456bo Privacy Policy — Your Data, Your Rights

1. Data We Collect

456bo collects personal data through several channels: the account registration form, ongoing platform usage, financial transactions, customer support interactions, and automatic technical data gathered when you visit 456bo.app. The categories of data we collect are described below.

Registration and Identity Data: When you create a 456bo account, we collect your full name, date of birth, mobile number, and a username of your choosing. This data is essential to establish your identity, verify that you meet the 18+ age requirement, and maintain a single-account-per-player policy.

Financial and Transaction Data: When you make a deposit or withdrawal, we collect transaction identifiers, the payment method used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, or City Bank), transaction amounts in Bangladeshi Taka (BDT), and timestamps. We do not store full mobile banking PINs, full card numbers, or internet banking passwords — these are handled entirely by your payment provider's secure infrastructure.

Know Your Customer (KYC) Data: To comply with anti-money-laundering obligations and to verify player identity, we may collect copies of government-issued identification documents such as your National Identity Card (NID) or passport. KYC documents are stored securely and used solely for verification purposes.

Usage and Behavioural Data: We automatically collect data about how you interact with 456bo.app — including pages visited, games played, bets placed, session durations, and feature usage patterns. This data helps us improve the platform experience, detect anomalies, and personalise content for returning players.

Technical Data: Our servers automatically log your IP address, browser type and version, operating system, device type, screen resolution, and referring URL when you access 456bo.app. This data is used for security monitoring, fraud prevention, and platform performance analysis.

Communications Data: When you contact the 456bo support team at [email protected] or through any live chat facility on the platform, we retain records of those communications — including your messages, the support agent's responses, and any attachments or screenshots you provide. This record is used to resolve disputes, maintain service quality, and provide continuity of support.

3. Data Sharing and Disclosure

456bo does not sell your personal data to third parties. We share data only in the specific circumstances described below, and only to the extent necessary for the stated purpose.

Payment Processors: To process your deposits and withdrawals, we share transaction data with the relevant payment service providers — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and City Bank. The data shared is limited to what each provider needs to execute the transaction. Each of these providers operates under its own privacy policy and is independently responsible for data it processes on its own systems.

Game Studios and Content Providers: 456bo's game catalogue is powered by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game, a session token and anonymised player identifier are passed to the relevant studio's game server to initialise and record the game session. Full name, NID, and financial details are not shared with game studios.

Identity Verification Partners: During KYC checks, we may use a third-party identity verification service to authenticate documents you submit. Such services receive only the documents necessary for verification and are contractually prohibited from using that data for any other purpose.

Legal and Regulatory Disclosure: 456bo may disclose personal data if required to do so by applicable law, court order, or at the request of a competent regulatory or law enforcement authority. We will notify you of any such disclosure where we are legally permitted to do so.

Business Transfers: In the event that 456bo undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified via the email or mobile number registered on your account before your data becomes subject to a different privacy policy.

• We do not share personal data with third-party advertisers or data brokers.
• We do not share your data with other 456bo players under any circumstances.
• All third-party service providers who receive personal data from 456bo are bound by data processing agreements that restrict their use of that data to the agreed purpose.
• Aggregated, anonymised data (from which no individual can be identified) may be shared with analytics providers or published in platform reports without restriction.

5. Data Retention and Storage

456bo retains personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal obligations, to resolve disputes, and to enforce our agreements. The following retention periods apply as general guidelines — specific regulatory requirements may mandate longer retention in certain cases.

• Account and Identity Data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, to comply with anti-money-laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in line with financial record-keeping obligations.
• KYC Documents: Retained for the duration of your active account plus five (5) years following closure. Copies are securely destroyed after this period.
• Usage and Behavioural Data: Retained in identifiable form for up to two (2) years, after which it is anonymised or deleted. Anonymised aggregate data may be retained indefinitely for platform analytics purposes.
• Support Communications: Retained for up to three (3) years from the date of each interaction, or longer if the communication relates to an ongoing dispute or legal matter.
• Marketing Consent Records: Retained for as long as you remain subscribed to marketing communications, plus one (1) year following unsubscription, as evidence of your consent history.

Data Storage Location: 456bo stores personal data on secure servers. We take reasonable steps to ensure that data is processed and stored with the same level of protection wherever it is held. Transfers of data to third-party service providers (such as game studios and KYC partners) are governed by contractual data protection obligations.

Data Deletion: When the applicable retention period expires, 456bo will securely delete or anonymise personal data so that it can no longer be linked to an identifiable individual. If you submit a formal data deletion request before the expiry of the retention period, we will evaluate whether an earlier deletion is possible in light of our legal obligations. We will inform you of the outcome within a reasonable timeframe.

7. Data Security Measures

456bo implements a range of technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. While no system can guarantee absolute security, we maintain industry-standard protections appropriate to the nature and volume of data we process.

• SSL/TLS Encryption: All data transmitted between your browser or app and 456bo.app is encrypted using Transport Layer Security (TLS). This prevents interception of your login credentials, transaction data, and personal information in transit.
• Access Controls: Access to personal data within 456bo's internal systems is restricted on a need-to-know basis. Staff members are granted the minimum level of data access required to perform their role. Access permissions are reviewed regularly.
• Password Security: Account passwords are hashed using a strong cryptographic algorithm — they are never stored in plaintext. 456bo staff cannot view your password and will never ask you to disclose it.
• Fraud and Intrusion Detection: Our platform employs automated monitoring systems that flag unusual login patterns, suspicious transaction activity, and potential account compromise. Flagged activity is reviewed by our security operations team.
• Secure Data Storage: Personal data and KYC documents are stored on servers with restricted physical and network access, regular security patching, and encrypted storage volumes.
• Staff Training: All 456bo employees who handle personal data receive training on data protection obligations and security best practices. Data breaches are treated as a critical incident requiring immediate investigation and remediation.

Data Breach Response: In the event of a personal data breach that is likely to result in a risk to players' rights and freedoms, 456bo will take immediate steps to contain the breach, assess its scope, and notify affected players without undue delay. We will provide clear information about what happened, what data was affected, and what steps players can take to protect themselves.

Your Responsibility: Account security is a shared responsibility. You play an important role in protecting your data by choosing a strong unique password, keeping your login credentials confidential, logging out on shared devices, and promptly reporting any suspected unauthorised access to [email protected].