Data Protection & Privacy

36bajee Privacy Policy

Your privacy matters to us. This Privacy Policy explains exactly what personal data 36bajee collects, why we collect it, how it is stored and protected, who it may be shared with, and what rights you have over your own information. We encourage all players to read this document in full before using the platform.

Last updated: January 2026 Language: English Applicable in Bangladesh SSL-encrypted platform

How 36bajee Handles Your Data

These cards summarise the core principles of our Privacy Policy. They do not replace the full legal text below — all players are required to read each section in full.

Minimal Data Collection

36bajee only collects the personal data that is genuinely necessary to operate your account, process transactions, and comply with legal obligations. We do not collect data speculatively or without clear purpose.

SSL-Encrypted Storage

All personal data held by 36bajee is stored on SSL-encrypted servers. Payment data processed via bKash, Nagad, Rocket, and Upay is handled exclusively through the providers' own secure APIs — no raw card or wallet credentials are stored on our servers.

Your Data, Your Rights

Registered players have the right to access, correct, export, or request deletion of the personal data held about them. Requests can be submitted at any time by contacting [email protected].

Limited Third-Party Sharing

36bajee does not sell, rent, or trade your personal data to third parties for marketing purposes. Data is shared only with essential service providers — payment processors, identity verification partners, and fraud detection systems — under strict contractual data protection terms.

Transparent Cookie Use

36bajee uses cookies and similar tracking technologies solely to improve platform performance, personalise your experience, and support fraud detection. We do not use third-party advertising cookies to profile users across external websites.

Defined Retention Periods

Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Account data is typically retained for a period of five years following account closure, in line with standard AML obligations.


Data We Collect

When you register for and use a 36bajee account, we collect a range of personal data in order to provide our services, verify your identity, process transactions, and comply with our legal obligations. The categories of personal data we collect are set out below.

Registration Data

When you create a 36bajee account, you are required to provide your full legal name, date of birth, email address, and mobile phone number. This information is used to create and administer your account, verify your eligibility, and communicate with you about your account activity. Your date of birth is collected specifically to confirm that you are aged 18 or above, as required by our Terms & Conditions.

Identity Verification Data

At various stages of your use of the platform — including before processing your first withdrawal — 36bajee may request identity verification documents. These may include a copy of your National Identity Card (NID), passport, driving licence, or birth certificate. This information is collected to comply with Know Your Customer (KYC) requirements and to prevent fraud, money laundering, and underage access to gambling services.

Payment Data

When you make a deposit or request a withdrawal, we collect information about the payment method used — including mobile wallet numbers (bKash, Nagad, Rocket, Upay), bank account identifiers, or card reference data as applicable. Full payment credentials (e.g., full wallet PINs or complete card numbers) are never stored on 36bajee servers. All payment processing is handled via the payment providers' own encrypted infrastructure.

Technical & Device Data

We automatically collect certain technical data when you access the 36bajee platform, including your IP address, browser type and version, operating system, device type, screen resolution, time zone, and language settings. This data is used for fraud detection, platform security, and service optimisation. It does not by itself identify you as an individual but may be combined with other data to do so.

Behavioural & Usage Data

We collect data about how you interact with the 36bajee platform — including pages visited, games played, bet amounts and outcomes, session duration, deposit frequency, and feature usage patterns. This data is used to improve platform performance, personalise your experience, identify problem gambling behaviour under our Responsible Gaming obligations, and detect fraudulent activity.

Communication Data

If you contact 36bajee support via email, live chat, or any other communication channel, we retain records of that correspondence — including your name, contact details, and the content of the exchange — for quality assurance, dispute resolution, and compliance purposes.

Data Category Examples Primary Purpose
Registration Data Name, email, phone, date of birth Account creation, eligibility verification
Identity / KYC Data NID, passport, driving licence Age verification, AML compliance
Payment Data bKash/Nagad number, bank reference Deposits, withdrawals, fraud prevention
Technical Data IP address, device type, browser Security, platform optimisation
Behavioural Data Games played, bets placed, session duration Personalisation, responsible gaming
Communication Data Support emails, chat logs Dispute resolution, quality assurance
36bajee will never ask for your full wallet PIN, online banking password, or complete payment card number via email, live chat, or phone. If you receive such a request, do not respond — report it to [email protected] immediately.

Legal Basis for Collection

  • Contractual necessity (account services)
  • Legal obligation (KYC / AML)
  • Legitimate interest (fraud prevention)
  • Consent (marketing communications)

How We Use Your Data

36bajee uses the personal data we collect only for the purposes described in this Privacy Policy. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The primary uses of your personal data are as follows:

Account Management

Your registration data is used to create and administer your 36bajee account, authenticate your identity when you log in, process your deposits and withdrawals, and communicate with you about your account — including security alerts, transaction confirmations, and updates to our platform terms.

Identity & Age Verification

We use identity documents and date-of-birth data to confirm that you are aged 18 or above and that your account details are genuine. Verification checks are conducted in accordance with our KYC obligations and may be performed by third-party verification partners working on our behalf.

Fraud Prevention & Platform Security

Technical and behavioural data is analysed by 36bajee's automated fraud detection systems to identify suspicious activity, including multi-account behaviour, bonus abuse, irregular betting patterns, and potential money laundering. Where suspicious activity is identified, the relevant account may be suspended pending manual review.

Responsible Gaming Monitoring

Behavioural data — including deposit frequency, bet volume, session length, and win/loss patterns — is used to identify players who may be exhibiting signs of problem gambling. Players identified through this monitoring may receive responsible gaming communications or have enhanced responsible gaming tools applied to their account as a safeguard.

Service Personalisation & Improvement

Usage and behavioural data is used to personalise your 36bajee experience — for example, by surfacing games and sports markets that match your preferences — and to improve the platform's overall performance, design, and feature set based on aggregate usage patterns.

Marketing Communications

Where you have given explicit consent, 36bajee may use your contact details to send you promotional communications about new games, seasonal offers (including Eid, BPL season promotions, and Pohela Boishakh specials), and platform updates. You may withdraw this consent at any time by contacting [email protected] or using the unsubscribe mechanism in any marketing email.

Data Use Summary

  • Account creation & administration
  • Identity & age verification
  • Payment processing
  • Fraud & AML detection
  • Responsible gaming monitoring
  • Platform personalisation
  • Marketing (with consent only)
  • Selling data to third parties
  • Profiling for external advertising
Marketing emails from 36bajee will always include an unsubscribe link. You can also opt out of promotional communications at any time by emailing [email protected] with the subject line "Unsubscribe".

Cookies & Tracking Technologies

36bajee uses cookies and similar technologies — including session tokens, local storage objects, and pixel tags — to operate the platform, remember your preferences, and gather analytical data that helps us understand how our services are used. This section explains what types of cookies we use and why.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your preferred language settings or login state — so that your next visit is smoother and more personalised. Cookies cannot be used to run programmes on your device or deliver viruses.

Types of Cookies Used by 36bajee

Strictly Necessary Cookies: These cookies are essential for the 36bajee platform to function correctly. They manage your login session, maintain your account authentication state, and ensure that the platform operates securely. These cookies cannot be disabled without breaking core platform functionality.

Functional Cookies: These cookies remember your preferences — such as your preferred language, display settings, and game lobby filters — so that we can provide a more personalised experience each time you visit. They do not track your activity across external sites.

Analytical Cookies: These cookies collect aggregate, anonymised data about how players use the 36bajee platform — including which pages are visited most frequently, how long sessions last, and which features are used. This data is used to improve platform performance and the quality of our services.

Security Cookies: These cookies support 36bajee's fraud detection systems by tracking behavioural signals — such as mouse movement patterns, page interaction speed, and device fingerprint consistency — that help distinguish genuine human players from automated bots or scripts.

Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most modern browsers allow you to block or delete cookies, or to receive a notification before a cookie is placed. Please note that disabling strictly necessary cookies will prevent you from logging in to your 36bajee account and using core platform features. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

Cookie Types at a Glance

  • Strictly Necessary — login sessions, security
  • Functional — preferences, personalisation
  • Analytical — aggregate usage stats
  • Security — bot detection, fraud signals
  • Advertising — not used by 36bajee
36bajee does not use third-party advertising networks or retargeting pixels. We do not share cookie-based behavioural data with social media platforms or external ad-tech providers.

Data Sharing & Third Parties

36bajee does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data only in the specific, limited circumstances described in this section, and only with parties who are contractually bound to handle your data in accordance with applicable data protection standards.

Payment Processing Partners

To process deposits and withdrawals, 36bajee shares relevant transaction data with payment service providers — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank (DBBL), BRAC Bank, City Bank, Islami Bank, and Sonali Bank. These providers receive only the data necessary to complete the transaction. They are contractually prohibited from using your data for any purpose other than payment processing.

Identity Verification Providers

To fulfil our KYC and age verification obligations, 36bajee may share identity documents submitted by players with third-party verification services. These partners operate under strict data processing agreements and are authorised to process your identity data solely for the purpose of verification. Verified data is not retained by these partners beyond the period required to complete the verification check.

Fraud Detection & Security Providers

36bajee works with specialist fraud detection and cybersecurity providers who process technical and behavioural data on our behalf to identify and prevent fraudulent activity on the platform. These providers act as data processors under contract and have no right to use the data they process for any independent purpose.

Game Technology Providers

The 36bajee platform integrates games and live dealer products from third-party game studios — including Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi. These providers may receive certain anonymised session and gameplay data to support the delivery of their products within the 36bajee environment. They do not receive your name, contact details, or payment information.

Legal & Regulatory Disclosure

36bajee may disclose personal data to law enforcement agencies, regulatory bodies, or other authorised public authorities where required to do so by applicable law, court order, or governmental regulation. Such disclosures will be limited to the minimum data necessary to fulfil the legal obligation.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 36bajee's business, personal data held by 36bajee may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer and of any material changes to how their data will be handled as a result.

36bajee will NEVER sell your personal data to marketing companies, data brokers, social media platforms, or any other commercial third party. Data sharing is strictly limited to the categories described in Section 4.

Authorised Third Parties

  • Payment processors (bKash, Nagad etc.)
  • KYC verification partners
  • Fraud detection providers
  • Game studio integrations (anonymised)
  • Legal/regulatory authorities (if required)
  • Advertisers & data brokers
  • Social media platforms

Data Security

36bajee takes the security of your personal data seriously and applies a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. While no digital system can guarantee absolute security, we maintain industry-standard safeguards appropriate to the sensitivity of the data we hold.

Technical Security Measures

All data transmitted between your device and the 36bajee platform is encrypted using Transport Layer Security (TLS) with a minimum of 256-bit encryption. The platform's infrastructure is hosted on servers with restricted access controls, regular security patching, and continuous monitoring for intrusion attempts. Database access is limited to authorised personnel on a need-to-know basis, and all access events are logged for audit purposes.

Payment Data Security

36bajee does not store raw payment credentials — including full bKash or Nagad wallet PINs, complete bank account numbers, or card security codes — on its servers. All payment transactions are routed through the secure APIs of our payment partners, each of which operates under its own security certification framework. Transaction references are stored for reconciliation and dispute purposes only.

Account Security

Player accounts are protected by password authentication. 36bajee strongly encourages the use of a unique, complex password for your account and recommends that you do not reuse passwords across multiple online services. Where available, two-factor authentication (2FA) provides an additional layer of security. Players are responsible for maintaining the confidentiality of their login credentials; 36bajee will never request your password via email or live chat.

Internal Data Handling

Access to player personal data within 36bajee is restricted to staff members who require it to perform their roles. All staff with access to personal data receive training on data protection principles and are bound by confidentiality obligations. Any suspected data breach is subject to internal investigation and, where required by applicable law, reported to the relevant supervisory authority and affected players without undue delay.

Security Measures

  • TLS 256-bit data encryption
  • Restricted server access controls
  • Continuous intrusion monitoring
  • No raw payment credential storage
  • Role-based internal data access
  • Staff data protection training
  • Breach response & reporting process
If you suspect your 36bajee account has been compromised, change your password immediately and contact [email protected]. Do not share your account credentials with anyone claiming to represent 36bajee.

Data Retention

36bajee retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. Once the applicable retention period has expired, personal data is securely deleted or anonymised so that it can no longer be associated with an individual player.

Active Account Data

For the duration of your active relationship with 36bajee — from account creation through to account closure — we retain your full account record, including registration data, KYC documents, transaction history, and gameplay records. This data is necessary to operate your account and to respond to queries or disputes that may arise during the account lifetime.

Post-Closure Retention

Following voluntary or involuntary account closure, 36bajee retains your personal data for a period of five years. This retention period reflects our anti-money laundering (AML) obligations and the standard period within which regulatory inquiries or legal claims may arise. After this period, data is deleted from active systems and securely purged from backup storage.

Communication Records

Support correspondence — including emails and live chat transcripts — is retained for a period of three years following the date of the last interaction. This allows 36bajee to reference previous communications in the event of a recurring issue or dispute.

Marketing Data

Where you have consented to receive marketing communications, your contact details and marketing preferences are retained until you withdraw consent. Upon withdrawal of consent, your contact details are removed from marketing lists within 10 business days.

Anonymised Data

Aggregate, anonymised usage and behavioural data — from which individual players cannot be identified — may be retained indefinitely for the purpose of platform analytics, product development, and responsible gaming research.

Data Type Retention Period
Active account data Duration of account + 5 years post-closure
KYC / identity documents 5 years post-closure
Transaction records 5 years post-closure (AML obligation)
Support correspondence 3 years from last interaction
Marketing preferences Until consent withdrawn
Anonymised usage data Indefinite (non-identifiable)
The five-year post-closure retention period is standard practice for online gambling platforms operating under AML and financial compliance frameworks. 36bajee does not retain data beyond this period without a specific legal basis.

Retention at a Glance

  • Active data: lifetime of account
  • Post-closure: 5 years
  • Support logs: 3 years
  • Marketing data: until opt-out
  • Anonymised stats: indefinite

Your Privacy Rights

As a 36bajee player, you have a number of rights with respect to the personal data we hold about you. These rights are outlined below. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request". We will respond to all valid requests within 30 days of receipt.

Right of Access

You have the right to request a copy of the personal data that 36bajee holds about you. Upon receiving a valid access request, we will provide you with a summary of your data in a commonly used electronic format. This includes your registration details, KYC status, transaction history, and any marketing preferences we hold on record.

Right to Rectification

If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Where a correction affects your account in a material way — for example, a name change supported by legal documentation — additional verification may be required before the change is applied.

Right to Erasure

In certain circumstances, you have the right to request that 36bajee delete the personal data we hold about you. This right is not absolute — we may be required by law to retain certain data for the retention periods described in Section 6. Where erasure is not possible in full, we will inform you of the specific data that must be retained and the legal basis for doing so.

Right to Restriction of Processing

You have the right to request that 36bajee restrict the processing of your personal data in certain situations — for example, while the accuracy of data you have disputed is being verified, or where you have objected to processing based on our legitimate interests and that objection is under review.

Right to Data Portability

Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format. You may also request that this data be transmitted directly to another service provider where technically feasible.

Right to Object to Marketing

You have the right to object at any time to the processing of your personal data for direct marketing purposes. Upon receipt of such an objection, 36bajee will cease processing your data for marketing purposes without delay. You can exercise this right by emailing [email protected] or using the unsubscribe link in any promotional communication.

How to Submit a Privacy Rights Request

To exercise any of the rights described above, send an email to [email protected] with the subject line "Privacy Rights Request". Please include your full name, registered email address, and a description of the right you wish to exercise. We may ask for additional verification before processing the request to protect against unauthorised access to your data.

Your Rights Summary

  • Access your personal data
  • Correct inaccurate data
  • Request erasure (where applicable)
  • Restrict processing
  • Data portability
  • Object to marketing at any time
Send all privacy rights requests to [email protected] with the subject line "Privacy Rights Request". We aim to respond within 30 days of a valid, verified request.

Policy Updates & Contact

36bajee reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, platform features, legal obligations, or applicable regulations. We are committed to keeping you informed about how we handle your personal data, and we will always publish the most current version of this policy on this page.

How We Notify You of Changes

When we make a material change to this Privacy Policy — meaning a change that significantly affects how your personal data is collected, used, or shared — we will notify registered players via the email address associated with their account at least 14 days before the change takes effect. For minor clarifications or non-material amendments (such as formatting corrections or additions of detail that do not change the substance of our practices), the updated policy will be published without prior individual notification.

Continued Use as Acceptance

Your continued use of the 36bajee platform following the effective date of any updated Privacy Policy constitutes your acknowledgment of and agreement to the revised terms. If you do not agree with any changes to the Privacy Policy, you should cease using the platform and may request account closure by contacting our support team.

Version History

The version of this Privacy Policy currently in effect was last updated in January 2026. Prior versions of this policy are available upon request by emailing [email protected] with the subject line "Privacy Policy Version History".

Contact & Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data 36bajee holds about you, please contact us using the details below. Our support team handles all privacy-related enquiries and will escalate complex matters to the appropriate internal team.

Email: [email protected]
Subject line for privacy matters: "Privacy Rights Request" or "Privacy Enquiry"
Response time: Within 30 days of receipt of a valid, verified request
Operating hours: Monday to Sunday, 09:00–23:00 Bangladesh Standard Time (BST, UTC+6)

Current version: January 2026

Update Notifications

  • Material changes: 14-day email notice
  • Minor changes: updated on this page
  • Version history available on request
  • Continued use = acceptance of updates
For all privacy-related questions, email [email protected]. Responses are issued within 30 days, Monday to Sunday, 09:00–23:00 BST.

Explore 36bajee With Confidence

Your data is safe with us. Browse our full range of cricket betting markets, live casino tables, and premium slots — knowing that 36bajee is committed to protecting your privacy every step of the way.

SSL Encrypted Platform

Verified KYC Process

Safe bKash & Nagad Payments

24/7 Support Team