Privacy Policy for 35bd6

35bd6 ("we", "us", "our") is committed to protecting and respecting the privacy of all users who access and use the 35bd6 online betting and casino platform, accessible at 35bd6.io (the "Platform"). This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed.

This policy applies to all users of the 35bd6 Platform, including registered account holders and visitors who have not yet completed the registration process. It covers data collected through the website, account dashboard, customer support channels, and any other interaction you have with 35bd6.

35bd6 is designed for adult players aged 21 and above, located in Bangladesh. We tailor our data practices to the expectations and legal requirements applicable to our player community across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other regions of Bangladesh.

Please read this policy carefully. Where terms such as "personal data" or "processing" are used, they refer to any information that identifies or could reasonably be used to identify a living individual, and any operation performed on that information, respectively.

35bd6 collects personal data from players through several channels. The categories of information we collect are described below:

2.1 Registration Information

When you create a 35bd6 account, we collect your full legal name, date of birth, email address, mobile phone number, and your selected username. This information is required to create and manage your account securely.

2.2 Identity Verification (KYC) Documents

In order to comply with our internal Know Your Customer (KYC) obligations and to prevent fraud and underage gambling, we may request copies of government-issued identity documents. Accepted documents include the National Identity Card (NID), passport, or driving licence issued in Bangladesh. We may also request proof of address in the form of a recent utility bill or bank statement, and proof of payment method ownership.

2.3 Financial Information

When you make deposits or withdrawals via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, we collect transaction records including the payment method used, transaction reference numbers, amounts, timestamps, and transaction statuses. We do not store complete card numbers or full mobile banking credentials — these are handled by our PCI-compliant payment processing partners.

2.4 Technical and Device Data

We automatically collect certain technical information when you access the Platform, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, time spent on pages, and session timestamps. This data is used to ensure the Platform functions correctly across different devices and to identify and resolve technical issues.

2.5 Gameplay and Betting Activity

We maintain detailed records of your betting and gaming activity on the Platform, including bets placed, games played, wager amounts, game outcomes, bonus usage, and session durations. These records are essential for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

2.6 Communications Data

If you contact 35bd6 customer support via live chat or email, we retain a record of that communication including the content of messages, timestamps, and the support agent involved. This allows us to maintain service quality and resolve follow-up queries efficiently.

2.7 Preferences and Marketing Consent

Where you have opted in to receive promotional communications from 35bd6, we retain a record of that consent along with your communication preferences. You may withdraw consent for marketing communications at any time by contacting support or updating your account settings.

The table below summarises the primary purposes for which 35bd6 processes your personal data, along with the legal basis relied upon for each purpose:

We do not use your personal data to make solely automated decisions that produce legal or similarly significant effects on you without appropriate human oversight and an available mechanism to contest such decisions.

35bd6 processes personal data only where a valid legal basis exists. The four legal bases we rely upon are:

• Contract Performance: Processing is necessary to perform our obligations under the account agreement with you — for example, processing deposits, settling bets, and providing customer support.
• Legal Obligation: Processing is required to comply with applicable law — for example, conducting KYC checks, retaining financial transaction records, and fulfilling anti-money laundering (AML) reporting obligations.
• Legitimate Interest: Processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights — for example, fraud detection, platform security, and analytics used to improve the 35bd6 service.
• Consent: Where you have given explicit consent — for example, opting in to receive promotional emails or SMS messages about 35bd6 bonuses and events. You may withdraw consent at any time without affecting the lawfulness of prior processing.

If you wish to understand the specific legal basis applied to any particular processing activity, please contact the 35bd6 support team at [email protected].

35bd6 does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. We share personal data only in the following limited circumstances:

• Payment Service Providers: We share transaction data with our payment processing partners (bKash, Nagad, Rocket, Upay, and card processing networks) strictly to facilitate deposit and withdrawal transactions. These providers operate under their own privacy policies and handle data in accordance with PCI-DSS standards.
• Identity Verification Partners: We engage approved KYC and identity verification service providers to assist in processing identity documents. These partners act as data processors under contractual obligations that restrict how they may use your data.
• Game Content Providers: When you play games supplied by third-party studios such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Habanero, or Ezugi, limited technical session data may be transmitted to those providers to render the game correctly. These providers do not receive your full personal profile.
• IT and Hosting Infrastructure: 35bd6 uses third-party cloud hosting and IT infrastructure providers to operate the Platform. These providers act as data processors under strict contractual data protection agreements.
• Legal and Regulatory Authorities: We may disclose personal data to relevant authorities where required by law, court order, or regulatory mandate — including in connection with AML investigations or requests from financial intelligence units.
• Business Transfers: In the event that 35bd6 undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity, subject to equivalent privacy protections. Players will be notified of any such transfer in advance where reasonably practicable.

35bd6 uses cookies and similar tracking technologies (such as local storage and session tokens) to operate and improve the Platform. Cookies are small text files stored on your device when you visit 35bd6.io. They help us remember your session, maintain your login state, and understand how the Platform is being used.

The main categories of cookies used by 35bd6 are:

• Strictly Necessary Cookies: Required for the Platform to function. These enable core features such as session authentication, secure login, and navigation. They cannot be disabled without affecting core functionality.
• Performance and Analytics Cookies: These collect aggregated, anonymised data about how visitors use the Platform — for example, which pages are visited most frequently and where errors occur. This data helps us improve the Platform experience.
• Functional Cookies: These remember your preferences, such as your selected language and display settings, so you do not need to re-enter them on every visit.
• Marketing Cookies (where consented): If you have consented to marketing, these cookies may be used to tailor promotional content shown to you on the Platform based on your activity history.

You can manage or disable cookies through your browser settings. Please note that disabling strictly necessary cookies may prevent certain parts of the Platform from functioning correctly. For detailed guidance on managing cookies in your browser, refer to your browser's help documentation.

35bd6 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The key retention periods that apply to different categories of data are outlined below:

• Account and Registration Data: Retained for the duration of your active account, and for a minimum of 5 years following account closure, in line with standard financial record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of 5 years from the date of verification, as required under AML compliance obligations.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, in accordance with financial regulatory requirements.
• Gameplay and Betting Logs: Retained for a minimum of 3 years from the date of each session or bet, for dispute resolution and responsible gaming audit purposes.
• Customer Support Communications: Retained for 2 years from the date of the last communication in a support thread, to support quality assurance and follow-up query resolution.
• Marketing Consent Records: Retained for as long as your consent remains active, plus 2 years following withdrawal of consent, as evidence of the consent record.
• Technical and Device Logs: Retained for up to 12 months for security monitoring and fraud detection purposes, after which they are deleted or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

35bd6 implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures in place include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the 35bd6 servers is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser's address bar when using the Platform.
• Encrypted Data Storage: Sensitive personal data stored in our databases — including KYC documents and payment references — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is granted only to authorised 35bd6 personnel who require it to perform their specific job functions. Access rights are reviewed regularly and revoked promptly when no longer required.
• Two-Factor Authentication: Internal administrative access to systems holding personal data requires multi-factor authentication.
• Regular Security Audits: 35bd6 conducts periodic security reviews and vulnerability assessments to identify and address potential risks to personal data.
• Incident Response: In the event of a personal data breach that poses a risk to player rights, 35bd6 will notify affected players and relevant authorities in accordance with applicable breach notification requirements, without undue delay.

35bd6 operates primarily to serve players in Bangladesh. However, some of our third-party service providers — including cloud hosting infrastructure and certain game content providers — may process data in servers located outside of Bangladesh. Where such international transfers occur, 35bd6 ensures that appropriate safeguards are in place to protect your personal data to a standard at least equivalent to that described in this Privacy Policy.

Safeguards for international transfers may include contractual data processing agreements with standard data protection clauses, reliance on service providers that maintain recognised security certifications (such as ISO 27001 or SOC 2), and assessments of the data protection standards applicable in the destination country.

If you wish to obtain information about a specific international transfer of your personal data, please contact us at [email protected].

As a player on the 35bd6 Platform, you have the following rights in relation to your personal data. These rights may be exercised by contacting the support team at [email protected]:

• Right of Access: You have the right to request a copy of the personal data that 35bd6 holds about you. We will respond to access requests within a reasonable timeframe, typically within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account details directly from your account dashboard.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis for processing applies. This right is subject to overriding legal retention obligations — for example, we cannot delete financial transaction records that we are legally required to retain.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to request that we transmit that data to another data controller where technically feasible.
• Right to Object: You have the right to object to processing based on our legitimate interests. If you object, we will cease such processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out before the withdrawal.

35bd6 will not charge a fee for processing reasonable data rights requests. We reserve the right to decline requests that are manifestly unfounded, excessive, or repetitive, and will explain our reasons for doing so in writing.

The 35bd6 Platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from any person under the age of 21. Age verification checks are conducted at the point of registration and are reinforced by our KYC process.

If 35bd6 becomes aware that personal data has been collected from a person under 21, the associated account will be immediately suspended, all collected data will be deleted without delay, and any deposited funds will be returned to the source payment method after appropriate verification.

The 35bd6 Platform may contain references to third-party products and services such as payment providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and game studios (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Habanero, Ezugi). These third parties operate their own independent privacy policies and data practices, which are outside the control of 35bd6.

35bd6 is not responsible for the privacy practices of third-party providers. We encourage you to review the privacy policies of any third-party service you interact with directly, particularly in relation to payment transactions and game platform interactions. Any data you provide directly to a third party is subject to that third party's privacy policy, not this one.

35bd6 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. Where material changes are made, we will notify registered players by email or via a prominent notice on the Platform prior to the updated policy taking effect. The date at the top of this page indicates when the policy was last revised.

Your continued use of the 35bd6 Platform following publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the updated policy, you should discontinue use of the Platform and contact support to request account closure.

We recommend reviewing this page periodically to stay informed of how 35bd6 protects and manages your personal data. Archived versions of prior Privacy Policy documents are available on request by contacting the support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by 35bd6, please reach out through any of the following channels:

• Support Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly from your account dashboard after logging in to your 35bd6 account.
• Response Times: Under 3 minutes via live chat; within 24 hours via email under normal operating conditions.

When submitting a data rights request, please include your registered account username and email address, a clear description of your request, and any relevant reference details. This will allow us to locate your data accurately and respond to your request as efficiently as possible.