35bt Privacy Policy — How We Protect Your Data

1 Introduction

35bt is Bangladesh's trusted online betting and casino platform, serving players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and beyond. We are committed to protecting the privacy and personal data of every player who uses our platform.

This Policy applies to all personal data processed by 35bt in connection with your use of our website, mobile-optimised platform, and all associated services including sports betting, casino games, live dealer games, and financial transactions conducted in Bangladeshi Taka (৳ BDT).

We handle your personal data in accordance with applicable data protection standards and principles, including the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality. If you have any questions about how your data is handled, please contact our support team using the details in Section 14.

2 Data Controller

For the purposes of this Privacy Policy, 35bt acts as the data controller in respect of the personal data collected from players through the 35bt platform. As data controller, 35bt determines the purposes for which and the means by which your personal data is processed.

If you wish to exercise any of your data rights described in Section 10, or if you have concerns about how your personal data is being handled, please direct your request to our dedicated support team:

• Email: [email protected]
• Live Chat: Available 24/7 via the 35bt platform
• Support Hours: 00:00–24:00 Bangladesh Standard Time (BST, UTC+6)

3 Personal Data We Collect

35bt collects the following categories of personal data from players:

We do not intentionally collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless specifically required by applicable law or regulatory instruction.

4 How Personal Data Is Collected

35bt collects your personal data through the following mechanisms:

• Direct collection: Information you provide when registering your 35bt account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated collection: Technical data such as IP address, device type, and session data collected automatically when you access the 35bt platform via cookies and server logs. See Section 9 for full details of our cookie practices.
• Third-party sources: Identity and payment verification data obtained from payment processors (bKash, Nagad, Rocket, Upay) and KYC verification providers in the course of processing your transactions or verifying your identity.
• Game providers: Game session data (stakes, results, session duration) provided to 35bt by third-party game providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi, for the purpose of account management and responsible gaming monitoring.

5 Purpose & Legal Basis for Processing

35bt processes your personal data only where a lawful basis exists for doing so. The following table sets out the primary purposes for which we process personal data and the corresponding lawful basis:

6 Data Sharing & Third Parties

35bt may share your personal data with the following categories of third parties in the circumstances described:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other approved payment partners receive the minimum necessary personal and financial data to process your deposits and withdrawals securely.
• KYC and identity verification providers: Third-party identity verification services may receive your identity documents and date of birth for the purpose of completing age and identity checks as required for player eligibility.
• Game providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, and other game providers receive the technical data necessary to deliver their games on the 35bt platform and to settle game outcomes accurately.
• IT and platform service providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data on 35bt's behalf under strict data processing agreements that prohibit independent use of your data.
• Legal and regulatory authorities: Where 35bt is required by applicable law, court order, or regulatory instruction to disclose personal data to a government body, law enforcement agency, or financial regulator, we will comply with that obligation.
• Professional advisers: Lawyers, auditors, and compliance consultants engaged by 35bt may have access to personal data on a need-to-know basis, subject to professional confidentiality obligations.

All third parties with whom 35bt shares personal data are contractually required to handle that data securely, to use it only for the purposes for which it was shared, and to comply with applicable data protection standards.

7 Data Retention

35bt retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, to meet financial record-keeping and anti-money laundering obligations.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later, in line with financial compliance requirements.
• Transaction records: Retained for a minimum of five (5) years from the transaction date.
• Support communications: Retained for three (3) years from the date of the communication, unless the communication relates to an ongoing dispute in which case it is retained until final resolution.
• Technical and usage data (logs): Retained for up to twelve (12) months from collection, after which it is aggregated or deleted.
• Marketing preferences: Retained until you withdraw consent or close your account, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

8 Security Measures

35bt implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and the 35bt platform is encrypted using 256-bit SSL/TLS protocols. Look for the padlock icon in your browser address bar when using 35bt.
• Encryption at rest: Sensitive data stored on 35bt's servers, including identity and financial data, is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data held by 35bt is restricted to authorised personnel who require it to perform their job functions. Access is governed by role-based permissions and audit logging.
• Password security: Player account passwords are stored using strong one-way cryptographic hashing. 35bt staff cannot read your password and will never ask you for it.
• Fraud and intrusion detection: 35bt employs automated monitoring systems to detect unusual activity patterns that may indicate a security breach or fraudulent access attempt. Suspicious activity triggers immediate investigation.
• Regular security reviews: 35bt's platform and infrastructure undergo regular security assessments to identify and remediate vulnerabilities.

9 Cookies & Tracking Technologies

35bt uses cookies and similar technologies (such as local storage and session tokens) to operate the platform effectively and to understand how players interact with our services. The following types of cookies are used:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in as you navigate between pages, and security cookies that help detect fraudulent activity. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies: Used to remember your preferences such as language settings, preferred payment method, and display options. These improve your experience but are not essential.
• Analytics cookies: Used to collect anonymised and aggregated information about how players use the 35bt platform — for example, which game categories are most visited and which pages generate the most support queries. This data is used solely to improve the platform and is not linked to your individual identity.

35bt does not use third-party advertising cookies, remarketing pixels, or cross-site tracking technologies. We do not share cookie-derived data with advertising networks.

You can control cookie behaviour through your browser settings. Please be aware that disabling strictly necessary cookies will prevent you from logging in and using the 35bt platform.

10 Your Data Rights

As a 35bt player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request" and include your registered account username.

• Right of access: You have the right to request a copy of the personal data that 35bt holds about you. We will respond to access requests within 30 days of receipt.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update certain information directly from your account settings page.
• Right to erasure ("right to be forgotten"): You may request that 35bt delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to processing. Please note that this right is subject to our legal retention obligations — for example, transaction records required for AML compliance cannot be deleted before the mandatory retention period expires.
• Right to restriction of processing: In certain circumstances, you may request that 35bt restrict the processing of your personal data while a dispute or rectification request is being resolved.
• Right to data portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing based on 35bt's legitimate interests. If you object to receiving marketing communications, you may withdraw your consent at any time by contacting support or adjusting your account notification settings.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing emails), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before withdrawal.

11 Minors & Age Restriction

If 35bt becomes aware that personal data has been collected from a person under the age of 21, that account will be suspended immediately, all collected data will be securely deleted, and any deposits made will be returned to the originating payment method subject to verification. If you believe that a minor may have registered on the 35bt platform, please contact us immediately at [email protected].

During the registration process, all players are required to declare that they are at least 21 years of age. 35bt may request documentary proof of age at any time as part of its KYC process, and accounts that cannot verify the player's age will be suspended pending resolution.

12 International Data Transfers

In the course of operating the 35bt platform, your personal data may be processed by servers or third-party service providers located outside Bangladesh. Where such international transfers occur, 35bt takes steps to ensure that your personal data continues to receive an adequate level of protection consistent with the standards described in this Policy.

Specifically, where personal data is transferred to third-party service providers outside Bangladesh (for example, cloud infrastructure providers or game providers), 35bt ensures that such transfers are governed by appropriate contractual safeguards, including data processing agreements that require the recipient to apply security standards equivalent to those maintained by 35bt.

35bt does not transfer personal data to jurisdictions that do not provide an adequate standard of data protection without first putting appropriate safeguards in place.

13 Changes to This Privacy Policy

35 bt reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform services. When material changes are made, we will notify registered players by email or via an in-platform notification prior to the changes taking effect.

The date at the top of this Privacy Policy indicates when it was last reviewed and updated. We encourage all players to review this Policy periodically so that they remain informed about how 35bt collects, uses, and protects their personal data. Continued use of the 35bt platform following notification of a material change constitutes your acceptance of the revised Policy.

If you do not agree with any changes to this Privacy Policy, you should discontinue use of the 35bt platform and contact our support team to close your account and arrange the return of any remaining account balance.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 35bt handles your personal data, please contact our support team through any of the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 via the 35bt platform
• WhatsApp: +880 1700 000000
• Support Hours: 00:00–24:00 Bangladesh Standard Time (BST, UTC+6)

When submitting a data rights request or privacy complaint, please include your registered account username and a clear description of your request or concern so that our team can respond as promptly and accurately as possible.