualified security professionals.
• Two-factor authentication (2FA) available to all registered players and mandatory for all der365 staff accounts.

While der365 takes all reasonable steps to protect your personal data, no system of data transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, and we encourage you to use a strong, unique password for your der365 account and to enable 2FA at all times.

In the event of a data breach that is likely to result in risk to your rights and freedoms, der365 will notify affected players without undue delay and will take all necessary remedial action.

As a data subject, you have the following rights with respect to your personal data held by der365. To exercise any of these rights, please contact us at [email protected]. We will respond to all verified requests within thirty (30) days.

• Right of access: You have the right to request a copy of the personal data that der365 holds about you, along with information about how it is used and with whom it is shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. For account details, you may also make corrections directly through your account settings.
• Right to erasure: In certain circumstances, you have the right to request the deletion of your personal data. Note that this right is subject to our legal obligations to retain certain data for regulatory and anti-money-laundering purposes; we cannot delete data that we are legally required to keep.
• Right to restriction of processing: You have the right to request that we restrict the processing of your personal data in certain circumstances, for example while a dispute regarding data accuracy is resolved.
• Right to data portability: Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on our legitimate interests. You also have an absolute right to object to the use of your data for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

der365 is strictly an adult platform. We do not knowingly collect personal data from any person under the age of 21. All registration processes include date-of-birth verification, and accounts identified as belonging to individuals under 21 are immediately closed, with all funds returned to the original payment method less any wagered amounts.

If you believe that a person under the age of 21 has registered on der365 or that we have inadvertently collected personal data from a minor, please contact us immediately at [email protected]. We will investigate and take appropriate action without delay.

We also strongly encourage parents and guardians to use parental control software to prevent underage access to online gaming platforms. For guidance on protecting younger family members, please visit our Responsible Gaming page.

der365 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform functionality. When we make material changes, we will update the "Last updated" date at the top of this page and, where the changes are significant, notify you by email to your registered address or by displaying a prominent notice on the Platform.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Your continued use of der365 after any changes to this policy have been published constitutes your acceptance of the updated terms.

For any questions, concerns, or requests relating to this Privacy Policy or to your personal data held by der365, please contact our dedicated privacy team at [email protected] with the subject line "Privacy Enquiry". We are committed to responding to all privacy-related communications within five (5) business days.