s365 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

In this Privacy Policy, the following terms carry the meanings set out below:

• "s365", "we", "us", "our" refers to the operator of the platform accessible at https://s365.ws and all associated sub-domains and mobile interfaces.
• "Platform" means the s365 website, mobile browser interface, applications, and all gaming and betting products offered therein.
• "Player", "you", "your" means any individual who registers an account, browses, or otherwise interacts with the s365 Platform.
• "Personal Data" means any information relating to an identified or identifiable natural person — including name, contact details, financial data, device identifiers, and behavioural data collected during your use of the Platform.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, transfer, and deletion.
• "KYC" means Know Your Customer — the identity and age verification process carried out before full account access and withdrawals are permitted.
• "Third Party" means any individual or organisation that is not s365 or the Player in question.
• "Cookies" means small text files placed on your device by the Platform to recognise your browser, store preferences, and gather analytical data.

s365 is an online betting and casino platform operating at https://s365.ws, serving players across Bangladesh. The platform offers cricket betting, live casino games, sports event wagering, and a library of 500+ slot titles from internationally recognised game providers including Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Ezugi, and Spribe.

s365 is the data controller responsible for the Personal Data collected through the Platform. As data controller, s365 determines the purposes and means of processing your Personal Data and is responsible for ensuring that processing activities comply with applicable data protection standards.

All correspondence regarding privacy matters should be directed to the s365 Data Protection contact via email at [email protected]. Please include "Privacy Request" in the subject line to ensure your enquiry is routed to the appropriate team.

s365 collects Personal Data through several channels: information you provide directly, information generated through your use of the Platform, and information received from third-party service providers. The categories of data collected are described below.

3.1 Information You Provide Directly

• Registration Data: Full legal name, date of birth, gender, residential address in Bangladesh (including district and division), mobile phone number, and email address.
• Identity Verification (KYC) Documents: Copy of National Identity Card (NID), passport, driver's licence, utility bills, or other documents required to verify your identity and confirm that you are at least 21 years of age.
• Payment Information: Mobile financial service account identifiers (bKash, Nagad, Rocket, Upay), bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), and card details (Visa, Mastercard) submitted for the purpose of deposits and withdrawals. Full card numbers are not stored by s365 — they are processed by our PCI-DSS compliant payment partners.
• Communication Data: Messages, emails, live chat transcripts, and other correspondence you send to the s365 support team.
• Responsible Gaming Data: Deposit limits, session time settings, cooling-off periods, and self-exclusion requests you submit through the Platform.

3.2 Information Generated Through Platform Use

• Transaction Records: Complete history of all deposits, withdrawals, bets placed, games played, bonus activations, and account balance changes.
• Device and Technical Data: IP address, device type, operating system, browser type and version, screen resolution, mobile network operator, and device identifiers.
• Usage and Behavioural Data: Pages visited, time spent on each section, game preferences, click patterns, session duration, login timestamps, and navigation path through the Platform.
• Geolocation Data: Approximate geolocation inferred from your IP address. s365 does not collect precise GPS-level location data unless you explicitly grant that permission through your mobile browser or device settings.
• Cookie and Tracking Data: Data collected through cookies and similar technologies as described in Section 7 of this Privacy Policy.

s365 uses Personal Data collected from players for the purposes set out in the table below. Each processing purpose is linked to the legal basis that justifies it (see Section 5 for legal basis details).

s365 will not use your Personal Data for any purpose that is incompatible with the purposes described above without first notifying you and, where required, obtaining your consent.

Every processing activity carried out by s365 is conducted on one of the following legal bases:

• Contract Performance: Processing is necessary to provide the services described in the s365 Terms & Conditions — including account management, payment processing, and customer support. Without this processing, s365 cannot operate your account.
• Legal Obligation: Processing is required to comply with applicable law, including anti-money laundering obligations, age verification requirements, and any lawful request from a government authority or law enforcement body.
• Legitimate Interests: Processing is necessary for the legitimate business interests of s365, provided those interests are not overridden by your rights and freedoms. This includes fraud detection, platform security, responsible gaming monitoring, and platform analytics.
• Consent: Where no other legal basis applies — most notably for direct marketing communications — s365 will rely on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

s365 does not sell your Personal Data. We share Personal Data with third parties only in the limited circumstances described below, and always subject to appropriate contractual safeguards.

• Payment Service Providers: Shared with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to process deposit and withdrawal transactions. These providers act as independent data controllers with respect to payment data and are subject to their own privacy policies and applicable financial regulations.
• Identity Verification Partners: Shared with KYC and fraud prevention service providers who assist s365 in verifying the identity and age of players. These providers process data strictly on behalf of s365 under data processing agreements.
• Game Content Providers: Limited technical data (such as session tokens and account identifiers) is shared with third-party game providers including Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Ezugi, and Spribe to deliver their gaming content within the Platform. These providers do not receive your full personal profile.
• Analytics and Technology Providers: Aggregated or pseudonymised usage data is shared with technology partners who provide platform infrastructure, analytics tools, and security services. These partners process data only as instructed by s365.
• Law Enforcement and Regulatory Authorities: s365 may disclose Personal Data to law enforcement agencies, government bodies, or regulatory authorities where required by applicable law, court order, or to protect the rights and safety of s365, its players, or third parties.
• Business Transfers: In the event of a merger, acquisition, or sale of s365 or substantially all of its assets, Personal Data held by s365 may be transferred to the acquiring entity, subject to the acquirer providing equivalent privacy protections.

s365 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function. These cookies enable core features such as account login sessions, security tokens, and payment flow continuity. They cannot be disabled without breaking fundamental Platform functionality.
• Performance and Analytics Cookies: Collect anonymised or pseudonymised data about how players navigate the Platform — including pages visited, features used, and session duration. This data is used to identify areas for improvement and optimise the player experience.
• Functional Cookies: Remember your preferences and settings — such as your preferred language, currency display, and notification preferences — so you do not need to re-enter them on each visit.

s365 does not use advertising or retargeting cookies that track your activity across unrelated third-party websites for the purpose of serving personalised advertisements.

You may control cookie settings through your browser preferences. Blocking strictly necessary cookies will impair your ability to use the Platform. Disabling performance or functional cookies will not prevent you from using the Platform but may reduce the quality of your experience.

s365 retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve disputes or enforce agreements. The following general retention periods apply:

• Account Data and Transaction Records: Retained for a minimum of 5 years from the date of account closure or the date of the last transaction, whichever is later. This retention period reflects applicable anti-money laundering record-keeping requirements.
• KYC and Identity Verification Documents: Retained for a minimum of 5 years from the completion of the verification process or account closure, in accordance with regulatory obligations.
• Customer Support Communications: Retained for 3 years from the date of the final communication in each support thread.
• Marketing Preferences and Consent Records: Retained for the duration of your active account, plus 2 years after account closure, to demonstrate consent compliance.
• Technical and Log Data: Retained for up to 12 months from the date of collection, after which it is deleted or fully anonymised.

Following the expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents re-identification.

s365 implements a comprehensive set of technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and s365 servers is encrypted using industry-standard SSL/TLS protocols.
• Encrypted Data Storage: Sensitive data — including payment identifiers and KYC documents — is encrypted at rest using strong cryptographic standards.
• Access Controls: Access to Personal Data within the s365 organisation is restricted on a strict need-to-know basis. Role-based access controls and multi-factor authentication are enforced for all staff accessing production systems.
• Security Monitoring: s365 operates continuous security monitoring, intrusion detection systems, and regular security assessments to identify and respond to threats promptly.
• Staff Training: All staff who handle Personal Data receive regular training on data protection obligations and security best practices.
• Incident Response: In the event of a data security incident that poses a risk to your rights and freedoms, s365 will notify affected players without undue delay and take all appropriate remedial action.

As a player on the s365 Platform, you have the following rights with respect to your Personal Data. To exercise any of these rights, contact s365 at [email protected] with the subject line "Data Rights Request". s365 will respond within 30 days of receiving a valid request.

• Right of Access: You have the right to request a copy of the Personal Data s365 holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request that inaccurate or incomplete Personal Data be corrected or updated without undue delay.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your Personal Data. This right does not apply where s365 is required to retain data to comply with a legal obligation (for example, anti-money laundering record-keeping requirements).
• Right to Restriction of Processing: You have the right to request that s365 restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to Data Portability: You have the right to receive a copy of the Personal Data you have provided to s365 in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your Personal Data where that processing is based on s365's legitimate interests. s365 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing that occurred before the withdrawal.

s365 will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may be applied.

The s365 Platform is strictly intended for adults aged 21 and above. s365 does not knowingly collect, process, or retain the Personal Data of any person under the age of 21. The Platform employs age verification procedures as part of the KYC process to prevent under-age registration.

If s365 becomes aware that Personal Data has been collected from a person under the age of 21 without appropriate verification, the account will be immediately suspended, all associated data will be securely deleted (except where retention is required by law), and any deposits will be returned to the payment source.

If you believe that a minor has registered an account on the s365 Platform or that their data has been collected in error, please contact s365 at [email protected] immediately so that the situation can be investigated and resolved promptly.

s365 operates the Platform primarily for players located in Bangladesh. In some cases, Personal Data may be transferred to or processed by service providers located outside Bangladesh — for example, where a game content provider or infrastructure partner operates data centres in another jurisdiction.

Where such transfers occur, s365 takes appropriate steps to ensure that your Personal Data receives a level of protection equivalent to the standards described in this Privacy Policy. These steps may include entering into data processing agreements with the relevant service provider, applying standard contractual clauses, or relying on adequacy decisions where applicable.

By using the s365 Platform, you acknowledge that your Personal Data may be transferred to and processed in countries other than Bangladesh in the circumstances described above, subject to the safeguards set out in this section.

s365 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. When a material change is made, s365 will publish the updated policy on this page and update the Effective Date at the top of the document.

Where a change significantly affects your rights or the way your Personal Data is used, s365 will provide additional notice — for example, by displaying a prominent notice on the Platform or by sending an email to your registered address.

Your continued use of the s365 Platform after the publication of an amended Privacy Policy constitutes your acceptance of the revised terms. We recommend reviewing this page periodically to stay informed of how your Personal Data is being handled.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way s365 handles your Personal Data, please contact us using the details below. All privacy-related enquiries are handled by the s365 data protection team with strict confidentiality.

• Email: [email protected] — use subject line "Privacy Request" or "Data Rights Request"
• WhatsApp: +880 1700 000 365 (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week, including all Bangladesh public holidays
• Platform: https://s365.ws

This Privacy Policy was last updated on 1 January 2026 and supersedes all previous versions.