Privacy Policy — 456bs Data Practices

1 Data We Collect

When you register for and use the 456bs platform, we collect a range of personal data that is necessary to deliver our services, maintain account security, process payments, and comply with our obligations as an offshore-licensed gaming operator. The categories of personal data we collect are described below.

1.1 Registration Data

At the point of account creation, 456bs collects the following information that you provide directly:

• Full legal name — as it appears on your government-issued identification document.
• Date of birth — to verify that you meet the minimum age requirement of 18 years.
• Residential address — including division, district, and postal code within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh).
• Mobile phone number — a valid Bangladeshi number used for account verification, transaction notifications, and support communications.
• Email address — used for account correspondence, promotional communications (where opted in), and security alerts.
• Username and password — your chosen login credentials. Passwords are stored in hashed form and are never readable by 456bs staff.

1.2 Identity Verification Data

As part of our Know Your Customer (KYC) obligations, 456bs may request identity verification documents from players before processing a first withdrawal or when a player's activity triggers a review. KYC documents may include:

• A copy of your National Identity Card (NID), passport, or driver's licence.
• A recent utility bill, bank statement, or similar document confirming your residential address (dated within the past three months).
• In specific cases, a selfie photograph held alongside your identity document.

KYC documents are transmitted over SSL-encrypted connections and stored on secure, access-restricted servers. Access to KYC documents is limited to authorised compliance staff on a strict need-to-know basis.

1.3 Transaction Data

456bs records all financial transactions conducted through the platform, including deposits, withdrawals, bonus credits, and wager activity. Transaction records include the payment method used (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank), the transaction amount in BDT, the timestamp, and a transaction reference identifier. Full payment credentials — such as complete card numbers or mobile banking PINs — are never stored by 456bs.

1.4 Usage and Technical Data

When you access the 456bs platform, our servers automatically collect certain technical data including your IP address, device type, operating system, browser type and version, session duration, pages visited, and game activity logs. This data is used for platform security monitoring, fraud detection, technical troubleshooting, and aggregate performance analytics. It is not used to build personal advertising profiles.

2 How We Use Your Data

456bs processes your personal data on the following legal bases and for the following purposes. We only process data where we have a legitimate basis for doing so, and we do not process data beyond what is required for the stated purpose.

Where 456bs processes your data on the basis of consent — specifically for promotional communications — you have the right to withdraw that consent at any time by contacting [email protected] or using the unsubscribe mechanism included in any marketing message. Withdrawal of consent for marketing does not affect the lawfulness of processing carried out before the withdrawal.

3 Data Sharing & Third Parties

456bs does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share data with carefully selected third-party service providers who assist in the operation of the platform, but only to the extent necessary for the specific service they provide and always under contractual data processing agreements that require them to protect your data in accordance with standards equivalent to those set out in this Privacy Policy.

3.1 Categories of Third-Party Recipients

• Payment processors: bKash, Nagad, Rocket, Upay, and card processing partners receive the minimum transactional data required to authenticate and complete a financial transaction. None of these partners receive your full gaming account history or KYC documents.
• Game providers: Third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Habanero, and Ezugi may receive a session token and anonymised player identifier to initialise a game session. They do not receive your name, address, payment data, or full account history.
• Cloud infrastructure providers: 456bs uses professional cloud hosting services to operate its platform. These providers store and process data on our behalf under strict contractual obligations and do not have independent access to your personal data for their own purposes.
• Fraud prevention and KYC services: We may use third-party identity verification and fraud detection services to assist with KYC compliance. These providers receive only the data necessary to perform a specific verification check and are contractually prohibited from using it for any other purpose.
• Legal and regulatory authorities: In circumstances where 456bs is subject to a legally binding request from a law enforcement agency, court, or regulatory authority, we may be required to disclose specific player data. We will only comply with such requests where they are legally valid and will notify the affected player where permitted by law to do so.

3.2 International Data Transfers

456bs operates as an offshore-licensed platform, and some of the third-party service providers listed above may be located outside Bangladesh. Where data is transferred internationally, 456bs takes steps to ensure that appropriate safeguards are in place, including contractual data protection clauses that require the recipient to maintain data security standards consistent with this Privacy Policy. By using the 456bs platform, you acknowledge and consent to the international transfer of your personal data where such transfer is necessary to deliver the services described herein.

4 Cookies & Tracking Technologies

456bs uses cookies and similar browser-based technologies to support the operation and security of the platform. Cookies are small text files stored on your device by your web browser when you visit a website. They allow the platform to recognise your device across sessions and maintain the state of your account interaction.

4.1 Types of Cookies Used

• Strictly necessary cookies: These cookies are essential for the platform to function. They manage your login session, maintain your authentication state, remember your account preferences, and enable secure payment flows. The platform cannot function properly without these cookies. They cannot be disabled.
• Analytics cookies: 456bs uses first-party analytics to understand aggregate patterns of platform usage — such as which game categories are most visited, average session duration, and peak usage periods. This data is collected in anonymised or pseudonymised form and is used exclusively to improve platform performance. No individual user profiles are built for advertising purposes.
• Security cookies: These cookies support fraud detection and anti-bot measures by tracking unusual patterns of interaction that may indicate automated or malicious activity. They are essential to maintaining the integrity of the platform for all users.

4.2 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies stored by specific websites. Please be aware that disabling strictly necessary cookies will prevent you from logging in to your 456bs account and will impair core platform functionality. Disabling analytics cookies will not affect your ability to use the platform.

For guidance on managing cookies in your specific browser, refer to your browser's help documentation. Common browsers supported by 456bs players in Bangladesh include Google Chrome, Mozilla Firefox, Microsoft Edge, Samsung Internet, and Opera Mini.

5 Data Retention & Storage

456bs retains your personal data for as long as is necessary to fulfil the purposes for which it was collected and to meet applicable legal, regulatory, audit, and dispute-resolution obligations. The general retention periods applied by 456bs are summarised below.

At the end of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be associated with an individual. Where data forms part of a backup or archival system, deletion will occur at the next scheduled maintenance cycle following the expiry of the retention period, subject to a maximum additional delay of 90 days.

All player data is stored on servers maintained in professionally managed, physically secured data centres. Access to production data environments is restricted to authorised technical and compliance personnel and is subject to multi-factor authentication and access logging.

6 Data Security Measures

Protecting the personal data entrusted to us by 456bs players is a core operational priority. We implement a layered set of technical and organisational security measures designed to prevent unauthorised access, accidental loss, disclosure, alteration, or destruction of personal data.

• 256-bit SSL/TLS encryption: All data in transit between your browser or device and 456bs servers is encrypted using industry-standard TLS protocols. This ensures that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Encryption at rest: Sensitive data stored on 456bs servers — including identity documents and payment references — is encrypted at the storage level. Database encryption keys are managed through a dedicated key management system with restricted access.
• Access controls: Internal access to player personal data is governed by role-based access controls. Only staff with a legitimate operational need are authorised to access specific categories of player data, and all access events are logged for audit purposes.
• Continuous security monitoring: 456bs operates continuous intrusion detection and anomaly monitoring across its platform infrastructure. Automated alerts are generated for any access patterns or technical events that deviate from established baselines.
• Regular security assessments: The platform undergoes periodic security reviews, including vulnerability scanning and penetration testing, conducted by qualified information security professionals. Identified vulnerabilities are prioritised and remediated according to their risk severity.
• Staff training: All 456bs personnel with access to player data receive training on data protection obligations, secure data handling procedures, and the correct response to suspected data security incidents.

6.1 Reporting a Security Concern

If you discover or reasonably suspect a security vulnerability in the 456bs platform, or if you believe your account has been accessed without your authorisation, please notify us immediately by emailing [email protected]. We take all security reports seriously and will acknowledge receipt within one business day. Do not attempt to exploit any discovered vulnerability — responsible disclosure is always appreciated.

7 Your Privacy Rights

As a player on the 456bs platform, you hold the following rights in relation to your personal data. 456bs is committed to facilitating the exercise of these rights in a timely and transparent manner. To exercise any of the rights listed below, contact our data team at [email protected] with the subject line "Privacy Rights Request" and a brief description of your request.

• Right of access: You have the right to request a copy of the personal data 456bs holds about you, together with information about how it is being processed. We will respond to verified access requests within 30 days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Account-level details such as your mobile number and email address can be updated directly within your account settings.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (for consent-based processing only), or where you object to processing and there is no overriding legitimate interest. Please note that certain data must be retained for legal compliance purposes even after an erasure request.
• Right to restriction of processing: In specific circumstances — such as where you contest the accuracy of data or have objected to processing pending verification of legitimate grounds — you may request that we restrict the processing of your data to storage only.
• Right to object: You have the right to object to the processing of your personal data where it is based on our legitimate interests. If you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to data portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format.

We will respond to all verified privacy rights requests within 30 calendar days of receipt. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for it before the expiry of the initial 30-day period. We will not charge a fee for exercising your rights except where a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may be applied.

8 Updates to This Policy

456bs reviews this Privacy Policy periodically to ensure it remains accurate, up to date, and reflective of the platform's current data processing activities. We may update this policy in response to changes in applicable law, changes to the services we offer, feedback from players, or improvements to our internal data governance practices.

When material changes are made to this Privacy Policy, 456bs will publish the revised version at https://456bs.app/privacy-policy and update the "Effective" date shown at the top of the document. Where a change significantly affects how we process your personal data, we will take additional steps to bring it to your attention — such as posting a notice on the platform homepage or sending a notification to your registered email address or mobile number.

Your continued use of the 456bs platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you disagree with any update to this policy, you are entitled to request account closure at any time by contacting [email protected], and any verified account balance will be returned to your registered payment method.

We encourage you to review this Privacy Policy periodically. If you have any questions about this policy, about how your data is processed, or about exercising your privacy rights, our support team is available 24/7 at [email protected]. We are committed to addressing all privacy enquiries promptly and transparently.