35bd2 Privacy Policy

1. Who We Are

This Privacy Policy is issued by 35bd2 ("the Platform", "we", "us", "our"), the operator of the online casino and sports betting services available at https://35bd2.io. The 35bd2 platform is the data controller in respect of all personal data collected from players who register accounts, access the 35bd2 Login, place bets, make deposits or withdrawals, or otherwise interact with the platform.

The 35bd2 platform is operated primarily for the Bangladesh market and all player-facing communications, including this Privacy Policy, are conducted in the English language. If you have any questions about how 35bd2 handles your personal data, please contact us at [email protected] at any time.

This Privacy Policy applies to all personal data collected through the 35bd2 website, the 35bd2 mobile application, and any related support channels including email correspondence and live chat. It does not apply to third-party websites or applications that may be linked from the platform, which are governed by their own privacy policies.

2. Data We Collect

35bd2 collects personal data in the following categories. We collect only what is necessary for the purposes described in Section 3 of this Privacy Policy.

2.1 Registration & Identity Data

When you create a 35bd2 account, we collect your full legal name, date of birth, gender, email address, and a Bangladeshi mobile number. This information is required to create your account, enable the 35bd2 Login, and verify that you meet the minimum age requirement of 21 years.

2.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) obligations and to process withdrawals, we may collect copies of government-issued identity documents such as a National Identity Card (NID), passport, or birth certificate; proof of address documents; and proof of ownership of the payment method used for deposits. KYC documents are handled with heightened security controls and are not retained beyond the period required by law.

2.3 Financial & Transaction Data

35bd2 records all deposit and withdrawal transactions associated with your account, including the amounts in Bangladeshi Taka (BDT), the payment method used (bKash, Nagad, Rocket, Upay, or bank transfer), transaction reference numbers, timestamps, and transaction outcomes. We do not store full payment account credentials — only the masked identifiers necessary for transaction reconciliation.

2.4 Betting & Gaming Activity Data

We maintain a full record of your betting and gaming activity on the 35bd2 platform, including bet placement times, stake amounts in BDT, game titles, outcomes, and bonus credits applied. This data is used to settle bets, calculate winnings, apply responsible gaming tools, and detect irregular activity.

2.5 Technical & Device Data

When you access the 35bd2 platform, our servers automatically collect certain technical data including your IP address, device type and operating system, browser type and version, session timestamps, and pages or game screens visited. This data is used for platform security, fraud detection, and aggregate analytics.

2.6 Communications Data

If you contact 35bd2 via live chat, email, or WhatsApp, we retain a record of those communications including the content of your messages, the date and time of contact, and the outcome of any support interaction. These records are used to resolve disputes, improve our service quality, and maintain a history of your account interactions.

3. How We Use Your Data

The table below sets out the primary purposes for which 35bd2 processes each category of personal data:

3.1 Marketing Communications

With your prior consent, 35bd2 may send you promotional communications about new games, bonus offers, seasonal promotions (such as Eid or BPL cricket season specials), and platform updates. You may withdraw your consent to marketing communications at any time by contacting support or by using the unsubscribe option included in every marketing message. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before withdrawal.

3.2 Automated Decision-Making

35bd2 uses automated systems to monitor account activity for fraud, bonus abuse, and responsible gaming indicators. Where an automated assessment results in an account restriction, you have the right to request human review of that decision by contacting the support team at [email protected].

4. Legal Basis for Processing

35bd2 processes personal data only where a valid legal basis exists. The applicable legal bases for the processing activities described in this Privacy Policy are:

• Contractual necessity: Processing required to register your account, authenticate your 35bd2 Login, settle bets, and process BDT deposits and withdrawals.
• Legal obligation: Processing required to comply with anti-money laundering (AML) obligations, KYC verification requirements, and record-keeping requirements under applicable law.
• Legitimate interests: Processing for platform security, fraud detection, responsible gaming monitoring, dispute resolution, and aggregate analytics, where such interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications, non-essential analytics cookies, and any other processing activity for which 35bd2 has sought and obtained your explicit consent.

5. Data Sharing & Disclosure

5.1 Service Providers

35bd2 shares personal data with carefully selected third-party service providers who assist in operating the platform. These include payment processing partners (bKash, Nagad, Rocket, Upay, and banking partners), game studio technology providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others), KYC and identity verification service providers, cloud hosting and infrastructure providers, and customer support platform providers. All service providers are bound by data processing agreements that prohibit them from using your data for any purpose other than the services they provide to 35bd2.

5.2 Legal & Regulatory Disclosure

35bd2 may disclose personal data to law enforcement agencies, regulatory bodies, or other authorities where required to do so by applicable law, court order, or regulatory directive. In such cases, 35bd2 will disclose only the minimum data necessary to satisfy the legal requirement and will, where legally permitted, notify the affected player of the disclosure.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of the 35bd2 platform's assets, player personal data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.

5.4 No Sale of Data

35bd2 does not sell, rent, or trade player personal data to third parties for their own marketing or commercial purposes. This commitment is absolute and applies regardless of the commercial value of the data in question.

6. International Data Transfers

Some of the third-party service providers used by 35bd2 — including cloud hosting and game studio technology partners — may process personal data on servers located outside Bangladesh. Where such international transfers occur, 35bd2 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that provided under this Privacy Policy.

Applicable safeguards include contractual data processing agreements incorporating standard data protection clauses, transfers to service providers located in jurisdictions recognised as offering an adequate level of data protection, and technical encryption measures applied to data in transit and at rest. If you have questions about international data transfers involving your personal data, contact us at [email protected].

7. Data Retention

35bd2 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The general retention periods applied by 35bd2 are:

• Account and registration data: Retained for the duration of your active account plus 5 years following account closure, to satisfy record-keeping and AML obligations.
• KYC and identity documents: Retained for 5 years from the date of verification or account closure, whichever is later.
• Financial transaction records: Retained for 7 years from the transaction date in accordance with standard financial record-keeping requirements.
• Betting and gaming activity logs: Retained for 5 years from the date of each bet settlement for dispute resolution and audit purposes.
• Support communications: Retained for 3 years from the date of the most recent interaction in a support thread.
• Technical and device logs: Retained for 12 months on a rolling basis, after which aggregate anonymised data may be retained indefinitely for trend analysis.
• Marketing consent records: Retained for the period of your consent plus 3 years to demonstrate compliance in the event of a complaint.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player.

8. Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device when you access the 35bd2 platform. They allow the platform to recognise your device across multiple visits, maintain your session after 35bd2 Login, remember your language and display preferences, and collect aggregate data about how the platform is used.

8.2 Categories of Cookies Used

• Essential cookies: Required for the platform to function. These include session authentication cookies that maintain your 35bd2 Login state and security cookies that protect against cross-site request forgery. Essential cookies cannot be disabled without preventing you from using the platform.
• Functional cookies: Used to remember your preferences such as display settings and notification choices. These cookies improve your experience but are not strictly required for platform operation.
• Analytics cookies: Used to collect anonymised data about how players navigate the 35bd2 platform, which games are most frequently accessed, and where technical errors occur. Analytics data is used in aggregate form only and cannot be used to identify individual players.
• Session replay and heatmap cookies: Used on a limited basis to understand user interaction patterns and improve platform usability. Data collected is anonymised before analysis.

8.3 Managing Cookies

You may manage non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that blocking essential cookies will prevent you from completing the 35bd2 Login and accessing the platform. Detailed instructions for managing cookies in popular browsers are available through each browser's help documentation.

9. Children & Minors

The 35bd2 platform is strictly restricted to individuals aged 21 years and above. 35bd2 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor, the relevant account will be closed immediately, all data will be securely deleted, and any funds held in the account will be handled in accordance with our legal obligations.

Parents and guardians who believe that a minor has registered an account on 35bd2 should contact us immediately at [email protected] so that the account can be identified and closed without delay.

10. Security Measures

35bd2 applies a multi-layered security architecture to protect player personal data. Our technical and organisational security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between player devices and the 35bd2 platform.
• Encryption at rest for all stored personal data, including KYC documents, transaction records, and account credentials.
• Role-based access controls that limit employee access to personal data on a strict need-to-know basis.
• Multi-factor authentication for all administrative access to platform systems containing personal data.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Intrusion detection systems that monitor platform infrastructure for anomalous access patterns around the clock.
• Incident response procedures that define how 35bd2 will respond to, contain, and communicate a data breach within the shortest practicable timeframe.

Despite these measures, no internet-based platform can guarantee absolute security. You should maintain the confidentiality of your 35bd2 Login credentials and report any suspected unauthorised access to your account to support immediately.

11. Your Rights & How to Exercise Them

As a 35bd2 player, you hold the data rights described in the summary section above. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request" and include:

• Your full name as registered on your 35bd2 account.
• The email address associated with your 35bd2 account.
• A clear description of the right you wish to exercise and, where applicable, the specific data or processing activity to which your request relates.
• A copy of an identity document to allow us to verify that the request is made by the account holder.

35bd2 will acknowledge receipt of your request within 72 hours and will respond substantively within 30 calendar days. Where a request is particularly complex or where a high volume of requests is received simultaneously, this period may be extended by a further 30 days, in which case you will be informed of the extension and the reason for it before the initial 30-day period expires.

There is no charge for submitting a data rights request. However, where requests are manifestly unfounded or excessive — particularly where they are repetitive in nature — 35bd2 reserves the right to charge a reasonable administrative fee or to decline the request, providing written reasons for doing so.

12. Changes to This Privacy Policy

35bd2 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform. The revised Privacy Policy will be published on this page with an updated effective date at the top of the document.

Where a material change is made to the Privacy Policy — for example, where a new category of personal data is collected or a new category of third party is introduced — 35bd2 will notify registered players by email to the address registered to their account at least 14 days before the change takes effect. Continued use of the 35bd2 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically. The version currently published at https://35bd2.io/privacy-policy is always the current, operative version.

13. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise a data right, or want to raise a privacy concern relating to the 35bd2 platform, please contact us through the following channels. All communications should be in English.

• Email: [email protected] — for data rights requests, use the subject line "Data Rights Request".
• Live Chat: Available 24/7 within the 35bd2 platform application — suitable for general privacy queries.
• WhatsApp: +880 1700 000000 — for urgent account-related privacy concerns.
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6).

If you are dissatisfied with how 35bd2 has handled your personal data or a data rights request, you have the right to raise a formal complaint. Please contact our support team in the first instance so that we have the opportunity to resolve the matter directly. 35bd2 is committed to handling all privacy complaints fairly, transparently, and within the timeframes set out in this Policy.