age365 Privacy Policy — How We Handle Your Data

1 Introduction

age365 operates an online casino and sports betting platform serving adult players in Bangladesh. As part of providing this service, age365 necessarily collects and processes certain personal information about the individuals who register and use the platform. This Privacy Policy sets out the lawful basis on which age365 processes that data, the purposes for which it is used, the parties with whom it may be shared, and the rights that players hold with respect to their own information.

This Privacy Policy applies to all personal data collected via the age365 website at age365.club, any associated subdomains, and any mobile applications operated by age365. It applies to registered players, prospective players who have started but not completed registration, and visitors who browse the platform without registering.

This Privacy Policy should be read alongside the age365 Terms & Conditions and the age365 Responsible Gaming policy, both of which are published on this platform and are incorporated into the overall framework governing the relationship between age365 and its players.

2 Data We Collect

age365 collects personal data across several categories depending on how you interact with the platform. The following table summarises the key categories of personal data we process:

age365 does not collect special categories of sensitive personal data (such as health information, racial or ethnic origin, political opinions, or biometric data) unless specifically required by applicable law for identity verification purposes, and only with your explicit consent in those cases.

3 How We Collect Data

age365 collects personal data through the following means:

3.1 Directly From You

The majority of personal data age365 holds is provided directly by you when you register an account, complete identity verification, make a deposit or withdrawal request, contact customer support, or participate in a promotion. You are in control of what you provide in these interactions, subject to the requirement that registration and verification data must be accurate and complete.

3.2 Automatically During Platform Use

When you visit or use the age365 platform, certain technical and usage data is collected automatically via server logs, cookies, and similar tracking technologies. This includes your IP address, device identifiers, browser fingerprint, session start and end times, and the pages or game lobbies you access. This automated collection is necessary for security monitoring and platform performance management.

3.3 From Third Parties

age365 may receive personal data about you from third parties in limited circumstances, including:

• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) who provide transaction confirmation and fraud risk signals.
• Identity verification and KYC service providers who assist in validating identity documents.
• Fraud prevention and AML screening services that cross-reference data against watchlists and sanctions databases.
• Game software providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) who may share game session data with age365 for audit and dispute resolution purposes.

In all cases, age365 ensures that third-party data sources are subject to appropriate data processing agreements and that data received from them is handled in accordance with this Privacy Policy.

4 How We Use Your Data

age365 processes your personal data for the following purposes, each supported by a lawful basis under applicable data protection principles:

• Account creation and management: To register your player account, maintain your account balance, process your betting and gaming activity, and manage account settings. Lawful basis: contractual necessity.
• Identity and age verification: To confirm that you are aged 18 or above and that you are who you claim to be, in compliance with responsible gaming and anti-fraud obligations. Lawful basis: legal obligation and contractual necessity.
• Payment processing: To facilitate deposits via bKash, Nagad, Rocket, Upay, and other accepted payment methods, and to process withdrawal requests to your registered payment account. Lawful basis: contractual necessity.
• Fraud prevention and AML compliance: To detect, investigate, and prevent fraudulent transactions, money laundering, and other financial crimes. Lawful basis: legal obligation and legitimate interest.
• Customer support: To respond to your queries, complaints, and responsible gaming requests, and to maintain a record of communications for audit and quality purposes. Lawful basis: contractual necessity and legitimate interest.
• Responsible gaming: To monitor betting and gaming patterns for indicators of problem gambling behaviour, and to enforce deposit limits, cooling-off periods, and self-exclusion requests. Lawful basis: legal obligation and legitimate interest.
• Platform improvement: To analyse usage patterns and technical performance data in order to improve the age365 platform, optimise game loading times, and prioritise new features. Lawful basis: legitimate interest.
• Marketing communications: To send you relevant promotional offers and bonus notifications by email or in-platform messaging, where you have opted in to receive such communications. Lawful basis: consent. You may withdraw consent at any time by contacting [email protected].
• Legal and regulatory compliance: To comply with applicable laws, respond to lawful requests from regulatory authorities or law enforcement bodies, and enforce our Terms & Conditions. Lawful basis: legal obligation.

5 Data Sharing

age365 does not sell or rent personal data to third parties. We may share your personal data with the following categories of recipients only to the extent necessary and proportionate:

5.1 Payment Service Providers

Transaction data is shared with your selected payment provider (bKash, Nagad, Rocket, Upay, Visa, Mastercard) solely to process the payment you have initiated. These providers are bound by their own privacy policies and applicable financial regulations.

5.2 Identity Verification Providers

Where age365 uses a third-party KYC or identity verification service to assist in verifying your identity documents, the necessary identification data is shared with that provider under a data processing agreement that restricts its use to identity verification purposes only.

5.3 Game Software Providers

Game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) may receive your player identifier and session data in connection with the games you play via their platforms. This sharing is necessary to deliver the game, resolve technical disputes, and maintain RNG audit records.

5.4 Legal and Regulatory Authorities

age365 may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other competent authorities where required to do so by law, court order, or where age365 has a good-faith belief that disclosure is necessary to protect the rights, property, or safety of age365, its players, or third parties.

5.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of age365's business, personal data held by age365 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any resulting change to this Privacy Policy before the transfer takes effect.

6 Cookies & Tracking Technologies

age365 uses cookies and similar tracking technologies on the age365 platform. A cookie is a small text file placed on your device when you visit a website. The following categories of cookies are used by age365:

• Strictly necessary cookies: These are essential for the platform to function. They enable you to log in, navigate between pages, and maintain your session. You cannot opt out of strictly necessary cookies without discontinuing your use of the platform.
• Functional cookies: These remember your preferences (such as language settings and display preferences) to enhance your experience on the platform.
• Analytics cookies: These collect anonymised data about how visitors use the age365 platform (pages visited, time on site, error messages) to help us improve functionality and content. Data collected by analytics cookies does not identify you personally.
• Security cookies: These assist in detecting and preventing fraudulent activity, bot traffic, and suspicious login attempts.

You can control cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the age365 platform. age365 does not use third-party advertising cookies or behavioural targeting cookies that track you across other websites.

7 Data Retention

age365 retains personal data in accordance with the following retention principles:

• Active accounts: Personal data associated with an active player account is retained for the duration of the account relationship and for a minimum period of five years following the closure of the account, in compliance with anti-money-laundering and financial record-keeping obligations.
• Transaction records: Financial transaction records, including deposit and withdrawal histories, are retained for a minimum of seven years from the date of each transaction to satisfy legal and audit obligations.
• Support and correspondence records: Communications between players and age365 support are retained for three years from the date of the final communication in any given support thread.
• Technical logs: Server and access logs containing IP addresses and session data are retained for up to 12 months for security purposes, then deleted or anonymised.
• Self-excluded players: Where a player has requested self-exclusion, age365 retains the minimum data necessary to enforce the exclusion and prevent re-registration for the duration of the exclusion period.

Upon expiry of the applicable retention period, personal data is securely and irreversibly deleted or anonymised so that it can no longer be associated with any identifiable individual.

8 Security Measures

age365 implements a range of technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between player devices and age365 servers.
• AES-256 encryption for sensitive data stored at rest, including passwords and payment instrument details.
• Multi-factor authentication options for player accounts.
• Role-based access controls that restrict access to personal data to age365 personnel who require it to perform their job functions.
• Regular internal security audits and vulnerability assessments of the age365 platform infrastructure.
• Incident response procedures that require age365 to notify affected players and relevant authorities in the event of a data breach that presents a risk to individual rights, within the timeframe required by applicable law.

9 Your Rights

As a player whose personal data is processed by age365, you hold the following rights in respect of your personal information. To exercise any of these rights, contact age365 support at [email protected] with your full name, registered email address, and a clear description of your request.

• Right of access: You may request a copy of the personal data age365 holds about you, along with information about how it is being used.
• Right to rectification: If any personal data age365 holds about you is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to age365's overriding legal obligations to retain certain categories of data.
• Right to restriction of processing: In certain circumstances, you may request that age365 restrict the processing of your personal data — for example, while a dispute about accuracy is being resolved.
• Right to data portability: Where age365 processes your data on the basis of your consent or contract, you may request a copy of your data in a structured, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data for marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interests, though age365 may be entitled to continue processing where it can demonstrate compelling legitimate grounds.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

age365 will respond to all data rights requests within a reasonable timeframe. Requests may be subject to identity verification before age365 can act on them, to ensure that personal data is not disclosed to an unauthorised party.

10 Minors

The age365 platform is strictly for adults aged 18 and above. age365 does not knowingly collect or process personal data from individuals under the age of 18. If age365 becomes aware that personal data has been collected from a minor, that data will be deleted immediately and the associated account will be closed.

11 International Data Transfers

age365 operates primarily to serve players based in Bangladesh. Some of the third-party service providers engaged by age365 — including game software providers, payment processors, and cloud infrastructure operators — may process personal data in jurisdictions outside Bangladesh. Where such transfers occur, age365 takes steps to ensure that appropriate safeguards are in place to protect your personal data, including contractual protections in the agreements with those providers.

age365 does not transfer personal data to countries that do not provide an adequate level of data protection without implementing appropriate contractual safeguards consistent with applicable data protection principles.

12 Third-Party Links

The age365 platform may contain references to third-party game providers and payment services. age365 does not operate those third-party platforms and is not responsible for the privacy practices of any third party. This Privacy Policy applies solely to data processed by age365 in connection with the age365 platform. Players who interact with third-party services are encouraged to review the privacy policies of those services independently.

13 Changes to This Privacy Policy

age365 may update this Privacy Policy from time to time to reflect changes in our data processing practices, the services we offer, or applicable legal and regulatory requirements. Where changes are material — meaning they significantly affect your rights or the way age365 uses your data — age365 will provide advance notice to registered players via the platform or by email before the updated policy takes effect.

The effective date at the top of this document is updated each time the Privacy Policy is revised. The most current version of this Privacy Policy will always be accessible at age365.club/privacy-policy. Your continued use of the age365 platform following any update to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any revision, you should cease using the platform and may request account closure by contacting support.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data age365 holds about you, please contact the age365 support team using the details below. All privacy-related enquiries are handled with priority and in strict confidence.

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Website: age365.club