33bmd Privacy Policy — How We Protect Your Data

This Privacy Policy ("Policy") explains how 33bmd ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects personal data relating to individuals ("you", "your", "the Player") who access or use the 33bmd website at https://33bmd.io and any associated services, applications, or features offered by 33bmd.

33bmd operates as an English-language online betting and gaming platform serving the Bangladesh market. We are committed to handling your personal data with transparency, integrity, and care. This Policy is intended to give you a clear, complete picture of our data practices so that you can make informed decisions about using our platform.

This Policy should be read alongside the 33bmd Terms & Conditions and the Responsible Gaming page, which together form the complete framework governing your use of the 33bmd platform.

If you have any questions about this Policy or the way your personal data is handled, you can contact the 33bmd data support team at any time via the live chat service available from your account dashboard, or by email at the address listed in Section 13.

33bmd collects personal data in several ways: directly from you when you register an account or interact with the platform, automatically as you use the site, and from third parties where necessary for verification and compliance purposes. The categories of personal data we collect are described below.

2.1 Data You Provide Directly

• Registration data: Full name, date of birth, email address, mobile phone number, and a username and password of your choosing.
• Identity verification (KYC) data: Government-issued photo identification (National ID card, passport, or driving licence), proof of residential address, and selfie images where required for verification.
• Payment data: bKash, Nagad, Rocket, or Upay account numbers; bank account details for bank transfer deposits and withdrawals; transaction reference numbers.
• Communication data: Records of any messages, emails, or live chat conversations you have with 33bmd support, including the content of those communications and associated timestamps.
• Responsible gaming data: Self-exclusion requests, deposit limit preferences, session time settings, and any other responsible gaming tool configurations you apply to your account.

2.2 Data Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage data: Pages visited, time spent on each page, click paths, game sessions accessed, bet histories, and features interacted with during each session.
• Location data: General geographic location derived from your IP address, used solely to verify that you are accessing the platform from a permitted jurisdiction. 33bmd does not collect precise GPS location data.
• Cookie data: Information stored in session and persistent cookies as described in Section 7 of this Policy.

2.3 Data from Third Parties

• Identity verification providers: Where third-party KYC or age verification services are used, we may receive confirmation of identity status, date of birth, and document authenticity from those providers.
• Payment processors: Confirmation of successful or failed transactions, chargeback notifications, and fraud alert signals from payment service providers including bKash, Nagad, and banking partners.
• Fraud and anti-money-laundering screening: Risk scores and alert flags from compliance screening services used to detect suspicious activity.

33bmd uses the personal data we collect for the following specific and legitimate purposes:

33bmd does not use your personal data for automated individual decision-making that produces significant legal effects without human review. Where automated processes are used (for example, initial fraud risk scoring), a human review process is in place before any account action is taken.

33bmd processes your personal data on the following legal bases:

• Contractual necessity: Processing that is required to fulfil our obligations to you under the Terms & Conditions — including account creation, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money-laundering (AML) obligations, age verification requirements, and tax reporting duties.
• Legitimate interests: Processing that is necessary for 33bmd's legitimate business interests, provided those interests are not overridden by your rights. This includes fraud prevention, platform security, responsible gaming monitoring, and service improvement analytics.
• Consent: Where we rely on your consent for specific processing activities — such as sending marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Where 33bmd relies on legitimate interests as a legal basis, we conduct a balancing assessment to confirm that the processing is proportionate and does not unduly interfere with your privacy rights. Details of these assessments are available upon request.

33bmd does not sell your personal data. We may share your data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and other banking partners — for the purpose of processing your deposits and withdrawals.
• Identity verification and KYC providers: Third-party verification services that assist 33bmd in confirming your identity and age as part of the account registration and withdrawal process.
• Fraud prevention and compliance services: Anti-fraud screening and AML compliance providers who assist 33bmd in identifying and preventing financial crime.
• Technology and infrastructure providers: Cloud hosting, database, and platform security providers who process data on behalf of 33bmd under strict data processing agreements.
• Customer support platforms: Live chat and ticketing system providers used to deliver 33bmd's 24/7 English support service.
• Legal and regulatory authorities: Where required by law, court order, or regulatory direction, 33bmd may disclose personal data to the relevant authorities. We will notify you of such disclosure where legally permitted to do so.

All third parties with whom 33bmd shares personal data are required to implement appropriate technical and organisational security measures and to process data only in accordance with documented instructions from 33bmd.

33bmd retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by applicable law. The key retention periods applicable to 33bmd player data are set out below:

When data is no longer required and the applicable retention period has expired, 33bmd deletes or anonymises it in a secure manner. Anonymised data — from which all identifying information has been permanently removed — may be retained for longer periods for statistical and analytical purposes.

33bmd uses cookies and similar tracking technologies to operate the platform, remember your preferences, and improve your overall experience. A cookie is a small text file placed on your device by a website. Cookies do not contain executable code and cannot access other information stored on your device.

Types of cookies used by 33bmd:

• Strictly necessary cookies: These are required for the platform to function. They enable core functionality such as session management, secure login, and account authentication. These cookies cannot be disabled without significantly affecting platform usability.
• Functional cookies: These remember your preferences — such as language settings, time zone (Bangladesh Standard Time, UTC+6), and preferred deposit method — so you do not need to re-enter them on each visit.
• Analytics cookies: These collect anonymised information about how players use the platform, including which pages are visited most frequently, how long sessions last, and which features generate the most engagement. This data is used solely to improve platform performance and user experience.
• Security cookies: These help detect and prevent fraudulent activity, such as session hijacking and cross-site request forgery (CSRF), and are essential to maintaining the integrity of your account.

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, or be notified when a new cookie is set. Please note that disabling strictly necessary cookies may prevent certain areas of the 33bmd platform from functioning correctly.

33bmd implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security framework includes the following measures:

• 256-bit SSL/TLS encryption on all data in transit between your browser and 33bmd servers.
• Encryption at rest for sensitive data fields including passwords (hashed using bcrypt), payment account numbers, and KYC document files.
• Role-based access controls ensuring that only authorised 33bmd personnel whose role requires it can access specific categories of personal data.
• Multi-factor authentication for all internal 33bmd staff systems that handle player data.
• Regular security audits and penetration testing of the platform infrastructure.
• Intrusion detection systems that monitor for abnormal access patterns and trigger automated alerts.
• Incident response procedures that define the steps 33bmd will take in the event of a data security incident, including notifying affected players promptly where required.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, 33bmd will notify affected players without undue delay and will take all appropriate steps to contain the breach and prevent further harm.

As a player on the 33bmd platform, you have the following rights with respect to your personal data. These rights may be exercised at any time by contacting the 33bmd support team via live chat or the email address listed in Section 13.

33bmd will respond to all data rights requests within 14 business days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 28 days, and we will inform you of the extension and the reason for it within the initial 14-day window.

Please note that certain rights are subject to limitations. For example, the right to erasure does not apply where 33bmd is required to retain data to comply with a legal obligation (such as AML record-keeping requirements) or to establish, exercise, or defend legal claims.

The 33bmd platform is strictly intended for individuals who are aged 21 years or older. 33bmd does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory part of the registration and withdrawal process, and 33bmd employs both automated and manual age verification checks to enforce this requirement.

If 33bmd becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately closed, all associated data will be deleted to the extent not required for legal compliance purposes, and any funds held in the account will be handled in accordance with applicable law.

The 33bmd platform may contain references to or integrations with third-party services such as game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others), payment processors, and customer support tools. These third-party services operate under their own privacy policies, which are separate from this Policy.

33bmd is not responsible for the privacy practices of third-party game studios or software providers whose games are accessible through the platform. When you play a game hosted by a third-party provider, that provider may collect certain technical data (such as session identifiers and game result logs) in accordance with their own data practices. We recommend reviewing the privacy policies of any third-party service you interact with.

All third-party service providers who process personal data on behalf of 33bmd — including payment processors, KYC providers, and infrastructure partners — are bound by data processing agreements that require them to:

• Process personal data only on documented instructions from 33bmd.
• Implement appropriate technical and organisational security measures.
• Not engage sub-processors without prior written authorisation from 33bmd.
• Delete or return all personal data at the end of the service relationship.
• Assist 33bmd in fulfilling data subject rights requests and breach notification obligations.

33bmd reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates to applicable law, changes in our data processing activities, improvements to the platform, or feedback from players and regulators.

When we make a material change to this Policy — meaning a change that significantly affects your rights or the way your data is handled — we will notify you by:

• Displaying a prominent notice on the 33bmd website for a period of at least 14 days prior to the change taking effect.
• Sending a notification to the email address registered to your account, where the change affects registered players.
• Updating the "Last Updated" date at the top of this page.

Minor updates — such as correcting typographical errors, clarifying existing language, or updating contact information — may be made without advance notice, but the "Last Updated" date will always be revised to reflect the most recent edit.

Your continued use of the 33bmd platform following the effective date of any update to this Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should stop using the platform and may request closure of your account by contacting support.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 33bmd handles your personal data, you can reach our data support team through the following channels:

• Live Chat: Available 24/7 in English via your 33bmd account dashboard. This is the fastest way to reach us for urgent privacy concerns.
• Email: [email protected] — please use the subject line "Privacy Enquiry" to ensure your message is routed to the correct team.
• Response time: We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 14 business days.

When submitting a privacy enquiry by email, please include your registered 33bmd username and the email address associated with your account so that we can verify your identity and locate your records efficiently. Do not include your password or full payment account numbers in any email to 33bmd.

All privacy communications are handled by dedicated 33bmd staff operating during Bangladesh Standard Time (UTC+6) business hours, supplemented by on-call support outside those hours for urgent matters. The 33bmd platform operates 24/7, and privacy requests submitted outside business hours will be acknowledged automatically and processed on the next available business day.