35dg Privacy Policy — How We Handle Your Personal Data
Your privacy matters to us. This Privacy Policy explains exactly what personal data 35dg collects, why we collect it, how it is stored and protected, who it may be shared with, and what rights you have as a player on the platform.
Your Privacy at a Glance
The cards below summarise the core principles that govern how 35dg handles your personal data. Full details for each principle are provided in the numbered policy sections that follow.
Secure by Default
All data transmitted between your device and the 35dg platform is protected by 256-bit SSL encryption. Internal access to player data is restricted to authorised personnel only, operating under strict access-control policies.
Purpose-Limited Collection
35dg collects only the personal data that is genuinely necessary to operate your account, process payments, verify your identity, and comply with applicable legal obligations. We do not collect data speculatively or without a defined purpose.
No Selling of Your Data
35dg does not sell, rent, or trade your personal data to third-party advertisers or data brokers. Your information is shared only with the service providers and partners listed in this policy, and only to the extent necessary to deliver the platform.
Your Rights, Respected
You have the right to access, correct, and request deletion of your personal data at any time. Submit a data request by contacting our support team at [email protected]. We will respond within 30 days of receiving a valid request.
Transparent Cookie Use
35dg uses cookies and similar technologies solely for session management, platform performance optimisation, and fraud detection. We do not use third-party advertising cookies or behavioural tracking pixels on our platform.
Accountable & Auditable
35dg maintains internal data processing records and conducts regular reviews of our data handling practices. This Privacy Policy is updated whenever our practices change, and the effective date at the top of the document reflects the most recent revision.
1Introduction
This Privacy Policy ("Policy") describes how 35dg ("35dg", "we", "us", "our") collects, uses, stores, shares, and protects personal data obtained from individuals ("you", "Player", "User") who access or use the 35dg online betting and casino platform at 35dg.io ("Platform").
By creating an account on the Platform, making a deposit, placing a wager, or simply browsing the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with this Policy, you must discontinue use of the Platform immediately.
This Policy is incorporated by reference into the 35dg Terms and Conditions. In the event of any conflict between this Policy and the Terms and Conditions, the Terms and Conditions shall prevail except where this Policy imposes a higher standard of data protection, in which case this Policy shall govern.
Plain English Summary: We only collect what we need, we keep it secure, we never sell it, and we give you control over it. The sections below explain each of these commitments in full legal detail.
2Data Controller
35dg acts as the data controller in respect of all personal data collected through the Platform. As data controller, 35dg determines the purposes for which and the means by which personal data is processed.
For all data-related enquiries, requests, or complaints, you may contact our Data Protection team at:
- Email: [email protected]
- Subject Line: Data Protection Request
- Response Time: Within 30 calendar days of receipt of a valid, verifiable request
Where 35dg engages third-party service providers to process personal data on its behalf, those providers act as data processors under binding contractual arrangements that require them to protect your data in accordance with standards no less stringent than those set out in this Policy.
3Personal Data We Collect
3.1 Registration Data
When you create a 35dg account, we collect the information you provide during the registration process, including your full legal name, date of birth, residential address, email address, phone number, and chosen username.
3.2 Identity Verification (KYC) Data
To comply with our Know Your Customer obligations and to prevent underage gambling, we may collect copies of government-issued identification documents (National ID card, passport, or driving licence), proof of address (utility bill or bank statement), and, where required, source-of-funds documentation.
3.3 Financial Data
When you make deposits or request withdrawals, we collect transactional data including the payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or supported Bangladeshi bank accounts), the amount transacted, and the transaction reference numbers. We do not store full payment card numbers on our servers; card data is handled by our PCI-DSS compliant payment processor.
3.4 Usage and Behavioural Data
We automatically collect certain technical and behavioural data when you interact with the Platform, including your IP address, device type and operating system, browser type and version, session duration, pages and games visited, bet history, and in-platform navigation patterns. This data is used to maintain platform performance, detect fraud, and improve the user experience.
3.5 Communications Data
When you contact our support team — whether via live chat, email, or any other channel — we retain records of those communications, including the content of messages and any attachments, for quality assurance and dispute-resolution purposes.
Data Minimisation: 35dg applies a data-minimisation principle. We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health data unless it is directly relevant to a responsible gaming assessment conducted at the player's own request.
3.6 Summary of Data Categories
| Category | Examples | Primary Purpose |
|---|---|---|
| Registration Data | Name, DOB, email, phone, address | Account creation & management |
| KYC / Identity Data | National ID, passport, proof of address | Age verification & compliance |
| Financial Data | Payment method, transaction amounts, references | Deposit / withdrawal processing |
| Usage Data | IP address, device info, bet history, session logs | Security, fraud detection, UX improvement |
| Communications Data | Support chat logs, email correspondence | Customer support & dispute resolution |
| Cookie Data | Session tokens, preference cookies | Platform functionality & performance |
4How We Use Your Personal Data
35dg uses the personal data we collect for the following purposes:
- Account Management: To create, maintain, and administer your 35dg account, including processing login requests, updating account settings, and managing account closure requests.
- Identity Verification: To verify that you meet the minimum age requirement of 21 years and to confirm your identity in accordance with our KYC obligations.
- Payment Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported Bangladeshi payment channels, and to reconcile transactional records.
- Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, and any other prohibited conduct as defined in our Terms and Conditions.
- Regulatory Compliance: To fulfil our obligations under applicable laws and regulations, including responding to lawful requests from competent authorities.
- Platform Improvement: To analyse usage patterns and technical performance data in order to improve the reliability, security, and feature set of the Platform.
- Customer Support: To respond to your enquiries, resolve disputes, and provide assistance with account and payment issues.
- Responsible Gaming: To monitor gameplay patterns for signs of problem gambling and to apply responsible gaming tools such as deposit limits or self-exclusion at your request or where required by our internal safeguarding policies.
- Promotional Communications: Where you have expressly opted in, to send you personalised promotions, bonus offers, and platform news relevant to your interests. You may opt out at any time by contacting support.
5Legal Bases for Processing
35dg processes your personal data only where a valid legal basis exists for doing so. The legal bases we rely on are as follows:
- Contractual Necessity: Processing required to fulfil our obligations under the contract formed between you and 35dg when you register an account — including account management, payment processing, and bet settlement.
- Legal Obligation: Processing required to comply with applicable laws, including KYC and anti-money laundering requirements, and to respond to lawful requests from regulatory authorities.
- Legitimate Interests: Processing carried out for purposes that are necessary to pursue the legitimate interests of 35dg, such as fraud prevention, platform security, and improvement of our services, provided those interests are not overridden by your fundamental rights and freedoms.
- Consent: Where we rely on your consent — for example, to send you promotional communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
6Data Sharing and Disclosure
6.1 Service Providers
35dg shares personal data with third-party service providers who assist us in operating the Platform. These include payment processors (such as the technology partners behind bKash, Nagad, and Rocket integrations), identity verification service providers, game software suppliers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), cloud infrastructure providers, and customer support platform operators. All service providers are contractually bound to use your data solely for the purpose of providing the specified service to 35dg and to maintain appropriate data security standards.
6.2 Regulatory and Law Enforcement Authorities
35dg may disclose personal data to competent governmental, regulatory, or law enforcement authorities where we are required or permitted to do so by applicable law, where necessary to protect the legal rights or safety of 35dg, its employees, or other players, or where we are required to respond to a valid court order or regulatory demand.
6.3 Business Transfers
In the event that 35dg undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy terms applicable to your data in the hands of the new entity.
6.4 No Sale of Data
35dg does not sell, rent, license, or otherwise trade your personal data to third-party advertisers, data brokers, or any other commercial parties for their independent marketing or profiling purposes. This commitment applies without exception.
Important: When you use third-party payment providers such as bKash or Nagad to make deposits or withdrawals, those providers operate under their own separate privacy policies. 35dg is not responsible for the data practices of third-party payment platforms. Please review their respective privacy policies before transacting.
7International Data Transfers
35dg's Platform is operated from servers located in secure data centres. Where personal data is transferred to or processed in a country outside of Bangladesh, 35dg takes steps to ensure that appropriate safeguards are in place to protect your data. These safeguards may include standard contractual clauses, data processing agreements that impose equivalent data protection obligations on the receiving party, or other legally recognised transfer mechanisms.
By using the Platform, you acknowledge that your personal data may be transferred to and processed in countries outside Bangladesh as described in this section. Where such transfers occur, 35dg ensures that the data receives a standard of protection that is consistent with this Policy.
8Data Retention
35dg retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve any disputes or enforce our agreements. The specific retention periods that apply to the main categories of data we hold are summarised below:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Registration Data | Duration of account + 5 years after closure | Legal obligation / contractual |
| KYC / Identity Documents | 5 years from account closure | Regulatory / AML compliance |
| Financial Transaction Records | 7 years from transaction date | Legal / audit obligation |
| Betting & Gaming History | 5 years from account closure | Dispute resolution / compliance |
| Support Communications | 3 years from last interaction | Legitimate interests |
| Usage / Technical Logs | 12 months on a rolling basis | Security / fraud detection |
| Marketing Preferences | Until consent withdrawn + 1 year | Consent |
After the applicable retention period has expired, personal data is securely deleted or anonymised so that it can no longer be attributed to any identifiable individual.
9Cookies and Similar Technologies
9.1 What Are Cookies
Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and to remember certain information about your preferences and session state. 35dg also uses similar technologies such as local storage and session tokens for equivalent purposes.
9.2 Cookies We Use
- Essential Cookies: Strictly necessary for the Platform to function. These include session authentication tokens, CSRF protection cookies, and load-balancing identifiers. Essential cookies cannot be disabled without impairing Platform functionality.
- Performance Cookies: Used to collect anonymised data about how players interact with the Platform — such as which pages are visited most frequently and how long sessions last — to help us improve performance and reliability.
- Preference Cookies: Used to remember your Platform settings and preferences, such as display language and notification preferences, so you do not need to reconfigure them on each visit.
- Security Cookies: Used by our fraud detection systems to identify unusual access patterns and to flag potentially compromised accounts for additional verification.
9.3 What We Do Not Use Cookies For
35dg does not use third-party advertising cookies, retargeting pixels, or any tracking technology that shares your browsing behaviour with external advertising networks. We do not deploy social media tracking buttons or pixels on the Platform.
Cookie Management: You may configure your browser settings to refuse or delete cookies at any time. Please note that disabling essential cookies will affect your ability to log in and use core Platform features. Performance and preference cookies can be disabled without affecting core functionality.
10Your Data Rights
Subject to applicable law, you have the following rights in relation to the personal data that 35dg holds about you:
- Right of Access: You may request a copy of the personal data we hold about you, together with information about how it is processed.
- Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
- Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
- Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances, for example while a correction request is being assessed.
- Right to Data Portability: You may request a copy of the personal data you have provided to us in a structured, commonly used, machine-readable format.
- Right to Object: You may object to processing based on legitimate interests at any time, and you may withdraw consent for processing based on consent at any time.
- Right to Withdraw Marketing Consent: You may unsubscribe from promotional communications at any time by contacting support at [email protected]. Withdrawal of marketing consent does not affect processing for other purposes.
To exercise any of the above rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request". We will verify your identity before processing your request and will respond within 30 calendar days. We reserve the right to decline requests that are manifestly unfounded or excessive.
Please note: Certain data rights may be limited where retention is required to comply with legal obligations — for example, financial transaction records required for anti-money laundering purposes cannot be deleted on request during the applicable statutory retention period.
11Children's Privacy and Underage Player Protection
The 35dg Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that a registered account belongs to a person under 21, we will immediately suspend the account, delete all associated personal data to the extent permitted by applicable law, and return any deposited funds to the original payment source after verifying ownership.
If you have reason to believe that a person under the age of 21 has registered an account on the Platform, please notify us immediately at [email protected] so that we can take appropriate action without delay.
Parents and guardians of minors who may have been exposed to the Platform are encouraged to make use of parental control software to restrict access to online gambling websites. 35dg supports responsible parenting and the protection of minors from gambling-related harm.
12Security Measures
35dg implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
- Encryption at rest for sensitive data categories including identity documents and payment records.
- Role-based access controls that restrict internal access to personal data on a strict need-to-know basis.
- Multi-factor authentication requirements for all administrative access to production systems.
- Continuous automated monitoring of system logs for anomalous access patterns and intrusion attempts.
- Regular third-party penetration testing and security audits of the Platform infrastructure.
- Formal data breach response procedures including incident classification, containment, and notification protocols.
Despite these measures, no system is entirely immune to security incidents. In the event of a data breach that is likely to result in a risk to your rights and freedoms, 35dg will notify affected players without undue delay and will take all appropriate remedial action.
Your Responsibility: The security of your account also depends on you keeping your login credentials confidential. Never share your 35dg username or password with anyone. 35dg support staff will never ask for your password through any channel.
13Updates to This Privacy Policy
35dg reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. When material changes are made, we will update the effective date shown at the top of this page and, where practicable, notify registered players via email or an in-account notification prior to the changes taking effect.
We encourage you to review this Policy periodically to stay informed about how 35dg protects your personal data. Your continued use of the Platform after the publication of an updated Policy constitutes your acceptance of the revised terms.
Previous versions of this Policy are available on request by contacting our support team at [email protected].
14Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way 35dg processes your personal data, please contact our Data Protection team using the details below. All correspondence should be in English.
- Email: [email protected]
- Subject Line: Privacy Policy Enquiry
- Support Hours: 24 hours a day, 7 days a week
- Response Time: Data rights requests — within 30 calendar days; general enquiries — within 24 hours
For general account support, our live chat team is available around the clock and will typically respond within 5 minutes. For formal data rights requests, email is the preferred channel as it creates a written record of your request.
Related Policies: This Privacy Policy should be read alongside the 35dg Terms & Conditions and our Responsible Gaming page, both of which contain additional information relevant to your use of the Platform.
Your Data is Safe — Now Enjoy the Platform
With your privacy protected by 256-bit SSL encryption and strict data policies, you can focus on what matters — great sports betting, live casino, and instant games at 35dg.
21+ Only Please play responsibly. Visit our Responsible Gaming page for support tools and guidance.