Your Privacy at 35bp — Our Commitment
This Privacy Policy explains what personal data 35bp collects from players across Bangladesh, the legal grounds on which it is processed, how it is stored and protected, and the rights you hold over your own information. We treat your data with the same seriousness we apply to platform security.
Every data exchange between your device and the 35bp platform is protected by 256-bit SSL encryption — the same standard used by leading international financial institutions. Your login credentials, payment details, and personal information are never transmitted in plain text.
35bp does not sell, rent, or trade your personal data to any third party for marketing purposes. Data shared with our game providers, payment processors, and compliance partners is shared solely to deliver the services you have requested and to meet legal obligations.
Identity documents submitted during verification — including Bangladesh National ID Cards (NID), Smart Cards, and passports — are handled exclusively by our compliance team, stored in encrypted form, and are never accessible to third-party marketing entities or game providers.
Transaction data from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank is processed solely for the purpose of completing deposits and withdrawals. 35bp does not store full payment account credentials on its own servers.
Registered 35bp players may request access to, correction of, or deletion of their personal data at any time by contacting our support team. Requests are processed within 10 business days of receipt of a verified identity confirmation from the account holder.
Promotional communications from 35bp are sent only to players who have opted in during registration or subsequently via their account settings. You may withdraw your marketing consent at any time by updating your notification preferences or by contacting [email protected].
Data We Collect
35bp collects personal data that is necessary for the delivery of its online gaming and sports betting services to players in Bangladesh. We apply a data minimisation principle — we collect only what is required for the specific purposes described in this Privacy Policy, and we do not retain data beyond the periods set out in Section 6. The categories of data we collect are detailed below.
| Data Category | Specific Data Points | Collection Method |
|---|---|---|
| Registration Data | Full name, date of birth, email address, Bangladesh mobile number, chosen username, password (stored as a one-way hash — never in plain text) | Provided directly by you during account registration |
| Identity Verification (KYC) | Bangladesh National ID Card (NID) number, Smart Card number, passport number and expiry, date of birth confirmation, uploaded document images | Provided directly by you when submitting a withdrawal request or when prompted by our compliance team |
| Financial & Payment Data | Mobile wallet numbers (bKash, Nagad, Rocket, Upay), bank account details (DBBL, City Bank, BRAC Bank, Islami Bank, Sonali Bank), deposit and withdrawal transaction references, transaction amounts in BDT | Provided by you during deposit and withdrawal processes; also received from payment providers as transaction confirmation data |
| Gaming Activity Data | Game sessions played, game titles accessed, wager amounts, win/loss outcomes, bonus claims and wagering progress, sports betting selections, bet history | Automatically generated by platform systems as you use the service |
| Technical & Device Data | IP address, browser type and version, device type (mobile/desktop), operating system, screen resolution, session timestamps, referring URL | Automatically collected via server logs and browser data at the time of each platform visit |
| Communication Data | Support chat transcripts, email correspondence with [email protected], submitted complaint or dispute text, feedback form submissions | Collected when you contact 35bp support through any channel |
| Cookie & Tracking Data | Session cookies, preference cookies, analytics identifiers, advertising attribution data | Set automatically upon your first visit to 35bp.app — see Section 5 for full cookie details |
Sensitive data note: 35bp does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is inherent in identity document images submitted for KYC. Identity document images are processed solely for age and identity verification and are not used for any other profiling purpose.
If you choose not to provide the data required for a specific function — for example, declining to submit KYC documents — that specific function (in this case, withdrawal processing) will be unavailable to you until the required data is provided. Declining to provide optional data (such as marketing preferences) will not affect your core access to gaming services.
Legal Basis for Processing
35bp processes your personal data on one or more of the following legal grounds, depending on the specific processing activity. We are committed to processing data only where a clear and legitimate legal basis exists.
The majority of the data 35bp collects is processed because it is strictly necessary to deliver the services you have contracted for when creating an account. This includes processing your registration data to create your account, processing payment data to complete deposits and withdrawals, and processing gaming activity data to provide game access and calculate outcomes.
35bp is required to collect and retain certain data to comply with applicable anti-money laundering (AML) obligations, financial record-keeping requirements, and identity verification standards. KYC data is collected and retained on this basis. 35bp may also be required to disclose data to relevant authorities pursuant to a valid legal request — see Section 4 for details.
Where processing is not required by contract or legal obligation — most notably for marketing communications and non-essential cookies — 35bp relies on your freely given, specific, and informed consent. You may withdraw your consent to marketing communications or non-essential cookies at any time without affecting the lawfulness of processing that occurred before withdrawal.
35bp may process certain data on the basis of its legitimate interests as a business — for example, processing technical and device data to detect and prevent fraud, abuse, and unauthorised account access, and to maintain platform security. Where legitimate interests are relied upon, 35bp has assessed that those interests are not overridden by your fundamental rights and freedoms.
How We Use Your Data
35bp uses the personal data it collects for specific, clearly defined purposes. We do not use your data for any purpose incompatible with the original reason it was collected. The full list of processing purposes is set out below.
- Account creation and management: To register your account, authenticate your identity at login, maintain your account settings and preferences, and communicate platform updates relevant to your account status.
- Service delivery: To provide access to casino games, slots, live dealer games, and sports betting markets; to calculate and credit game winnings to your balance; to process bonus claims and track wagering requirement progress.
- Payment processing: To initiate, verify, and complete deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, and supported Bangladesh bank channels; to maintain transaction records for your account history.
- Identity verification (KYC): To verify that you are who you claim to be, that you are 18 years of age or older, and that your account is not being used for financial crime or fraud. KYC data is processed by our compliance team and is not shared with game providers.
- Fraud and abuse prevention: To detect duplicate accounts, identify automated betting behaviour, investigate suspicious transaction patterns, and respond to chargeback disputes. Technical and device data is central to this processing.
- Responsible gaming monitoring: To monitor gameplay patterns that may indicate problem gambling behaviour — such as unusually rapid deposits, extended sessions, or loss-chasing patterns — and to enforce any deposit limits, time-out periods, or self-exclusion requests you have placed on your account.
- Customer support: To process, investigate, and respond to support requests, complaints, and disputes submitted by you through email or live chat. Support communication data is retained to maintain a complete record of your account history.
- Platform analytics and improvement: To understand how players use the 35bp platform, identify technical issues, improve navigation and user experience, and inform decisions about game selection and promotional strategy. Analytics data is processed in aggregate where possible.
- Marketing communications: To send promotional emails and notifications about 35bp bonuses, new game launches, BPL cricket betting offers, Eid promotions, and other seasonal campaigns — but only where you have given explicit consent to receive such communications.
- Legal compliance and audit: To maintain financial and identity records required by applicable AML obligations, and to respond to valid legal requests from competent authorities in accordance with applicable law.
Automated decision-making: 35bp uses automated systems to flag accounts for fraud review and to enforce self-exclusion restrictions. These automated systems do not make final determinations — a member of the 35bp compliance team reviews all flagged accounts before any enforcement action is taken. You have the right to request human review of any automated decision that materially affects your account.
Data Sharing & Third Parties
35bp does not sell or rent your personal data to third parties. We share data only with the categories of recipient listed below, strictly for the purposes described, and only to the extent necessary to fulfil those purposes. All third-party data processors engaged by 35bp are bound by contractual data protection obligations consistent with this Privacy Policy.
| Recipient Category | Data Shared | Purpose |
|---|---|---|
| Game Providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) | Anonymous session token, game session data, wager amounts | To deliver game content, calculate outcomes, and return results to your session. Providers do not receive your name, NID, or payment data. |
| Payment Processors (bKash, Nagad, Rocket, Upay, partner banks) | Transaction reference, amount in BDT, your registered mobile or bank account number | To process deposit and withdrawal transactions on your behalf. Payment processors receive only what is technically required to complete the transaction. |
| Identity Verification Partners | Name, date of birth, NID/passport number, document image | To complete Know Your Customer (KYC) verification. Identity verification partners are bound by strict confidentiality agreements and process data solely for the purpose of verification. |
| Analytics Providers | Anonymised or pseudonymised browsing and session data, device type, IP address (truncated) | To generate aggregate platform usage analytics. Raw personal data is not shared; analytics data is processed in a form that cannot reasonably identify individual users. |
| Legal and Regulatory Authorities | Account data, transaction records, and identity data as required by a valid legal request | To comply with binding legal obligations, court orders, or official regulatory investigations. 35bp will notify affected users of any disclosure where legally permitted to do so. |
| Fraud Prevention Services | IP address, device fingerprint, account creation metadata | To detect and prevent the creation of fraudulent accounts, bonus abuse, and money laundering. Data is shared on a need-to-know basis with service providers operating under strict contractual restrictions. |
International data transfers: Some of 35bp's third-party service providers — particularly game studios and analytics platforms — may be located outside Bangladesh. Where personal data is transferred internationally, 35bp takes reasonable steps to ensure that the recipient provides an adequate level of data protection through contractual safeguards. By using the 35bp platform, you acknowledge that your data may be transferred to and processed in countries outside your jurisdiction for the purposes described in this Privacy Policy.
Cookies & Tracking Technologies
35bp uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, analyse platform usage, and (where you have consented) to deliver relevant promotional communications. This section explains what cookies we use, why we use them, and how you can control them.
Session management, authentication tokens, CSRF protection, load balancer routing. These cookies are essential for the platform to function and cannot be disabled without breaking core functionality. No consent is required for strictly necessary cookies.
Language settings, game view preferences, notification settings, sports betting display preferences. These cookies remember choices you have made to personalise your experience. Disabling them means your preferences will not be saved between sessions.
Page view tracking, session duration, navigation path analysis, error logging. These cookies help 35bp understand how the platform is used so we can improve the experience. Analytics data is processed in aggregate and is not linked to individual identities. Consent is required.
Promotional attribution tracking, affiliate referral identification, campaign response measurement. These cookies are set only if you have opted in to marketing communications. They do not track your activity outside the 35bp.app domain and are not shared with advertising networks.
Cookie duration: Session cookies expire when you close your browser. Persistent cookies — including preference and analytics cookies — are retained for a maximum of 12 months from the date they are set, after which they expire and are renewed only if you continue to use the platform.
Managing cookies: You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies, or to be notified before a cookie is set. Please note that disabling strictly necessary cookies will prevent you from logging in and using real-money gaming services. Instructions for managing cookies are available in the help documentation for Chrome, Firefox, Safari, and all major mobile browsers. On Android devices — the most common browser environment among 35bp players in Dhaka, Chittagong, and across Bangladesh — cookie settings are accessible via the browser's privacy menu.
Data Retention & Storage
35bp retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and compliance obligations. The retention periods applicable to each data category are detailed in the table below. Upon expiry of the applicable retention period, data is either securely deleted or irreversibly anonymised.
| Data Category | Retention Period | Basis for Retention |
|---|---|---|
| Account Registration Data | Duration of active account + 5 years after account closure | Contractual obligation and AML record-keeping requirements |
| Identity Verification (KYC) Documents | 5 years from the date of verification completion | Anti-money laundering legal obligation |
| Financial Transaction Records | 7 years from the date of each transaction | Financial record-keeping legal obligation |
| Gaming Activity Data (bet history) | 3 years from the date of each session | Contractual necessity and responsible gaming monitoring |
| Support Communication Records | 3 years from the date of last interaction | Legitimate interests (dispute resolution, quality assurance) |
| Technical & Device Data (server logs) | 90 days from the date of collection | Legitimate interests (fraud detection, security monitoring) |
| Analytics Data | 13 months from the date of collection (anonymised after 30 days) | Consent (anonymised data is no longer personal data) |
| Marketing Consent Records | Until consent is withdrawn + 1 year for audit purposes | Legal obligation to demonstrate valid consent basis |
Storage location: 35bp's primary data infrastructure is hosted on servers with physical access controls, redundant power systems, and industry-standard network security configurations. All stored personal data is encrypted at rest using AES-256 encryption. Backups are retained for a maximum of 30 days and are subject to the same encryption and access control standards as primary storage.
Closed and self-excluded accounts: When an account is closed — whether voluntarily, by 35bp, or through a self-exclusion request — your ability to log in and use the platform is terminated immediately. However, your data is retained for the periods specified above to comply with legal obligations and to protect the platform against fraudulent account creation attempts by previously excluded individuals. Self-exclusion records are retained indefinitely to ensure that a re-registration attempt by a self-excluded player can be identified and declined.
Your Privacy Rights
As a 35bp account holder, you hold a number of rights in relation to your personal data. 35bp is committed to honouring these rights promptly and without unnecessary delay. All rights requests must be submitted in writing to [email protected]. We will acknowledge your request within 3 business days and respond in full within 10 business days of verifying your identity. There is no charge for exercising any of the rights listed below.
You may request a complete copy of the personal data 35bp holds about you. We will provide this in a structured, commonly used format. This includes your registration data, KYC records, transaction history, gaming activity data, and communication records within the applicable retention periods.
If any personal data held by 35bp is inaccurate or incomplete, you have the right to request that it be corrected. This includes updating your registered mobile number, email address, or legal name following a formal name change supported by documentation.
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn the consent on which processing was based. This right is subject to 35bp's legal retention obligations — data required by law (e.g., AML records) cannot be deleted before the mandatory retention period expires.
You may request that 35bp restrict the processing of your data — for example, while a dispute is being investigated, or while you contest the accuracy of data held about you. During a restriction period, 35bp will retain the data but will not use it for any processing beyond what is strictly required by legal obligation.
You may request that we provide your personal data in a structured, machine-readable format so that you can transfer it to another service provider. This right applies to data you have provided directly to 35bp that is processed on the basis of consent or contractual necessity.
You may object to the processing of your personal data where 35bp relies on legitimate interests as its legal basis. If you object to marketing communications specifically, your request will be actioned within 24 hours and you will not receive any further promotional messages from 35bp. An opt-out link is included in every marketing email we send.
Identity verification for rights requests: To protect your privacy and prevent unauthorised access to your data, 35bp requires identity verification before processing any rights request. You will be asked to confirm ownership of your registered email address and Bangladesh mobile number, and may be asked to provide a copy of your NID or equivalent document. Rights requests submitted without sufficient identity verification cannot be acted upon.
Contact & Policy Updates
If you have any questions about this Privacy Policy, wish to exercise a data subject right, or need to report a suspected data security incident involving your 35bp account, please contact us at [email protected]. Our support team handles privacy-related enquiries Monday through Sunday, with responses delivered within 2–4 hours during Bangladesh Standard Time (BST, UTC+6) business hours.
For all privacy-related requests — including data access, rectification, erasure, portability, restriction, and objection requests — please email [email protected] with the subject line "Privacy Request — [Your Username]". Include your registered email address and Bangladesh mobile number so our team can verify your identity before processing the request. Do not include copies of identity documents in your initial email; our team will request these separately through a secure channel if required.
Policy updates: 35bp reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made, we will notify registered account holders via their registered email address at least 14 days before the updated policy takes effect. The updated policy will also be published on this page with a revised "Last Updated" date at the top. Continued use of the 35bp platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms.
Minor updates: Non-material changes — such as corrections of typographical errors, clarifications that do not alter the substance of the policy, or updates to contact information — may be made without advance notice. We recommend reviewing this page periodically to stay informed of any changes.
This Privacy Policy was last reviewed and updated in January 2026. It supersedes all previous versions of the 35bp privacy notice. The current version of this policy is the definitive statement of 35bp's data protection practices and applies to all registered players regardless of their location within Bangladesh, including players in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.
Continue Exploring 35bp
Now that you understand how 35bp handles your data, explore the full platform — from live BPL cricket betting to 500+ certified slots and real-dealer casino games. All major Bangladesh payment methods supported.
18+ only. Please gamble responsibly. If gambling is affecting your life negatively, visit our Responsible Gaming page.