35db1 Privacy
Policy

When you register for and use the 35db1 platform, we collect certain categories of personal information to deliver our services safely and effectively. The specific information we collect depends on how you interact with 35db1. The following table summarises the main categories of data we collect and the circumstances under which they are gathered.

35db1 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where health or wellbeing information is voluntarily provided in the context of a responsible gaming support request. In such cases, the information is handled with the highest level of confidentiality and used solely to provide the appropriate level of support.

35db1 processes your personal data only for legitimate, clearly defined purposes. We do not use your data for any purpose that is incompatible with those listed below. The legal bases for our data processing activities are: performance of a contract (your account agreement with 35db1), compliance with legal obligations, and our legitimate interests in operating a safe and fair online gaming platform.

• Account Management: To create, maintain, verify, and administer your 35db1 player account, including processing your registration details, verifying your identity through KYC checks, and managing your account settings and preferences.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay; to verify the source of funds where required; to detect and prevent fraudulent or suspicious transactions; and to maintain accurate financial records of all account activity.
• Platform Delivery: To provide access to 35db1 Casino games, sports betting markets, live dealer tables, crash games, and all other platform features; to ensure game sessions are correctly attributed to your account; and to settle bets and credit winnings accurately.
• Security and Fraud Prevention: To monitor for unusual account activity, detect multi-accounting, prevent bonus abuse, identify use of automated software, and protect the integrity of the 35db1 platform and the fairness of all games.
• Responsible Gaming Compliance: To implement and monitor the deposit limits, time-out periods, and self-exclusion arrangements that you set; to identify patterns of play that may indicate problem gambling; and to provide appropriate responsible gaming interventions where necessary.
• Legal and Regulatory Obligations: To comply with applicable anti-money laundering (AML) requirements, KYC obligations, record-keeping duties, and any lawful requests from competent authorities. Transaction and identity records are retained for the periods specified in Section 6 of this policy.
• Customer Support: To respond to your enquiries, resolve account disputes, process complaints, and provide technical assistance. Support communications are conducted exclusively in English via email at [email protected].
• Service Improvement and Analytics: To analyse aggregated, anonymised usage patterns across the 35db1 platform in order to improve game selection, site performance, and the overall player experience. Individual-level data is not used for this purpose in a way that profiles you for advertising.
• Promotional Communications: To send you information about bonuses, promotions, and seasonal offers (such as Eid or BPL season promotions) by email, provided you have not opted out of such communications. You may withdraw consent to marketing communications at any time by emailing [email protected].

35db1 does not sell your personal data. We share personal information with third parties only in the following strictly limited circumstances, and only to the extent necessary for the specific purpose identified:

• Payment Service Providers: We share the minimum necessary financial data with bKash, Nagad, Rocket (Dutch-Bangla Bank), and Upay to process your deposits and withdrawals. These providers act as independent data controllers for their own KYC and AML obligations. 35db1 does not share your full gaming history with payment providers.
• Game Technology Providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a pseudonymous player identifier and session data necessary to deliver their game content and to settle game outcomes. These providers do not receive your full name, contact details, or financial account numbers.
• Identity Verification Services: When you complete KYC verification, your identity documents and personally identifying information may be processed by a third-party identity verification provider contracted by 35db1. Such providers are bound by strict data processing agreements and are not permitted to use your data for any other purpose.
• Fraud Detection and Security Services: We may share device fingerprint data, IP addresses, and behavioural signals with fraud detection service providers to protect the platform from abuse, multi-accounting, and money laundering. These providers process data solely on 35db1's instructions.
• Legal Authorities: We may disclose personal data to law enforcement agencies, financial intelligence units, or other competent regulatory authorities where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of 35db1, its players, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of 35db1's business, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer by email or by a prominent notice on the 35db1 platform, and you will retain all rights described in Section 7 of this policy.

All third parties with whom 35db1 shares personal data are required to maintain appropriate technical and organisational security measures and to process your data solely for the purposes authorised by 35db1. 35db1 does not authorise any third party to use your personal data for their own independent marketing purposes.

35db1 uses cookies and similar client-side technologies to operate the platform effectively and to ensure a consistent, secure experience for every player. The following categories of cookies are in use on the 35db1 platform:

35db1 does not deploy advertising tracking pixels, social media tracking scripts, or cross-site behavioural profiling technologies. The cookies used on this platform are limited to those necessary for platform operation, security, and internal performance measurement.

Most web browsers allow you to manage cookie preferences through the browser's settings menu. You can typically choose to block or delete cookies at the browser level. Please be aware that blocking strictly necessary cookies will prevent you from logging in to your 35db1 account. For guidance on managing cookies in your specific browser, consult your browser's official help documentation.

35db1 takes the security of your personal data seriously and implements a multi-layered set of technical and organisational controls designed to protect your information against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following measures:

• Transport Layer Security (TLS): All data exchanged between your browser and the 35db1 platform is encrypted using TLS 1.2 or higher. This prevents interception of your personal data, login credentials, and financial information during transmission.
• Password Hashing: Your 35db1 account password is never stored in plain text. Passwords are processed using a cryptographic hashing algorithm with a per-user salt, meaning that even 35db1 staff cannot read your password — only you know it.
• Two-Step Verification (2FA): 35db1 strongly encourages all players to enable two-step verification on their accounts. With 2FA active, a one-time code is required at each login in addition to your password, substantially reducing the risk of unauthorised account access even if your password is compromised.
• Access Controls: Access to systems containing personal data is restricted to authorised 35db1 personnel on a strict need-to-know basis. All internal access is logged and audited. Access privileges are reviewed regularly and revoked immediately upon staff departure.
• Infrastructure Security: 35db1's server infrastructure is hosted in a secure environment with firewall protection, intrusion detection systems, and regular vulnerability assessments. Routine security patches are applied promptly following vulnerability disclosure.
• Data Breach Response: In the event of a personal data breach that poses a risk to your rights and freedoms, 35db1 will notify affected players by email without undue delay. The notification will describe the nature of the breach, the data affected, and the steps 35db1 has taken or is taking to address it.

35db1 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or operational obligations. The following retention periods apply:

• Active Account Data: All personal data associated with an active 35db1 account is retained for the full duration of your account's existence and for a period of five (5) years following permanent account closure, to satisfy anti-money laundering record-keeping requirements and to handle any post-closure disputes.
• Transaction and Financial Records: Records of all deposits, withdrawals, and bet settlements are retained for a minimum of seven (7) years from the date of the transaction, in compliance with financial record-keeping standards applicable to online payment processing in Bangladesh.
• KYC and Identity Documents: Copies of identity verification documents submitted during KYC (such as national ID cards or passport scans) are retained for five (5) years after account closure, as required by AML obligations.
• Customer Support Correspondence: Email and chat support records are retained for three (3) years from the date of the most recent communication in a given support thread, to enable resolution of any reopened disputes.
• Responsible Gaming Records: Records of self-exclusion requests, deposit limit settings, and time-out activations are retained for five (5) years after account closure to prevent the circumvention of responsible gaming measures through account re-registration.
• Dormant Account Data: Accounts with no login activity for 12 or more consecutive months are classified as dormant. Dormant account data is retained for the same periods as active account data but access to the account is restricted pending reactivation verification.
• Analytics Data: Anonymised and aggregated analytics data (from which individual players cannot be identified) may be retained indefinitely for the purpose of understanding long-term platform usage trends and improving 35db1 services.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with 35db1's internal data disposal procedures. If you request deletion of your personal data before the retention period has expired, 35db1 will comply with that request to the extent permitted by legal retention obligations — see Section 7 for details.

As a 35db1 player, you have the following rights with respect to your personal data. These rights can be exercised at any time by submitting a written request in English to [email protected]. 35db1 will acknowledge your request within five (5) business days and will respond substantively within a reasonable timeframe.

• Right of Access: You have the right to request a copy of all personal data that 35db1 holds about you, together with information about how that data is being used, the sources from which it was obtained, and the third parties with whom it has been shared.
• Right to Rectification: If any personal data held by 35db1 about you is inaccurate or incomplete, you have the right to request that it be corrected. For contact details and basic account information, you may also update this directly through your account settings.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis for processing applies. This right is subject to 35db1's legal retention obligations described in Section 6.
• Right to Restrict Processing: You have the right to request that 35db1 restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to 35db1 in a structured, commonly used, machine-readable format (such as CSV or JSON), where the processing is based on your consent or on contractual necessity.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You also have the right to object to other processing activities based on 35db1's legitimate interests, where you have grounds relating to your particular situation.
• Right to Withdraw Consent: Where 35db1 processes your personal data on the basis of your consent (such as for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

35db1 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform services. When we make material changes to this policy, we will notify registered players by email to their registered email address and/or by posting a prominent notice on the 35db1 platform, at least seven (7) days before the changes take effect for existing users.

The effective date at the top of this policy indicates the date on which the current version took effect. We encourage you to review this Privacy Policy periodically to stay informed about how 35db1 handles your personal data. Your continued use of the 35db1 platform after the effective date of any updated Privacy Policy constitutes your acceptance of those changes.

If you have any questions, concerns, or complaints about this Privacy Policy or about 35db1's handling of your personal data, please contact the 35db1 privacy team using the details below. All enquiries should be submitted in English and will receive a substantive written response within a reasonable timeframe.

This Privacy Policy applies exclusively to the 35db1 platform at https://35db1.com. It does not apply to any third-party websites, services, or applications that may be linked to or integrated with the 35db1 platform (such as payment provider portals or game provider lobby pages). 35db1 is not responsible for the privacy practices of any third-party services you access in connection with your use of 35db1.

For information about your rights as a responsible gaming participant — including self-exclusion, deposit limits, and problem gambling support resources available to players in Bangladesh — please visit the Responsible Gaming page. For a full understanding of your contractual relationship with 35db1, please review the Terms & Conditions.