Privacy Policy — How 456bo Collects, Uses, and Protects Your Data

1. Introduction

1.1 456bo is committed to handling the personal data of its Players and site visitors with the highest standards of transparency, integrity, and security. This Policy describes our data practices in clear, formal language so that every Player — whether based in Dhaka, Chittagong, Sylhet, Khulna, or elsewhere in Bangladesh — understands precisely how their information is managed when they use the 456bo platform.

1.2 This Policy applies to all personal data collected through the 456bo website, any mobile-optimised version of the site, any application programming interface (API) used by the Platform, and any correspondence you initiate with 456bo's customer support team via live chat, email, or telephone.

1.3 "Personal data" means any information that identifies you, or that could reasonably be used to identify you, either on its own or in combination with other information. Examples include your full name, date of birth, mobile number, email address, National ID number, postal address, IP address, device identifiers, and financial account details.

1.4 If you are under 21 years of age, you are not permitted to use the 456bo Platform, and 456bo does not knowingly collect personal data from individuals under 21. If we discover that personal data has been collected from a person under 21, it will be deleted promptly and the associated account will be permanently closed.

2. Data Controller

2.1 For the purposes of this Policy, 456bo acts as the data controller in respect of personal data collected directly from Players and site visitors through the Platform. As data controller, 456bo determines the purposes for which and the means by which your personal data is processed.

2.2 Where 456bo engages third-party service providers (for example, payment processors, identity verification providers, or game content suppliers) to process data on its behalf, those parties act as data processors under binding contractual arrangements that require them to process data only on 456bo's documented instructions, to maintain appropriate security standards, and to delete or return data upon termination of the service arrangement.

2.3 Questions or requests relating to 456bo's role as data controller should be directed to the support team using the contact details provided in Section 15 of this Policy.

3. Personal Data We Collect

3.1 456bo collects personal data in three principal ways: directly from you when you provide it, automatically when you use the Platform, and from third-party sources where permitted by law.

3.2 Data You Provide Directly

The following categories of personal data are collected when you register, verify your identity, make deposits or withdrawals, contact support, or participate in promotions:

Category	Examples	When Collected
Identity Data	Full legal name, date of birth, gender, nationality, NID or passport number	Registration and KYC verification
Contact Data	Mobile number, email address, residential address (Dhaka, Chittagong, Sylhet, etc.)	Registration and account updates
Financial Data	bKash wallet number, Nagad number, Rocket number, Upay number, bank account details, Visa/Mastercard last four digits	Deposit and withdrawal processing
Verification Documents	Scanned NID card, passport bio-data page, utility bill, bank statement	KYC and AML compliance checks
Communications Data	Live chat transcripts, email correspondence, support ticket content	Customer support interactions
Responsible Gaming Data	Self-exclusion requests, deposit limit preferences, cool-off period settings	Responsible gaming tool usage

3.3 Data Collected Automatically

When you access the 456bo Platform, the following technical data is collected automatically by our servers and analytics systems:

• Device and Browser Data: IP address, browser type and version, operating system, device type (mobile, tablet, desktop), screen resolution, and language settings.
• Usage Data: Pages visited, games played, wagers placed, session duration, click paths, feature interactions, and search queries entered within the Platform.
• Transaction Data: Deposit amounts, withdrawal requests, bonus claims, bet history, win/loss records, and cashier activity timestamps.
• Geolocation Data: Approximate geographic location derived from IP address, used to enforce Restricted Territory controls and detect potentially fraudulent access patterns.
• Cookie and Tracking Data: Cookie identifiers, session tokens, and preference settings. See Section 7 for full details on our cookie usage.

3.4 Data from Third-Party Sources

456bo may receive personal data about you from the following third-party sources, where you have consented to such sharing or where we are legally entitled to receive it:

• Identity Verification Providers: Results of automated or manual identity checks performed against government ID databases or credit reference agencies as part of the KYC process.
• Payment Service Providers: Transaction confirmation data from bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks in Bangladesh, confirming deposit and withdrawal status.
• Fraud Prevention Services: Risk scores, device fingerprint flags, and pattern-of-play alerts generated by third-party fraud detection systems integrated into the Platform.

4. How We Use Your Personal Data

4.1 456bo uses the personal data it collects for the following specific purposes. We do not use your data for any purpose that is incompatible with those listed below without first obtaining your explicit consent or being required to do so by law.

• Account Creation and Management: To register your account, authenticate your identity at login, maintain your account preferences, and manage your account lifecycle including closure and reactivation.
• Service Delivery: To provide access to casino games, sports betting markets, live dealer tables, crash games (Plinko, Diamond Tycoon), and all other features of the 456bo Platform.
• Payment Processing: To process deposits received via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Bangladesh bank transfers, and to execute withdrawal requests to your registered payment method.
• Identity Verification (KYC): To verify your identity and age (minimum 21 years) before processing withdrawals above applicable thresholds, in compliance with anti-money-laundering obligations.
• Fraud and Security: To detect, investigate, and prevent fraudulent transactions, multiple-account violations, money laundering, bonus abuse, and other forms of prohibited conduct as defined in the Terms and Conditions.
• Responsible Gaming: To monitor patterns of play for indicators of problem gambling, to apply the responsible gaming restrictions you have set (deposit limits, session time limits, self-exclusion), and to provide targeted support where warranted.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and maintain records of all communications for quality assurance and compliance purposes.
• Legal and Regulatory Compliance: To fulfil obligations under applicable law, including responding to lawful requests from regulatory authorities, law enforcement agencies, and financial intelligence units.
• Platform Improvement: To analyse usage data and game performance metrics in aggregate and anonymised form for the purpose of improving platform features, resolving technical errors, and optimising user experience.
• Marketing Communications: To send you information about 456bo promotions, bonuses, and new game releases — but only where you have provided consent or where there is a legitimate interest basis. You may opt out of marketing communications at any time by contacting support.

5. Legal Basis for Processing

5.1 456bo processes personal data only where there is a valid legal basis for doing so. The primary legal bases relied upon are:

• Contractual Necessity: Processing that is necessary to perform the contract between you and 456bo — including account registration, payment processing, game access, and withdrawal execution — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing that is required to comply with a legal obligation applicable to 456bo — including KYC identity verification, anti-money-laundering record-keeping, and responses to lawful regulatory requests — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing carried out on the basis of 456bo's legitimate interests — including fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics for service improvement — is assessed against your interests and fundamental rights. Where our legitimate interests would override those rights, we will not process the data on this basis without obtaining consent.
• Consent: Processing for marketing communications and non-essential cookies is carried out only where you have provided freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time by contacting support or adjusting your browser settings for cookies.

6. Data Sharing and Disclosure

6.1 456bo does not sell, rent, or otherwise commercially transfer your personal data to any third party. Disclosures of personal data are limited to the following categories of recipient and the specified purposes:

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks in Bangladesh receive the financial data necessary to process your deposits and withdrawals. These parties are bound by their own privacy policies and applicable financial regulation.
• Identity Verification Providers: Third-party KYC and AML service providers receive identity document data and personal identifiers for the purpose of verifying your identity and screening against sanctions lists. All such providers operate under binding data processing agreements with 456bo.
• Game Content Suppliers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive pseudonymised session and wagering data for the purpose of delivering real-time game functionality. They do not receive personally identifiable information beyond what is technically necessary for game operation.
• Fraud Prevention Services: Third-party fraud detection providers receive device, IP, and behavioural data to generate risk assessments. These providers act as data processors under binding contractual obligations.
• Legal and Regulatory Authorities: 456bo will disclose personal data to law enforcement agencies, financial intelligence units, regulatory bodies, and courts where required by applicable law or by a valid legal order. 456bo will notify you of any such disclosure to the extent permitted by law.
• Professional Advisers: Lawyers, auditors, and insurers may access personal data on a strictly need-to-know basis when providing professional services to 456bo, subject to confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of 456bo's assets, personal data may be transferred to the acquiring entity as part of that transaction. Affected Players will be notified prior to the transfer.

7. Cookies and Tracking Technologies

7.1 456bo uses cookies and similar technologies (including local storage objects and pixel tags) on the Platform. This section explains the types of cookies used, their purpose, and how you may control them.

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They manage your login session, store your authentication token, remember your language preference, and enable the cashier to operate securely. These cookies cannot be disabled without rendering the Platform non-functional.
• Analytics Cookies: These cookies collect anonymised data about how Players navigate the Platform — which pages they visit most frequently, which games they open, how long sessions last, and where errors occur. This data is used solely to improve Platform performance and user experience. 456bo uses a self-hosted analytics solution; no data is shared with third-party analytics platforms.
• Preference Cookies: These cookies remember your display preferences and responsible gaming settings between sessions, so that your chosen deposit limit and session duration settings are applied automatically at login.
• Session Integrity Cookies: These cookies protect against cross-site request forgery (CSRF) and session hijacking by assigning and validating a unique token for each authenticated session.

7.2 456bo does not place third-party advertising cookies, retargeting cookies, or social media tracking pixels on the Platform. Players will not be tracked across other websites on the basis of cookies set by 456bo.

7.3 You may control non-essential cookies via your browser settings. Most modern browsers allow you to block or delete cookies, or to prompt you for consent before accepting each cookie. Please note that disabling strictly necessary cookies will impair your ability to use the Platform. Detailed guidance on managing cookies in your browser is available from your browser provider's official help documentation.

8. Data Retention

8.1 456bo retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by applicable law or regulatory obligation. The following retention periods apply as a general guideline:

Data Category	Retention Period	Basis
Account registration data	Duration of account + 5 years post-closure	AML regulatory obligation
KYC identity documents	Duration of account + 5 years post-closure	AML regulatory obligation
Transaction and betting records	Duration of account + 5 years post-closure	AML and audit trail requirements
Customer support communications	3 years from date of communication	Legitimate interest (dispute resolution)
Marketing preferences and consent records	Duration of consent + 3 years	Legal obligation (proof of consent)
Technical log data (IP, device)	13 months from collection	Legitimate interest (security monitoring)
Self-exclusion records	Minimum 7 years from exclusion date	Responsible gaming obligation

8.2 Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual. Anonymised aggregate data may be retained indefinitely for statistical and analytical purposes.

9. Your Data Rights

9.1 Subject to applicable law and certain exceptions, you have the following rights with respect to the personal data 456bo holds about you. Requests should be submitted to the support team using the contact details in Section 15 and will be processed within 30 calendar days:

• Right of Access: You may request a copy of all personal data 456bo holds about you, together with information about the purposes of processing, the categories of data held, and any recipients to whom the data has been disclosed.
• Right to Rectification: If personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. You may update basic account details (email address, mobile number, residential address) directly from your account dashboard at any time.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where (a) it is no longer necessary for the purpose for which it was collected, (b) you have withdrawn consent and there is no other legal basis for processing, (c) you object to processing and there are no overriding legitimate grounds, or (d) the data has been unlawfully processed. Note that erasure requests may be partially declined where data must be retained to fulfil a legal obligation (such as AML record-keeping requirements).
• Right to Restriction: You may request that processing of your data be restricted in certain circumstances — for example, while the accuracy of data you have contested is being verified, or where you have objected to processing pending a determination of whether 456bo's legitimate interests override yours.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format (such as JSON or CSV) so that you may transfer it to another service provider.
• Right to Object: You have the right to object at any time to processing of your personal data where that processing is based on legitimate interests, including profiling for responsible gaming monitoring purposes. 456bo will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, receipt of marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

9.2 456bo will not charge a fee for processing a data rights request unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may be applied or the request may be refused, with written reasons provided.

10. International Data Transfers

10.1 456bo's primary server infrastructure is located in jurisdictions with recognised data protection frameworks. However, in the course of providing its services, personal data may be transferred to and processed in countries other than Bangladesh, including countries where the applicable data protection standards may differ from those in your jurisdiction.

10.2 Where personal data is transferred to a third-party service provider located outside Bangladesh, 456bo ensures that such transfers are protected by appropriate safeguards, which may include:

• Binding contractual clauses that require the recipient to apply equivalent data protection standards;
• Transfers to recipients in jurisdictions recognised as providing an adequate level of data protection by applicable international standards; or
• Other legally recognised transfer mechanisms applicable to the circumstances of the transfer.

10.3 You may request further information about the specific safeguards applied to international transfers of your personal data by contacting the support team at the details provided in Section 15.

11. Security Measures

11.1 456bo implements a layered set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include but are not limited to:

• 256-bit TLS/SSL Encryption: All data in transit between your device and the 456bo Platform is encrypted using Transport Layer Security (TLS) version 1.3 or higher, with a 256-bit certificate issued by a trusted certificate authority.
• Encryption at Rest: Personal data and financial records stored on 456bo servers are encrypted at rest using AES-256 symmetric encryption.
• Password Security: Account passwords are hashed using bcrypt with an industry-standard cost factor. Plaintext passwords are never stored by 456bo.
• Two-Factor Authentication (2FA): SMS-based two-factor authentication is available to all Players and is strongly recommended. 456bo may require 2FA for high-value withdrawal requests.
• Access Controls: Access to personal data within 456bo's internal systems is restricted on a strict need-to-know basis, with role-based access controls applied to all internal staff accounts. All internal access to personal data is logged and audited.
• Intrusion Detection: 456bo operates continuous intrusion detection systems, web application firewalls, and DDoS mitigation services on its platform infrastructure.
• Data Breach Response: 456bo maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to Players, affected individuals will be notified within 72 hours of 456bo becoming aware of the breach, together with information about the nature of the breach, data affected, and steps taken to mitigate its effects.

11.2 While 456bo employs all reasonable security measures, no online platform can guarantee absolute security. Players are encouraged to protect their own account credentials, to enable two-factor authentication, and to notify 456bo immediately if they suspect any unauthorised access to their account.

12. Children and Minors

12.1 The 456bo Platform is strictly for adults aged 21 and above. 456bo does not knowingly collect, process, or store personal data relating to any individual under the age of 21. The Platform is not directed at, and is not intended for use by, minors.

12.2 If 456bo becomes aware that personal data has been collected from an individual under 21 years of age, it will immediately delete that data, permanently close the associated account, and return any funds deposited (subject to fraud and AML checks).

12.3 If you are the parent or guardian of a minor and believe that your child has provided personal data to 456bo or has registered an account, please contact the support team immediately using the contact details in Section 15 so that appropriate action can be taken without delay.

13. Third-Party Links and Services

13.1 The 456bo Platform does not contain links to external third-party websites. However, certain game interfaces provided by third-party game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) operate within the Platform environment. These game providers have their own privacy practices governing data processed within their game engines.

13.2 456bo is not responsible for the privacy practices of third-party game studios operating within the Platform. 456bo contractually requires all game providers to comply with applicable data protection standards as a condition of their integration on the Platform. However, Players should be aware that game studios may collect pseudonymised gameplay data for their own platform integrity and fraud detection purposes.

13.3 Payment service providers accessed through the 456bo cashier (bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks) are independent data controllers in respect of the data processed through their own payment infrastructure. Their privacy policies govern how they use data collected during payment transactions.

14. Amendments to This Policy

14.1 456bo reserves the right to amend this Privacy Policy at any time. We will publish the updated Policy on this page with a revised effective date and version number. Where changes are material — meaning they significantly affect your rights or the way your data is used — we will notify you via your registered email address at least 14 days before the changes take effect.

14.2 Minor or administrative amendments (such as clarifications of existing practices, corrections of typographical errors, or updated contact details) may be made without advance notice and will be effective from the date of publication.

14.3 Continued use of the 456bo Platform after the effective date of any amendment to this Policy constitutes your acceptance of the revised terms. If you do not agree with the amended Policy, you should stop using the Platform and request closure of your account before the amendment takes effect.

14.4 Previous versions of this Policy are available upon request from the support team. Please quote the version number you wish to review when making such a request.

15. Contact and Data Subject Requests

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data 456bo holds about you, please contact our support team through the following channels. Note that all contact details below are displayed as plain text and are not clickable links.

• Live Chat: Available 24 hours a day, 7 days a week inside your account dashboard — the fastest channel for data subject requests.
• Email: support at 456bo.io
• Phone: +880 1700 000 456 (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6).

When submitting a data subject request, please include your registered account username and a clear description of the right you wish to exercise or the query you wish to raise. This will allow the appropriate team member to respond to you accurately and within the 30-day processing window.

456bo aims to resolve all privacy-related queries to the satisfaction of the Player. If you are dissatisfied with the response you receive, you may have the right to escalate your complaint to a relevant data protection authority or regulatory body in your jurisdiction.