bd36 Privacy Policy — How We Handle Your Data

This Privacy Policy ("Policy") describes how bd36 ("we", "us", "our") collects, uses, stores and protects the personal data of users ("you", "your") who access or use the bd36 platform available at bd36.ws, including all associated services such as sports betting, live casino, slots, crash games, account management and customer support. This Policy forms part of the overall legal agreement between you and bd36 and should be read alongside the Terms and Conditions.

By registering a bd36 account or using any part of the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to the terms of this Policy, please do not use the Platform. For questions about how bd36 handles your data, contact us at the email address listed at the bottom of this page.

bd36 is an online betting and casino platform operating at bd36.ws and serving players in Bangladesh. References in this Policy to "bd36", "we", "us" or "our" refer to the operator of the bd36 Platform. If you have questions about the identity of the data controller responsible for your personal data, please contact us using the email address in the footer of this page.

When you register an account, use the bd36 Platform or contact our support team, we collect the following categories of personal data:

• Identity data: your full name, date of birth and any government-issued identification documents you provide during identity verification (KYC).
• Contact data: your mobile phone number and, where provided, your email address.
• Financial data: your preferred payment method (bKash, Nagad, Rocket or Upay), mobile wallet account identifiers associated with deposits and withdrawals, and transaction history on the Platform.
• Technical data: IP address, device type, operating system, browser type, time zone, and other identifiers transmitted by your device when you access the Platform.
• Usage data: pages visited, games played, bets placed, session duration, betting and game history, bonus claims and other interactions with the Platform.
• Communications data: records of your interactions with the bd36 customer support team, including messages, support tickets and call logs where applicable.

bd36 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data or biometric data. Where identity verification documents are submitted, bd36 processes only the minimum data required for the purpose of age and identity confirmation and does not retain copies of documents beyond the legally required retention period.

bd36 collects personal data through the following means:

• Directly from you: when you complete the account registration form, submit identity verification documents, make a deposit or withdrawal, place a bet, contact customer support, or respond to a survey or promotion.
• Automatically: through cookies, web beacons, server logs and similar tracking technologies that record technical and usage data when you interact with the Platform.
• From payment processors: transaction confirmation data and fraud-screening results received from mobile wallet operators (bKash, Nagad, Rocket, Upay) when processing deposits and withdrawals.
• From third-party identity verification services: where bd36 uses a third-party KYC provider to assist with age and identity verification, that provider may return a result (pass or fail) and limited supporting data to bd36.

bd36 uses the personal data we collect for the following purposes:

• Account management: to create and maintain your bd36 account, verify your identity, process your deposits and withdrawals, and manage your account settings and preferences.
• Service delivery: to provide the sports betting, live casino, slots, crash games and other features you access on the Platform, including recording and settling bets, awarding bonuses and processing promotions.
• Customer support: to respond to your enquiries, resolve disputes, investigate complaints and communicate with you regarding your account.
• Compliance and fraud prevention: to verify your age and identity, comply with anti-money-laundering (AML) obligations, detect and prevent fraudulent or irregular activity, and meet any other applicable legal or regulatory requirements.
• Platform improvement: to analyse usage patterns, test new features, improve the performance and security of the Platform, and develop new products and services.
• Marketing communications: where you have opted in to receive promotional messages, to send you information about bd36 bonuses, seasonal promotions and new product features. You may opt out of marketing communications at any time by contacting support.

bd36 will not use your personal data for any purpose that is incompatible with the purposes described above. If we wish to use your data for a new purpose, we will update this Policy and, where required, seek your consent before doing so.

bd36 processes your personal data on the following legal bases:

• Contractual necessity: processing required to operate your account, process transactions and deliver the services you have contracted for when you accepted these Terms.
• Legal obligation: processing required to comply with applicable laws and regulations, including age verification, anti-money-laundering checks, and record-keeping obligations.
• Legitimate interests: processing for fraud prevention, Platform security, internal analytics and service improvement — provided this does not override your privacy interests or fundamental rights.
• Consent: processing for optional marketing communications, where you have explicitly opted in. You may withdraw this consent at any time by contacting support.

bd36 does not sell your personal data. We share your data only in the following limited circumstances:

• Service providers: we share data with trusted third-party suppliers who perform services on our behalf, including payment processors (bKash, Nagad, Rocket, Upay), identity verification providers, game studios, cloud hosting providers and customer support tools. These providers are contractually required to handle your data securely and only for the purposes for which it was shared.
• Legal and regulatory authorities: we may disclose your data to law enforcement, regulatory bodies, courts or other authorities where required to do so by applicable law, or where we believe disclosure is necessary to prevent fraud, protect the rights of bd36 or protect the safety of users.
• Business transfers: in the event of a merger, acquisition, restructuring or sale of all or part of bd36's business, your personal data may be transferred to the successor entity, subject to equivalent data protection commitments.
• Aggregated and anonymised data: we may share aggregated, anonymised data with partners, advertisers or analytics providers for business intelligence purposes. This data cannot be used to identify you personally.

Other than in the circumstances described above, bd36 will not share your personal data with any third party without your prior consent. If you have questions about specific data-sharing arrangements, contact our support team.

When you deposit or withdraw funds using bKash, Nagad, Rocket or Upay, the transaction is processed directly between your mobile wallet and bd36's payment processing partner. bd36 does not store your mobile wallet PIN, password or full wallet account number. We retain only the transaction reference, the masked wallet identifier (for example, the last four digits of your registered mobile number), the amount, and the date and time of the transaction, for account management and regulatory record-keeping purposes.

All financial transaction data is stored in encrypted form. bd36 applies transaction monitoring controls to detect unusual patterns that may indicate money laundering, fraud or other financial crime. Where suspicious activity is identified, bd36 is legally obligated to report it to the relevant authorities without notifying the account holder. This is a legal requirement under applicable financial crime prevention regulations.

bd36 uses cookies and similar tracking technologies (web beacons, local storage objects) on the Platform. These fall into three categories:

• Essential cookies: required for the Platform to function correctly. These include session management cookies that keep you logged in during your visit and security cookies that help protect your account. You cannot disable essential cookies without affecting the functionality of the Platform.
• Analytical cookies: used to collect aggregated, anonymised data about how users interact with the Platform, including which pages are visited most frequently and how long sessions last. This data helps bd36 identify areas for improvement.
• Preference cookies: used to remember your settings and preferences on the Platform, such as your selected language, so you do not have to re-enter them on each visit.

You can control cookie use through your mobile browser settings. Disabling analytical or preference cookies will not prevent you from using the Platform but may affect your experience. Essential cookies cannot be disabled without breaking core Platform functionality.

bd36 retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law or as necessary for the purposes described in this Policy. In general, account data and transaction records are retained for a minimum of five years following account closure, in compliance with financial record-keeping obligations. Identity verification documents are retained for the period required by applicable anti-money-laundering regulations.

When your data is no longer required for the purpose for which it was collected, and retention is not required by law, bd36 will securely delete or anonymise it. If you request deletion of your account and associated data, bd36 will process your request promptly, subject to any legal obligations to retain specific categories of data. Requests for data deletion can be made by contacting the bd36 support team.

bd36 takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your data against unauthorised access, loss, destruction or alteration. These measures include 256-bit SSL encryption on all data transmitted between your device and our servers, access controls that restrict internal access to personal data to authorised personnel only, regular security testing and vulnerability assessments, and secure, encrypted storage of all account and transaction data.

Notwithstanding the above, no method of data transmission over the internet or method of electronic storage is completely secure. While bd36 uses commercially reasonable security measures, we cannot guarantee absolute security. In the unlikely event of a data breach that affects your personal data, bd36 will take prompt action to contain the breach, assess its impact, and notify affected users and relevant authorities where required by applicable law.

Subject to applicable law, you have the following rights in relation to your personal data held by bd36:

• Right of access: you have the right to request a copy of the personal data bd36 holds about you, together with information about how it is used.
• Right to rectification: you have the right to request that bd36 corrects any inaccurate or incomplete personal data it holds about you.
• Right to erasure: in certain circumstances, you have the right to request that bd36 deletes your personal data. This right is subject to exceptions, including where bd36 is required to retain data to comply with a legal obligation.
• Right to restrict processing: in certain circumstances, you have the right to request that bd36 restricts the processing of your personal data, for example while the accuracy of data is being disputed.
• Right to withdraw consent: where processing is based on consent (for example, marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.

To exercise any of these rights, contact the bd36 support team using the email address in the footer of this page. bd36 will respond to all valid requests within a reasonable timeframe. We may need to verify your identity before processing a data rights request to ensure that personal data is not disclosed to an unauthorised person.

The bd36 Platform is strictly for adults aged 21 and above. bd36 does not knowingly collect personal data from individuals under the age of 21. If bd36 becomes aware that personal data has been collected from a person under 21 without appropriate consent, it will take immediate steps to delete that data and close the associated account. If you believe a minor has registered an account on the Platform, please contact support immediately so that the account can be reviewed and closed without delay.

bd36 reserves the right to update or amend this Privacy Policy at any time. When material changes are made to the Policy, bd36 will notify registered users via an in-platform notification or SMS to the registered mobile number. The effective date of the most recent revision is displayed at the top of this page. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

We recommend reviewing this Policy periodically to remain informed of how bd36 handles your personal data. If you have any concerns about a change to this Policy, please contact our support team before continuing to use the Platform.

If you have questions about this Privacy Policy, wish to exercise any of your data rights, want to raise a data protection concern, or need to report a suspected data breach, please contact the bd36 support team. Our support team is available 24/7 and can be reached at the email address listed in the footer of this page. When submitting a data rights request, please include your registered mobile number so that we can verify your identity efficiently and process your request without unnecessary delay.