33bdd Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how 33bdd ("33bdd", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("Player", "User", "you", "your") who register for an account, access, or otherwise interact with the 33bdd platform at 33bdd.io and any associated services.

33bdd is committed to handling your personal data responsibly, transparently, and in a manner consistent with applicable data protection principles. By creating a 33bdd account or using the platform, you acknowledge that you have read and understood this Policy in its entirety. If you do not agree with any part of this Policy, you should not use the platform.

This Policy should be read alongside the 33bdd Terms & Conditions, which govern the overall relationship between you and the platform. Where this Policy and the Terms & Conditions overlap on data-related matters, this Policy shall take precedence.

2 Data Controller

For the purposes of this Policy, 33bdd acts as the data controller in respect of the personal data collected from players who access the platform. As data controller, 33bdd determines the purposes for which, and the means by which, your personal data is processed.

All enquiries, data access requests, correction requests, deletion requests, and complaints relating to the handling of your personal data should be directed to the 33bdd data team at the contact address provided in Section 14 of this Policy. We aim to acknowledge all data-related correspondence within five business days and to resolve substantive requests within 30 calendar days.

3 Data We Collect

33bdd collects personal data through several channels: directly from you when you register or interact with the platform; automatically when you use the site; and occasionally from trusted third-party sources where necessary for identity verification or fraud prevention. The categories of data we may collect are described in the table below.

3.1 Data You Provide Voluntarily

When you register an account with 33bdd, you voluntarily provide us with identity and contact data. Providing accurate information is a condition of account registration. Providing false information constitutes a breach of our Terms & Conditions and may result in account closure.

3.2 Data Collected Automatically

When you browse or use the 33bdd platform, we automatically collect certain technical and usage data through server logs, cookies, and similar tracking technologies. This data is used primarily to maintain platform security, detect fraudulent activity, optimise performance, and improve the user experience. See Section 7 for full details of our cookie practices.

3.3 Data from Third Parties

In certain circumstances, 33bdd may receive personal data about you from third parties. This includes identity verification data from KYC service providers, fraud-screening signals from payment processors, and in limited cases, publicly available information consulted during security investigations. In every case, 33bdd uses such third-party data only to the extent necessary for the stated purpose and does not retain it beyond the applicable retention period.

4 How We Use Your Data

33bdd uses the personal data it collects for the following purposes:

• Account management: Creating and maintaining your player account, verifying your identity, and administering your profile settings.
• Payment processing: Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, Visa, and Mastercard; maintaining accurate transaction records; and investigating disputed transactions.
• Platform delivery: Providing access to sports betting markets — including BPL, IPL, T20 World Cup, and Bangladesh Tigers fixtures — as well as live casino games, slots, and crash games.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, account takeover, bonus abuse, and other prohibited conduct.
• Regulatory compliance: Meeting our obligations under applicable laws, including responding to lawful requests from government authorities or law enforcement agencies.
• Responsible gaming: Monitoring gaming activity to identify patterns that may indicate problem gambling; administering self-exclusion, deposit limit, and cooling-off requests; and upholding the 21+ age restriction.
• Customer support: Responding to your enquiries, resolving complaints, and maintaining a record of support interactions for quality assurance purposes.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the platform's design, game selection, and overall performance.
• Marketing communications: Where you have given your explicit consent, sending you promotional emails or notifications about bonuses, new games, or special events. You may withdraw this consent at any time by contacting [email protected].

5 Legal Basis for Processing

33bdd processes your personal data on the basis of one or more of the following legal grounds, depending on the specific processing activity in question:

• Contractual necessity: Processing that is necessary to perform the contract between you and 33bdd — for example, processing your deposit or withdrawal, or maintaining your account.
• Legal obligation: Processing that is required for 33bdd to comply with applicable laws — for example, retaining transaction records for a legally prescribed period, or conducting identity verification checks.
• Legitimate interests: Processing carried out on the basis of 33bdd's legitimate business interests where those interests are not overridden by your rights — for example, fraud detection, platform security, and aggregated analytics.
• Consent: Processing that is based on your freely given, informed consent — specifically, the sending of direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before your withdrawal.

6 Data Sharing

33bdd does not sell, rent, or trade your personal data to third parties for any commercial purpose. We share your data only in the following limited circumstances, and only to the extent necessary for each stated purpose:

6.1 Service Providers

We engage carefully selected third-party service providers who process data on our behalf under contractual obligations that require them to protect your information and use it only for the specific services they are providing to us. This includes payment processors (bKash, Nagad, Rocket, Upay, banks, Visa, Mastercard), identity verification and KYC providers, fraud-screening services, and IT infrastructure providers.

6.2 Game Software Providers

When you play a game delivered by a third-party game studio — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi — limited technical data (such as session identifiers) may be shared with that provider solely for the purpose of delivering and recording the game session. These providers are bound by their own privacy commitments and do not receive data beyond what is required for game delivery.

6.3 Law Enforcement and Regulatory Authorities

33bdd will disclose personal data to law enforcement agencies, regulatory bodies, or other public authorities when required to do so by applicable law or in response to a valid legal order. In such cases, 33bdd will disclose only the minimum data required to comply with the request.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 33bdd's business, player data may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer in advance, and the acquiring entity will be required to continue processing data in accordance with this Policy or provide players with adequate notice of any material changes.

7 Cookies & Tracking Technologies

33bdd uses cookies and similar technologies — including local storage and session tokens — to operate the platform effectively, keep you logged in, remember your preferences, detect fraud, and analyse platform usage. The types of cookies used on 33bdd are as follows:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication tokens that keep you logged in and security cookies used to prevent cross-site request forgery. These cannot be disabled without breaking the platform.
• Functional cookies: Used to remember your preferences such as language settings, preferred payment method display, and last-used game filters. Disabling these may reduce platform functionality.
• Analytics cookies: Used to collect anonymised, aggregated data about how players interact with the platform — for example, which pages are visited most frequently and where players exit. This data helps us improve the platform over time. No personally identifiable information is stored in analytics cookies.
• Security cookies: Used to detect and prevent fraudulent logins, bot activity, and other suspicious behaviour. These are a component of our platform security infrastructure.

33bdd does not use third-party advertising or retargeting cookies. You can manage or delete cookies via your browser settings at any time. Note that disabling strictly necessary cookies will affect your ability to use the platform.

8 Data Retention

33bdd retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or for as long as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the duration of your account and for a period of five years following account closure, to comply with financial record-keeping obligations and to handle any late-arising disputes or regulatory enquiries.
• Transaction records: Financial transaction data, including deposit and withdrawal history, is retained for a minimum of five years from the date of each transaction.
• KYC and identity documents: Retained for five years following account closure or the last verification event, whichever is later.
• Support communications: Retained for three years from the date of last interaction, unless the matter relates to an ongoing dispute, in which case records are retained until the dispute is fully resolved.
• Marketing consent records: Retained from the date of consent until withdrawal of consent, plus two years thereafter for audit purposes.
• Responsible gaming records: Self-exclusion and limit records are retained for five years following account closure to prevent circumvention.

Data that has reached the end of its retention period is securely deleted from 33bdd's systems or irreversibly anonymised. Anonymised data may be retained indefinitely for aggregated analytical purposes.

9 Security Measures

33bdd implements a range of technical and organisational measures designed to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption of sensitive data fields — including passwords and payment method identifiers — at rest in our databases.
• Role-based access controls that limit internal access to personal data to only those employees and contractors who need it to perform their job function.
• Regular security audits, penetration tests, and vulnerability assessments conducted by qualified security professionals.
• Multi-factor authentication requirements for all internal administrative access to player data systems.
• Automated monitoring systems that detect and alert on anomalous access patterns, potential data breaches, and suspicious account activity in real time.
• Secure data backup procedures with geographic redundancy to protect against data loss due to infrastructure failure.

In the event of a personal data breach that is likely to result in a risk to your rights or freedoms, 33bdd will notify affected players without undue delay and will take all reasonable steps to contain, investigate, and remediate the breach.

10 Your Rights

As a player whose personal data is processed by 33bdd, you have the following rights. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request" and a description of your request. We will respond within 30 calendar days.

Please note that some rights are subject to limitations. For example, the right to erasure does not apply where 33bdd is required by law to retain your data, or where retention is necessary for the establishment, exercise, or defence of legal claims.

11 Minors

The 33bdd platform is strictly intended for individuals who are 21 years of age or older. 33bdd does not knowingly collect personal data from anyone under the age of 21. Age verification is conducted at the point of registration and at the point of first withdrawal.

If 33bdd discovers that it has inadvertently collected personal data from a person under the age of 21, it will immediately suspend the relevant account, delete the associated personal data to the extent permitted by law, and return any deposits made to the relevant payment source. If you have reason to believe that a minor has accessed the 33bdd platform, please notify us immediately at [email protected].

12 International Data Transfers

In the course of operating the 33bdd platform, your personal data may be processed by service providers located outside Bangladesh. Where such transfers occur — for example, when data is processed by cloud infrastructure providers or by game studios such as Evolution Gaming, Pragmatic Play, or Spribe — 33bdd takes reasonable steps to ensure that appropriate safeguards are in place to protect your data during and after the transfer.

Such safeguards may include contractual clauses requiring the recipient to protect your data to a standard equivalent to that described in this Policy, or reliance on the recipient's own independently audited security and privacy certifications. 33bdd will not transfer your personal data to any jurisdiction or recipient that does not provide an adequate level of data protection.

13 Changes to This Policy

33bdd may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or the services we offer. When we make material changes to this Policy, we will notify registered players via the email address associated with their account or via a prominent in-platform notification. The "Last updated" date at the top of this page will always reflect the most recent revision.

Your continued use of the 33bdd platform following the effective date of any revised Policy constitutes your acceptance of the changes. If you do not agree with the revised Policy, you should stop using the platform and contact [email protected] to request account closure and data deletion where applicable.

We encourage you to review this Policy periodically so that you are always aware of how 33bdd handles your personal data. Previous versions of this Policy are available upon request.

14 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about the way 33bdd has handled your personal data, please contact us using the details below. Our data team is available to respond to privacy-related correspondence seven days a week.

Email: [email protected]

The email address above is provided for correspondence only and is not a clickable link. Please copy it into your email application to write to us. Include "Privacy Policy Enquiry" or "Data Rights Request" in the subject line so we can direct your message to the right team promptly. We aim to acknowledge all privacy-related requests within five business days and to resolve them within 30 calendar days.