Privacy Policy — How 35nd Protects Your Personal Data

35nd ("we", "us", "our", or "the Platform") operates the online casino and sports betting platform accessible at 35nd.io. This Privacy Policy describes how we collect, use, process, store, and disclose personal information relating to individuals ("you", "your", or "the player") who access or use the 35nd platform, including its website, mobile interface, live casino services, slots, cricket betting markets, and all associated features.

This policy applies to all players registered on the 35nd platform from Bangladesh and to any visitor who browses the 35nd website without creating an account. It covers data collected through all channels of the 35nd platform, including online registration forms, payment processing interfaces, customer support interactions, and platform analytics systems.

By registering an account, making a deposit, or continuing to use the 35nd platform after the effective date of this Privacy Policy, you acknowledge that you have read, understood, and agree to the data practices described in this document. If you do not agree with any part of this Privacy Policy, you must discontinue use of the platform and may request account closure in accordance with the process outlined in our Terms & Conditions.

35nd collects personal data through several means — directly from you when you register and use the platform, automatically through your device and browser interactions, and from third-party verification and payment service providers. The categories of personal data we collect include the following:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data for identification purposes (other than document photos submitted for KYC age verification), or health data, unless you voluntarily disclose such information through a support interaction, in which case it is used solely to assist you with your query.

35nd processes personal data for specific, identified purposes. We do not use your data for purposes that are incompatible with those listed here without first seeking your consent or establishing a new lawful basis for processing. The primary purposes for which we use your data are as follows:

• Account registration and management: To create and maintain your 35nd player account, verify your identity and age (21+ requirement), set your account currency to Bangladeshi Taka (BDT), and manage your account preferences and security settings.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard. All financial transactions are processed in BDT and require identity verification to prevent fraud and money laundering.
• Service delivery: To provide access to slots, live casino games from Evolution Gaming, Ezugi, and Pragmatic Play Live, cricket betting markets covering BPL, IPL, T20 World Cup, and international fixtures, and all other features of the 35nd platform.
• Fraud prevention and security: To detect and prevent unauthorised account access, bonus abuse, multi-accounting, money laundering, and other prohibited conduct as defined in the 35nd Terms & Conditions. Our fraud detection systems analyse account behaviour, transaction patterns, and gameplay data in real time.
• Regulatory compliance and KYC: To comply with applicable anti-money laundering (AML) obligations, to conduct Know Your Customer (KYC) verification, and to respond to lawful requests from competent authorities.
• Responsible gaming: To operate the deposit limit, session time reminder, reality check, and self-exclusion tools available within your 35nd account, and to monitor gameplay patterns for signs of problem gambling behaviour.
• Customer support: To respond to enquiries, resolve disputes, process account closure requests, and provide guidance on platform features via the 35nd live chat support channel, available 24 hours a day in Bangladesh Standard Time.
• Platform improvement: To analyse anonymised and aggregated usage data to improve the performance, reliability, and user experience of the 35nd platform, including game loading speeds, mobile interface responsiveness, and cashier flow optimisation.
• Marketing communications: Where you have given your consent or where permitted by applicable law, to send promotional communications about bonuses, seasonal promotions (such as BPL season offers, Eid specials, or Pohela Boishakh promotions), and new features on the platform. You may opt out of marketing communications at any time via your account settings or by contacting support.

35nd processes your personal data on the basis of one or more of the following legal grounds, depending on the specific processing activity involved:

• Contractual necessity: Processing that is necessary to fulfil our obligations under the player agreement established when you register and use the 35nd platform — including account creation, payment processing, game delivery, and customer support. Without this processing, we cannot provide the services you have contracted for.
• Legal obligation: Processing that is required to comply with applicable laws and regulations, including anti-money laundering obligations, KYC requirements, and the duty to respond to lawful requests from competent authorities in Bangladesh or other applicable jurisdictions.
• Legitimate interests: Processing necessary for purposes that are in 35nd's legitimate business interests and are not outweighed by your data protection rights — including fraud detection, security monitoring, platform performance analytics, and responsible gaming monitoring.
• Consent: Processing for marketing communications and certain non-essential cookies, where we have obtained your explicit and freely given consent. You may withdraw consent for such processing at any time without affecting the lawfulness of processing carried out before the withdrawal.

Where 35nd processes data on the basis of legitimate interests, we conduct a balancing assessment to confirm that our interests are not overridden by the fundamental rights and freedoms of the individual. You may request further information about any such assessment by contacting our support team.

35nd does not disclose your personal data to third parties except in the circumstances described in this section. All third parties with whom we share personal data are contractually required to process that data in accordance with applicable data protection standards and solely for the purposes for which it was shared.

• Payment service providers: When you make a deposit or withdrawal, your financial data is shared with the relevant payment service provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, or Mastercard) to process the transaction. Each provider operates under its own terms and privacy policy, and 35nd shares only the minimum data necessary to complete the transaction.
• Identity verification providers: To conduct KYC checks, 35nd may share identity documents and personal details with certified third-party identity verification service providers. These providers process data solely for the purpose of identity confirmation and are prohibited from using the data for any other purpose.
• Game content providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical and session data (such as a player session token and wagering activity) to deliver their game content on the 35nd platform. No directly identifiable personal data such as your name, phone number, or bank account details is shared with game studios.
• Fraud prevention and analytics platforms: 35nd uses third-party fraud detection and analytics tools to monitor account behaviour, transaction patterns, and gameplay data. These tools process data on behalf of 35nd and are bound by strict data processor agreements.
• Legal and regulatory disclosure: 35nd may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, or where such disclosure is necessary to protect the rights, property, or safety of 35nd, its players, or the public.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of the 35nd business, personal data held by 35nd may be transferred to the relevant successor entity, subject to the same privacy protections described in this policy.

35nd uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse platform performance, and — where you have given consent — to deliver relevant promotional content. The following categories of cookies are used on the 35nd platform:

• Strictly necessary cookies: These cookies are essential for the operation of the 35nd platform. They enable core functions such as secure login sessions, navigation between pages, and access to authenticated areas of the platform. These cookies cannot be disabled without preventing the platform from functioning correctly.
• Functional cookies: These cookies remember your preferences and settings — such as your chosen language, account currency (BDT), display settings, and last-used payment method — to provide a more personalised experience when you return to the platform.
• Performance and analytics cookies: These cookies collect aggregated, anonymised information about how players use the 35nd platform — such as which pages are visited most frequently, where players encounter errors, and how long sessions typically last. This data is used exclusively to improve platform performance and user experience.
• Marketing cookies: Where you have given your consent, these cookies allow 35nd to track whether you have previously visited the platform and to display relevant promotional content. You may opt out of marketing cookies at any time by adjusting your cookie preferences in your account settings.

Most web browsers allow you to control cookies through their settings. You may block or delete cookies at any time; however, disabling strictly necessary cookies will impair your ability to use the 35nd platform. 35nd does not use cross-site tracking or share cookie data with third-party advertisers for purposes unrelated to the operation of the 35nd platform.

35nd retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and in any event for no longer than is required by applicable law or regulatory obligation. The following retention periods apply to the principal categories of personal data held by 35nd:

• Account and identity data: Retained for the duration of your active account plus a minimum of five years following account closure, to meet anti-money laundering record-keeping requirements and to resolve any post-closure disputes.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction, in accordance with financial record-keeping obligations applicable to payment service activities.
• KYC verification documents: Retained for the duration of your account plus five years following closure. If your account was never fully verified, partial KYC documents submitted during an incomplete verification process are deleted after 90 days of inactivity on the account.
• Customer support communications: Live chat transcripts and email correspondence are retained for three years from the date of the interaction, to support dispute resolution and quality assurance activities.
• Platform analytics and usage data: Aggregated and anonymised analytics data may be retained indefinitely. Identifiable usage data linked to your account is retained for the duration of your account plus two years following closure.
• Marketing consent records: Records of your consent to receive marketing communications are retained for the duration of your account and for two years following withdrawal of consent or account closure, whichever is later, to demonstrate compliance with consent requirements.

When personal data is no longer required for any of the above purposes and no legal obligation requires its continued retention, 35nd will securely delete or irreversibly anonymise that data. Anonymised data from which you cannot be identified may be retained indefinitely for statistical and platform improvement purposes.

35nd takes the security of your personal data seriously and maintains a comprehensive set of technical and organisational security measures designed to protect your data against unauthorised access, accidental loss, disclosure, alteration, or destruction. The security measures applied to the 35nd platform include the following:

• SSL/TLS encryption: All data transmitted between your device and the 35nd platform is encrypted using industry-standard SSL/TLS protocols. The padlock symbol displayed in your browser confirms that your connection to 35nd.io is secured.
• Data encryption at rest: Sensitive data stored on 35nd's servers — including identity documents and financial records — is encrypted at rest using AES-256 encryption. Database access is restricted to authorised personnel operating on a strict need-to-know basis.
• Two-factor authentication (2FA): 35nd supports two-factor authentication via one-time password (OTP) sent to your registered Bangladeshi mobile number. 35nd strongly recommends that all players enable 2FA to protect their accounts.
• Access controls: Internal access to player personal data is restricted to 35nd staff and contractors who require it to perform their specific job functions. Access is logged, and access rights are reviewed regularly.
• Penetration testing and vulnerability assessment: The 35nd platform undergoes regular third-party security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: 35nd maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, 35nd will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.

As a player on the 35nd platform, you have certain rights with respect to the personal data we hold about you. These rights are described below along with instructions on how to exercise them. 35nd will respond to all valid data rights requests within 30 days of receipt. In cases of complexity or high volume, this period may be extended by up to a further 60 days, in which case you will be notified of the extension and its reason within the initial 30-day period.

• Right of access: You have the right to request confirmation of whether 35nd processes personal data about you and, if so, to receive a copy of that data along with information about how it is used. This is commonly referred to as a Subject Access Request (SAR).
• Right to rectification: You have the right to request correction of any personal data that 35nd holds about you that is inaccurate or incomplete. You may update basic account information directly within your account settings; for more significant corrections (e.g., legal name or date of birth), contact support with supporting documentation.
• Right to erasure: In certain circumstances, you have the right to request deletion of personal data that 35nd holds about you. This right does not apply where continued retention is required by law (such as AML record-keeping obligations) or where the data is necessary to resolve a pending dispute.
• Right to restriction of processing: You may request that 35nd restricts the processing of your personal data in specific circumstances — for example, while a rectification request is being verified, or where you have contested the legal basis for processing.
• Right to data portability: Where processing is carried out on the basis of your consent or contractual necessity, you have the right to receive a copy of the personal data you have provided to 35nd in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of 35nd's legitimate interests or for direct marketing purposes. Where you object to direct marketing, processing for that purpose will cease immediately. Objections to other legitimate-interest processing will be assessed on a case-by-case basis.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please contact the 35nd support team via live chat, available 24 hours a day in Bangladesh Standard Time (BST, UTC+6). You may also submit a written request to [email protected]. 35nd may request proof of identity before processing a data rights request to ensure that personal data is not disclosed to or altered by an unauthorised party.

The 35nd platform is strictly intended for adults aged 21 years and above. 35nd does not knowingly collect, process, or retain personal data relating to any individual under the age of 21. Age verification is conducted at the point of registration and at the point of first withdrawal as part of the standard KYC process.

If 35nd becomes aware that personal data has been collected from an individual who is under the minimum age of 21 without verified parental or guardian consent (where applicable under law), that data will be deleted promptly, the associated account will be closed, and any deposits attributable to the underage individual will be handled in accordance with applicable regulatory guidance.

The 35nd platform integrates with a number of third-party service providers to deliver its full range of features. While 35nd carefully selects providers and requires them to maintain appropriate data protection standards, the following points should be noted regarding third-party data practices:

• Game content studios: Live dealer and slot games on the 35nd platform are provided by studios including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe. These studios may maintain their own data collection practices relating to game session performance and RNG audit logs. 35nd does not control these studio-side data processes.
• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard each operate independently and are subject to their own privacy policies. 35nd recommends reviewing the privacy policy of your chosen payment method provider to understand how they handle your financial data.
• Analytics and performance tools: 35nd uses anonymised analytics platforms to measure platform performance. These tools are configured to process data without directly identifying individual players wherever possible. No raw identifiable data is exported to external analytics platforms.

The 35nd platform does not contain links to external websites. Where third-party brand names appear on the platform (such as payment method names in the cashier), these are references to the service providers used by 35nd and do not constitute endorsements or direction to third-party websites.

35nd reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made to this policy, registered players will be notified via the contact details held on their 35nd account — this may include notification by email, SMS to the registered Bangladeshi mobile number, or a notice displayed upon next login to the platform.

The effective date of the current version of this Privacy Policy is displayed in the hero section at the top of this page. We recommend reviewing this page periodically to stay informed of how 35nd protects your personal data. Continued use of the 35nd platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

If you do not agree with any change to this Privacy Policy, you must cease using the platform and may request account closure in accordance with the process described in the 35nd Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data that 35nd holds about you, you may contact the 35nd data support team through the following channels:

• Live chat: Available 24 hours a day, seven days a week, directly from within the platform after login. All support agents are trained to handle data privacy enquiries and can escalate your request to the appropriate team. Support operates in Bangladesh Standard Time (BST, UTC+6).
• Email: [email protected] — please note this address is provided as plain text for reference only and is not a clickable link. Include "Privacy Request" in the subject line of your message to ensure prompt routing to the relevant team. Response times for email enquiries are typically within 24 hours during standard operating hours.

When submitting a data rights request or privacy enquiry, please include your registered account username and a description of your request to help us locate your records and respond accurately. 35nd may require proof of identity before disclosing, correcting, or deleting personal data to protect against unauthorised requests.