35pd Privacy Policy

35pd operates the online betting and casino platform accessible at 35pd.io, serving players primarily in Bangladesh. For the purposes of this Privacy Policy, 35pd is the data controller responsible for the personal data collected and processed through use of the platform.

We provide a range of gaming and betting services including sports betting (with a particular focus on cricket, including BPL, IPL, and T20 World Cup events), live casino, slots, Triple, Color Prediction, and other interactive products. Each of these services involves the collection and processing of personal data as described in this policy.

If you have any questions about how 35pd handles your personal data, or if you wish to exercise any data right described in this policy, you may contact our data support team directly at [email protected]. All data-related correspondence is handled in English and we aim to respond within two Bangladesh Standard Time (BST, UTC+6) business days.

35pd collects personal data in several categories depending on how you interact with the platform. The categories of data we may hold about you include:

Identity Data: Full legal name, date of birth, gender, national identity card (NID) number or passport number, and any other government-issued identification detail provided during account registration or identity verification.

Contact Data: Email address, Bangladesh mobile phone number, and residential address (city/district, including references to locations such as Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar where applicable).

Account Data: Username, encrypted password, account creation date and time, account status, and a record of any changes made to account settings.

Financial Data: Deposit and withdrawal transaction records, payment method identifiers (such as your registered bKash, Nagad, Rocket, or Upay mobile wallet number, or masked card details for Visa and Mastercard transactions), transaction timestamps, and amounts in Bangladeshi Taka (BDT).

Gaming & Betting Data: Records of all bets placed, games played, results, wager amounts, bonus usage, session durations, and any in-platform communications related to gameplay.

Technical Data: IP address, device type, operating system, browser type and version, screen resolution, time zone (BST/UTC+6), cookies and session tokens, and referring URL.

Behavioural Data: Pages visited on 35pd, click patterns, search queries within the platform, feature usage frequency, and other analytics data collected to improve platform performance and user experience.

Communications Data: Records of any messages, emails, chat transcripts, or support tickets exchanged between you and the 35pd support team.

35pd collects personal data through the following means:

• Direct submission: Information you provide when you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, or respond to a survey or promotional campaign;
• Automated collection: Technical and behavioural data collected automatically as you browse and interact with the 35pd platform, including via cookies, server logs, and similar tracking technologies (see Section 7);
• Payment processors: Transaction confirmation data passed to 35pd by authorised payment service providers including bKash, Nagad, Rocket, Upay, and card processing partners when you initiate a deposit or withdrawal;
• Identity verification partners: Results and data outputs from third-party Know Your Customer (KYC) and age verification checks conducted on your submitted identity documents;
• Third-party sources: Where permitted by law, 35pd may supplement its records with information from publicly available sources or from fraud prevention and anti-money laundering databases.

35pd uses your personal data for the following purposes:

• Account management: To create, maintain, and manage your registered account on the 35pd platform, including processing login requests and updating account preferences;
• Service delivery: To provide you with access to betting markets, casino games, slots, Triple, Color Prediction, and all other products offered on 35pd;
• Payment processing: To process deposits and withdrawal requests accurately and securely, including passing necessary transaction details to payment service providers;
• Identity and age verification: To verify that you meet the minimum age requirement of 21 years, and to confirm your identity in accordance with our Know Your Customer obligations;
• Fraud and security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, and other prohibited conduct as described in our Terms and Conditions;
• Responsible gaming: To monitor gameplay patterns for indicators of problem gambling behaviour and to administer self-exclusion, deposit limits, cooling-off periods, and other responsible gaming tools;
• Customer support: To respond to your queries, complaints, and support requests, and to maintain a record of support interactions;
• Platform improvement: To analyse aggregated behavioural and technical data to improve the performance, design, and content of the 35pd platform;
• Marketing: To send you promotional communications about 35pd offers, bonuses, and seasonal promotions — but only where you have provided explicit consent to receive such communications (see Section 12);
• Legal compliance: To meet our obligations under applicable law, including retaining transaction records and responding to lawful requests from competent authorities.

35pd processes your personal data on one or more of the following legal bases, depending on the specific purpose of processing:

• Contractual necessity: Processing is necessary to perform the contract between you and 35pd (i.e., our Terms and Conditions), including account management, game delivery, and payment processing;
• Legal obligation: Processing is required to comply with applicable law, including anti-money laundering regulations, age verification requirements, and tax and financial record-keeping obligations;
• Legitimate interests: Processing is in the legitimate interests of 35pd (or a third party), including fraud prevention, platform security, responsible gaming monitoring, and improving the quality of our services — provided those interests are not overridden by your rights and interests;
• Consent: Where we process your data for optional purposes such as marketing communications, we do so only on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal.

35pd may share your personal data with the following categories of third party:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank — to process your deposit and withdrawal transactions. These providers receive only the minimum data necessary to complete the specific transaction;
• Identity verification providers: Third-party KYC and age verification partners who process your submitted identity documents to confirm your eligibility to use the platform;
• Technology and infrastructure providers: Cloud hosting, server management, cybersecurity, and analytics providers who process data on 35pd's behalf under strict data processing agreements. These providers are not permitted to use your data for any purpose other than providing services to 35pd;
• Game content providers: Software providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session and game data for technical performance purposes. No directly identifiable personal data is shared with game providers;
• Legal and regulatory authorities: Where 35pd is required by applicable law, court order, or legitimate regulatory request to disclose personal data, we will comply with such requirements and, where legally permitted, will inform you of any such disclosure.

All third parties with whom 35pd shares personal data are required to handle that data in a manner consistent with this Privacy Policy and applicable data protection law. 35pd does not permit third-party service providers to use your personal data for their own independent commercial purposes.

35pd uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. The categories of cookies used by 35pd are as follows:

• Strictly necessary cookies: These are essential for the platform to function correctly. They enable core features such as session authentication, account login persistence, and security token validation. These cookies cannot be disabled without affecting platform functionality;
• Performance and analytics cookies: These collect anonymised data about how users interact with the 35pd platform — which pages are visited most frequently, how long sessions last, and where technical errors occur. This data is used exclusively to improve platform performance;
• Functional cookies: These remember your preferences (such as language settings and display preferences) to provide a more personalised experience across sessions;
• Marketing cookies: Where you have consented, these cookies enable 35pd to deliver relevant promotional content about bonuses, seasonal offers (such as Eid, BPL season, and Pohela Boishakh promotions), and new game launches. You may opt out of marketing cookies at any time by adjusting your browser settings or contacting support.

You can manage or delete cookies at any time through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use the 35pd platform. For a full list of cookies used by 35pd and their individual purposes, contact [email protected].

The following security measures are in place across the 35pd platform:

• 256-bit SSL/TLS encryption: All data transmitted between your device and 35pd servers is encrypted using 256-bit Secure Socket Layer (SSL) / Transport Layer Security (TLS) protocols. This protects your login credentials, personal details, and financial data in transit;
• Password hashing: Account passwords are never stored in plain text. They are stored as cryptographic hashes using industry-standard one-way hashing algorithms. 35pd staff cannot read or retrieve your password;
• Access controls: Access to systems containing personal data is restricted to authorised personnel only, on a need-to-know basis. All internal access is logged and monitored;
• Firewalls and intrusion detection: 35pd servers are protected by multi-layer firewalls and real-time intrusion detection systems. Suspicious access patterns trigger automatic alerts and investigation;
• Regular security audits: 35pd conducts periodic security assessments of its infrastructure, including vulnerability scanning and penetration testing, to identify and address potential weaknesses before they can be exploited.

While 35pd applies rigorous security practices, no digital platform can guarantee absolute security against all possible threats. You are responsible for maintaining the confidentiality of your own account credentials. If you suspect any unauthorised access to your account, contact [email protected] immediately.

35pd retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following general retention principles apply:

• Active account data: Personal, account, financial, and gaming data is retained for the full duration that your account remains active on the 35pd platform;
• Closed account data: Following account closure, 35pd retains your data for a minimum period of five years to comply with anti-money laundering record-keeping requirements and to resolve any outstanding disputes or legal claims. The specific retention period may be longer depending on the nature of the data and the applicable regulatory requirement;
• Marketing data: Where you have consented to marketing communications, your marketing preferences and associated contact data are retained until you withdraw consent or for 24 months of inactivity, whichever comes first;
• Technical logs: Server logs, access logs, and security event logs are typically retained for 12 months and then deleted or anonymised, unless a specific security or legal investigation requires longer retention;
• Support communications: Records of customer support interactions are retained for three years from the date of the last interaction.

When a retention period expires, 35pd will securely delete or irreversibly anonymise the relevant personal data so that it can no longer be associated with any individual.

As a user of the 35pd platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact 35pd at [email protected] with the subject line "Data Rights Request" and your registered username. We will respond within a reasonable timeframe and no later than 30 days from receipt of a valid request.

35pd will not charge a fee for handling standard data rights requests. Where a request is manifestly unfounded, repetitive, or excessive, 35pd reserves the right to charge a reasonable administrative fee or decline to act on the request, with written explanation provided.

35pd enforces age verification checks during the registration process and may request documentary proof of age at any stage of account use. If 35pd discovers — through its own processes or following a report — that personal data belonging to a person under the age of 21 has been collected, the following steps will be taken immediately:

• The associated account will be suspended and access blocked;
• Any funds held in the account will be returned to the registered payment source after verification, subject to applicable legal requirements;
• All personal data associated with the underage account will be securely deleted once the account closure process is complete and any mandatory reporting obligations have been met.

If you are a parent or guardian and believe that a person under 21 in your care has registered on the 35pd platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

35pd may, with your explicit consent, send you promotional communications about bonuses, seasonal promotions, new game launches, and other offers available on the platform. These communications may be sent by email or mobile notification to your registered contact details.

Marketing communications from 35pd may include references to time-sensitive promotions such as:

• Welcome bonuses and first deposit match offers;
• Seasonal promotions tied to the BPL cricket season, IPL, T20 World Cup, and FIFA events;
• Cultural celebration offers for Eid, Pohela Boishakh (Bengali New Year), and other Bangladesh market occasions;
• New game announcements from providers including Pragmatic Play, Evolution Gaming, Spribe, and others;
• VIP and loyalty reward notifications for eligible players.

You may withdraw your consent to receive marketing communications at any time by contacting [email protected] with the subject line "Unsubscribe" and your registered username. Once your opt-out request has been processed, 35pd will cease sending marketing communications within a reasonable timeframe, typically no longer than 5 Bangladesh Standard Time business days. Withdrawing marketing consent does not affect the lawfulness of any communications sent prior to withdrawal, and does not impact your ability to continue using the 35pd platform.

Note that even if you opt out of marketing communications, 35pd may still send you transactional and service-related messages — such as deposit confirmations, withdrawal notifications, account security alerts, and identity verification requests — as these are essential to operating your account and cannot be disabled while your account remains active.

35pd reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, new platform features, changes in our data processing practices, or feedback from users and regulators. The "Last Updated" date displayed at the top of this page will be revised each time a material change is made.

Where a change is material — meaning it significantly affects your rights or how your personal data is handled — 35pd will take reasonable steps to notify you in advance. This may include displaying a notice on the 35pd platform, sending an email to your registered address, or both, depending on the nature of the change.

Your continued use of the 35pd platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any change to this Privacy Policy, you should stop using the platform and contact [email protected] to discuss your options, including account closure.

We encourage you to review this Privacy Policy periodically to stay informed about how 35pd is protecting and using your personal data. The most current version of this policy is always available at 35pd.io/privacy-policy.

If you have any questions about this Privacy Policy, wish to exercise a data right, or want to raise a complaint about how 35pd has handled your personal data, please reach out to our support team using the contact details below. All privacy-related communications are handled in English and are treated with strict confidentiality.

35pd aims to acknowledge all privacy-related communications within 24 hours (BST) and to provide a substantive response within 15 business days. For complex requests — such as full data access requests involving large volumes of records — we may require up to 30 days and will inform you of any extension in writing.

If you are not satisfied with 35pd's response to a privacy complaint, you may escalate the matter to a senior review by replying to any previous correspondence and requesting escalation. 35pd is committed to resolving all privacy concerns fairly, transparently, and in accordance with applicable data protection principles.