35bat Privacy Policy
— How We Handle Your Data

1. Information We Collect

When you use the 35bat platform — whether you are browsing as a guest, registering an account, making a deposit, placing a bet, or contacting our support team — certain personal data is collected. We group this data into the following categories, each of which is collected for a specific documented purpose.

In certain circumstances, 35bat may receive data about you from third-party sources. These include identity verification partners who assist with KYC processing, payment providers who confirm the status of a deposit or withdrawal, and fraud detection services that flag suspicious account activity. Data received from these third parties is held to the same standards as data collected directly from you.

2. How We Use Your Data

35bat processes your personal data only where a lawful basis exists for doing so. The primary purposes for which we use your data are described below. We do not use your data for any purpose that is incompatible with the purpose for which it was originally collected without first obtaining your consent or as otherwise permitted by applicable law.

1. Account Management: To create, maintain, verify, and administer your 35bat player account, including processing your registration details, verifying your identity through KYC, and enabling you to log in securely.
2. Transaction Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, or bank transfer; to reconcile your account balance; and to apply bonus credits in accordance with active promotions.
3. Service Delivery: To provide access to casino games, sports betting markets (including cricket BPL, IPL, T20 World Cup, and football), crash games, slots, and live dealer tables offered by certified studios including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming.
4. Responsible Gaming: To monitor account activity for signs of problem gambling behaviour, to enforce deposit limits or self-exclusion requests you have placed, and to comply with our internal Responsible Gaming policy. This monitoring is a legal and ethical obligation, not optional surveillance.
5. Fraud Prevention and Security: To detect, investigate, and prevent unauthorised access, money laundering, bonus abuse, multi-accounting, and other fraudulent or illegal activity on the platform. This includes automated monitoring systems and, where warranted, manual investigation by our compliance team.
6. Legal and Regulatory Compliance: To meet applicable obligations including anti-money laundering (AML) requirements, financial record-keeping mandates, and response to lawful requests from relevant authorities. 35bat may be required by law to retain certain data for defined periods regardless of your preference.
7. Customer Support: To respond to your enquiries, resolve complaints, and maintain records of support interactions to improve service quality and ensure consistency across our 24/7 support team.
8. Marketing Communications (Opt-In Only): To send you promotional emails or SMS messages about bonuses, seasonal offers (Eid, Pohela Boishakh, BPL season, Victory Day specials), and new game releases on 35bat — but only if you have explicitly opted in to receive such communications. You may withdraw your consent at any time by updating your account preferences or contacting support.
9. Platform Improvement: To analyse aggregate, anonymised usage data to understand how players interact with the platform, identify technical issues, and improve the overall user experience for Bangladeshi players.

3. Data Sharing & Third Parties

35bat does not sell your personal data to third parties. We share your data only in limited, documented circumstances where sharing is necessary to deliver the services you use, to comply with a legal obligation, or to protect the safety and integrity of the platform. All third parties with whom we share data are contractually required to handle it in accordance with applicable data protection standards.

• Payment Processors: When you make a deposit or request a withdrawal, the minimum necessary data (wallet number, transaction amount, reference ID) is shared with the relevant MFS provider (bKash, Nagad, Rocket, Upay) or bank. This sharing is essential to complete the transaction you have initiated.
• KYC and Identity Verification Partners: Where identity verification is required, your NID details or passport scan may be shared with a trusted third-party KYC service provider for the purpose of verifying your age and identity. These providers are bound by strict confidentiality agreements.
• Game Studios and Content Providers: When you launch a game provided by a third-party studio such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, or Microgaming, limited session data (a session token and your account reference) is passed to the game server to enable gameplay. No financial account details are shared with game studios.
• Fraud Detection and Security Services: Technical data including IP address, device fingerprint, and login patterns may be shared with anti-fraud service providers to identify and prevent fraudulent activity, multi-accounting, and money laundering.
• Legal Authorities: 35bat may disclose personal data to relevant government authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or where necessary to prevent or detect criminal activity. Such disclosures are made in accordance with due process and, where legally permitted, you will be informed.
• Professional Advisers: In the context of audits, legal proceedings, or corporate restructuring, personal data may be shared with lawyers, accountants, or other professional advisers who are subject to binding confidentiality obligations.

35bat does not share your data with advertising networks, social media platforms, data analytics resellers, or any other parties for the purpose of building advertising profiles or serving you targeted advertisements on third-party websites.

4. Cookies & Tracking Technologies

The 35bat website uses cookies and similar technologies to ensure the platform functions correctly, to remember your preferences, and to gather anonymised analytics data that helps us improve the experience for all players. This section explains what cookies we use and how you can manage them.

You can control cookies through your browser settings. Most modern browsers allow you to block or delete cookies, or to be notified before a cookie is stored. Please note that disabling essential cookies will prevent you from logging in to your 35bat account and will significantly impair the platform's functionality. Disabling analytics or functional cookies will not affect your ability to play or transact on the platform.

5. Data Security Measures

35bat implements a layered approach to data security, combining technical controls, operational procedures, and staff training to protect your personal data from unauthorised access, accidental loss, destruction, or disclosure. While no digital system can guarantee absolute security, the measures we apply reflect industry best practice for online gaming platforms serving the Bangladeshi market.

• SSL/TLS Encryption in Transit: All data exchanged between your browser or mobile device and 35bat servers is encrypted using active SSL/TLS protocols. The padlock icon in your browser's address bar confirms this protection is active during every session.
• Password Hashing: Your account password is never stored in plain text. 35bat uses one-way cryptographic hashing algorithms to store password credentials, meaning that even internal staff cannot read your password.
• Two-Factor Authentication (2FA): 35bat offers optional two-factor authentication for all player accounts. When enabled, a one-time code is required at each login in addition to your password, providing a significant additional layer of account security. We strongly encourage all players to enable 2FA.
• Access Controls: Access to personal data within 35bat's internal systems is restricted to staff members who have a legitimate operational need to access it. Role-based access controls and audit logging are in place to enforce this principle of least privilege.
• Infrastructure Security: 35bat's platform infrastructure is hosted on secure servers with physical access controls, network firewalls, intrusion detection systems, and regular security assessments.
• Incident Response: In the event of a data security incident that affects your personal data, 35bat will take immediate steps to contain the incident, assess the impact, and notify affected players via their registered email address within a reasonable timeframe.

6. Data Retention Policy

35bat retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law, whichever is longer. The table below summarises the standard retention periods we apply to different categories of data.

At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that makes re-identification impossible. Anonymised, aggregated data (such as overall platform usage statistics) may be retained indefinitely as it no longer constitutes personal data.

If you request the deletion of your account, 35bat will action that request and remove your actively held personal data from live systems within 30 days. However, certain categories of data (particularly financial records and KYC documents) must be retained for the legally mandated periods described above, regardless of account closure.

7. Your Privacy Rights

As a player on 35bat, you have a number of rights with respect to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact our support team with your registered email address and a description of your request. 35bat will respond to all verified requests within 30 days.

35bat will not charge a fee for exercising your data rights in normal circumstances. However, if a request is manifestly unfounded or excessive — particularly if it is repetitive — 35bat reserves the right to charge a reasonable administrative fee or decline to act on the request, with written explanation.

8. Updates to This Policy

35bat may update this Privacy Policy from time to time to reflect changes in our data practices, changes in the services we offer, or to comply with evolving legal requirements. When a material change is made, we will update the "Last Updated" date at the top of this document and, where the change significantly affects how we use your personal data, we will notify registered players via their registered email address or by displaying a prominent notice on the 35bat platform.

1. The most current version of this Privacy Policy will always be available at https://35bat.net/privacy-policy. It is your responsibility to review this document periodically.
2. Continued use of the 35bat platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms, to the extent permitted by applicable law.
3. If you have any concerns about how a proposed change to this Privacy Policy will affect your data, you are encouraged to contact our support team before the change takes effect. We are happy to explain changes in plain English.
4. Where a change requires your active consent under applicable law — for example, a new purpose for which we wish to use your data — we will seek that consent separately before processing begins under the new purpose.