35bd Privacy Policy — How We Handle Your Personal Data

35bd collects information at various stages — from account registration through ongoing use of the platform. Full details are provided below.

35bd does not store full payment card numbers or complete bank account details. For bKash or Nagad transactions, only the mobile number and transaction reference are retained.

35bd does not collect data without a reason. Every piece of information has a specific purpose, which is clearly outlined below.

• Account Management: Your name, phone number, and password are required to create your account, verify your login, and deliver the right services to you.
• Age Verification: Date of birth and ID verification are mandatory to prevent users under 18 from opening an account. This is a legal obligation.
• Payment Processing: Payment method details are required to process deposits and withdrawals.
• Fraud Prevention: Device and IP information is used to detect multiple accounts or suspicious activity.
• Service Improvement: Data on which games are most played and where the app slows down helps us improve the service.
• Customer Support: Account details and transaction history are needed to properly assist you when an issue arises.
• Legal Obligations: Specific data may be required to be disclosed under a lawful directive from the relevant authorities.

35bd never collects data for advertising purposes or to build marketing databases.

35bd's servers are housed in secure data centers. All data stored on the servers is encrypted — meaning even direct file access would yield nothing readable.

How long data is retained depends on the type of data:

• Account Information: Retained for a minimum of 5 years while your account is active and after closure — as required by law.
• Transaction Records: Financial records are retained for up to 7 years.
• Gaming History: Full history is retained for the duration your account remains active.
• Support Conversations: Retained for up to 2 years after a case is resolved.
• Login Logs: Login logs for the most recent 90 days are retained for security purposes.

Data is securely deleted after the applicable retention period. Backup copies are erased within the same timeframe.

35bd does not sell, rent, or share your information with third parties. That is a firm commitment.

However, in certain specific situations, limited data must be shared where it is essential to deliver our services:

• Payment Gateway: Only the minimum information required to process payments via bKash and Nagad is transmitted — strictly for completing the transaction.
• Game Provider: Only anonymous gaming session data is shared with game providers such as Pragmatic Play or Evolution — never any personal identification.
• Legal Authorities: We may be required to disclose information under a valid court order or mandatory directive from an authority. In such cases, every effort will be made to notify you in advance where possible.
• Security Auditors: Approved third-party auditors carry out platform security testing — all bound by confidentiality agreements.

Your consent will be obtained before sharing your information for any reason beyond those listed above.

The 35bd website and app use cookies and similar technologies. This is completely standard practice and is used by virtually every website. That said, 35bd is transparent about which cookies it uses and what each one does.

• Essential Cookies: Remembering your login session and keeping your cart information intact — the site cannot function properly without these. They cannot be disabled.
• Performance Cookies: This data helps us identify which parts of the site are slow or which pages are causing issues, so we can improve the experience.
• Preference Cookies: Remembers your language selection or theme preference so you don't have to reset it every time.

The app uses local storage instead of cookies — it serves the same function, but data is stored on your device and never sent to the server. If you access 35bd.me via a browser, you will see a cookie banner where you can disable all non-essential cookies.

The 35bd Android app requests certain permissions upon installation. Each permission has a specific purpose, and no unnecessary permissions are requested.

• Camera Permission: Used to scan your NID and read QR codes. The camera is not accessed during gameplay.
• Notification Permission: To notify you of bet results, deposit confirmations, and promotions. You can turn this off at any time from your phone settings.
• Network Access: Required for connecting to the server — the app cannot function without it.
• Biometrics: Optional for fingerprint login. Your biometric data stays on your phone's own secure chip — it is never sent to 35bd's servers.

When the app is running in the background, it only contacts the server to update your balance — no other data is collected. Once the app is closed, there is no background activity whatsoever.

35bd believes you have the greatest right over your own data. The following rights belong to you and can be exercised at any time through our support team.

35bd's services are strictly for users aged 18 and above. Any attempt by a person under 18 to create an account will result in an incomplete registration.

Date of birth is verified at registration, and NID verification is required before any withdrawal to confirm age. If a user opens an account with a false date of birth and is later found out, the account will be terminated and the balance forfeited.

If a parent or guardian believes their child has created an account on 35bd, please contact us at support@35bd.me — the matter will be investigated and acted upon promptly.

35bd follows the highest industry standards for data security. The following measures are always active:

• TLS 1.3 Encryption: All data transmitted from your browser or app to our servers is fully encrypted. Even if intercepted, it cannot be read.
• Password Hashing: Your password is never stored in plain text — it is hashed using the bcrypt algorithm. No 35bd employee can ever view your password.
• Database Encryption: Data in the server database is also encrypted — even direct server access would not expose readable information.
• Regular Security Audits: Third-party security experts audit the platform's security every year.
• Access Control: 35bd employees can only access data relevant to their own responsibilities — not the entire database.
• Login Monitoring: Unusual login attempts automatically trigger an account lock and an SMS alert.

In the event of a security breach, affected users will be notified within 72 hours. To date, no major security incident has occurred at 35bd.

35bd's privacy policy may be updated from time to time — due to changes in law, the launch of new services, or security improvements. You will be notified of any changes in advance via SMS to your registered mobile number or through an in-app notification.

For major changes, you will be notified at least 15 days in advance so you have time to decide. If you do not agree with the changes, please withdraw your balance before closing your account.

For any privacy-related questions or concerns:

• Email: support@35bd.me
• Live Chat: Available 24/7 on the website or app