36bajee Privacy Policy
Your privacy matters to us. This Privacy Policy explains exactly what personal data 36bajee collects, why we collect it, how it is stored and protected, who it may be shared with, and what rights you have over your own information. We encourage all players to read this document in full before using the platform.
Privacy at a Glance
How 36bajee Handles Your Data
These cards summarise the core principles of our Privacy Policy. They do not replace the full legal text below — all players are required to read each section in full.
Minimal Data Collection
36bajee only collects the personal data that is genuinely necessary to operate your account, process transactions, and comply with legal obligations. We do not collect data speculatively or without clear purpose.
SSL-Encrypted Storage
All personal data held by 36bajee is stored on SSL-encrypted servers. Payment data processed via bKash, Nagad, Rocket, and Upay is handled exclusively through the providers' own secure APIs — no raw card or wallet credentials are stored on our servers.
Your Data, Your Rights
Registered players have the right to access, correct, export, or request deletion of the personal data held about them. Requests can be submitted at any time by contacting [email protected].
Limited Third-Party Sharing
36bajee does not sell, rent, or trade your personal data to third parties for marketing purposes. Data is shared only with essential service providers — payment processors, identity verification partners, and fraud detection systems — under strict contractual data protection terms.
Transparent Cookie Use
36bajee uses cookies and similar tracking technologies solely to improve platform performance, personalise your experience, and support fraud detection. We do not use third-party advertising cookies to profile users across external websites.
Defined Retention Periods
Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Account data is typically retained for a period of five years following account closure, in line with standard AML obligations.
Section 1
Data We Collect
When you register for and use a 36bajee account, we collect a range of personal data in order to provide our services, verify your identity, process transactions, and comply with our legal obligations. The categories of personal data we collect are set out below.
Registration Data
When you create a 36bajee account, you are required to provide your full legal name, date of birth, email address, and mobile phone number. This information is used to create and administer your account, verify your eligibility, and communicate with you about your account activity. Your date of birth is collected specifically to confirm that you are aged 18 or above, as required by our Terms & Conditions.
Identity Verification Data
At various stages of your use of the platform — including before processing your first withdrawal — 36bajee may request identity verification documents. These may include a copy of your National Identity Card (NID), passport, driving licence, or birth certificate. This information is collected to comply with Know Your Customer (KYC) requirements and to prevent fraud, money laundering, and underage access to gambling services.
Payment Data
When you make a deposit or request a withdrawal, we collect information about the payment method used — including mobile wallet numbers (bKash, Nagad, Rocket, Upay), bank account identifiers, or card reference data as applicable. Full payment credentials (e.g., full wallet PINs or complete card numbers) are never stored on 36bajee servers. All payment processing is handled via the payment providers' own encrypted infrastructure.
Technical & Device Data
We automatically collect certain technical data when you access the 36bajee platform, including your IP address, browser type and version, operating system, device type, screen resolution, time zone, and language settings. This data is used for fraud detection, platform security, and service optimisation. It does not by itself identify you as an individual but may be combined with other data to do so.
Behavioural & Usage Data
We collect data about how you interact with the 36bajee platform — including pages visited, games played, bet amounts and outcomes, session duration, deposit frequency, and feature usage patterns. This data is used to improve platform performance, personalise your experience, identify problem gambling behaviour under our Responsible Gaming obligations, and detect fraudulent activity.
Communication Data
If you contact 36bajee support via email, live chat, or any other communication channel, we retain records of that correspondence — including your name, contact details, and the content of the exchange — for quality assurance, dispute resolution, and compliance purposes.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Registration Data | Name, email, phone, date of birth | Account creation, eligibility verification |
| Identity / KYC Data | NID, passport, driving licence | Age verification, AML compliance |
| Payment Data | bKash/Nagad number, bank reference | Deposits, withdrawals, fraud prevention |
| Technical Data | IP address, device type, browser | Security, platform optimisation |
| Behavioural Data | Games played, bets placed, session duration | Personalisation, responsible gaming |
| Communication Data | Support emails, chat logs | Dispute resolution, quality assurance |
Legal Basis for Collection
- Contractual necessity (account services)
- Legal obligation (KYC / AML)
- Legitimate interest (fraud prevention)
- Consent (marketing communications)
Section 2
How We Use Your Data
36bajee uses the personal data we collect only for the purposes described in this Privacy Policy. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The primary uses of your personal data are as follows:
Account Management
Your registration data is used to create and administer your 36bajee account, authenticate your identity when you log in, process your deposits and withdrawals, and communicate with you about your account — including security alerts, transaction confirmations, and updates to our platform terms.
Identity & Age Verification
We use identity documents and date-of-birth data to confirm that you are aged 18 or above and that your account details are genuine. Verification checks are conducted in accordance with our KYC obligations and may be performed by third-party verification partners working on our behalf.
Fraud Prevention & Platform Security
Technical and behavioural data is analysed by 36bajee's automated fraud detection systems to identify suspicious activity, including multi-account behaviour, bonus abuse, irregular betting patterns, and potential money laundering. Where suspicious activity is identified, the relevant account may be suspended pending manual review.
Responsible Gaming Monitoring
Behavioural data — including deposit frequency, bet volume, session length, and win/loss patterns — is used to identify players who may be exhibiting signs of problem gambling. Players identified through this monitoring may receive responsible gaming communications or have enhanced responsible gaming tools applied to their account as a safeguard.
Service Personalisation & Improvement
Usage and behavioural data is used to personalise your 36bajee experience — for example, by surfacing games and sports markets that match your preferences — and to improve the platform's overall performance, design, and feature set based on aggregate usage patterns.
Marketing Communications
Where you have given explicit consent, 36bajee may use your contact details to send you promotional communications about new games, seasonal offers (including Eid, BPL season promotions, and Pohela Boishakh specials), and platform updates. You may withdraw this consent at any time by contacting [email protected] or using the unsubscribe mechanism in any marketing email.
Data Use Summary
- Account creation & administration
- Identity & age verification
- Payment processing
- Fraud & AML detection
- Responsible gaming monitoring
- Platform personalisation
- Marketing (with consent only)
- Selling data to third parties
- Profiling for external advertising
Section 4
Data Sharing & Third Parties
36bajee does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data only in the specific, limited circumstances described in this section, and only with parties who are contractually bound to handle your data in accordance with applicable data protection standards.
Payment Processing Partners
To process deposits and withdrawals, 36bajee shares relevant transaction data with payment service providers — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank (DBBL), BRAC Bank, City Bank, Islami Bank, and Sonali Bank. These providers receive only the data necessary to complete the transaction. They are contractually prohibited from using your data for any purpose other than payment processing.
Identity Verification Providers
To fulfil our KYC and age verification obligations, 36bajee may share identity documents submitted by players with third-party verification services. These partners operate under strict data processing agreements and are authorised to process your identity data solely for the purpose of verification. Verified data is not retained by these partners beyond the period required to complete the verification check.
Fraud Detection & Security Providers
36bajee works with specialist fraud detection and cybersecurity providers who process technical and behavioural data on our behalf to identify and prevent fraudulent activity on the platform. These providers act as data processors under contract and have no right to use the data they process for any independent purpose.
Game Technology Providers
The 36bajee platform integrates games and live dealer products from third-party game studios — including Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi. These providers may receive certain anonymised session and gameplay data to support the delivery of their products within the 36bajee environment. They do not receive your name, contact details, or payment information.
Legal & Regulatory Disclosure
36bajee may disclose personal data to law enforcement agencies, regulatory bodies, or other authorised public authorities where required to do so by applicable law, court order, or governmental regulation. Such disclosures will be limited to the minimum data necessary to fulfil the legal obligation.
Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of 36bajee's business, personal data held by 36bajee may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer and of any material changes to how their data will be handled as a result.
Authorised Third Parties
- Payment processors (bKash, Nagad etc.)
- KYC verification partners
- Fraud detection providers
- Game studio integrations (anonymised)
- Legal/regulatory authorities (if required)
- Advertisers & data brokers
- Social media platforms
Section 5
Data Security
36bajee takes the security of your personal data seriously and applies a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. While no digital system can guarantee absolute security, we maintain industry-standard safeguards appropriate to the sensitivity of the data we hold.
Technical Security Measures
All data transmitted between your device and the 36bajee platform is encrypted using Transport Layer Security (TLS) with a minimum of 256-bit encryption. The platform's infrastructure is hosted on servers with restricted access controls, regular security patching, and continuous monitoring for intrusion attempts. Database access is limited to authorised personnel on a need-to-know basis, and all access events are logged for audit purposes.
Payment Data Security
36bajee does not store raw payment credentials — including full bKash or Nagad wallet PINs, complete bank account numbers, or card security codes — on its servers. All payment transactions are routed through the secure APIs of our payment partners, each of which operates under its own security certification framework. Transaction references are stored for reconciliation and dispute purposes only.
Account Security
Player accounts are protected by password authentication. 36bajee strongly encourages the use of a unique, complex password for your account and recommends that you do not reuse passwords across multiple online services. Where available, two-factor authentication (2FA) provides an additional layer of security. Players are responsible for maintaining the confidentiality of their login credentials; 36bajee will never request your password via email or live chat.
Internal Data Handling
Access to player personal data within 36bajee is restricted to staff members who require it to perform their roles. All staff with access to personal data receive training on data protection principles and are bound by confidentiality obligations. Any suspected data breach is subject to internal investigation and, where required by applicable law, reported to the relevant supervisory authority and affected players without undue delay.
Security Measures
- TLS 256-bit data encryption
- Restricted server access controls
- Continuous intrusion monitoring
- No raw payment credential storage
- Role-based internal data access
- Staff data protection training
- Breach response & reporting process
Section 6
Data Retention
36bajee retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. Once the applicable retention period has expired, personal data is securely deleted or anonymised so that it can no longer be associated with an individual player.
Active Account Data
For the duration of your active relationship with 36bajee — from account creation through to account closure — we retain your full account record, including registration data, KYC documents, transaction history, and gameplay records. This data is necessary to operate your account and to respond to queries or disputes that may arise during the account lifetime.
Post-Closure Retention
Following voluntary or involuntary account closure, 36bajee retains your personal data for a period of five years. This retention period reflects our anti-money laundering (AML) obligations and the standard period within which regulatory inquiries or legal claims may arise. After this period, data is deleted from active systems and securely purged from backup storage.
Communication Records
Support correspondence — including emails and live chat transcripts — is retained for a period of three years following the date of the last interaction. This allows 36bajee to reference previous communications in the event of a recurring issue or dispute.
Marketing Data
Where you have consented to receive marketing communications, your contact details and marketing preferences are retained until you withdraw consent. Upon withdrawal of consent, your contact details are removed from marketing lists within 10 business days.
Anonymised Data
Aggregate, anonymised usage and behavioural data — from which individual players cannot be identified — may be retained indefinitely for the purpose of platform analytics, product development, and responsible gaming research.
| Data Type | Retention Period |
|---|---|
| Active account data | Duration of account + 5 years post-closure |
| KYC / identity documents | 5 years post-closure |
| Transaction records | 5 years post-closure (AML obligation) |
| Support correspondence | 3 years from last interaction |
| Marketing preferences | Until consent withdrawn |
| Anonymised usage data | Indefinite (non-identifiable) |
Retention at a Glance
- Active data: lifetime of account
- Post-closure: 5 years
- Support logs: 3 years
- Marketing data: until opt-out
- Anonymised stats: indefinite
Section 7
Your Privacy Rights
As a 36bajee player, you have a number of rights with respect to the personal data we hold about you. These rights are outlined below. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request". We will respond to all valid requests within 30 days of receipt.
Right of Access
You have the right to request a copy of the personal data that 36bajee holds about you. Upon receiving a valid access request, we will provide you with a summary of your data in a commonly used electronic format. This includes your registration details, KYC status, transaction history, and any marketing preferences we hold on record.
Right to Rectification
If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Where a correction affects your account in a material way — for example, a name change supported by legal documentation — additional verification may be required before the change is applied.
Right to Erasure
In certain circumstances, you have the right to request that 36bajee delete the personal data we hold about you. This right is not absolute — we may be required by law to retain certain data for the retention periods described in Section 6. Where erasure is not possible in full, we will inform you of the specific data that must be retained and the legal basis for doing so.
Right to Restriction of Processing
You have the right to request that 36bajee restrict the processing of your personal data in certain situations — for example, while the accuracy of data you have disputed is being verified, or where you have objected to processing based on our legitimate interests and that objection is under review.
Right to Data Portability
Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format. You may also request that this data be transmitted directly to another service provider where technically feasible.
Right to Object to Marketing
You have the right to object at any time to the processing of your personal data for direct marketing purposes. Upon receipt of such an objection, 36bajee will cease processing your data for marketing purposes without delay. You can exercise this right by emailing [email protected] or using the unsubscribe link in any promotional communication.
How to Submit a Privacy Rights Request
To exercise any of the rights described above, send an email to [email protected] with the subject line "Privacy Rights Request". Please include your full name, registered email address, and a description of the right you wish to exercise. We may ask for additional verification before processing the request to protect against unauthorised access to your data.
Your Rights Summary
- Access your personal data
- Correct inaccurate data
- Request erasure (where applicable)
- Restrict processing
- Data portability
- Object to marketing at any time
Section 8
Policy Updates & Contact
36bajee reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, platform features, legal obligations, or applicable regulations. We are committed to keeping you informed about how we handle your personal data, and we will always publish the most current version of this policy on this page.
How We Notify You of Changes
When we make a material change to this Privacy Policy — meaning a change that significantly affects how your personal data is collected, used, or shared — we will notify registered players via the email address associated with their account at least 14 days before the change takes effect. For minor clarifications or non-material amendments (such as formatting corrections or additions of detail that do not change the substance of our practices), the updated policy will be published without prior individual notification.
Continued Use as Acceptance
Your continued use of the 36bajee platform following the effective date of any updated Privacy Policy constitutes your acknowledgment of and agreement to the revised terms. If you do not agree with any changes to the Privacy Policy, you should cease using the platform and may request account closure by contacting our support team.
Version History
The version of this Privacy Policy currently in effect was last updated in January 2026. Prior versions of this policy are available upon request by emailing [email protected] with the subject line "Privacy Policy Version History".
Contact & Data Enquiries
For any questions, concerns, or requests relating to this Privacy Policy or to the personal data 36bajee holds about you, please contact us using the details below. Our support team handles all privacy-related enquiries and will escalate complex matters to the appropriate internal team.
Email: [email protected]
Subject line for privacy matters: "Privacy Rights Request" or "Privacy Enquiry"
Response time: Within 30 days of receipt of a valid, verified request
Operating hours: Monday to Sunday, 09:00–23:00 Bangladesh Standard Time (BST, UTC+6)
Update Notifications
- Material changes: 14-day email notice
- Minor changes: updated on this page
- Version history available on request
- Continued use = acceptance of updates
Explore 36bajee With Confidence
Your data is safe with us. Browse our full range of cricket betting markets, live casino tables, and premium slots — knowing that 36bajee is committed to protecting your privacy every step of the way.
SSL Encrypted Platform
Verified KYC Process
Safe bKash & Nagad Payments
24/7 Support Team