35bed Privacy Policy

This Privacy Policy ("Policy") describes how 35bed ("we", "us", "our") collects, uses, stores, shares and protects personal information about individuals ("you", "your") who access or use the 35bed platform available at https://35bed.app (the "Platform"). This Policy applies to all visitors, registered members, and any other persons who interact with the Platform, whether through a web browser, mobile device, or any other access method.

By using the Platform you confirm that you have read, understood, and agreed to this Policy. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately. This Policy is incorporated by reference into the 35bed Terms and Conditions and should be read alongside them. Where there is any conflict between this Policy and the Terms and Conditions, the Terms and Conditions shall prevail.

When you register for, access, or use the Platform, 35bed collects the following categories of personal data:

• Identity data: full name, date of birth, gender, and a copy of your government-issued National ID (NID) or passport provided during KYC verification.
• Contact data: email address, phone number, and residential address as provided at registration or as updated in your account settings.
• Financial data: deposit and withdrawal transaction records, the payment methods used (bKash, Nagad, Rocket, Upay, Visa, Mastercard), and transaction amounts. 35bed does not store your bKash PIN, Nagad PIN, or full card number — these are processed exclusively by your payment provider.
• Account activity data: login timestamps, session durations, game history, betting records, bonus usage, and any communications between you and the 35bed support team.
• Technical data: IP address, device type, operating system, browser type and version, screen resolution, and referral source collected automatically when you access the Platform.
• Responsible gaming data: any self-exclusion requests, deposit limits, time-out elections, or other responsible gaming tool preferences you have set.

We collect personal data directly from you when you register or interact with the Platform, automatically through cookies and similar tracking technologies, and in some cases from third-party payment processors who confirm the completion of a payment transaction. We do not purchase data lists or source personal data from unrelated third-party data brokers.

35bed uses the personal data collected for the following purposes. Each purpose is grounded in a lawful basis as outlined below:

• Account administration and service delivery: to register your account, verify your identity (KYC), process deposits and withdrawals, provide customer support, and deliver the gaming and betting services you have requested.
• Regulatory compliance: to comply with applicable anti-money laundering (AML), know-your-customer (KYC), and other legal or regulatory obligations that apply to the operation of an online gaming platform.
• Fraud prevention and security: to detect, investigate and prevent fraudulent transactions, bonus abuse, money laundering, account takeovers, and other forms of prohibited conduct on the Platform.
• Personalisation and platform improvement: to analyse your gaming preferences and platform interactions in order to improve our services, customise promotional offers relevant to your interests, and enhance the overall user experience on 35bed.
• Responsible gaming monitoring: to identify patterns of gambling behaviour that may indicate problem gambling, to enforce responsible gaming limits you have set, and to fulfil our duty of care obligations in relation to player wellbeing.

35bed does not sell your personal data. We share personal data with third parties only in the following limited and controlled circumstances:

• Payment processors: we share necessary transaction data with bKash, Nagad, Rocket, Upay, Visa, and Mastercard solely to process your deposit and withdrawal requests. These providers operate under their own privacy policies and are bound by applicable financial regulations.
• Identity verification providers: we may use accredited KYC service providers to assist with document verification. These providers process identity data solely for verification purposes and are contractually prohibited from using your data for any other purpose.
• Regulatory and law enforcement authorities: we will disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, safety, or property of 35bed, our members, or the public.
• Business successors: in the event of a merger, acquisition, or sale of all or part of 35bed's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy terms that will apply to your data going forward.

In all cases where 35bed shares personal data with third parties, we apply appropriate contractual safeguards to ensure that the recipient handles your data in a manner consistent with this Policy and applicable data protection standards. We do not authorise third-party recipients to use your personal data for their own marketing purposes.

35bed uses cookies and similar tracking technologies on the Platform. Cookies are small data files stored on your device that help the Platform function correctly and allow us to understand how users interact with it. We use the following categories of cookies:

• Essential cookies: strictly necessary for the Platform to operate. These include session cookies that keep you logged in and security cookies that help prevent unauthorised access. Essential cookies cannot be disabled without breaking core Platform functionality.
• Analytical cookies: used to collect aggregated, anonymised data about how visitors use the Platform, such as which pages are visited most frequently and how long users spend in different sections. This helps us improve the platform experience over time.
• Functional cookies: remember your preferences such as language settings and responsible gaming limit configurations so that you do not need to re-enter them on each visit.
• Marketing cookies: used with your consent to deliver relevant promotional content about 35bed offers that may be of interest to you based on your platform activity. You may withdraw this consent at any time via your browser or account settings.

35bed takes the security of your personal data seriously. We implement a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, or alteration. Our security measures include:

• SSL/TLS encryption applied to all data transmitted between your device and the 35bed servers, ensuring that your login credentials, personal details, and financial information cannot be intercepted in transit.
• Access controls that restrict access to personal data to authorised 35bed personnel and service providers on a strict need-to-know basis, with all access logged and auditable.
• Secure storage of sensitive data including hashed password credentials. 35bed does not store plaintext passwords, bKash PINs, Nagad PINs, or full payment card numbers on its servers.
• Regular security reviews and vulnerability assessments to identify and address potential weaknesses in our platform infrastructure before they can be exploited.
• Incident response procedures to detect, report, and manage any data security breaches promptly and in accordance with applicable legal requirements.

35bed retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory retention requirements, to resolve disputes, and to enforce our agreements. The specific retention periods that apply to different categories of data are as follows: account and identity data is retained for the duration of your membership and for a minimum of five years after account closure to meet AML and KYC regulatory requirements; financial transaction records are retained for a minimum of five years in accordance with applicable financial record-keeping obligations; responsible gaming records, including self-exclusion requests, are retained indefinitely to prevent re-registration during an active self-exclusion period.

When personal data is no longer required for any of the purposes described above, 35bed will delete or anonymise it in a secure manner. Where immediate deletion is not technically feasible, we will securely isolate the data from further processing until deletion is possible.

Subject to applicable law, you hold the following rights in relation to the personal data that 35bed holds about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and include your registered account username and the specific right you wish to exercise. We will respond within five business days of receiving a verifiable request.

• Right of access: you may request a copy of the personal data 35bed holds about you, along with information about how and why it is being processed.
• Right to rectification: you may request correction of any personal data that is inaccurate or incomplete. Minor corrections such as name spelling or contact details can often be made directly via your account settings.
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to our legal retention obligations — we cannot erase data we are required by law to keep.
• Right to restrict processing: you may ask us to pause processing of your personal data in certain circumstances, for example while we investigate a correction request you have submitted.
• Right to object: you may object to processing of your personal data for direct marketing purposes at any time and without giving a reason. We will stop processing your data for this purpose immediately upon receiving your objection.

35bed will not charge a fee for processing a data rights request unless the request is manifestly unfounded or excessive, in which case we reserve the right to charge a reasonable administrative fee or to decline the request. We may need to verify your identity before we can act on any request to ensure we are responding to the correct account holder.

The 35bed Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an account or use the Platform in any way.

• Access from minors: we rely on an adult in your household to ensure that children do not access the Platform. If you share a device with minors, we strongly recommend using device-level parental control software to prevent access to online gambling services.
• Discovery of minor's data: if we discover or are notified that we have inadvertently collected personal data from a person under the age of 21, we will take immediate steps to delete that data and close the associated account without delay.
• Parental notification: if you are a parent or guardian and believe that a minor in your care has created a 35bed account or submitted personal data to the Platform, please contact us immediately at [email protected] so we can investigate and take appropriate action.
• Age verification enforcement: 35bed actively uses age verification during the KYC process to detect and reject underage applicants. Any account found to belong to a person under 21 will be permanently closed and all balances forfeited.

35bed reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the structure of the Platform. When we make material changes, we will update the Effective Date at the top of this page and, where appropriate, notify registered members via their registered email address or through a prominent in-platform notification.

Your continued use of the Platform following the posting of an updated Privacy Policy constitutes your acceptance of those changes. If you do not agree with any updated Policy, you should stop using the Platform and may request closure of your account by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 35bed handles your personal data, please contact the 35bed support team. We are available 24 hours a day, 7 days a week via live chat on the Platform, and by email.

We are committed to resolving privacy-related inquiries promptly and transparently. All data rights requests will be handled within five business days of receipt of a verifiable request. For requests that are complex or high in volume, we may extend this period by a further ten business days, in which case we will notify you of the extension and the reason for the delay.

For all privacy-related queries, data rights requests, or general questions about this Policy, please contact the 35bed support team. Support is available 24 hours a day, 7 days a week via live chat on the Platform.

Email: [email protected]