d365 Privacy Policy

d365 only collects information that is necessary to operate our services. Data is collected in two main ways:

1.1 Information You Provide Directly

When you create an account or use the platform, we collect:

• Full name and date of birth (for age verification — minimum 21 years)
• Mobile number and email address
• Identity document details (NID or passport — for KYC verification)
• Payment method details (bKash, Nagad, Rocket, Upay account numbers)
• Transaction history and account activity

1.2 Automatically Collected Information

Some technical information is collected automatically when you browse our platform:

• IP address and device information
• Browser type and version
• Page visit times, frequency, and sequence
• Cookie and session data (see details below)
• Referral URL and navigation path

d365 uses your collected information only for specific, legitimate, and necessary purposes. We use your data to:

2.1 Operate the Service

• Create, verify, and manage your account
• Process deposit and withdrawal transactions
• Manage bonuses, rewards, and promotions
• Track gaming history and account balance

2.2 Security & Compliance

• Verify identity and confirm age (KYC process)
• Prevent fraud, money laundering, and unauthorized access
• Enforce responsible gaming policies
• Maintain cybersecurity

2.3 Service Improvement

• Analyze platform usage to enhance the user experience
• Identify and resolve technical issues
• Improve customer service standards

2.4 Communication

• Send important account notifications
• Send transaction confirmation messages
• Respond to support requests

d365 uses industry-standard technology and practices to protect your data. The key components of our security framework are:

3.1 Encryption

All data exchanged between you and our servers is encrypted using SSL (Secure Sockets Layer) technology. This prevents any third party from reading or altering your information. Stored sensitive data (payment details, passwords) is protected through additional layers of encryption.

3.2 Access Control

Only employees who require access to your personal information as part of their work can access it. All access is logged and regularly audited. Internal staff are required to follow strict confidentiality policies.

3.3 Data Retention Period

Your data is retained for as long as your account is active. Even after an account is closed, certain information may be kept for the minimum period required to meet legal and regulatory obligations. After that, data is securely deleted or anonymized.

d365 does not sell your personal information to any third party. However, in specific circumstances, data may be shared with certain third parties:

4.1 Service Providers

Limited information may be shared with trusted service providers who assist in operating our platform. These include: payment processors (bKash, Nagad, Rocket, Upay), identity verification services, and IT infrastructure providers. All such parties operate under strict confidentiality agreements with us.

4.2 Legal Obligations

Information may be disclosed to comply with court orders, lawful requests from law enforcement agencies, or applicable legal requirements. In such cases, we provide only the minimum information necessary.

4.3 Business Transfers

In the event of a transfer or merger of any part of d365's business or assets, user data may form part of the transferred assets. You will be notified in advance in such cases.

d365 uses cookies and similar tracking technologies. Cookies are small text files stored in your browser that help improve your browsing experience.

5.1 Essential Cookies

These cookies are required for the basic functionality of the platform. They are essential for maintaining login sessions, security verification, and delivering core services. These cookies cannot be disabled.

5.2 Functional Cookies

These cookies are used to remember your preferences, such as language selection and display settings. They make your experience more convenient and personalized.

5.3 Analytics Cookies

These cookies are used to understand how the platform is being used and to improve our services. The data collected is aggregated and anonymous. These cookies can be managed through your browser settings.

Most browsers include options to control cookies. However, disabling essential cookies may cause some important platform features to not function properly.

As a d365 user, you have certain important rights over your own personal information:

6.1 Right to Access Data

You may request to know what information we hold about you. Following a valid identity verification, we will provide you with a copy of your personal information.

6.2 Right to Correct Data

If your information is incorrect or incomplete, you may request that it be corrected. Some information can be updated directly from account settings; for others, please contact support.

6.3 Right to Delete Data

In certain circumstances, you may request the deletion of your personal information. However, some data may need to be retained for a specific period due to legal and regulatory obligations.

6.4 Right to Object to Data Processing

You may object to marketing communications or certain types of data processing. Once an objection is raised, we will stop using your data for that specific purpose.

6.5 Right to Data Portability

You may request your own provided data in a structured, commonly used format.

d365 supports only the mobile financial services available in Bangladesh — bKash, Nagad, Rocket, and Upay. Deposits and withdrawals are processed through these payment methods.

Every payment transaction is completed through a fully encrypted channel. We do not store your mobile banking PIN or password. Payment information is securely retained for transaction verification and dispute resolution purposes.

The minimum deposit amount is ৳100 and the minimum withdrawal amount is ৳800. A notification for every transaction is sent to your registered mobile number, so any unauthorized transaction can be identified quickly.

d365 strictly does not provide services to anyone under the age of 21. Our platform is for users aged 21 and above only.

Age is verified during the registration process and identity is confirmed through KYC verification. If we learn that a minor has used our platform, that account will be immediately closed and all associated data will be deleted.

We never knowingly collect information from minors. If you are aware of a minor's account, please contact us.

d365's servers and technical infrastructure may be located in various countries. As a result, your data may be processed outside of Bangladesh.

Whenever data is transferred internationally, we ensure that adequate data protection measures are in place in the destination country or organization. All international data transfers are secured through SSL encryption.

d365 reserves the right to update this Privacy Policy as needed. If any significant changes are made, we will notify you in the following ways:

• A notice will be displayed on the platform
• A message will be sent to your registered email or mobile number
• The "Last Updated" date at the top of this page will be changed

Continued use of the platform after any changes will be considered as your consent to the updated policy. If you do not agree to any changes, you have the option to close your account.

The laws of d365's operating jurisdiction will apply to this Privacy Policy and the processing of your data.

Any dispute related to this Policy will first be addressed through negotiation. If negotiation fails, resolution through mediation will be attempted. For any dispute or complaint, contact us directly — we will always work toward a resolution.