Privacy Policy

35nd collects personal data through several channels: directly from you when you register an account, use our services, or contact support; automatically through your interactions with our platform (such as gameplay logs, session data, and device information); and from third-party service providers such as payment processors and identity verification partners. We collect only the minimum data necessary for each identified purpose.

The following table summarises the main categories of personal data we collect and the primary reason for collecting each category:

We do not intentionally collect sensitive personal data beyond what is required for KYC and AML obligations. We do not collect data from individuals we know to be under the age of 18. If we become aware that data belonging to an underage individual has been submitted to 35nd, that data will be deleted promptly and the associated account closed. If you believe a minor has submitted personal data to 35nd, please contact us immediately at [email protected].

35nd processes your personal data only for clearly defined, lawful purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The following sets out the primary purposes for which we use each category of data and the legal basis that justifies that processing.

• Account Registration and Management: We use your identity and contact data to create and maintain your 35nd account, verify your eligibility, enforce the one-account-per-person policy, and communicate important account-related notices to you.
• Payment Processing: Financial data is used to execute deposit and withdrawal transactions via your chosen payment method (bKash, Nagad, Rocket, Upay, or bank transfer), to reconcile accounts, and to detect fraudulent or suspicious transactions.
• Identity Verification (KYC/AML): We are required to verify the identity of players prior to processing significant withdrawals and on an ongoing basis where risk indicators are present. KYC document data is used solely for this verification purpose and for compliance with applicable anti-money laundering standards.
• Responsible Gaming: Usage and gameplay data is monitored to identify patterns that may indicate problem gambling behaviour. Where such patterns are detected, 35nd may take proactive steps including displaying responsible gaming notifications, imposing cooling-off periods, or contacting the player directly.
• Security and Fraud Prevention: Technical data including IP addresses, device fingerprints, and session tokens is used to detect unauthorised account access, identify multi-accounting, and protect the integrity of the platform and all players on it.
• Customer Support: Support data (chat transcripts, email records) is retained to manage your enquiries and complaints, to train support staff, and to maintain an audit trail for dispute resolution purposes.
• Marketing Communications: Where you have given explicit consent, we may use your contact data and marketing preferences to send you promotional offers, bonus announcements, and seasonal campaign communications relevant to your interests (e.g., BPL cricket promotions, Eid bonus offers). You may withdraw your marketing consent at any time by contacting [email protected].
• Platform Improvement: Aggregated and anonymised usage data is used to analyse platform performance, improve game offerings, and enhance the overall player experience. This data is not linked to any individual player.
• Legal Compliance: Where required by applicable law or a lawful authority, we may process and disclose your data to fulfil regulatory obligations, respond to lawful requests, or enforce our Terms & Conditions.

35nd does not use automated decision-making processes that produce legal or similarly significant effects on players without human review. Where automated tools flag an account for investigation (e.g., for suspected fraud or multi-accounting), a qualified member of the 35nd compliance team reviews the case before any enforcement action is taken.

35nd does not sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes. We share your data only where it is strictly necessary to deliver our services, fulfil a legal obligation, or protect the safety and integrity of the platform. The categories of third parties with whom we may share data are limited to the following:

• Payment Service Providers: bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and card networks (Visa, Mastercard) receive the minimum financial data required to process your transactions. These providers operate under their own privacy policies and applicable financial regulations.
• Identity Verification Partners: Third-party KYC and AML screening services may receive identity document data and biographical information for the purpose of verifying your identity and screening against sanctions and watchlists. These partners are contractually bound to use your data only for the agreed verification purpose.
• Game Content Providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player identifier and session token to deliver game content. They do not receive your name, contact details, or financial information.
• IT Infrastructure and Cloud Service Providers: Data storage, hosting, and security services are provided by third-party infrastructure partners. These providers operate as data processors under binding data processing agreements that restrict them to processing your data solely on 35nd's instructions.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or a lawful request from a competent regulatory or law enforcement authority, 35nd may disclose personal data. We will notify affected players of such disclosures where permitted to do so by law.
• Professional Advisers: Lawyers, auditors, and compliance consultants who assist 35nd in operating the business may have access to personal data under strict confidentiality obligations.

When 35nd engages any data processor, we ensure that appropriate contractual safeguards are in place to protect your data. We require all third-party processors to maintain security standards consistent with or exceeding those applied by 35nd, and to process your data only for the specific purpose for which it was shared.

35nd uses cookies and similar tracking technologies on the platform to deliver a functional, personalised, and secure user experience. A cookie is a small text file that is stored on your device when you visit a website. Cookies allow the platform to recognise your browser, remember your preferences, maintain your session, and collect anonymised analytics about how the platform is used.

The following categories of cookies are used on the 35nd platform:

You may control cookies through your browser settings. Most modern browsers allow you to view, delete, and block cookies from specific websites. Please note that disabling strictly necessary cookies will impair your ability to log in and use core platform features. Disabling functional or analytics cookies will not prevent you from using 35nd but may result in a less personalised experience.

35nd does not use advertising or cross-site tracking cookies. We do not participate in behavioural advertising networks, and we do not share cookie data with advertising platforms or social media networks.

35nd implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures are reviewed and updated on a regular basis to reflect evolving best practices in information security.

Key security measures applied to personal data on the 35nd platform include:

• SSL/TLS Encryption in Transit: All data exchanged between your browser and the 35nd platform is encrypted using industry-standard SSL/TLS protocols. This protects your login credentials, payment data, and personal information from interception during transmission.
• Encryption at Rest: Sensitive data fields — including identity document data, financial details, and authentication credentials — are encrypted at rest in our databases using AES-256 encryption or equivalent standards.
• Access Controls: Access to personal data within 35nd's systems is restricted on a need-to-know basis. Staff members are granted the minimum level of data access required to perform their role. Access to KYC and financial data is limited to authorised compliance and payments personnel.
• Two-Factor Authentication: 35nd offers two-factor authentication (2FA) to all players to protect against unauthorised account access. Internal staff accounts with access to player data require 2FA as a mandatory security control.
• Security Monitoring: Automated systems monitor the platform for unusual access patterns, login anomalies, and potential data breach indicators on a continuous basis. Security incidents are investigated and responded to promptly by the 35nd security team.
• Third-Party Security Audits: 35nd engages independent security professionals to conduct periodic assessments of our infrastructure, application code, and data handling practices to identify and remediate vulnerabilities.

Despite these measures, no online platform can guarantee absolute security. In the unlikely event of a data breach that poses a risk to your rights and freedoms, 35nd will notify affected players without undue delay and take all reasonable steps to contain and remediate the breach. If you discover a potential security vulnerability on the 35nd platform, please report it responsibly to [email protected] rather than exploiting it.

35nd respects your right to control your own personal data. As a player on the 35nd platform, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 5 business days and complete it within 30 calendar days unless an extension is required, in which case we will notify you.

Please note that certain rights — in particular the right to erasure — may be limited where 35nd is required to retain data to fulfil a legal obligation, such as transaction records for AML compliance or account history for dispute resolution. In such cases, we will explain the limitation clearly in our response to your request.

35nd retains your personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable law. The following retention periods apply to the main categories of data we hold:

When personal data reaches the end of its applicable retention period, it is securely deleted or anonymised so that it can no longer be attributed to any individual player. Anonymised, aggregated data (which cannot be used to identify any individual) may be retained indefinitely for statistical and analytical purposes.

If you request account closure, your real-money balance will be returned via your verified payment method and your active account access will be removed immediately. However, the underlying data records listed above will be retained for the periods specified in the table, as required by our legal and regulatory obligations. This is not optional — regulatory requirements mandate these minimum retention periods regardless of a player's preference.

35nd reviews this Privacy Policy periodically and may update it to reflect changes in how we process personal data, changes in applicable law, or improvements to our privacy practices. The date at the top of this document indicates when the current version was last updated.

Where a proposed change is material — meaning it significantly affects how we collect or use your personal data, or reduces your privacy rights in any way — we will notify all registered players via email at least 14 days before the change takes effect. For minor or clarificatory changes that do not materially affect your rights, we will update the policy and note the revision date without individual notification. The most current version of this Privacy Policy is always available at https://35nd.app/privacy-policy.

Continued use of the 35nd platform after any updated Privacy Policy takes effect constitutes your acknowledgment of the revised policy. If you do not agree with a material change, you may request account closure before the change takes effect by contacting [email protected].

Contact Us About Privacy

If you have any questions, concerns, or complaints about how 35nd handles your personal data — or if you wish to exercise any of the privacy rights described in this policy — please contact our support team. We are committed to addressing all privacy-related enquiries promptly and transparently.

Support Email: [email protected]
Support Hours: 24/7
Response Language: English
Time Zone: Bangladesh Standard Time (UTC+6)

Please use the subject line "Privacy Enquiry" or "Privacy Rights Request" so our team can route your message to the appropriate handler without delay. We aim to acknowledge all privacy-related contacts within 2 business days and to resolve them fully within 30 calendar days.