Your Privacy at 37bd —
Transparent by Design

37bd collects personal data from players in Bangladesh in order to operate a safe, compliant, and enjoyable online casino and sports betting platform. We only collect data that is genuinely necessary for the purposes described in this Privacy Policy. We do not collect data speculatively or store categories of information that serve no operational or legal purpose.

The categories of personal data that 37bd collects are set out in the table below, together with the context in which each category is gathered:

We do not collect sensitive special-category data such as racial or ethnic origin, political opinions, religious beliefs, biometric data for identification purposes, or health and medical records unless specifically required by a legal obligation and only after obtaining your explicit consent.

Data from Third Parties: In certain circumstances, 37bd may receive data about you from third-party sources. These include: identity verification agencies used to confirm your age and identity; payment processors who confirm transaction status; fraud prevention databases; and marketing analytics platforms where you have interacted with a 37bd advertisement. In each case, the third party's own privacy policy governs their data-sharing practices, and 37bd processes the received data under this Policy.

37bd uses the personal data we collect exclusively for lawful, specified, and transparent purposes. We do not sell your personal data to third parties. We do not use your data for purposes incompatible with those stated at the time of collection. The following is a comprehensive account of how 37bd uses your data:

• Account Creation and Management: Your identity and contact data are used to create, maintain, and administer your 37bd account. This includes sending OTP verification codes to your registered mobile number, processing password reset requests, and delivering important account notifications.
• Payment Processing: Financial data is used to process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, or Mastercard). Transaction records are maintained for accounting, dispute resolution, and regulatory compliance purposes.
• Identity Verification and KYC: Where required by our anti-money laundering (AML) programme or responsible gaming obligations, we use identity and verification document data to confirm that you are who you say you are and that you meet the eligibility criteria set out in our Terms & Conditions.
• Platform Security and Fraud Prevention: Technical data — including IP addresses, device fingerprints, and session patterns — is analysed to detect and prevent fraudulent activity, account takeover attempts, duplicate account creation, and other forms of abuse.
• Responsible Gaming Monitoring: Usage data — including betting frequency, session durations, deposit patterns, and game history — is monitored by 37bd's responsible gaming systems to identify players who may be showing signs of problematic gambling behaviour. Where such signs are identified, 37bd may proactively reach out to the player or apply account-level protective measures.
• Customer Support: Communication data from live chat transcripts and support emails is used to resolve your queries, investigate complaints, and improve our support processes. Transcripts may be retained for quality assurance purposes.
• Bonus and Promotion Administration: Usage and financial data are used to verify eligibility for bonuses and promotions, calculate wagering progress, and detect bonus abuse.
• Marketing Communications: With your consent, 37bd may use your contact data (mobile number or email) to send you information about new games, promotions, seasonal offers (such as Eid or BPL cricket specials), and platform updates. You may withdraw this consent at any time by contacting [email protected] or adjusting your communication preferences in account settings.
• Legal and Regulatory Compliance: Certain data is processed because we are legally required to do so — for example, retaining transaction records for a defined period under financial regulations, or reporting suspicious transaction patterns to relevant authorities.

37bd does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your data only where strictly necessary to deliver our services, fulfil a legal obligation, or protect the security of the platform. The categories of third parties with whom 37bd may share your data are described below:

• Payment Service Providers: To process your deposits and withdrawals, 37bd shares the minimum necessary financial data with mobile banking operators (bKash, Nagad, Rocket, Upay) and card payment networks (Visa, Mastercard). These providers operate under their own privacy policies and applicable financial data protection regulations.
• Identity Verification Partners: Where enhanced KYC checks are required, 37bd may share your identity data with third-party verification agencies who confirm your age, identity, and address against authoritative databases.
• Game Software Providers: When you play a game in the 37bd lobby, certain session and gameplay data is processed by the game's software provider — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi. These providers are responsible processors for the data generated within their respective game environments.
• Fraud Prevention Services: Technical data may be shared with specialist fraud prevention platforms to identify patterns associated with account takeover, bonus abuse, or money laundering activity.
• Analytics Providers: Anonymised or pseudonymised usage data may be shared with analytics platforms to help 37bd understand how the platform is used and improve the player experience. No individually identifying data is shared for analytics purposes.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or the request of a competent regulatory or law enforcement authority, 37bd will disclose relevant data. 37bd will notify you of such disclosures where legally permitted to do so.

All third-party data processors engaged by 37bd are contractually required to: process your data only for the specified purpose; implement appropriate technical and organisational security measures; and not share your data with any further parties without 37bd's written consent.

37bd uses cookies and similar tracking technologies on the 37bd.vip website to ensure proper platform functionality, maintain session state, detect fraud, and — with your consent — to analyse usage patterns and deliver relevant promotional content.

A cookie is a small text file stored on your browser or device when you visit a website. 37bd uses the following categories of cookies:

You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary or security cookies may prevent certain features of 37bd from functioning correctly, including login, deposits, and game access. Deleting analytics or marketing cookies will not affect your ability to use the platform.

In addition to cookies, 37bd may use web beacons (also called pixel tags) in certain email communications to confirm whether you have opened the message. These are standard industry practices and do not store any personal data on your device.

37bd retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or accounting obligations. We do not store data indefinitely. The following retention periods apply as general guidelines:

• Account Data (identity, contact): Retained for the duration of your active account, plus a minimum of five years following account closure to satisfy AML and financial record-keeping obligations.
• Transaction Records (financial data): Retained for a minimum of five years from the date of each transaction, in compliance with financial reporting requirements.
• KYC and Verification Documents: Retained for the duration of account activity plus five years post-closure. Documents may be securely destroyed earlier if verification is confirmed and no ongoing compliance need exists.
• Communication Data (chat, email): Customer support communications are retained for two years from the date of the interaction, or longer where the communication forms part of an active dispute or legal proceeding.
• Technical and Usage Data: Typically retained for 13 months in identifiable form to enable year-on-year responsible gaming trend analysis. Anonymised aggregate data may be retained indefinitely for internal reporting.
• Marketing Consent Records: Records of your consent (or withdrawal of consent) to receive marketing communications are retained for the life of your account plus two years, to allow us to demonstrate compliance with consent requirements.

At the end of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an individual player. Where technical constraints delay immediate deletion, the data is isolated from active processing and flagged for deletion at the earliest practical opportunity.

As a player on the 37bd platform, you hold a number of rights in relation to the personal data we hold about you. 37bd is committed to honouring these rights promptly and transparently. The following rights are available to all registered players:

• Right of Access: You have the right to request a copy of the personal data that 37bd holds about you. This is sometimes referred to as a Subject Access Request (SAR). We will respond to verified access requests within a reasonable timeframe and provide a clear summary of the data held.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account information (such as your mobile number) directly from account settings, or contact support for data that cannot be self-edited.
• Right to Erasure: In certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw consent and no other legal basis applies — you may request that 37bd delete your personal data. Note that this right is subject to legal retention obligations: 37bd cannot erase data that must be retained under AML or financial regulations.
• Right to Restrict Processing: You may request that 37bd restrict the processing of your data in specific circumstances — for example, while the accuracy of data you have contested is being verified, or while a complaint is under investigation.
• Right to Data Portability: Where technically feasible and legally applicable, you may request that 37bd provide your personal data in a structured, machine-readable format so that you can transfer it to another service.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of 37bd's legitimate interests, though this right is not absolute and must be balanced against 37bd's operational requirements.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact 37bd's privacy team by emailing [email protected] with the subject line "Privacy Rights Request". Please include your registered mobile number and a clear description of the right you wish to exercise. We will verify your identity before processing the request to protect against unauthorised access to another player's data.

37bd implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures are reviewed and updated regularly in response to evolving security threats.

• Encryption in Transit: All data transmitted between your browser or mobile device and the 37bd platform is protected using Transport Layer Security (TLS) encryption. The padlock icon in your browser's address bar confirms that your connection to 37bd.vip is SSL-secured.
• Encryption at Rest: Sensitive data — including identity verification documents and financial records — is encrypted when stored on 37bd servers, using industry-standard encryption algorithms.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. 37bd staff who have access to player data are subject to confidentiality obligations and their access is logged, monitored, and reviewed periodically.
• OTP Authentication: Account login and sensitive account changes require OTP verification via your registered mobile number, providing a second layer of authentication beyond your password.
• Fraud Detection Systems: Automated systems monitor for unusual login patterns, suspicious transaction sequences, and other indicators of account compromise, and can flag or temporarily suspend accounts pending investigation.
• Penetration Testing: 37bd's platform and infrastructure are subject to periodic security testing by qualified security professionals to identify and remediate vulnerabilities before they can be exploited.

While 37bd takes every reasonable precaution to protect your personal data, no digital system is completely immune to security incidents. In the unlikely event of a data breach that poses a risk to your rights and freedoms, 37bd will notify affected players without undue delay and take immediate remediation steps.

You also play an important role in keeping your account secure. Never share your 37bd password, OTP codes, or account credentials with any other person. 37bd support staff will never ask for your password through any channel. If you suspect your account has been compromised, contact support immediately via live chat or at [email protected].

If you have any questions, concerns, or requests related to this Privacy Policy or the way 37bd processes your personal data, please contact our privacy team using the details below. All privacy correspondence is handled in English.

• Email: [email protected] — use the subject line "Privacy Policy Query" or "Privacy Rights Request" for fastest routing
• Live Chat: Available 24 hours a day, 7 days a week, through the 37bd platform. Agents can handle general privacy queries and escalate formal rights requests to the privacy team.
• Response Time: Privacy queries are acknowledged within 48 hours and substantively resolved within 30 days of receipt.

37bd reserves the right to update this Privacy Policy from time to time to reflect changes in applicable law, our data processing practices, or the services offered on the platform. When material changes are made, registered players will be notified via their registered mobile number or email address before the changes take effect. The most current version of the Privacy Policy is always available at 37bd.vip/privacy-policy. The version number and effective date are shown at the top of this document.

By continuing to use the 37bd platform after the effective date of any updated Privacy Policy, you acknowledge that you have read and understood the revised terms. If you do not agree with any changes, you should discontinue use of the platform and contact [email protected] to request account closure and data handling in line with your rights under Section 6 above.