35bd1 Privacy
Policy

35bd1 is an online betting and casino platform operated for players based in Bangladesh, accessible via https://35bd1.io. This Privacy Policy describes the practices of 35bd1 (referred to throughout as "35bd1", "we", "us", or "our") with respect to the collection, use, storage, sharing, and protection of personal data relating to registered players, prospective players, and visitors to the 35bd1 website.

We are committed to handling personal data responsibly and transparently. This policy is written in plain English so that every player understands exactly how their information is managed. Where technical or legal terminology is unavoidable, we provide clear explanations of what those terms mean in practice.

This Privacy Policy applies to all personal data processed by 35bd1 in connection with the operation of the platform, including data collected via the website, customer support channels, identity verification processes, payment transactions, and marketing communications. It does not apply to third-party websites that may be linked from within game provider content or promotional materials.

The effective date of the current version of this Privacy Policy is 1 January 2026. The revision history is maintained internally and made available to players on written request.

35bd1 acts as the data controller in respect of personal data collected from players using the 35bd1 platform. As data controller, 35bd1 determines the purposes for which personal data is collected and the means by which it is processed. All queries, requests, and complaints relating to the processing of personal data by 35bd1 should be directed to our support team via the contact channel described in Section 15 of this policy.

Where 35bd1 engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification services, or fraud detection providers — those parties act as data processors and are bound by data processing agreements that restrict their use of player data to the specific purpose for which it was shared.

35bd1 collects the following categories of personal data from players and platform users:

3.1 Registration Data. When you create a 35bd1 account, we collect your full legal name, date of birth, residential address (including city, district, and postal code), mobile phone number, and email address. This information is required to create and identify your account and to comply with age verification and anti-money-laundering obligations.

3.2 Identity Verification Data. To fulfil our know-your-customer (KYC) obligations, we may collect copies of government-issued identity documents (such as a national ID card or passport), proof of address documents (such as a utility bill or bank statement), and proof of payment method ownership. This data is collected at the time of your first withdrawal request or at any earlier point at our discretion.

3.3 Financial Data. We collect data relating to your financial transactions on the platform, including deposit amounts, withdrawal requests, transaction reference numbers, and the mobile banking or bank account identifiers associated with your payment methods (such as your bKash, Nagad, or Rocket registered mobile number). We do not store full payment card numbers or bank account credentials on our systems.

3.4 Gaming and Betting Activity Data. We collect a detailed record of your gaming activity on the platform, including bets placed, games played, wager amounts, outcomes, bonus usage, and session durations. This data is necessary for the operation of the platform, dispute resolution, and responsible gaming monitoring.

3.5 Technical and Device Data. When you access 35bd1, we automatically collect certain technical data about your device and connection, including your IP address, browser type and version, operating system, screen resolution, device identifiers, and referring URL. This data is used for security monitoring, fraud prevention, and platform performance optimisation.

3.6 Communications Data. We retain records of your communications with the 35bd1 support team, including live chat transcripts and email correspondence. These records are kept for quality assurance, dispute resolution, and training purposes.

3.7 Marketing Preferences. Where you have opted in to receiving marketing communications from 35bd1, we maintain a record of your preferences, including the types of promotions you have opted in to receive and the channel (email, SMS, or in-platform notification) through which you prefer to receive them.

35bd1 collects personal data through the following means:

• Directly from you: When you register an account, complete identity verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion.
• Automatically: When you visit or interact with the 35bd1 website or platform, through cookies, web beacons, log files, and similar tracking technologies (see Section 11 for details on our cookie practices).
• From payment service providers: When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a bank transfer, our payment processing partners share transaction confirmation data with us to enable crediting and reconciliation of your account.
• From identity verification service providers: When you submit KYC documents, our third-party verification partner returns a verification status, document authenticity result, and extracted data fields (such as name and date of birth as shown on the document) to 35bd1.
• From fraud prevention and security services: We may receive risk scoring and device fingerprinting data from fraud detection services that help us identify and prevent account takeover, bonus abuse, and other fraudulent activities.

35bd1 uses the personal data we collect for the following specific purposes:

• Account creation and management: To register your account, authenticate your identity at login, manage your account settings, and process your requests relating to account changes, closures, or responsible gaming tools.
• Transaction processing: To process deposits to your 35bd1 wallet and withdrawals from your wallet to your chosen payment method, and to maintain accurate financial records of all transactions.
• Identity verification and KYC compliance: To verify your age (21+), confirm your identity, and satisfy our obligations under applicable anti-money-laundering and counter-terrorism-financing requirements.
• Platform operation and game delivery: To deliver the betting, casino, and slot products you access on the platform, to calculate and settle bet outcomes, and to credit winnings and bonus amounts to your account.
• Customer support: To respond to your queries, investigate and resolve complaints, and provide account assistance via live chat and email.
• Fraud prevention and security: To detect and prevent fraudulent activity, account takeover, bonus abuse, collusion, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming monitoring: To monitor your gaming activity for indicators of problematic gambling behaviour and to apply the responsible gaming tools you have activated on your account (such as deposit limits or self-exclusion).
• Marketing communications: Where you have opted in, to send you information about promotions, bonuses, tournaments, and special offers relevant to your interests and activity on 35bd1.
• Legal and regulatory compliance: To meet our legal obligations, respond to lawful requests from regulatory or law enforcement authorities, and maintain records as required by applicable law.
• Platform improvement: To analyse aggregated and anonymised usage data to improve the performance, usability, and content of the 35bd1 platform.

35bd1 processes personal data on the following legal bases:

• Contractual necessity: Processing that is necessary to perform the contract between you and 35bd1 — including account registration, transaction processing, game delivery, and customer support.
• Legal obligation: Processing required to comply with applicable laws and regulations — including age verification, KYC/AML obligations, and responses to lawful authority requests.
• Legitimate interests: Processing that serves a legitimate business interest of 35bd1, where that interest is not overridden by your data rights — including fraud prevention, security monitoring, responsible gaming oversight, and platform improvement through anonymised analytics.
• Consent: Processing that relies on your freely given, specific, informed consent — in particular, the sending of marketing communications. You may withdraw your consent to marketing at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7.1 We Do Not Sell Your Data. 35bd1 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Your data is never transferred to data brokers or advertising networks.

7.2 Service Providers. We share personal data with the following categories of third-party service providers who process it solely on our behalf and under our instruction:

• Payment processing partners (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, Mastercard) — for deposit and withdrawal processing.
• Identity verification and KYC service providers — for document authentication and age/identity confirmation.
• Fraud detection and device fingerprinting services — for account security and abuse prevention.
• Customer support platform providers — for live chat and ticketing infrastructure.
• Cloud hosting and infrastructure providers — for secure storage and delivery of platform services.
• Game software providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) — who may receive your account session data in connection with the delivery of their games within the 35bd1 platform.

7.3 Legal Disclosure. 35bd1 may disclose personal data to law enforcement agencies, regulatory bodies, or other governmental authorities where required to do so by applicable law, by court order, or where we reasonably believe disclosure is necessary to prevent or investigate fraud, money laundering, or other unlawful activity. We will notify you of any such disclosure where we are legally permitted to do so.

7.4 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of assets involving 35bd1, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified in advance of any such transfer, and the new controller will be bound to honour this Privacy Policy or provide you with a new policy that is no less protective of your rights.

As a data subject, you hold the following rights in respect of your personal data held by 35bd1. To exercise any of these rights, please contact us via the support channel described in Section 15.

35bd1 will not charge a fee for processing data rights requests unless the request is manifestly unfounded or excessive. We will verify your identity before acting on any data rights request to ensure that we do not disclose or delete data belonging to another individual.

9.1 Active Accounts. Personal data associated with an active 35bd1 account is retained for the full duration of the account relationship. Your account is considered active for as long as you maintain a registered account with 35bd1, regardless of the frequency of your gaming activity.

9.2 Closed and Terminated Accounts. Following the closure or termination of your account — whether initiated by you or by 35bd1 — we retain your personal data for a minimum period of 7 years from the date of closure. This retention period is required by our anti-money-laundering, fraud prevention, and dispute resolution obligations. After this period, personal data is securely deleted or anonymised.

9.3 Marketing Data. If you withdraw consent to receive marketing communications, we will remove your contact details from active marketing lists within 10 business days of your request. A suppression record (containing only the minimum data necessary to prevent future marketing contact) may be retained to honour your opt-out preference going forward.

9.4 Support Communications. Live chat transcripts and email correspondence with our support team are retained for a period of 3 years from the date of the interaction, to support dispute resolution and quality assurance reviews.

9.5 Technical and Log Data. Server logs and technical access records are retained for up to 12 months, after which they are deleted or aggregated into anonymised statistical form that no longer identifies individual players.

35bd1 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your browser or mobile device and the 35bd1 platform is encrypted using TLS 1.2 or higher with 256-bit SSL certificates.
• Encryption at rest: Sensitive personal data stored in 35bd1's databases — including identity document data and financial records — is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data within 35bd1's internal systems is restricted on a strict need-to-know basis. All staff with access to player data are subject to confidentiality obligations and receive regular data protection training.
• Multi-factor authentication: Internal administrative access to systems containing player data requires multi-factor authentication. Players are also encouraged to enable two-factor authentication on their 35bd1 accounts.
• Penetration testing and vulnerability assessments: 35bd1's platform infrastructure undergoes regular penetration testing by independent security specialists to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a data security incident that affects player data, 35bd1 has an incident response plan in place to contain the breach, assess its impact, notify affected players, and prevent recurrence. Players will be notified of any breach that poses a material risk to their personal data without undue delay.

While 35bd1 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are also responsible for keeping your account login credentials confidential and for using a secure device and network when accessing the platform.

11.1 What Are Cookies. Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device on subsequent visits and to store certain preferences or session information. 35bd1 uses cookies and similar tracking technologies (including web beacons and local storage) on the platform for the purposes described below.

11.2 Types of Cookies Used.

• Strictly Necessary Cookies: These cookies are essential for the platform to function correctly. They maintain your login session, remember your account preferences, and enable core security features. These cookies cannot be disabled without breaking the platform's core functionality.
• Performance and Analytics Cookies: These cookies collect anonymised data about how players use the platform — such as which pages are most visited, how long sessions last, and which features are most commonly used. This data helps us improve the platform experience. No personally identifying information is included in this data.
• Functional Cookies: These cookies remember choices you have made — such as your preferred language, display settings, or the last game you played — to provide a more personalised experience on subsequent visits.
• Marketing and Preference Cookies: These cookies are only placed if you have consented to receiving marketing communications from 35bd1. They allow us to track the effectiveness of promotional campaigns and to show you relevant offers within the platform. These cookies are not used to serve advertising on third-party websites.

11.3 Managing Cookies. You can control the use of non-essential cookies through your browser settings. Most modern browsers allow you to view, delete, and block cookies from specific websites. Please note that disabling certain cookies may affect the functionality of the 35bd1 platform, including the ability to maintain a login session. Instructions for managing cookies in commonly used browsers are available through each browser's built-in help documentation.

11.4 Third-Party Tracking. 35bd1 does not permit third-party advertising networks to place tracking cookies on the platform. Any third-party scripts present on the platform — such as those used by game providers to deliver their titles — are subject to their own privacy and cookie policies, which 35bd1 reviews as part of its vendor onboarding process.

The 35bd1 platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you must not register an account or attempt to use any part of the 35bd1 platform.

If 35bd1 discovers that personal data has been collected from an individual who is under the age of 21, we will immediately close the associated account, delete all collected data (except where its retention is required by law for fraud prevention purposes), and return any deposited funds to the payment method used for the deposit. If you are a parent or guardian and believe your child has registered an account on 35bd1, please contact our support team immediately via live chat so that we can take prompt action.

35bd1 operates a platform that is primarily designed for players based in Bangladesh. However, some of the third-party service providers we engage — including cloud infrastructure providers, identity verification services, and game software providers — may process data on servers located outside Bangladesh.

Where personal data is transferred outside Bangladesh to a country that may not offer an equivalent level of data protection, 35bd1 ensures that appropriate safeguards are in place to protect your data. These safeguards may include contractual data protection clauses incorporated into agreements with the receiving party, or reliance on the receiving party's independently certified data protection framework.

You may request further information about the specific safeguards in place for any international transfer of your personal data by contacting our support team at the email address listed in Section 15.

35bd1 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When we make a material change to this policy — meaning a change that could significantly affect your privacy rights or how your data is used — we will provide notice by posting a prominent announcement on the 35bd1 platform and, where practicable, by sending a notification to the email address associated with your account.

Non-material changes (such as clarifications of existing practices, correction of typographical errors, or reformatting for readability) may be made without prior notice. The effective date shown at the top of this page will be updated whenever any change is made, material or otherwise.

Your continued use of the 35bd1 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you should close your account before the changes take effect. The most current version of this policy is always available at https://35bd1.io/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by 35bd1, please contact us through the following channel:

For data deletion requests, data portability requests, or any formal exercise of your rights under Section 8, we recommend submitting your request via email so that we have a written record to act on. Please include your registered account username or email address and a clear description of the right you wish to exercise.