456ba Privacy Policy

1. Data Controller & Contact Information

456ba is the data controller responsible for all personal data collected and processed through the 456ba platform at 456ba.bet. As data controller, 456ba determines the purposes and means by which your personal data is processed, and is accountable for ensuring that processing is carried out lawfully, fairly, and transparently in accordance with applicable data protection principles.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact our dedicated privacy support team. All privacy-related enquiries will be acknowledged within 5 business days and resolved within 30 calendar days wherever possible.

456ba operates as an internationally licensed platform. The Platform is operated and managed by 456ba and is available to eligible players in Bangladesh, subject to local legal requirements. Players in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other regions of Bangladesh are subject to this same unified Privacy Policy.

2. Personal Data We Collect

456ba collects personal data from you through several channels: directly when you register and use the platform, automatically through your interaction with our website and services, and from trusted third parties such as payment providers and identity verification services. Below is a full account of the categories of data we collect.

Registration & Account Data

• Full legal name as it appears on government-issued identification.
• Date of birth (used to verify that you are aged 18 or above).
• Residential address, including city and postal code.
• Mobile phone number registered in Bangladesh.
• Email address used for account communications.
• Username chosen during account creation.
• Encrypted password (we do not store passwords in plain text).

Identity Verification (KYC) Data

• Scanned copy or photograph of your Bangladesh National Identity Card (NID), passport, or other government-issued photo ID.
• Proof of address documents such as a utility bill or bank statement issued within the preceding 3 months.
• Selfie photograph or video submitted as part of liveness verification, where required.
• Ownership documentation for payment methods linked to your account (e.g., bKash or Nagad account registration confirmation).

Financial Transaction Data

• Deposit and withdrawal transaction records including amount (in BDT), date, time, and payment method used.
• Mobile banking account identifiers (e.g., bKash registered number, Nagad account number) — we store references, not full credentials.
• Bank account or card details used for Visa or Mastercard transactions, stored in tokenised form only.
• Transaction history sufficient to support anti-money laundering (AML) monitoring obligations.

Betting & Gaming Activity Data

• Wager history including sports markets bet on (e.g., BPL cricket matches, ATP tennis events, snooker tournaments), stake amounts, odds accepted, and settlement results.
• Casino and slots session data including game titles played, bet amounts per round, session duration, and outcome records.
• Bonus and promotional history including bonuses claimed, wagering requirement progress, and bonus resolution outcomes.

Technical & Usage Data

• IP address at the time of each login and key platform interaction.
• Device type, operating system, browser type and version.
• Referring URL and pages visited within the 456ba platform.
• Session timestamps including login time, session duration, and logout time.
• Cookie and tracking technology data — see Section 6 for full details.

3. How We Use Your Personal Data

456ba uses your personal data only for specific, legitimate purposes directly connected to the operation of the platform and the delivery of our services to you. We do not process personal data in ways that are incompatible with the purposes listed below.

Service Delivery

• Creating and maintaining your 456ba account, including authentication and session management.
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, SureCash, Tap, Dutch-Bangla Bank, and card networks.
• Delivering sports betting, live casino, and slots products and recording all wagering activity accurately.
• Applying and managing promotional bonuses and free bets associated with your account.
• Providing customer support via email, including responding to account, payment, and gameplay queries.

Legal & Regulatory Compliance

• Verifying your age (18+) and identity through our KYC process to prevent underage gambling.
• Conducting anti-money laundering (AML) and counter-terrorism financing (CTF) monitoring on financial transactions.
• Maintaining transaction records for the periods required under applicable financial regulation.
• Responding to lawful requests from courts, law enforcement agencies, or regulatory bodies.

Platform Security & Fraud Prevention

• Detecting and preventing unauthorised account access, account takeover, and credential stuffing attacks.
• Identifying bonus abuse, multi-accounting, and other forms of platform manipulation.
• Investigating suspected match-fixing activity and reporting findings to the relevant sporting authority where required.
• Monitoring for unusual transaction patterns indicative of fraud or money laundering.

Responsible Gaming

• Monitoring account activity to detect indicators of problem gambling behaviour and triggering responsible gaming interventions where appropriate.
• Enforcing player-requested deposit limits, loss limits, session time limits, and self-exclusion periods.
• Maintaining exclusion records to prevent re-registration during an active self-exclusion period.

Platform Improvement

• Analysing aggregated, anonymised usage data to improve the performance, design, and content of the 456ba platform.
• Understanding which sports, game categories, and promotional formats are most valued by our Bangladesh player base.

4. Legal Basis for Processing

456ba processes your personal data on one or more of the following legal bases. Each processing activity is mapped to at least one of these bases, and we do not process personal data without a valid legal justification.

Where we rely on legitimate interests as a legal basis, we conduct a balancing test to ensure that our interests do not unduly override your fundamental rights and freedoms. The results of these assessments are documented internally and available on request. Where we rely on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Data Sharing & Third Parties

456ba does not sell your personal data to any third party under any circumstances. We share personal data with a limited set of carefully selected partners and service providers who process data on our behalf or who have their own independent processing obligations. All third-party data processors are bound by contractual obligations to handle your data securely and in accordance with applicable data protection requirements.

Categories of Third Parties

• Payment Service Providers: bKash, Nagad, Rocket, Upay, SureCash, Tap, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive transaction data strictly necessary to process your deposit and withdrawal requests. These providers operate under their own privacy policies and regulatory frameworks.
• Identity Verification (KYC) Partners: Third-party KYC and age verification service providers receive identity document images and biometric data (where applicable) solely for the purpose of verifying your identity and age. These partners are prohibited from retaining or using your data for any other purpose.
• Game & Content Providers: Licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised session data (device type, game identifier, stake, outcome) necessary to deliver and record game rounds. These providers do not receive your full name, NID, or payment details.
• Technology & Infrastructure Providers: Cloud hosting, database, and content delivery network providers who process data on 456ba's behalf under strict data processing agreements. These providers have no independent right to use your data for their own purposes.
• Fraud Prevention & AML Screening Services: Specialist providers who screen transactions and account activity against financial crime databases as required by our AML compliance obligations.
• Regulatory & Law Enforcement Authorities: Where required by a valid court order, regulatory direction, or lawful authority request, 456ba will disclose personal data to the relevant body. We will inform you of such a disclosure where legally permitted to do so.
• Sporting Integrity Bodies: In cases where match-fixing or corruption is suspected, we may share relevant betting data with the ICC, ATP, WPBSA, or other relevant sporting integrity organisations as required under our operating obligations.

6. Cookies & Tracking Technologies

456ba uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, maintain your session security, and improve the quality of your experience. A cookie is a small text file placed on your device when you visit a website. Cookies do not contain executable code and cannot access other files on your device.

Types of Cookies Used by 456ba

Managing Your Cookie Preferences

You can control non-essential cookies through your web browser settings. Most modern browsers — including those commonly used on Android and iOS devices by players in Bangladesh — allow you to view, block, and delete cookies via the browser's privacy settings menu. Please note that disabling strictly necessary cookies will prevent you from logging in to or using core features of the 456ba platform.

To opt out of marketing cookies specifically, please contact us at [email protected] with the subject line "Cookie Opt-Out Request". We will update your preference profile within 5 business days of receiving your request.

7. Data Retention

456ba retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. When data is no longer needed, it is securely deleted or anonymised so that it can no longer be associated with you as an individual.

The following retention periods apply as standard across 456ba's data categories. Specific legal requirements — such as AML record-keeping mandates — may extend these periods, in which case the longer of the two timeframes applies.

• Account registration data: Retained for the lifetime of your active account, plus 5 years following account closure (to support dispute resolution and regulatory enquiries).
• KYC and identity verification documents: Retained for 5 years from the date of submission, or from account closure, whichever is later.
• Financial transaction records: Retained for 7 years in accordance with anti-money laundering record-keeping requirements.
• Betting and gaming activity history: Retained for 5 years from the date of each wager or session, or from account closure, whichever is later.
• Customer support correspondence: Retained for 3 years from the date of the most recent interaction in a given support thread.
• Marketing consent records: Retained for the duration of your consent plus 3 years, to support evidence of lawful basis for any marketing communications sent.
• Server logs and technical data: Retained for up to 13 months on a rolling basis, after which they are automatically purged.
• Self-exclusion records: Retained indefinitely to prevent re-registration in violation of a permanent self-exclusion, or for the duration of the exclusion period plus 5 years for temporary exclusions.

When a retention period expires, 456ba uses industry-standard secure deletion methods (including cryptographic erasure for cloud-stored data) to ensure that expired personal data cannot be recovered or reconstructed.

8. Your Privacy Rights

As an individual whose personal data is processed by 456ba, you hold a set of meaningful rights in relation to that data. 456ba is committed to upholding these rights promptly and without unnecessary obstacles. To exercise any of the rights described below, please contact us at [email protected] with the subject line "Data Rights Request — [Right Type] — [Your Username]".

456ba will respond to all verifiable data rights requests within 30 calendar days of receipt. In cases of complexity or high volume, this period may be extended by up to a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.

To protect the security of your personal data, 456ba will verify your identity before processing any data rights request. You may be asked to confirm your registered email address, mobile number, or provide a copy of a valid identity document as part of this verification process. There is no charge for exercising your rights in the vast majority of cases; however, if a request is manifestly unfounded or excessive, 456ba reserves the right to charge a reasonable administrative fee or decline to act.

9. Data Security

456ba implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Security is treated as a continuous programme rather than a one-time implementation, and our measures are reviewed and updated regularly in response to evolving threats.

Technical Measures

• Transport Layer Security (TLS 1.2 / 1.3): All data transmitted between your browser or app and 456ba's servers is encrypted using current TLS standards, preventing interception in transit.
• Data Encryption at Rest: Sensitive personal data stored in 456ba's databases — including identity documents, payment references, and KYC records — is encrypted using AES-256 encryption.
• Password Hashing: Account passwords are stored using a modern, salted cryptographic hashing algorithm. 456ba staff cannot read your password in plain text under any circumstances.
• Access Controls: Personal data is accessible only to 456ba employees and contractors who have a clear operational need to access it. Role-based access controls (RBAC) are enforced across all internal systems.
• Multi-Factor Authentication: Internal system access for 456ba staff handling sensitive player data requires multi-factor authentication (MFA).
• Intrusion Detection: 456ba's infrastructure is monitored around the clock by automated intrusion detection and anomaly alerting systems. Security incidents trigger immediate escalation to our security operations team.
• Regular Security Audits: 456ba commissions periodic independent security assessments, including penetration testing, to identify and remediate vulnerabilities before they can be exploited.

Organisational Measures

• All staff with access to personal data undergo data protection and security awareness training upon joining 456ba and on an ongoing annual basis.
• Third-party service providers are subject to due diligence review and are required to demonstrate adequate security standards before being onboarded.
• 456ba maintains a documented incident response plan. In the event of a data breach that poses a risk to player rights, affected players will be notified promptly in accordance with applicable notification requirements.
• Internal data handling policies are reviewed at least annually and updated to reflect changes in technology, legal requirements, and best practice guidance.

10. Children & Minors

The 456ba platform is strictly intended for adults aged 18 years and above. 456ba does not knowingly collect personal data from any individual under the age of 18. Registration on the 456ba platform requires you to confirm that you are 18 or older, and our KYC verification process is specifically designed to detect and reject attempts by minors to register accounts.

If 456ba becomes aware — whether through our verification process, a third-party report, or any other means — that personal data has been collected from an individual under the age of 18, we will immediately take the following steps:

• Suspend the relevant account pending investigation.
• Permanently close the account upon confirmation that the account holder is under 18.
• Return any deposited funds via the original payment method, less any amounts already paid out as winnings, in accordance with our underage gambling policy.
• Delete all personal data associated with the underage account from our systems, except where retention is required for regulatory or legal proceedings.

If you are a parent or guardian and believe that a minor in your care has registered on the 456ba platform, please contact us immediately at [email protected] with the subject line "Underage Account Report". We treat such reports with the utmost urgency and priority. We also encourage parents and guardians in Bangladesh to make use of internet filtering and parental control software to prevent minors from accessing online gambling platforms.

11. Changes to This Privacy Policy

456ba may update this Privacy Policy periodically to reflect changes in our data handling practices, the services we offer, the technologies we use, or applicable legal requirements. When we make material changes to this Policy, we will take reasonable steps to notify active account holders. This may include a notice displayed on the 456ba platform when you next log in, a communication to your registered email address, or an in-platform message.

Non-material changes — such as typographical corrections, clarifications of existing language, or updates that do not meaningfully alter your rights or our obligations — may be made without advance notice. The revised Policy will be published on this page at 456ba.bet/privacy-policy with an updated effective date shown at the top of the document.

Your continued use of the 456ba platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to this Policy, you should stop using the platform and may request account closure by contacting our support team at [email protected]. Upon closure, 456ba will handle your remaining data in accordance with the retention periods described in Section 7.

We recommend that you review this Privacy Policy periodically — particularly if you are a regular 456ba player — to stay informed about how your personal data is being managed. The date at the top of this page always reflects the most recent revision.