35bg Privacy Policy — Your Data, Your Rights, Our Commitment

Introduction

35bg ("we", "us", "our", "the Platform") is committed to protecting and respecting the privacy of every individual who accesses, browses, or registers on our platform at https://35bg.io. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by 35bg.

This document is intended to give you a clear, transparent, and complete picture of our data practices. We have written it in plain English so that every player — whether based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or anywhere else in Bangladesh — can understand exactly how their information is handled.

This Privacy Policy should be read together with our Terms & Conditions, which form the overarching legal agreement governing your use of the 35bg platform. By accepting the Terms & Conditions, you also accept this Privacy Policy. If you do not agree with any part of this Privacy Policy, you must stop using the 35bg platform immediately.

35bg takes the security and confidentiality of personal data seriously. We apply industry-standard technical and organisational measures to safeguard the information you entrust to us, and we do not sell your personal data to any third party for commercial purposes.

Data We Collect

35bg collects several categories of personal data in the course of providing our services. The specific data we collect depends on how you interact with the platform. The main categories are as follows:

Identity & Registration Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify that you meet the 21+ age requirement).
• Gender (optional, collected during registration).
• Username and account password (stored in hashed, encrypted form — never in plaintext).
• National Identity Card (NID) number, passport number, or driving licence number submitted during KYC verification.

Contact Data

• Email address — used for account notifications, promotional communications (where consented), and support correspondence.
• Mobile phone number — including your bKash, Nagad, or Rocket registered number where provided for payment processing.
• Residential address, including district, division, and postcode.

Financial & Transaction Data

• Deposit amounts, dates, and payment method identifiers (e.g., last four digits of a bKash account).
• Withdrawal requests, amounts, destination accounts, and processing status.
• Bonus redemption history and wagering activity records.
• Account balance history and transaction logs, retained for financial compliance purposes.

Technical & Usage Data

• IP address and approximate geographic location derived from IP.
• Device type, operating system, browser type and version.
• Session timestamps, page navigation paths, and time spent on specific game titles.
• Game history — including games played, stakes, outcomes, and session durations — retained for dispute resolution and fair play monitoring.
• Login history, including successful logins, failed attempts, and two-factor authentication events.

Communications Data

• Records of live chat and email conversations with our support team.
• Feedback, complaints, or dispute submissions you make through any 35bg communication channel.
• Survey responses and promotional participation records where applicable.

KYC Document Data

• Scanned or photographed copies of government-issued identity documents submitted during verification.
• Selfie or liveness-check images submitted as part of facial verification during enhanced KYC procedures.
• Proof-of-address documents such as utility bills or bank statements dated within the last three months.

How We Collect Data

35bg collects your personal data through the following mechanisms:

Directly From You

The majority of your personal data is provided directly by you when you:

• Complete the account registration form on the 35bg platform.
• Submit identity and address documents during KYC verification.
• Make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, or any other supported payment method.
• Contact our support team via live chat or email at [email protected].
• Participate in a promotion, bonus offer, or seasonal campaign.
• Respond to a satisfaction survey or voluntary feedback request.

Automatically During Platform Use

When you access and use the 35bg platform, we automatically collect certain technical data through:

• Server-side logging of HTTP requests, which captures your IP address, browser, device type, and page requests.
• Session management systems that track your login state and activity duration.
• Game engine logs maintained by our game studio partners (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) which record game round data for RTP auditing and dispute resolution.
• First-party cookies and similar local storage technologies — see Section 8 for full details.

From Third-Party Sources

In limited circumstances, 35bg may receive data about you from trusted third parties, including:

• Payment processors and mobile money operators (bKash, Nagad, Rocket, Upay) confirming the status and outcome of payment transactions.
• Identity verification service providers used to assist with KYC checks and document authentication.
• Fraud detection and anti-money laundering screening services that cross-reference account data against watchlists and risk databases.

How We Use Your Data

35bg uses your personal data only for specific, legitimate purposes. We do not process your data in ways that are incompatible with the purposes for which it was originally collected. The table below summarises our primary data uses:

Marketing Communications

With your explicit consent, 35bg may send you promotional emails and SMS messages regarding new games, bonus offers, seasonal promotions (such as Eid, Pohela Boishakh, and BPL cricket season campaigns), and platform updates. You may withdraw your marketing consent at any time by contacting [email protected] or by using the unsubscribe mechanism included in every marketing email. Withdrawal of marketing consent does not affect the lawfulness of processing based on consent before its withdrawal, nor does it affect any other legal basis for processing your data.

Legal Basis for Processing

35bg processes your personal data only where a valid legal basis exists. The legal bases we rely upon are:

• Contract Performance: Processing is necessary for the performance of the contract between you and 35bg — specifically, to create and manage your account, process your financial transactions, and provide you with access to the games and betting markets on the platform.
• Legal Obligation: Processing is necessary for compliance with legal obligations applicable to 35bg, including anti-money laundering (AML) requirements, Know Your Customer (KYC) obligations, age verification requirements, and financial record-keeping duties.
• Legitimate Interests: Processing is necessary for the legitimate interests pursued by 35bg, provided those interests are not overridden by your privacy interests or fundamental rights. Legitimate interests include: preventing fraud and abuse, securing the platform, monitoring for problem gambling behaviours, and improving our services through anonymised analytics.
• Consent: Where we rely on consent — primarily for marketing communications — you have the right to withdraw that consent at any time without detriment to your account or service access.

Data Sharing & Disclosure

35bg does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your data only in the limited circumstances described below:

Payment Processors

To process deposits and withdrawals, we share necessary financial and identity data with our payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and international card networks (Visa, Mastercard). These partners are contractually bound to process your data only for the specific payment transaction and in compliance with applicable financial regulations.

Game Studio Partners

Game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session tokens and game activity data necessary to deliver their game content on the 35bg platform. These studios are independent data controllers for their own game data; their privacy practices are governed by their own published policies.

Identity Verification & KYC Providers

We work with third-party KYC service providers to verify the identity and age of registered players. These providers receive the identity documents and data you submit during verification and process them according to contractual agreements that prohibit any secondary use or onward disclosure.

Fraud & AML Screening Services

To fulfil our legal obligations in relation to anti-money laundering and fraud prevention, we may share relevant account data with screening service providers who cross-reference information against sanctions lists, politically exposed persons (PEP) databases, and adverse media sources. This processing is carried out under a legal obligation basis.

Legal & Regulatory Disclosure

35bg will disclose personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities when required to do so by law, when responding to a valid legal process, or when necessary to protect the rights, safety, or property of 35bg, its players, or the public.

Data Retention

35bg retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal obligations, and to resolve disputes or enforce our agreements. Our standard retention periods are as follows:

When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

Cookies & Tracking Technologies

35bg uses first-party cookies and similar browser storage technologies to operate the platform effectively. We do not use third-party advertising cookies or cross-site tracking technologies that share your browsing behaviour with external advertisers.

Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the platform to function. These include session cookies that keep you logged in, CSRF protection tokens, and load-balancing identifiers. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method, and responsible gaming limit configurations. Disabling these cookies may reduce personalisation but will not prevent you from using the platform.
• Analytics Cookies: Used to collect aggregated, anonymised data on how players navigate the platform — which game categories are most visited, where players encounter errors, and how long sessions last on average. This data is used solely to improve the 35bg experience.
• Security Cookies: Used to detect and prevent fraudulent login attempts, bot activity, and suspicious session behaviour.

Managing Cookies

You can control cookie behaviour through your browser settings. Most modern browsers allow you to block, delete, or receive warnings about cookies. Please note that blocking strictly necessary cookies will prevent you from logging in or using the 35bg platform. Instructions for managing cookies in popular browsers (Chrome, Firefox, Safari, Edge) are available in each browser's help documentation.

Data Security

35bg employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your browser or app and our servers is encrypted using industry-standard TLS 1.2 or higher. This applies to login sessions, payment data, and all API communications.
• Password Hashing: Account passwords are stored as one-way hashed values using a modern, secure hashing algorithm. 35bg staff cannot retrieve or view your plaintext password under any circumstances.
• Access Controls: Access to systems that hold personal data is restricted on a strict need-to-know basis. All internal access is logged and monitored. Staff with access to personal data are bound by confidentiality obligations.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their accounts. 2FA is also enforced for all 35bg staff accessing internal systems that process personal data.
• Penetration Testing: Our platform infrastructure is subject to regular independent security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: 35bg maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected players promptly and take all necessary remediation steps.

While 35bg takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You also play an important role in keeping your account secure — use a strong password, enable 2FA, and contact [email protected] immediately if you believe your account has been compromised.

Your Rights

As a player on the 35bg platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request — [Your Username]". We will respond to all verified requests within 30 days.

Right to Access

You have the right to request a copy of the personal data 35bg holds about you. We will provide this in a structured, commonly used format. Where a request is manifestly unfounded or excessive, we reserve the right to charge a reasonable administrative fee.

Right to Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Some data — such as your registered name or date of birth — may require updated identity documentation before we can make changes, in order to maintain the integrity of our KYC records.

Right to Erasure

You may request that 35bg delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw consent and no other legal basis applies. Please note that we may be unable to erase data that we are legally required to retain, such as financial transaction records and KYC documents subject to anti-money laundering obligations.

Right to Restriction

You have the right to request that 35bg restricts the processing of your data in certain circumstances — for instance, while we investigate a dispute about the accuracy of your data or a complaint about how it has been used.

Right to Data Portability

Where processing is carried out by automated means on the basis of your consent or a contract with you, you have the right to receive a copy of your data in a machine-readable format and to have it transmitted to another controller where technically feasible.

Right to Object

You have the right to object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming purposes. We will consider your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests or the processing is necessary for legal claims.

Right to Withdraw Consent

Where processing is based on consent — primarily for marketing communications — you may withdraw that consent at any time by contacting [email protected] or using the unsubscribe link in any marketing email. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

Children & Minors

The 35bg platform is strictly intended for adults aged 21 years and over. We do not knowingly collect, store, or process the personal data of any individual under the age of 21. Our registration process includes mandatory age verification steps, and our KYC programme is designed to identify and reject applications from underage individuals.

If 35bg becomes aware that personal data belonging to a person under the age of 21 has been collected — whether through a misrepresentation during registration or for any other reason — we will immediately suspend the relevant account, delete or quarantine the associated personal data to the extent permitted by law, and take all appropriate remedial steps including refunding deposits where technically practicable.

Parents and guardians of individuals who may be under 21 are encouraged to make use of internet filtering and parental control software to prevent access to gambling platforms. If you have reason to believe that a minor has created an account on 35bg, please contact us immediately at [email protected].

Third-Party Links

The 35bg platform may contain references to or integrations with third-party services — including payment processors such as bKash and Nagad, and game studio providers such as Pragmatic Play and Evolution Gaming. While we carefully select our partners, 35bg has no control over the privacy practices of independent third parties and is not responsible for the content or data handling practices of their own platforms, applications, or websites.

This Privacy Policy applies exclusively to the 35bg platform at https://35bg.io. When you interact with a third-party service — for example, when authorising a bKash payment or accessing a game in the Pragmatic Play environment — you are subject to that third party's own privacy policy and terms of service. We encourage you to review the privacy policies of any third-party services you use in connection with the 35bg platform.

Policy Amendments

35bg reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, we will notify registered players via email and/or a prominent notice on the platform at least seven (7) days before the changes take effect — except where immediate changes are required to address an urgent security issue or comply with a legal obligation.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. Continued use of the 35bg platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated terms, you must cease using the platform and contact [email protected] to close your account.

We recommend that you review this Privacy Policy periodically to stay informed about how 35bg protects and processes your personal data. All previous versions of this policy are archived and available upon request by contacting [email protected].

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or 35bg's data handling practices, please contact our dedicated privacy support team using the details below:

• Email: [email protected]
• Subject Line for Data Requests: "Data Rights Request — [Your Account Username]"
• Subject Line for Privacy Complaints: "Privacy Complaint — [Your Account Username]"
• Support Hours: 24 hours a day, 7 days a week, including public holidays
• Response Time (General Privacy Queries): Within 24 hours
• Response Time (Formal Data Rights Requests): Within 30 calendar days
• Platform URL: https://35bg.io

All formal data rights requests must be submitted in writing to [email protected]. To protect your privacy, we will verify your identity before fulfilling any access, rectification, erasure, or portability request. Verification typically requires you to confirm details associated with your registered account.