33bdg Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how 33bdg ("33bdg", "we", "us", "our") collects, uses, stores, discloses, and protects the personal information of players and visitors who access the 33bdg platform at https://33bdg.io ("Platform"). This Policy applies to all users of the Platform, including registered players and unregistered visitors, located in Bangladesh and any other jurisdiction from which the Platform is accessed.

By creating a 33bdg account, making a deposit, placing a wager, or simply browsing the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the Platform immediately.

33bdg is committed to handling personal data in a transparent, lawful, and responsible manner. We apply internationally recognised data protection principles and have implemented comprehensive technical and organisational measures to protect the personal information entrusted to us by players across Bangladesh — including those in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh.

2 Personal Data We Collect

2.1 Registration Data

When you create a 33bdg account, we collect the following information:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (for age verification — players must be 21 or older)
• Residential address (city, district, and postal area within Bangladesh)
• Mobile number (for account verification and security alerts)
• Email address (for account communications and recovery)
• Chosen username and encrypted password

2.2 Identity Verification Data (KYC)

To comply with our Know Your Customer (KYC) obligations and to process withdrawal requests, we may collect:

• Scanned copy or photograph of your National Identity Card (NID), passport, or driving licence
• Selfie or live photo for facial verification purposes
• Proof of address (utility bill, bank statement, or similar document dated within three months)
• Source of funds documentation for large or unusual transactions

2.3 Financial Data

We collect transaction data related to deposits and withdrawals conducted through bKash, Nagad, Rocket, Upay, USDT, Visa, and Mastercard. This includes transaction reference numbers, wallet numbers (partially masked), transaction amounts in BDT, and timestamps. We do not store full card numbers or mobile banking PINs.

2.4 Gaming Activity Data

We record all gaming and betting activity conducted on the Platform, including games played, wager amounts, outcomes, bonus usage, and session durations. This data is used for account management, responsible gaming monitoring, dispute resolution, and fraud prevention.

2.5 Technical and Device Data

When you access the Platform, we automatically collect certain technical information, including:

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Session timestamps and page interaction data
• Referral source (if you arrived via a tracked link)

2.6 Support Communications

Any communications you send to 33bdg via live chat, email, or support ticket are retained as part of your account record. This includes the content of your messages, the date and time of contact, and the resolution provided by our support team.

3 How We Collect Your Data

33bdg collects personal data through the following channels:

• Direct submission: Information you provide when registering an account, submitting KYC documents, making a deposit, contacting support, or completing any on-platform form.
• Automated collection: Technical data collected automatically via cookies, web beacons, server logs, and similar tracking technologies when you browse or interact with the Platform.
• Payment processors: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and card payment gateways when you deposit or withdraw funds.
• Identity verification partners: Confirmation results (pass/fail) from third-party KYC verification service providers. We receive the result only, not raw copies of your documents from these partners.
• Fraud and risk tools: Risk-scoring signals from anti-fraud service providers that help us identify suspicious account activity without requiring additional input from you.

4 Purpose & Legal Basis for Processing

The table below summarises each purpose for which 33bdg processes personal data and the corresponding legal basis for that processing:

5 Data Sharing & Third Parties

33bdg does not sell, rent, or otherwise trade your personal data with third parties for their own commercial purposes. We share personal data only in the following limited and controlled circumstances:

5.1 Service Providers

We engage trusted third-party service providers who process personal data on our behalf and under our instruction. These include payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard gateways), KYC and identity verification providers, fraud detection and risk analytics services, cloud hosting and infrastructure providers, and customer support platform operators. All service providers are contractually bound to process your data only as instructed by 33bdg and to maintain equivalent security standards.

5.2 Game Providers

When you play games supplied by third-party studios (such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi), limited session data including your account identifier and wager amounts may be transmitted to the respective game provider for the purpose of rendering and settling the game. These providers operate under their own data protection policies and are bound by contractual obligations consistent with this Policy.

5.3 Legal and Regulatory Disclosures

33bdg may disclose personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or courts of competent jurisdiction where required to do so by applicable law, court order, or regulatory directive. We will, wherever legally permitted, notify you of such a disclosure.

5.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 33bdg's business assets, personal data held by 33bdg may be transferred to the acquiring entity as part of that transaction. We will notify affected players in advance of any such transfer and ensure that equivalent privacy protections remain in place.

6 International Data Transfers

As an internationally operated platform, 33bdg may store and process your personal data on servers located outside of Bangladesh. Where personal data is transferred to countries that may not provide the same level of data protection as your country of residence, 33bdg ensures that appropriate safeguards are in place. These safeguards include standard contractual clauses, data processing agreements incorporating internationally recognised privacy principles, and the selection of service providers that maintain ISO 27001 or equivalent information security certifications.

By using the 33bdg Platform, you acknowledge and consent to the transfer of your personal data to servers and processing facilities outside Bangladesh where necessary for the purposes described in this Policy.

7 Data Retention Periods

33bdg retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention schedules apply:

Upon expiry of the applicable retention period, personal data is either securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. Where anonymised data is retained for analytical purposes, it is no longer considered personal data and falls outside the scope of this Policy.

8 Security Measures

33bdg applies a layered security architecture to protect personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 33bdg servers
• AES-256 encryption for sensitive data fields stored in our databases, including identity document references and payment identifiers
• Role-based access controls ensuring that only authorised personnel with a demonstrated need may access specific categories of personal data
• Multi-factor authentication requirements for all internal staff accounts with access to player data
• Regular penetration testing and vulnerability assessments conducted by independent security specialists
• Automated anomaly detection and intrusion prevention systems monitoring platform activity in real time
• Strict data minimisation practices so that individual teams access only the minimum data required for their function

9 Cookies & Tracking Technologies

33bdg uses cookies and similar tracking technologies to operate the Platform, maintain session state, prevent fraud, and analyse user behaviour in aggregate. The following categories of cookies are used:

9.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They maintain your login session, store your language and currency preferences, and protect against cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without preventing core Platform functionality.

9.2 Analytics Cookies

We use privacy-respecting analytics tools to collect aggregated, anonymised data about how visitors use the Platform — including pages visited, time spent, navigation paths, and device types. This data helps us improve the Platform experience. No individual player is identified in analytics reports.

9.3 Fraud Prevention Cookies

Certain cookies and device fingerprinting signals are used to detect and prevent fraudulent account activity, including multi-accounting and bonus abuse. These are classified as strictly necessary for security purposes.

9.4 Managing Cookies

You may configure your browser to refuse or delete cookies. Please note that disabling strictly necessary cookies will prevent you from logging into or using the Platform. Instructions for managing cookies are available in the help documentation of your browser. Continuing to use the 33bdg Platform after reviewing this Policy constitutes your acceptance of our cookie practices as described above.

10 Your Data Protection Rights

Subject to applicable law, you have the following rights in relation to the personal data that 33bdg holds about you. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving your request.

• Right of Access: You have the right to request a copy of all personal data that 33bdg holds about you, along with information about how it is processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For name or date of birth corrections, supporting documentation will be required.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances, such as while a rectification request is under review.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data based on legitimate interests, including profiling for marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

11 Minors & Age Restriction

The 33bdg Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. If we become aware that a person under the age of 21 has registered an account or submitted personal data to the Platform, we will immediately suspend the account, delete the associated personal data, and retain only the minimum information necessary to enforce the permanent exclusion of that individual from the Platform.

33bdg strongly encourages parents and guardians to make use of parental control software to restrict access to online gambling platforms for minors sharing their devices or internet connections.

12 Marketing Communications

33bdg may send you promotional communications — including bonus offers, seasonal promotions tied to events such as Eid, Pohela Boishakh, or IPL and BPL cricket seasons, and platform update notifications — via email or SMS, but only where you have given explicit prior consent to receive such communications.

You may withdraw your consent to marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email
• Replying STOP to any SMS communication from 33bdg
• Contacting 33bdg support at [email protected] and requesting removal from all marketing lists
• Updating your notification preferences from within your 33bdg account settings panel

Withdrawal of marketing consent will not affect the delivery of transactional communications that are necessary for the operation of your account, including deposit confirmations, withdrawal notifications, security alerts, and account verification messages.

13 Changes to This Privacy Policy

33bdg reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform operations. When material changes are made, we will update the "Last Updated" date at the top of this document. Where changes significantly affect how we process your personal data, we will take reasonable steps to notify active players via on-platform notification or direct communication before the changes take effect.

Your continued use of the 33bdg Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how we protect your data.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data that 33bdg holds about you, please contact our support team using the details below:

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the Platform
• Response Time: We aim to respond to all data rights requests within 30 days of receipt

When submitting a data rights request, please include your registered username and the email address associated with your 33bdg account so that we can locate your records and respond efficiently. We may request additional verification before processing sensitive data requests.