Your Privacy Matters to 36kbd

1. Data We Collect

36kbd collects personal information from players at various points throughout the registration, verification, and ongoing use of the platform. We collect only the information that is reasonably necessary for the purposes set out in this policy. The categories of personal data we collect are described below.

1.1 Registration Data

When you create a 36kbd account, we collect the following information that you provide directly:

• Full legal name as it appears on your government-issued identification.
• Date of birth (required to verify that you are aged 18 or above).
• Email address and mobile phone number.
• Residential address, including city and district within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh).
• Chosen username and encrypted password.

1.2 Identity Verification Data

As part of our Know Your Customer (KYC) process, we may request copies of identity documents, including your National Identity Card (NID), passport, or driving licence. We may also request proof of address or documentation relating to the payment methods you use. This information is used solely for the purpose of verifying your identity and age, and for complying with anti-money laundering obligations.

1.3 Financial and Transaction Data

We collect records of all deposits, withdrawals, bonus credits, and betting activity associated with your account. This includes the payment method used (e.g., bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank), transaction reference numbers, amounts in Bangladeshi Taka (৳ BDT), and timestamps. We do not store full mobile wallet PINs or full bank account credentials on our servers.

1.4 Technical and Usage Data

When you access the 36kbd platform, our servers automatically record certain technical information, including:

• IP address and approximate geographic location.
• Device type, operating system, and browser version.
• Pages visited, time spent on each page, and navigation paths.
• Game sessions initiated, bets placed, and outcomes recorded.
• Session duration and login timestamps.

1.5 Communications Data

If you contact our support team via email at [email protected], we retain records of that correspondence, including your contact details and the content of your messages. This allows us to follow up on open queries and maintain a history of interactions for quality and dispute resolution purposes.

2. How We Use Your Data

36kbd uses the personal information it collects for the following lawful purposes. We process your data only where we have a legitimate basis to do so.

Purpose	Data Used	Legal Basis
Account creation and management	Registration data, login credentials	Contractual necessity
Age and identity verification	KYC documents, date of birth	Legal obligation
Processing deposits and withdrawals	Financial and transaction data	Contractual necessity
Fraud prevention and security	Technical data, transaction history	Legitimate interest
Customer support and dispute resolution	Communications data, account history	Contractual necessity
Platform analytics and improvement	Usage and technical data	Legitimate interest
Responsible gaming monitoring	Betting patterns, session data	Legal obligation / legitimate interest
Promotional communications (opt-in only)	Email address, preferences	Consent

36kbd will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing an alternative lawful basis.

3. Data Sharing & Third Parties

36kbd does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing purposes. We may share your information with the following categories of third-party service providers, strictly on a need-to-know basis and subject to appropriate contractual data protection obligations:

3.1 Game Providers

Third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive anonymised session data necessary to deliver their games through the 36kbd platform. These providers do not receive your full name, payment details, or contact information.

3.2 Payment Processors

To process deposits and withdrawals, we share the minimum necessary transaction data with the relevant payment service provider (bKash, Nagad, Rocket, Upay, or the relevant bank). Each payment provider operates under its own privacy policy and security standards. 36kbd is not responsible for the data practices of third-party payment services once your data has been transmitted to them for the purpose of completing a transaction.

3.3 Analytics and Infrastructure Providers

We use third-party technology services for platform hosting, performance monitoring, and usage analytics. These providers process data only on our instructions and are contractually prohibited from using your data for their own purposes.

3.4 Legal and Regulatory Disclosures

36kbd may disclose personal information to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, or where such disclosure is necessary to protect the rights, property, or safety of 36kbd, its players, or the public.

4. Cookies & Tracking

36kbd uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse usage patterns, and deliver a personalised experience. A cookie is a small text file stored on your device when you visit a website. The table below describes the categories of cookies used on the 36kbd platform.

Cookie Category	Purpose	Can Be Disabled?
Essential Cookies	Maintain your login session, remember language and currency preferences, and enable core platform functionality.	No — required for the platform to function.
Analytical Cookies	Collect anonymised data on page views, session duration, and navigation paths to help us understand how players use 36kbd.	Yes — you may opt out via browser settings.
Functional Cookies	Store your display preferences, game settings, and recently played titles to improve your return-visit experience.	Yes — disabling may affect personalisation features.
Security Cookies	Detect and prevent fraudulent activity, bot traffic, and multiple-account creation attempts.	No — required for platform security.

You can control or delete cookies through your web browser settings. Please note that disabling essential or security cookies may prevent you from accessing your 36kbd account or using certain platform features. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

5. Data Security

36kbd employs a range of technical and organisational measures to protect your personal information against unauthorised access, accidental loss, alteration, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption on all data transmitted between your browser or mobile device and the 36kbd platform.
• Encrypted storage of passwords using industry-standard hashing algorithms. Plain-text passwords are never stored on our servers.
• Access controls that restrict internal access to personal data on a strict need-to-know basis, with role-based permissions and audit logging.
• Regular security assessments and vulnerability testing of platform infrastructure.
• Secure data centre facilities with physical access controls and environmental protections.
• Incident response procedures that govern how we detect, contain, and report data security incidents.

Despite these measures, no online platform can guarantee absolute security. You are responsible for keeping your login credentials confidential and for notifying us promptly at [email protected] if you suspect any unauthorised access to your account. 36kbd will never ask you for your password by email or any other communication channel.

6. Data Retention

36kbd retains your personal information for as long as your account remains active and for a reasonable period thereafter, in accordance with the following principles:

• Account data (registration details, KYC documents, transaction records) is retained for a minimum of five years following account closure, to comply with applicable anti-money laundering and record-keeping obligations.
• Communications data (support emails, dispute records) is retained for three years from the date of the last communication, or until the resolution of any outstanding dispute, whichever is later.
• Technical and usage data (server logs, session records) is retained for up to 12 months, after which it is either deleted or anonymised.
• Marketing preferences and consent records are retained for the duration of your account and for two years following any opt-out, to demonstrate compliance.

When personal data is no longer required for its stated purpose and no legal obligation requires its continued retention, 36kbd will securely delete or irreversibly anonymise the data. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

7. Your Rights

As a player on the 36kbd platform, you have the following rights with respect to your personal information. To exercise any of these rights, please contact us at [email protected] with a clear description of your request. We will acknowledge your request within 48 hours and aim to fulfil it within 30 calendar days.

7.1 Right to Access

You may request a copy of the personal data that 36kbd holds about you. We will provide this in a commonly used, machine-readable format where reasonably practicable. A reasonable administrative fee may be charged for excessive or repetitive requests.

7.2 Right to Rectification

If any personal information held by 36kbd is inaccurate or incomplete, you have the right to request its correction. Where the inaccuracy relates to your registered name or date of birth, we may ask you to provide supporting documentation before making the change.

7.3 Right to Erasure

You may request that 36kbd delete your personal information where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where you object to its processing and there is no overriding legitimate ground for continued retention. Please note that legal obligations — particularly anti-money laundering requirements — may prevent us from erasing certain records before the minimum retention period has elapsed.

7.4 Right to Restrict Processing

You may ask us to restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being considered. During any restriction period, we will continue to store your data but will not actively process it for other purposes.

7.5 Right to Withdraw Consent

Where 36kbd relies on your consent as the legal basis for processing (for example, for marketing communications), you may withdraw that consent at any time by contacting [email protected] or by using the unsubscribe mechanism in any marketing email we send you. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

8. Contact & Updates

8.1 Contacting the Privacy Team

For any question, concern, or request relating to this Privacy Policy or to the personal data that 36kbd holds about you, please contact us at:

Email: [email protected]
Response time: Within 5 business days (Bangladesh Standard Time, UTC+6)
Operating hours: Monday to Saturday, 9:00 AM – 9:00 PM BST

Please note that this email address must be used as plain correspondence only. Do not send sensitive financial data, passwords, or full ID document scans in the body of an email. Our support team will guide you through a secure channel for any document submission.

8.2 Policy Updates

36kbd reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or updates to the platform's features and services. Where changes are material, we will notify registered players by email at least 14 days before the revised policy takes effect. The current version of the Privacy Policy, with its effective date, is always available at https://36kbd.app/privacy-policy. Continued use of the platform following notification of changes constitutes acceptance of the revised policy.

8.3 Links to Other Pages

This Privacy Policy should be read alongside the Terms & Conditions and the Responsible Gaming policy, both of which contain additional provisions relevant to how 36kbd manages player accounts and data. If you have questions about your account or responsible gaming tools, you can also visit our FAQ page for quick answers.