Privacy Policy for bd36

1 Introduction

This Privacy Policy ("Policy") describes how bd36 ("bd36", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of users ("Player", "User", "you") who access and use the bd36 online betting and casino platform at bd36.io.

bd36 is committed to maintaining the privacy and security of your personal information. We take our data protection responsibilities seriously and have designed our systems, processes, and policies with privacy at their core. This Policy applies to all personal data processed by bd36 in connection with your use of our platform, including data collected via our website, account registration process, payment systems, customer support channels, and any other touchpoint you have with bd36.

This Privacy Policy should be read alongside the bd36 Terms & Conditions, which together form the complete agreement governing your relationship with bd36. If you do not agree with the practices described in this Policy, you must discontinue use of the bd36 platform.

2 Data We Collect

bd36 collects personal data in several ways: directly from you when you register or interact with the platform, automatically through your use of the platform, and in some cases from third-party sources such as payment providers or identity verification services. The categories of personal data we collect include:

2.1 Registration & Identity Data

When you create a bd36 account, we collect your full legal name, date of birth, email address, phone number, and chosen username. This information is necessary to establish and manage your account.

2.2 Identity Verification (KYC) Data

To comply with anti-money laundering obligations and to verify your age (you must be at least 21 years old to use bd36), we may collect copies of government-issued photo identification such as your National Identity Card (NID), passport, or driving licence, as well as proof of address documents such as utility bills or bank statements.

2.3 Financial & Transaction Data

We collect details of all financial transactions conducted on the bd36 platform, including deposit amounts, withdrawal requests, payment method details (e.g., bKash mobile number, Nagad account reference, bank account details), and transaction history. Full payment card numbers and PINs are never stored by bd36 — these are handled exclusively by our PCI-compliant payment processors.

2.4 Gaming & Betting Activity Data

We record all betting and gaming activity on your bd36 account, including bets placed, games played, outcomes, session durations, and bonus usage. This data is used to operate the platform, detect fraud, identify problem gambling patterns, and fulfil regulatory obligations.

2.5 Technical & Device Data

When you access bd36, we automatically collect certain technical data including your IP address, device type, operating system, browser type and version, screen resolution, referring URL, pages visited, time spent on pages, and clickstream data. This information is collected via cookies and similar tracking technologies (see Section 6).

2.6 Communications Data

If you contact bd36 customer support via email or live chat, we retain records of those communications, including the content of messages, timestamps, and the resolution of your query. This data is used to improve our support services and maintain a record of interactions.

3 How We Use Your Data

bd36 uses the personal data we collect for the following purposes:

• Account Creation & Management: To register your account, verify your identity, manage your profile, and provide access to bd36 services.
• Transaction Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to maintain accurate financial records.
• Legal & Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering (AML) laws, age verification requirements, and any other legal obligations applicable to the operation of an online gaming platform.
• Fraud Detection & Security: To monitor platform activity for signs of fraudulent behaviour, multi-accounting, bonus abuse, unauthorised access, and other security threats.
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behaviour, and to provide timely interventions such as cooling-off periods, deposit limit suggestions, and self-exclusion tools.
• Customer Support: To respond to your enquiries, resolve complaints, and improve our support processes based on previous interactions.
• Platform Improvement: To analyse aggregate usage data, identify bugs, improve game performance, and develop new features and services for bd36 players.
• Marketing & Promotions: Where you have given consent, to send you information about bd36 promotions, bonuses, new games, and special offers relevant to your interests (see Section 12 for opt-out instructions).
• Dispute Resolution: To investigate and resolve disputes relating to bets, payments, or account activity using accurate historical records.

4 Legal Basis for Processing

bd36 processes your personal data on the following legal grounds:

4.1 Contractual Necessity

The majority of personal data processing by bd36 is necessary for the performance of the contract between you and bd36 — specifically, the operation of your account and the delivery of our gaming and betting services. Without this data, bd36 cannot provide its services to you.

4.2 Legal Obligation

Some data processing is required to comply with legal obligations applicable to bd36, including anti-money laundering regulations, age verification requirements, and financial record-keeping obligations.

4.3 Legitimate Interests

bd36 processes certain data on the basis of our legitimate business interests, including fraud prevention, platform security, improving our services, and protecting the safety of other players. We conduct a balancing test before relying on legitimate interests to ensure your rights are not overridden.

4.4 Consent

Where bd36 processes data for purposes that are not strictly necessary for the contract or required by law — such as sending marketing communications or using non-essential cookies — we will seek your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5 Data Sharing & Third Parties

bd36 does not sell your personal data. We share personal data only in the following limited circumstances:

5.1 Payment Processors

To facilitate deposits and withdrawals, bd36 shares relevant financial data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard. These providers process your payment data under their own privacy policies and are bound by financial industry security standards.

5.2 Game Providers

bd36's casino games are provided by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive your player ID and session data to deliver their games. They do not receive your full personal identity or financial data.

5.3 Identity Verification Services

bd36 may use third-party KYC and identity verification services to validate documents submitted during the account verification process. These providers process document data under strict confidentiality agreements with bd36.

5.4 Legal & Regulatory Authorities

bd36 may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory authorities where required by applicable law, court order, or in response to a lawful request. Such disclosures are made only to the extent required and after appropriate legal review.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of assets involving bd36, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and any material changes to this Privacy Policy that may result.

6 Cookies & Tracking Technologies

6.1 What Are Cookies

Cookies are small text files placed on your device by websites you visit. bd36 uses cookies and similar technologies (including pixel tags and local storage) to operate the platform, remember your preferences, analyse usage, and detect fraud.

6.2 Types of Cookies Used by bd36

6.3 Managing Cookies

You can control and delete cookies through your browser settings. Please note that disabling strictly necessary or fraud prevention cookies may impair your ability to use the bd36 platform, including logging in and processing transactions. Instructions for managing cookies are available in the help documentation of your browser.

7 Data Retention

bd36 retains personal data for as long as necessary to fulfil the purposes outlined in this Policy, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

After the applicable retention period has expired, personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual.

8 Data Security

bd36 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• SSL/TLS Encryption: All data in transit between your browser and our servers is encrypted using industry-standard SSL/TLS protocols.
• Data Encryption at Rest: Sensitive data stored in our databases, including KYC documents and financial records, is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within bd36 is restricted on a strict need-to-know basis. All staff with access to personal data receive regular data protection training.
• Two-Factor Authentication: bd36 supports two-factor authentication (2FA) for player accounts. We strongly recommend enabling 2FA to add an additional layer of protection to your account.
• Regular Security Audits: bd36 conducts periodic security assessments and penetration testing of our systems to identify and address vulnerabilities proactively.
• PCI Compliance: Payment card data is handled exclusively by PCI DSS-compliant payment processors. bd36 does not store full card numbers on its own systems.

9 Your Rights

As a bd36 player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with a clear description of your request and sufficient information to verify your identity.

9.1 Right of Access

You have the right to request a copy of the personal data bd36 holds about you. We will provide this information within 30 days of receiving a verified request. This is sometimes referred to as a Subject Access Request (SAR).

9.2 Right to Rectification

If any personal data bd36 holds about you is inaccurate or incomplete, you have the right to request that we correct or complete it. Please notify us as soon as possible if your registered details change.

9.3 Right to Erasure

You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw consent and there is no other legal basis for processing. Note that bd36 may be required to retain certain data for legal and regulatory compliance purposes even following a valid erasure request.

9.4 Right to Restriction of Processing

You may request that bd36 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to its processing, while we investigate your request.

9.5 Right to Data Portability

Where processing is based on your consent or on contract performance and is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format and to request its transfer to another data controller where technically feasible.

9.6 Right to Object

You have the right to object to the processing of your personal data where that processing is based on legitimate interests, including profiling for direct marketing purposes. bd36 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

10 Children & Minors

bd36 is strictly an adult platform. Our services are available only to individuals who are 21 years of age or older. bd36 does not knowingly collect personal data from any person under the age of 21.

If bd36 becomes aware that personal data has been collected from a person under the age of 21, we will immediately take steps to delete that data, close the associated account, and void any transactions or winnings associated with the account. Any funds deposited by an underage user will be returned to the original payment source where technically possible.

bd36 supports parental control software as an additional layer of protection. Parents and guardians who wish to restrict access to online gambling sites are encouraged to use available filtering tools on shared or family devices.

11 International Data Transfers

bd36 is an online platform serving players primarily in Bangladesh. Some of our service providers — including game studios, analytics providers, and cloud infrastructure partners — may be located outside Bangladesh. In such cases, your personal data may be transferred to and processed in countries other than Bangladesh.

Where personal data is transferred internationally, bd36 ensures that appropriate safeguards are in place to protect your data, including contractual data processing agreements that impose data protection obligations equivalent to those that apply within bd36's operating jurisdictions.

bd36 does not transfer personal data to countries or organisations that do not provide an adequate level of data protection without first putting in place appropriate contractual protections. If you have questions about international data transfers, please contact [email protected].

12 Marketing Communications

bd36 may send you promotional communications about bonuses, new games, seasonal offers (such as Eid specials, Pohela Boishakh promotions, or IPL/BPL cricket betting offers), and other relevant marketing content. We will only send marketing communications where you have given explicit consent to receive them during registration or subsequently through your account settings.

12.1 Opting Out of Marketing

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email sent by bd36.
• Updating your communication preferences in your bd36 account settings.
• Contacting the bd36 support team at [email protected] with a clear request to opt out of marketing.

Opting out of marketing communications will not affect transactional communications that bd36 is required to send you in connection with your account, such as deposit confirmations, withdrawal notifications, and security alerts.

12.2 Personalised Offers

Where you have consented to marketing, bd36 may personalise promotional communications based on your gaming preferences, betting history, and account activity. This personalisation is conducted within bd36's own systems and does not involve sharing your data with external advertising platforms for targeting purposes.

13 Changes to This Privacy Policy

bd36 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our services. When changes are made, we will update the "Last Updated" date at the top of this Policy.

For material changes — those that significantly affect how we use your personal data or your rights as a data subject — bd36 will provide advance notice via email to your registered address or via an in-platform notification. We may also ask for your renewed consent where the change involves a new processing purpose that requires it.

Your continued use of the bd36 platform after any update to this Policy constitutes your acceptance of the revised terms. We recommend reviewing this Policy periodically to stay informed of how bd36 handles your personal data.

14 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a privacy-related complaint, please contact the bd36 data team at:

Email: [email protected]

Please include your registered username, a clear description of your request or complaint, and any relevant details in your correspondence. bd36 aims to acknowledge all privacy enquiries within 48 hours Bangladesh Standard Time (BST, UTC+6) and to resolve them within 30 calendar days.