Privacy Policy

Data We Handle — At a Glance

we368 handles several categories of personal data in the course of providing its platform. The table below summarises what we collect and why.

1. Introduction

we368 (referred to in this document as "we", "us", or "we368") is committed to protecting the privacy of every person who uses our platform. This Privacy Policy sets out in clear terms how we collect, use, store, share, and safeguard your personal information when you access or use the we368 website and all associated services.

This Privacy Policy applies to all users of we368, including registered account holders and visitors who browse the we368 platform without creating an account. By using we368, you consent to the data practices described in this policy. If you do not agree with this policy, you must not use the we368 platform. This policy should be read alongside the we368 Terms & Conditions, which incorporate this Privacy Policy by reference.

2. Information We Collect

we368 collects personal information through a number of channels. The categories of information we collect, and the circumstances in which we collect them, are as follows:

• Registration information: When you create a we368 account, we collect your full name, date of birth, mobile phone number, and any other information you provide during the registration process. This information is required to create and maintain your account and to verify that you meet the eligibility requirements for using we368.
• Identity verification documents: As part of our Know Your Customer (KYC) process, we may collect copies of government-issued identity documents (such as a National ID card or passport), proof of address, and in some cases a selfie photograph for biometric verification. These documents are required to verify your identity and to comply with anti-money laundering obligations.
• Transaction and financial data: We collect details of all deposits and withdrawals made through your we368 account, including payment method identifiers (such as the bKash or Nagad wallet number used for a transaction), transaction amounts, dates, and outcomes. This information is required to process payments, prevent fraud, and meet regulatory record-keeping requirements.
• Betting and gaming activity: We maintain records of your betting history, game session activity, wager amounts, game outcomes, and responsible gaming tool usage (such as deposit limits or self-exclusion requests). This data is used to manage your account, process payouts, comply with regulatory requirements, and improve the platform.
• Technical and device data: When you access we368, we automatically collect certain technical information, including your IP address, device type (smartphone, tablet), operating system and version, browser type and version, and session timestamps. This information is used to provide the platform service, detect fraudulent access, and improve platform performance.

3. How We Use Your Information

we368 uses the personal information we collect for the following purposes:

• Account management and service delivery: To create and maintain your we368 account, process your deposits and withdrawals, settle your bets, and provide customer support when you contact us. This is the primary purpose for which your information is used, and it is necessary for the performance of the contract between you and we368.
• Identity verification and fraud prevention: To verify your age and identity as required by our KYC obligations, to detect and prevent fraudulent activity, money laundering, and abuse of the platform, and to protect other users of we368 from harm.
• Regulatory compliance: To comply with applicable laws and regulations relating to online gaming operations, anti-money laundering, counter-terrorism financing, and data protection. Regulatory compliance uses of data may include retaining transaction records for the periods required by law, filing suspicious activity reports, and responding to lawful requests from competent authorities.
• Platform improvement and analytics: To analyse usage patterns, identify technical issues, measure platform performance, and develop new features and improvements. Analytics data is typically processed in aggregated or anonymised form where possible.
• Responsible gaming: To monitor betting patterns that may indicate problem gambling behaviour, to apply responsible gaming tools where activated by the user (such as deposit limits or self-exclusion), and to contact users who may need support with managing their gambling activity. This processing is in the legitimate interest of we368 and the user.

4. Legal Basis for Processing

we368 processes your personal data on the following legal bases:

• Contract performance: Processing that is necessary to provide the we368 service to you — including account management, payment processing, and bet settlement — is carried out on the basis that it is necessary for the performance of the contract between you and we368.
• Legal obligation: Processing that is required to comply with applicable law, including anti-money laundering obligations, age verification requirements, and responses to lawful authority requests, is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud detection, platform security, responsible gaming monitoring, and analytics is carried out on the basis of we368's legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms. we368 conducts a balancing assessment before relying on this basis.
• Consent: Where we process your data based on your consent (for example, for certain marketing communications), you have the right to withdraw that consent at any time by contacting we368 support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5. KYC and Identity Verification

we368 is required to carry out Know Your Customer (KYC) verification to confirm the identity and age of account holders. This is a standard requirement for online gaming operators and forms part of our obligations under anti-money laundering frameworks. KYC verification may be required at account opening, before a withdrawal is processed, or at any time we368 has reasonable grounds to verify or re-verify your identity.

Documents collected during KYC are stored securely using encrypted storage. Access to KYC documents is restricted to authorised we368 personnel and, where required by law, to relevant regulatory authorities. we368 does not share KYC documents with any commercial third party. KYC documents are retained for the period required by applicable law following account closure.

6. Payment Data and Financial Transactions

When you make a deposit or withdrawal using bKash, Nagad, Rocket, Upay, Visa, or Mastercard, we368 collects the payment method identifier associated with that transaction (for example, the last four digits of a card number or the registered mobile wallet number). we368 does not store full card numbers or mobile banking PINs. Payment credentials are transmitted using SSL encryption and are processed in accordance with applicable payment security standards.

Transaction records — including the payment method used, amount, date, and processing outcome — are retained by we368 for the period required by applicable financial record-keeping regulations. These records may be accessed by we368's compliance team, external auditors where applicable, or regulatory authorities in response to a lawful request. They are not used for any commercial purpose beyond the operation of your account.

7. Cookies and Tracking Technologies

The we368 platform uses cookies and similar tracking technologies to provide a functional and consistent user experience. The types of cookies we use include:

• Essential cookies: These are required for the platform to function correctly. They maintain your login session, remember your language preference, and ensure that the platform operates securely. Essential cookies cannot be disabled without affecting platform functionality.
• Analytics cookies: These help we368 understand how users interact with the platform by collecting aggregated, anonymised information about page visits, session duration, and navigation paths. Analytics data is used solely to improve the platform and is not shared with third-party advertising networks.
• Security cookies: These are used to detect and prevent fraudulent activity, including the detection of unusual login patterns, simultaneous sessions from different locations, and other indicators of unauthorised account access. Security cookies are essential and cannot be disabled.

Most modern mobile browsers allow you to manage cookie settings from within the browser's privacy or settings menu. However, disabling essential or security cookies may prevent we368 from functioning correctly or may prevent you from logging in to your account. we368 does not use cookies for behavioural advertising or cross-site tracking.

8. Sharing of Personal Data

we368 does not sell, rent, or trade your personal information to any third party. We share personal data only in the limited circumstances set out below:

• Payment processors: We share the minimum necessary payment information with payment service providers (bKash, Nagad, Rocket, Upay, and card networks) for the sole purpose of processing your deposits and withdrawals. These providers operate under their own privacy policies and are required to process your data only for the purpose of completing the relevant transaction.
• Identity verification providers: We may share identity documents and related data with third-party KYC verification service providers for the purpose of completing identity and age verification checks. These providers are contractually required to process data solely for verification purposes and to maintain confidentiality.
• Regulatory and law enforcement authorities: we368 may disclose personal data to competent regulatory bodies, law enforcement agencies, or other government authorities where required by applicable law or in response to a lawful request. we368 will, where permitted by law, notify the affected account holder of any such disclosure.
• Business successors: In the event of a merger, acquisition, or sale of all or part of we368's business, personal data held by we368 may be transferred to the acquiring entity as part of that transaction. Affected users will be notified of any change in data controller prior to their personal data being transferred and will be given the opportunity to object.

9. Data Retention

we368 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law. In general terms, our data retention practices are as follows: account data and transaction records are retained for a minimum of five (5) years following account closure to comply with anti-money laundering record-keeping requirements; KYC documents are retained for the period required by applicable law following account closure; technical and device data (log files, session data) are retained for up to twelve (12) months from the date of collection; communications records (support tickets, emails) are retained for three (3) years from the date of last activity.

When personal data is no longer required and there is no legal obligation to retain it, we368 securely deletes or anonymises that data. Anonymised data (data from which all identifying information has been removed and which cannot reasonably be re-identified) may be retained indefinitely for analytical and statistical purposes.

10. Data Security

we368 implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include: SSL/TLS encryption for all data transmitted between your device and the we368 platform; encrypted storage of sensitive personal data at rest; access controls that restrict access to personal data to authorised personnel only, on a need-to-know basis; regular security assessments of platform infrastructure; and monitoring systems designed to detect and respond to security incidents.

While we368 takes data security seriously and implements industry-standard protections, no method of data transmission or storage is completely secure. we368 cannot guarantee the absolute security of personal data transmitted to or stored on the platform. In the event of a data security incident that is likely to result in a risk to the rights and freedoms of affected users, we368 will take prompt action to contain the incident and will notify affected users in accordance with applicable notification requirements.

11. Your Rights Over Your Personal Data

Subject to applicable law, you have the following rights in relation to the personal data we368 holds about you. To exercise any of these rights, please contact we368 support at [email protected] with a description of your request:

• Right of access: You have the right to request a copy of the personal data we368 holds about you, together with information about how it is used and with whom it is shared. we368 will respond to access requests within thirty (30) days of receipt.
• Right to rectification: If you believe that the personal data we368 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. Some account data (such as your registered name) can be updated directly from within your we368 account settings; other corrections may require you to contact support.
• Right to erasure: In certain circumstances, you have the right to request that we368 delete personal data we hold about you. Note that this right is not absolute — we368 may be required by law to retain certain data (such as transaction records) for defined periods, and the right to erasure does not apply where retention is required for compliance purposes.
• Right to restriction of processing: You have the right to request that we368 restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you have objected to processing based on legitimate interests and that objection is being considered.
• Right to object: You have the right to object to we368 processing your personal data where that processing is based on legitimate interests. we368 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is required for the establishment, exercise, or defence of legal claims.

we368 will respond to all data rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, in which case we368 will notify you of the extension and the reasons for it within the initial thirty-day period. we368 does not charge a fee for handling data rights requests unless the request is manifestly unfounded or excessive.

12. Minors and Age Restriction

The we368 platform is strictly restricted to persons aged 21 years and above. we368 does not knowingly collect personal data from individuals under the age of 21. If we368 becomes aware that personal data has been collected from a person under the age of 21, that account will be suspended immediately, all associated data will be securely deleted, and any funds held in the account will be handled in accordance with our Terms & Conditions. If you believe that a minor has registered on we368 using false information, please contact us immediately at [email protected].

13. Third-Party Links

The we368 platform does not contain links to third-party websites. This Privacy Policy applies solely to data collected by we368 through the we368 platform and associated services. we368 is not responsible for the privacy practices of any third-party payment providers, game studios, or other service providers you may interact with independently outside of the we368 platform environment.

14. Changes to This Privacy Policy

we368 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the features and services offered on the platform. When material changes are made to this policy, we368 will take reasonable steps to notify registered users by displaying a prominent notice on the we368 platform or by contacting users at the details registered on their account.

The date of the most recent revision of this policy is displayed at the top of this page. Your continued use of we368 after any update to this policy constitutes your acceptance of the revised terms. If you have any concerns about changes to this policy, you are encouraged to contact we368 support before continuing to use the platform.

15. Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a concern about how we368 handles your personal data, please contact the we368 Data team using the details below. We are committed to addressing all privacy-related enquiries promptly and transparently.