36bet Privacy Policy
At 36bet, we take your privacy seriously. This Privacy Policy explains exactly what personal data we collect, why we collect it, how it is stored and protected, and what rights you have as a player based in Bangladesh. We are committed to handling your information with transparency and care.
Information We Collect
36bet collects personal data in order to operate the platform, verify player identities, process financial transactions, and provide a safe and reliable betting and casino experience to players in Bangladesh. The data we collect falls into three broad categories: information you provide directly to us, information collected automatically through your use of the platform, and information obtained from third parties in connection with payment processing and identity verification.
1.1 Information You Provide Directly
When you register an account on the 36bet platform — via the 36bet Login registration flow — you are required to provide certain mandatory personal details. These include your full name, date of birth, mobile number (which must match your primary bKash or Nagad wallet), a chosen username, and a secure password. You may also be asked to provide an email address for account communication purposes. Additionally, during the identity verification and withdrawal process, you may be asked to submit a copy of your national ID card, passport, or other government-issued identification document, together with a confirmation of ownership of the payment method being used for withdrawal.
1.2 Information Collected Automatically
When you access and use the 36bet platform, certain technical information is collected automatically by our systems. This includes your IP address, device type and operating system, browser type and version, screen resolution, the pages and game titles you visit within the platform, session duration, click-stream data showing your navigation path through the site, and timestamps of all account activity including logins, deposits, bets placed, and withdrawals requested. This information is collected primarily for security monitoring, fraud prevention, platform performance optimisation, and responsible gaming monitoring purposes.
1.3 Payment and Transaction Data
When you make a deposit or request a withdrawal through the 36bet cashier, we record the transaction amount, the payment method used (for example bKash, Nagad, Rocket, or bank transfer), the mobile number or bank account reference associated with the transaction, the date and time of the transaction, and its completion status. 36bet does not store full payment credentials such as bKash PINs or bank account passwords. Payment authentication is handled directly by the respective payment provider's secure interface.
| Data Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full name, date of birth, national ID number | Provided by player at registration or verification |
| Contact Data | Mobile number, email address | Provided by player at registration |
| Financial Data | bKash/Nagad number, bank reference, transaction history | Collected via cashier at each transaction |
| Technical Data | IP address, device type, browser version, session logs | Collected automatically on each visit |
| Behavioural Data | Game history, bet amounts, session duration, navigation path | Collected automatically during platform use |
| Verification Documents | National ID copy, payment method ownership screenshot | Provided by player upon request |
How We Use Your Data
36bet uses personal data collected from players exclusively for the purposes described in this Privacy Policy. We do not use your data for purposes that are incompatible with those described here, and we do not sell, rent, or otherwise commercially exploit your personal data to third-party advertisers or data brokers.
2.1 Account Management and Authentication
Your registration data — including your username, mobile number, and password hash — is used to create, maintain, and authenticate your 36bet account. This data is essential for enabling secure 36bet Login access, applying responsible gaming limits you have set, and personalising your in-platform experience (such as displaying your account balance in Bangladeshi Taka and pre-filling your preferred payment method in the cashier).
2.2 Payment Processing and Fraud Prevention
Transaction data is used to process deposits credited to your 36bet balance, execute withdrawal requests to your registered payment method, maintain a full auditable transaction record in your account history, and detect and investigate suspected fraudulent activity — including money laundering, unauthorised account access, and chargeback abuse. Where a transaction triggers our automated fraud-detection systems, a manual review may be conducted by the 36bet compliance team before the transaction is completed.
2.3 Responsible Gaming Monitoring
Behavioural and session data — including your betting frequency, session duration, deposit velocity, and net loss patterns — is monitored by 36bet's responsible gaming systems to identify early indicators of potentially problematic gambling behaviour. Where such indicators are detected, 36bet may proactively reach out to you with information about responsible gaming tools and support resources. This monitoring is carried out in players' interests and is a core component of 36bet's commitment to player welfare.
2.4 Platform Communications
Your contact data — primarily your mobile number and email address — is used to send you transactional communications such as deposit confirmations, withdrawal status updates, account verification requests, and security alerts. If you have opted in to promotional communications, we may also send you information about 36bet bonuses, seasonal promotions (including BPL cricket season offers and Eid promotions), and platform updates. You may opt out of promotional communications at any time by contacting the support team.
No Unsolicited Marketing: 36bet does not sell or share your contact details with any third-party marketing companies. All promotional communications sent from 36bet are issued directly by 36bet and relate exclusively to 36bet platform products, offers, and updates. Players who have activated a self-exclusion period will not receive any promotional communications for the duration of that exclusion.
Account Security
Your identity data is used solely to authenticate your account and keep it secure — including detecting and blocking unauthorised login attempts from unrecognised devices or IP addresses.
Payment Integrity
Transaction data is processed to ensure every bKash, Nagad, and bank transfer deposit and withdrawal is accurate, reconciled, and protected against fraudulent interference.
Player Welfare
Session and behavioural data powers our responsible gaming monitoring tools — helping us identify and support players who may be showing early signs of gambling-related harm.
Relevant Updates
Contact data enables us to send you deposit confirmations, withdrawal updates, and opt-in promotional communications about 36bet bonuses and cricket season offers — nothing more.
Data Sharing & Disclosure
36bet does not sell, rent, or trade your personal data to any third party. There are, however, a limited set of circumstances under which your personal data may be shared with trusted third parties. Each of these circumstances is described transparently below.
3.1 Payment Service Providers
In order to process deposits and withdrawals, 36bet shares the minimum necessary transaction data — including your registered mobile number and transaction reference — with the relevant payment service provider (bKash, Nagad, Rocket/Dutch-Bangla Bank, Upay, or your nominated bank). This data sharing is strictly limited to what is required to execute the transaction and is governed by each payment provider's own privacy and data protection terms. 36bet is not responsible for how payment providers handle data once it has been transmitted to them for transaction processing purposes.
3.2 Identity Verification Partners
Where 36bet requires documentary identity verification — for example to confirm that a player meets the 18+ age requirement or to authenticate a withdrawal above ৳20,000 — verification documents may be reviewed by authorised members of the 36bet compliance team. 36bet does not use automated third-party identity verification APIs that transmit your documents to external data processors without your explicit knowledge.
3.3 Game Software Providers
Casino game and slot titles on the 36bet platform are supplied by licensed third-party software providers including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, and Microgaming. When you launch a game, a session token — containing a non-identifiable player reference and your current balance — is transmitted to the relevant software provider to initialise the game session. No personally identifiable information such as your name, mobile number, or national ID details is transmitted to game software providers.
3.4 Legal and Regulatory Disclosure
36bet may be required to disclose personal data to law enforcement agencies, regulatory bodies, or other authorised public authorities where required to do so by applicable law or by a valid legal order. In such cases, 36bet will disclose only the data that is strictly required to comply with the legal obligation and will, where permitted, inform the affected player that such a disclosure has been made.
No Third-Party Advertising: 36bet does not share your data with advertising networks, social media platforms, or analytics companies for commercial targeting purposes. Any internal analytics performed on player behaviour data is conducted solely to improve platform performance and responsible gaming monitoring — not to profile users for advertising resale.
Data Security Measures
36bet employs a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. While no digital platform can guarantee absolute security, we maintain industry-standard protections and review our security posture on an ongoing basis.
5.1 Encryption in Transit and at Rest
All data transmitted between your device and the 36bet platform is encrypted using TLS (Transport Layer Security) with a minimum of 256-bit encryption. This applies to all account pages, the cashier, and the game lobby. Sensitive data stored in the 36bet database — including password hashes and identity document references — is encrypted at rest using industry-standard symmetric encryption. Passwords are never stored in plaintext; only a salted cryptographic hash is retained.
5.2 Access Controls
Access to personal data within 36bet's internal systems is restricted on a strict need-to-know basis. Only authorised members of the compliance, payments, and responsible gaming teams may access identifiable player data, and only to the extent necessary for their specific role. All internal access to sensitive player records is logged and audited. 36bet staff are prohibited from accessing player data for any purpose not directly related to their authorised job function.
5.3 Incident Response
In the event of a data security incident that is likely to result in a risk to the rights and freedoms of affected players, 36bet will notify affected players by email without undue delay. The notification will describe the nature of the incident, the categories of data affected, the likely consequences, and the measures 36bet has taken or proposes to take in response. Players are encouraged to contact [email protected] (plain text — not a link) immediately if they suspect that their account has been accessed without their authorisation.
SSL / TLS Encryption
Every connection between your browser and the 36bet platform is protected by 256-bit TLS encryption — the same standard used by major banking institutions. Your data is never transmitted in plaintext.
Password Hashing
Your account password is never stored as readable text. 36bet stores only a salted cryptographic hash, meaning that even internal staff cannot see or retrieve your password — only you know it.
Access Logging
All internal access to player account data is logged and subject to regular audit. Unauthorised access by any 36bet staff member is a disciplinary matter and may result in termination and referral to relevant authorities.
Data Retention
36bet retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required to comply with applicable legal and regulatory obligations. The retention periods below apply to the main categories of personal data held by 36bet.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Account management; legal compliance |
| Transaction records | 7 years from transaction date | Financial record-keeping obligations |
| Identity verification documents | 5 years from submission date | Anti-fraud; age verification compliance |
| Session and behavioural logs | 2 years from session date | Responsible gaming monitoring; fraud detection |
| Support correspondence | 3 years from last interaction | Dispute resolution; service improvement |
| Self-exclusion records | Permanent (never deleted) | Prevent re-registration during exclusion period |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual. Anonymised and aggregated data — from which individual identity cannot be reconstructed — may be retained indefinitely for platform performance analysis and responsible gaming research.
Self-Exclusion Records: Records of self-exclusion requests and permanent account closures are retained indefinitely to ensure that a previously self-excluded player cannot inadvertently re-register under the same identity. This retention is a player protection measure, not a commercial data practice. These records contain only a minimal set of identifiers necessary to enforce the exclusion.
Your Privacy Rights
As a registered player on the 36bet platform, you have a number of rights in relation to the personal data we hold about you. 36bet is committed to honouring these rights promptly and transparently. To exercise any of the rights described in this section, please contact the 36bet support team at [email protected] (plain text — not a link), clearly describing the right you wish to exercise and providing sufficient information to allow us to identify your account.
7.1 Right of Access
You have the right to request a copy of all personal data that 36bet holds about you. Upon receipt of a valid access request, 36bet will provide a structured summary of your account data, transaction history, session logs, and any identity verification documents on file within 14 Bangladesh Standard Time business days.
7.2 Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. This includes updating your registered mobile number, email address, or postal address. All rectification requests are subject to identity verification to ensure that changes are not made by an unauthorised third party.
7.3 Right to Erasure
You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis for processing applies. However, please note that certain data — particularly transaction records, identity verification documents, and self-exclusion records — must be retained for the periods specified in Section 6 above to comply with legal and responsible gaming obligations. Erasure requests that conflict with these obligations can only be partially fulfilled; we will inform you of any data that must be retained and the reason why.
7.4 Right to Restrict Processing
Where you dispute the accuracy of your personal data or have objected to its processing pending our review, you may request that we restrict our use of that data to storage only until the matter is resolved. During a restriction period, we will not use the affected data for any purpose other than confirming the restriction is in place.
7.5 Right to Data Portability
You have the right to receive a copy of the personal data you have provided to 36bet in a structured, commonly used, machine-readable format (such as CSV or JSON), so that you may transfer it to another service provider of your choosing. This right applies to data that you have directly provided to us and that we process on the basis of your consent or for the performance of our contract with you.
Response Timelines: 36bet aims to respond to all privacy rights requests within 14 Bangladesh Standard Time business days of receiving a valid, verified request. Where a request is complex or involves a large volume of data, we may extend this period by a further 14 days and will inform you of the extension in advance. All privacy correspondence is handled in English.
Policy Updates & Contact
36bet reviews this Privacy Policy on a regular basis to ensure it accurately reflects our current data practices and remains consistent with applicable privacy standards. Where a material change is made to this policy — meaning a change that alters how we collect, use, share, or retain your personal data in a way that could affect your rights — registered players will be notified by email to the address on file at least seven days before the change takes effect. The revised policy will also be published on this page with an updated review date.
For changes that are non-material in nature — such as minor clarifications of language, corrections of typographical errors, or structural reformatting that does not alter the substance of any provision — 36bet may update this page without sending individual notifications. It is the responsibility of all registered players to review this Privacy Policy periodically to remain informed of how their data is being handled.
8.1 How to Contact Us About Privacy
If you have any questions about this Privacy Policy, wish to exercise any of your data rights as described in Section 7, or have a concern about how your personal data has been handled by 36bet, please contact our support team:
- Email: [email protected] (plain text — not a link). Please include "Privacy Request" or "Data Rights" in your subject line so your message is routed to the correct team.
- Language: All privacy correspondence is handled in English.
- Response time: We aim to respond to all privacy queries within two hours during Bangladesh Standard Time peak hours (UTC+6), and within 14 business days for formal data rights requests.
- Availability: The 36bet support team is available 24 hours a day, seven days a week, including Bangladesh public holidays.
This Privacy Policy, together with the Terms & Conditions and Responsible Gaming Policy published on the 36bet platform, constitutes the complete framework governing the relationship between 36bet and its registered players in respect of data handling, platform use, and player welfare. All three documents should be read together.
18+ Reminder: The 36bet platform is strictly for adults aged 18 and above. The personal data we collect — including age verification documents — is used in part to enforce this requirement. If you believe an underage individual has registered an account using false information, please contact us immediately at [email protected] (plain text — not a link). Protecting minors from accessing gambling content is a core responsibility that 36bet takes seriously.
Questions About Your Data at 36bet?
Our English support team is available 24/7 to answer any privacy questions. You can also explore the 36bet platform, read our FAQ, or review our Responsible Gaming policy.