36kbd Privacy Policy

Introduction

36kbd (accessible at 36kbd.bet) is an online casino and sports betting platform operated for players based in Bangladesh. This Privacy Policy describes how 36kbd collects, uses, stores, shares and protects personal data obtained from users of the platform, including data provided during registration, account use, financial transactions, customer support interactions, and browsing activity on the site.

By registering on or using 36kbd, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and processing of your personal data as described herein. If you do not agree with this policy, please do not use the platform. This Privacy Policy is incorporated by reference into the 36kbd Terms and Conditions.

Information We Collect

36kbd collects personal data from you in three main ways: information you provide directly, information generated by your use of the platform, and information received from third-party payment processors and identity verification services.

Information You Provide Directly

• Registration details: full name, date of birth, gender, nationality, residential address in Bangladesh (including division, district, and upazila), mobile phone number, and email address.
• Identity verification documents: national identity card, passport, birth certificate, and proof of address documents submitted as part of the KYC process.
• Payment information: bKash, Nagad, Rocket or Upay mobile wallet numbers, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank or Sonali Bank account details used for deposits and withdrawals.
• Customer support communications: messages, emails, chat logs and any documents or screenshots you submit when contacting our support team.

Information Collected Automatically

• Technical data: IP address, device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage data: pages visited, time spent on each page, games played, bets placed, betting history, deposit and withdrawal history, bonus claims, and navigation paths through the platform.
• Cookie and session data: session tokens, preference cookies, and analytics cookies that track site performance and user behaviour patterns across sessions.

Information from Third Parties

• Payment processor confirmations: transaction status, transaction reference numbers and timestamps provided by bKash, Nagad, Rocket, Upay and our partner banks to confirm deposit and withdrawal activity.
• Identity verification service results: pass/fail outcomes and risk scores returned by third-party KYC providers used to verify your identity documents.
• Fraud and AML screening data: information received from anti-fraud and anti-money laundering screening services used to assess the risk profile of transactions and accounts.

How We Use Your Information

36kbd processes your personal data only for specific, lawful purposes. The table below sets out the primary purposes for which your data is used and the category of data involved in each purpose.

Legal Basis for Processing

36kbd relies on the following legal bases when processing your personal data:

• Contractual necessity: processing that is required to perform the contract between you and 36kbd — for example, verifying your identity, crediting deposits, and processing withdrawal requests.
• Legal obligation: processing required for 36kbd to comply with applicable anti-money laundering, counter-terrorism financing, and responsible gaming laws and regulations.
• Legitimate interests: processing carried out for 36kbd's legitimate business interests, including fraud detection, platform security, abuse prevention, and improving user experience — provided those interests are not overridden by your rights.
• Consent: processing based on your explicit consent, including the sending of promotional and marketing communications. You may withdraw consent at any time by contacting [email protected].

Sharing Your Information

36kbd does not sell, rent or trade your personal data to third parties for marketing purposes. We may share your personal data with third parties only in the following circumstances:

• Payment processors and banking partners: bKash, Nagad, Rocket, Upay and our partner banks receive only the data necessary to process your financial transactions. These processors operate under their own privacy policies and are bound by confidentiality agreements with 36kbd.
• KYC and identity verification providers: third-party identity verification services receive copies of your identity documents for the sole purpose of verifying your eligibility to use the platform.
• Law enforcement and regulatory authorities: 36kbd may be required by applicable law to disclose your personal data to government authorities, regulators or law enforcement agencies. Such disclosures will only be made to the extent required by law and, where permitted, we will endeavour to notify you of any such request.
• Fraud prevention and AML service providers: data may be shared with third-party screening platforms for the purpose of detecting and preventing fraud, money laundering and other financial crimes. These providers process data under strict data processing agreements.

Payment Data and Financial Information

All financial transactions on 36kbd are processed through secure, encrypted connections. Payment data — including your bKash, Nagad, Rocket or bank account details — is transmitted directly to the relevant payment processor using SSL encryption and is never stored on 36kbd's own servers in unencrypted form. 36kbd retains only a tokenised reference to your payment method for the purposes of matching deposits and withdrawals to your account and fulfilling AML record-keeping obligations.

36kbd does not store full card numbers, full mobile wallet PINs, or online banking passwords at any point. If you suspect that your payment credentials have been compromised in connection with your 36kbd account, contact our support team immediately at [email protected] and notify your payment provider directly.

Cookies and Tracking Technologies

36kbd uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your session, and analyse platform usage. A cookie is a small text file placed on your device by the platform when you visit. Cookies do not contain executable code and cannot be used to access other data stored on your device.

Types of Cookies We Use

• Essential cookies: required for the platform to function correctly. These include session authentication cookies, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without impairing platform functionality.
• Functional cookies: used to remember your language preference, display settings, and other personalisation choices between sessions. Disabling these will not prevent platform access but will mean your preferences are not saved.
• Analytics cookies: collect anonymised or pseudonymised data about how users interact with the platform, including page views, session duration, and feature usage. This data is used solely to improve platform performance and user experience.

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the platform. For further information about how to manage cookies on your specific browser or device, refer to the help documentation provided by your browser manufacturer.

Data Retention

36kbd retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, or to resolve disputes and enforce agreements. The following general retention guidelines apply:

• Active account data: retained for the duration of your account plus a minimum of five years following account closure, in compliance with applicable AML and financial record-keeping requirements.
• KYC and identity verification records: retained for a minimum of five years from the date of collection or from the date of account closure, whichever is later, to satisfy anti-money laundering obligations.
• Customer support communications: retained for two years from the date of the last interaction, after which they are securely deleted unless required for ongoing dispute resolution or legal proceedings.

Security

36kbd implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include SSL/TLS encryption for all data transmissions, firewalls, intrusion detection systems, access controls limiting staff access to personal data on a strict need-to-know basis, and regular security assessments of the platform's infrastructure.

No method of data transmission over the internet or method of electronic storage is completely secure. While 36kbd takes all reasonable steps to protect your personal data, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, 36kbd will notify affected users without undue delay and will take all steps required to contain and remediate the breach.

Your Rights Over Your Data

Subject to applicable law and certain limited exceptions (for example, where retaining data is required to comply with a legal obligation), you have the following rights in relation to the personal data 36kbd holds about you:

• Right of access: you may request a copy of all personal data that 36kbd holds about you, together with an explanation of how it is used and with whom it is shared.
• Right of rectification: you may request that any inaccurate or incomplete personal data held about you is corrected or completed without undue delay.
• Right of erasure: you may request that 36kbd delete personal data it holds about you where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to restrict processing: you may request that 36kbd restricts the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or where you have objected to processing based on legitimate interests.
• Right to withdraw consent: where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please contact the 36kbd support team at [email protected] with the subject line "Data Rights Request". 36kbd will respond to your request within a reasonable timeframe and in any event within 30 days of receipt.

Children's Privacy

36kbd is strictly an adults-only platform. The minimum age to register and use 36kbd is 21 years. 36kbd does not knowingly collect, process or retain personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that information and close the associated account.

Third-Party Links

The 36kbd platform does not contain links to third-party websites for commercial purposes. Where references to third-party services (such as payment processors) are made, those services operate under their own privacy policies. 36kbd is not responsible for the privacy practices of third-party services. We encourage you to review the privacy policy of any third-party service you use in connection with your 36kbd account, including bKash, Nagad and Rocket.

Changes to This Privacy Policy

36kbd reserves the right to update or amend this Privacy Policy at any time. Where a material change is made to the policy, 36kbd will publish a notice on the platform and, where practicable, notify registered users by email. The "Last updated" date at the top of this policy will be revised to reflect the date of the most recent amendment.

Your continued use of the 36kbd platform after the publication of any amendment to this Privacy Policy constitutes your acceptance of the revised policy. If you do not accept the revised policy, you must stop using the platform and may request account closure by contacting [email protected].

Contact and Data Queries

If you have any questions, concerns or requests in relation to this Privacy Policy or the personal data 36kbd holds about you, please contact our support team. We aim to respond to all data-related queries within 30 days. Our support team is available 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).

Email: [email protected]