36bd Privacy Policy

Overview

This Privacy Policy ("Policy") applies to all personal data collected and processed by 36bd ("the Platform", "We", "Us", "Our") in connection with the operation of the online casino and sports betting services accessible at 36bd.onl, including through any associated mobile-optimised web pages. By registering an account or otherwise using the 36bd platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

36bd is committed to handling all personal data responsibly, securely, and in accordance with applicable data protection principles. We collect only the information necessary to operate our platform effectively and to meet our obligations under applicable anti-money-laundering (AML) and Know Your Customer (KYC) requirements. We do not collect excessive data and do not use personal information for purposes beyond those described in this Policy without your prior consent.

Our Commitments

Privacy at a Glance

36bd collects personal information through multiple touchpoints during your use of the platform. The categories of personal data we collect, and examples of the specific data items within each category, are set out below:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric data (beyond photo ID for KYC), or health data, unless strictly required by applicable regulations and with your explicit consent.

36bd uses personal data collected from players for specific, legitimate purposes only. We do not use your data for undisclosed purposes or sell it to third parties for advertising. The specific purposes for which we use your personal data are:

• Account creation and management: to register your account, verify your identity, maintain your account balance, and administer your account settings and preferences.
• Payment processing: to facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer partners; to maintain accurate transaction records; and to investigate payment disputes.
• Regulatory compliance: to meet our obligations under applicable AML regulations, KYC requirements, and responsible gaming obligations, including age verification (minimum 21 years), source of funds checks, and self-exclusion record keeping.
• Platform security and fraud prevention: to detect, investigate, and prevent fraudulent transactions, multi-accounting, bonus abuse, money laundering, and other prohibited conduct; to monitor platform integrity and enforce our Terms and Conditions.
• Customer support: to respond to your queries, complaints, and requests; to maintain a record of support interactions for quality assurance and dispute resolution purposes.
• Platform improvement: to analyse aggregated and anonymised usage patterns to understand how players interact with the platform, identify technical issues, and inform decisions about new features and product development.
• Promotional communications: to send you relevant offers, bonus notifications, and platform updates where you have opted in to receive such communications. You may withdraw this consent at any time by contacting support.

36bd processes your personal data on the following legal bases, depending on the nature and purpose of the processing activity:

• Contractual necessity: processing required to perform the contract between you and 36bd — namely, operating your account, processing your bets and transactions, and providing the platform services you registered for.
• Legal obligation: processing required to comply with applicable laws and regulations, including AML obligations, KYC verification requirements, and responsible gaming mandates.
• Legitimate interests: processing necessary for 36bd's legitimate business interests, including fraud prevention, platform security, and service quality improvement, where such interests are not overridden by your own privacy rights.
• Consent: processing activities for which you have given explicit, freely given, specific, and informed consent — such as receiving promotional communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

36bd does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

• Payment service providers: bKash, Nagad, Rocket, Upay, and banking partners require transaction reference data and account identifiers to process deposits and withdrawals. These providers are contractually bound to use shared data only for payment processing purposes.
• KYC and identity verification partners: third-party identity verification services may process your submitted identity documents and personal information to confirm your identity and age in compliance with applicable regulations.
• Technology and infrastructure providers: hosting, cloud infrastructure, and cybersecurity partners who support the operation of the 36bd platform may have access to data stored on their infrastructure. All such partners are bound by data processing agreements and implement appropriate security safeguards.
• Regulatory and law enforcement authorities: where required by applicable law, court order, or regulatory directive, 36bd may disclose personal data to competent authorities, including financial intelligence units, law enforcement agencies, and regulatory bodies. 36bd will provide only the minimum data required to satisfy the legal obligation.

36bd uses cookies and similar tracking technologies to operate the platform effectively, maintain your session state, and understand how players navigate the site. The types of cookies we use are:

• Strictly necessary cookies: these are essential for the platform to function. They maintain your login session, remember your account preferences, and ensure secure navigation between pages. These cookies cannot be disabled without impairing platform functionality.
• Analytical cookies: these collect aggregated, anonymised information about how players use the platform — such as which pages are visited most frequently and where players encounter errors. This data helps us improve the platform experience. Analytical cookies do not identify you personally.
• Functionality cookies: these remember your stated preferences — such as language selection and display settings — so you do not have to re-enter them on every visit. They improve your experience but are not essential to core platform operation.

You may manage cookie preferences through your mobile browser settings. Please note that disabling strictly necessary cookies will prevent you from using core platform features, including logging into your account. 36bd does not use third-party advertising cookies or cross-site tracking technologies.

36bd retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting obligations. The following retention periods apply as a general guide:

Active account data is retained for the duration of the account relationship and for a minimum of 5 years following account closure, in line with AML record-keeping obligations. KYC identity documents are retained for a minimum of 5 years from the date of verification. Transaction records are retained for a minimum of 5 years from the date of each transaction. Customer support correspondence is retained for 2 years from the date of the last interaction. Where a legal dispute or regulatory investigation is ongoing, relevant data will be retained until the matter is fully resolved, regardless of standard retention periods.

As a player on the 36bd platform, you have the following rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Request" and your registered mobile number for identity verification:

• Right of access: you may request a copy of the personal data 36bd holds about you, along with information about how it is used and with whom it is shared.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it.
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing), or where you object to processing based on legitimate interests. This right is subject to regulatory retention obligations — we cannot delete data that we are legally required to retain.
• Right to restriction: you may request that we restrict the processing of your data in certain circumstances — for example, while the accuracy of data is contested, or while an objection to legitimate interest processing is being considered.
• Right to data portability: where processing is based on your consent or contractual necessity and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

36bd will respond to all privacy rights requests within 30 calendar days of receipt, subject to identity verification. Where a request is complex or numerous, we may extend this period by a further 30 days, with notice provided to you explaining the reason for the extension.

36bd implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include SSL/TLS encryption for all data transmitted between your device and our servers; access controls restricting internal data access to authorised personnel only on a role-based, need-to-know basis; regular security assessments and penetration testing of our platform infrastructure; encrypted storage of sensitive account credentials and payment identifiers; and incident response procedures to detect, contain, and remediate data security incidents promptly.

No method of data transmission or storage is completely secure. While 36bd takes all reasonable steps to protect your personal data, we cannot guarantee absolute security against all threats. In the event of a data breach that is likely to result in a risk to your rights and freedoms, 36bd will notify affected players promptly and take all reasonable steps to limit the impact of the breach.

The 36bd platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we discover or are notified that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the platform, please notify us immediately at [email protected]. Parents and guardians are encouraged to make use of device-level parental controls to prevent minors from accessing online gambling platforms.

The 36bd platform incorporates games and content supplied by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you interact with games supplied by these providers, certain technical data (such as your session token, game result data, and bet amounts) may be transmitted to and processed by the relevant provider's systems, as necessary to deliver the game experience. Each provider operates under its own privacy and data protection policies. 36bd is not responsible for the data practices of third-party game providers beyond what is governed by the data processing agreements in place between 36bd and those providers.

36bd reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or platform operations. When we make material changes to this Policy, we will provide notice via the platform or by direct communication to your registered mobile number or email address. The updated Policy will display a revised "Last Updated" date at the top of the page.

Your continued use of the 36bd platform following any update to this Policy constitutes acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how we protect your personal data. Prior versions of this Policy are available upon request from the support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 36bd handles your personal data, please contact our support team. We aim to respond to all privacy-related enquiries within 5 business days. Support is available 24/7 in both English and Bengali.

Email: [email protected]