bc35 Privacy Policy

1Introduction

bc35 operates as an online casino and sports betting platform serving players in Bangladesh. In the course of providing our services, bc35 necessarily collects and processes certain personal data about the individuals who use our platform. We understand that personal data is sensitive, and we are committed to handling it with care, transparency, and in full compliance with our obligations as a data controller.

This Privacy Policy sets out in plain language what personal data bc35 collects, the purposes for which it is used, the legal basis on which it is processed, how long it is retained, and the rights available to you as a data subject. If you have any questions about this policy or about how bc35 handles your data, please contact our support team at [email protected].

2Data We Collect

bc35 collects personal data through several channels: directly from you when you register an account or use our services; automatically through your use of the platform; and, in limited circumstances, from third-party sources such as payment processors and identity verification providers. The categories of personal data we collect include:

• Identity data: your full name, date of birth, gender, nationality, and a copy of your government-issued identification document where KYC verification is required.
• Contact data: your mobile phone number (used for SMS OTP verification and account communications), email address, and, where provided voluntarily, your city of residence within Bangladesh (e.g. Dhaka, Chittagong, Sylhet, Khulna).
• Financial data: records of your deposit and withdrawal transactions, the payment methods used (e.g. bKash mobile number, Nagad account reference, Rocket number), and transaction amounts in BDT. Note: bc35 does not store full payment credentials — payment processing is handled by certified third-party processors.
• Technical and device data: your IP address, device type, operating system, browser type and version, screen resolution, and session timestamps. This data is collected automatically when you access bc35 and is used for security, fraud prevention, and platform optimisation purposes.
• Behavioural and gaming data: your wagering history, game preferences, session durations, betting patterns, bonus usage records, and responsible gaming tool settings. This data is used to personalise your experience, detect potentially harmful gambling patterns, and ensure platform integrity.

Where bc35 collects data from third-party sources — for example, when a payment processor confirms a transaction or when an identity verification provider returns a verification result — that data is handled with the same standards of care as data collected directly from you. bc35 only engages third-party data providers who operate under appropriate data protection frameworks.

3How We Use Your Data

bc35 processes personal data only for specified, explicit, and legitimate purposes. We do not use personal data for any purpose beyond those described in this policy, and we do not sell personal data to third parties under any circumstances. The primary purposes for which we use your data are:

• Account management and service delivery: to register and maintain your bc35 account, verify your identity and age (21+ requirement), process your deposits and withdrawals via bKash, Nagad, Rocket, and other supported payment methods, and provide customer support.
• Security, fraud prevention, and compliance: to detect and prevent fraudulent activity, money laundering, and other prohibited conduct; to conduct KYC and anti-money-laundering (AML) checks; and to comply with our legal and regulatory obligations as an online gaming platform.
• Platform personalisation and improvement: to tailor the bc35 experience to your preferences, recommend games or betting markets you may enjoy, and continuously improve the quality, performance, and security of our platform based on aggregated usage analytics.
• Responsible gaming: to monitor your gaming behaviour for indicators of potential harm, provide you with access to responsible gaming tools (deposit limits, session timers, self-exclusion), and, where appropriate, to intervene proactively when patterns of potentially harmful gambling are detected.
• Marketing and promotional communications: to send you relevant promotional offers, bonus notifications, and news about new games or features — but only where you have opted in to receive such communications, or where we have a legitimate interest in keeping you informed about bc35 services you have already used.

bc35 does not use your personal data to make automated decisions that produce significant legal effects on you without human oversight. Where automated processes are used (for example, automated fraud-detection scoring), a human review is available upon request before any final adverse action is taken against your account.

4Legal Basis for Processing

bc35 processes personal data on the following legal grounds, depending on the specific activity being carried out:

• Contractual necessity: processing your identity, contact, and financial data is necessary to fulfil our contractual obligations to you as a registered bc35 player — including account management, payment processing, and providing access to games and betting markets.
• Legal obligation: processing data for KYC identity verification, AML transaction monitoring, age verification (21+), and regulatory reporting is required by applicable law and cannot be waived by player consent.
• Legitimate interests: processing technical and device data, behavioural data, and fraud-detection data serves bc35's legitimate interests in maintaining platform security, preventing fraud, and improving the quality of our services — provided those interests are not overridden by your privacy rights.
• Consent: where bc35 sends you direct marketing communications (promotional emails, SMS bonus alerts), we do so only where you have given explicit consent. You may withdraw consent for marketing at any time by contacting [email protected] or updating your notification preferences in your account settings.

5Payment Data and Financial Transactions

bc35 supports deposits and withdrawals in Bangladeshi Taka (BDT) via bKash, Nagad, Rocket, Upay, and selected bank transfers. All payment transactions on bc35 are processed by certified third-party payment processors. bc35 does not store your full payment credentials (such as your complete bKash PIN or bank account password) — only the reference identifiers necessary to process and track your transactions are retained.

Financial transaction records (deposit and withdrawal logs, amounts, timestamps, and payment method references) are retained by bc35 for a minimum of 5 years from the date of the transaction. This retention period is required by applicable anti-money-laundering regulations and cannot be shortened upon player request. At the end of the retention period, financial records are securely deleted or anonymised.

6Cookies and Tracking Technologies

bc35 uses cookies and similar tracking technologies (including local storage and session storage) on its platform. These technologies help bc35 deliver a functional, personalised, and secure experience. The categories of cookies we use are:

• Strictly necessary cookies: these are essential to the operation of the bc35 platform and cannot be disabled. They include session authentication tokens that keep you logged in during your session, security cookies that prevent cross-site request forgery (CSRF), and cookies that remember your cookie preferences.
• Analytical and performance cookies: these cookies collect anonymised or pseudonymised data about how players use bc35 — for example, which pages are visited most frequently, which games are most popular, and where users encounter errors. This data is used solely to improve platform performance and user experience.
• Functional cookies: these cookies remember your preferences (such as your preferred language version of the bc35 platform and your notification settings) to provide a more personalised experience. Disabling functional cookies may reduce the personalisation of your bc35 experience but will not prevent you from using core platform features.

You can manage your cookie preferences from your bc35 account settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging into or using the bc35 platform, as these cookies are fundamental to authentication and session security.

7Data Sharing and Third Parties

bc35 does not sell, rent, or trade your personal data with third parties for their own marketing or commercial purposes. We share personal data with third parties only in the following limited and necessary circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, and bank partners receive the minimum data necessary to process your deposit or withdrawal transaction. These processors are contractually bound to handle your data securely and may not use it for any purpose other than processing your transaction.
• Identity verification providers: where bc35 is required to conduct KYC or age verification, your identity documents and personal details may be shared with a certified third-party identity verification provider. These providers operate under strict data protection obligations and are prohibited from retaining your data beyond the verification process.
• Game providers: Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, Ezugi, and other certified gaming studios provide the games available on bc35. These providers may receive technical session data (such as your session token and game round results) necessary to deliver the game. They do not receive your full profile, payment details, or contact information.
• Legal and regulatory authorities: bc35 will disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities when required to do so by applicable law, court order, or regulatory direction. bc35 will not notify you of such disclosure where doing so would be unlawful or would prejudice an ongoing investigation.

All third parties with whom bc35 shares personal data are required to implement appropriate technical and organisational security measures to protect that data. bc35 conducts due diligence on its data processors and reviews their data protection practices periodically.

8Data Retention

bc35 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply: account data (name, contact details, identity documents) is retained for the duration of your active account plus a minimum of 5 years following account closure; financial transaction records are retained for a minimum of 5 years from the date of the transaction; gaming and behavioural data is retained for 2 years from the date of the activity, after which it is anonymised for aggregated analytics purposes; support communications are retained for 2 years from the date of the interaction.

At the end of the applicable retention period, bc35 will securely delete or irreversibly anonymise your personal data so that it can no longer be associated with you as an individual. Where deletion is technically complex (for example, from backup archives), bc35 will quarantine the data and ensure it is not actively used pending deletion at the next scheduled backup cycle.

9Your Rights

As a data subject, you have the following rights in relation to the personal data bc35 holds about you. To exercise any of these rights, please contact bc35 support at [email protected] with the subject line "Data Rights Request". bc35 will respond to all rights requests within 30 days of receipt.

• Right of access: you have the right to request a copy of the personal data bc35 holds about you, together with information about how it is being used. bc35 will provide this information free of charge in a structured, commonly used, machine-readable format.
• Right to rectification: if any personal data bc35 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. You can also update most of your account details directly through your bc35 account settings.
• Right to erasure: you have the right to request that bc35 delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other legal basis for processing. This right is subject to bc35's legal retention obligations (particularly for financial records).
• Right to restriction of processing: in certain circumstances (for example, while a rectification request is being assessed), you have the right to request that bc35 restrict the processing of your personal data so that it is stored but not actively used.
• Right to object: you have the right to object to bc35's processing of your personal data where that processing is based on legitimate interests. You also have an absolute right to object to the use of your data for direct marketing purposes at any time, with immediate effect.

bc35 will not charge a fee for processing a data rights request unless the request is manifestly unfounded or excessive. Where bc35 is unable to comply with a request — for example, because it conflicts with a legal retention obligation — bc35 will explain the reason in writing within the 30-day response window.

10Security Measures

bc35 implements a layered security architecture to protect player data against unauthorised access, disclosure, alteration, or destruction. Key security measures in place include: 256-bit SSL/TLS encryption for all data transmitted between your device and bc35's servers; AES-256 encryption for sensitive data stored at rest in our databases; multi-factor authentication (MFA) options for player accounts; role-based access controls limiting employee access to player data to those with a legitimate operational need; regular penetration testing and vulnerability assessments of our platform infrastructure; and automated intrusion detection systems that monitor for anomalous access patterns in real time.

Despite these measures, no internet-based platform can guarantee absolute security. In the unlikely event of a data breach that poses a risk to your rights and freedoms, bc35 will notify affected players and relevant authorities within the timeframes required by applicable law. bc35 will also provide guidance on the steps you can take to protect yourself in the event of a breach.

11Children and Minors

bc35 strictly prohibits persons under the age of 21 from registering an account or using any service on the platform. bc35 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the registration and KYC process, and any account found to belong to a person under 21 will be immediately closed and all associated data deleted, subject to any mandatory legal retention obligations.

If bc35 becomes aware that personal data has been collected from a person under the age of 21 without appropriate verification, that data will be deleted as promptly as reasonably practicable. Parents or guardians who believe that a minor may have created a bc35 account should contact bc35 support immediately at [email protected] so that the account can be investigated and closed.

12Marketing Communications

bc35 may send you promotional emails, SMS messages, and in-platform notifications about bonuses, new games, sports betting markets, and special events — but only where you have opted in to receive such communications during registration or through your account settings. We do not send unsolicited marketing messages. Each marketing communication will include a clear and easy way to opt out of future messages.

You may withdraw your consent to receive marketing communications at any time by updating your notification preferences in your bc35 account settings, or by contacting our support team at [email protected] with the subject line "Unsubscribe". Withdrawal of marketing consent will not affect the lawfulness of processing carried out prior to the withdrawal, and will not prevent bc35 from sending you non-marketing service communications (such as account security alerts, deposit confirmations, or withdrawal notifications).

13Changes to This Privacy Policy

bc35 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or operational processes. Where changes are material — meaning they significantly affect how your personal data is collected, used, or shared — bc35 will provide advance notice to registered players via their registered contact details or via a prominent notice on the bc35 platform, at least 14 days before the changes take effect.

Non-material changes (such as corrections to typographical errors, clarifications that do not change the substance of the policy, or updates to contact information) may be made without advance notice. The "Last updated" date at the top of this policy will always reflect the date of the most recent revision. We encourage you to review this policy periodically to stay informed about how bc35 protects your data.

14Contact Us and Data Requests

For all privacy-related enquiries, data rights requests (access, rectification, erasure, restriction, objection), marketing opt-out requests, or general questions about how bc35 handles your personal data, please contact our support team. We aim to acknowledge all enquiries within 24 hours and to provide a substantive response within 30 days. Support is available 24 hours a day, 7 days a week via live chat on the bc35 platform.

Email (plain text — not a clickable link): [email protected]